Struct GuardConfig 

pub struct GuardConfig { /* private fields */ }

Validated guard configuration. Build with GuardConfig::builder or take the Default.

Implementations

impl GuardConfig

pub fn builder() -> GuardConfigBuilder

Starts from the defaults.

pub fn cookie(&self) -> &CookieConfig

Cookie attributes.

pub fn session_lifetime(&self) -> Duration

Absolute session lifetime.

pub fn idle_timeout(&self) -> Duration

Inactivity after which a session expires.

pub fn trusted_proxies(&self) -> &[IpNet]

Proxies whose X-Forwarded-For is honoured.

pub fn tls_fingerprint_header(&self) -> Option<&str>

Request header carrying a TLS fingerprint (e.g. JA4) set by the proxy, lowercase.

pub fn rotation(&self) -> RotationConfig

Rotation settings.

pub fn checks(&self) -> &Checks

Default checks (routes can override).

pub fn thresholds(&self) -> Thresholds

Score thresholds.

pub fn mode(&self) -> Mode

Enforcement mode.

pub fn step_up_policy(&self) -> StepUpPolicy

What a step-up decision does.

pub fn ping_pong_window(&self) -> Duration

Window in which returning to the previous network counts as ping-pong.

pub fn last_seen_write_interval(&self) -> Duration

How stale last_seen may get before an otherwise unchanged request writes it.

pub fn event_retention(&self) -> Duration

How long events are kept before Guard::purge_expired deletes them.

pub fn minimize_stored_events(&self) -> bool

Whether the store gets a reduced copy of each event; see GuardConfigBuilder::minimize_stored_events.

pub fn keep_origin_client(&self) -> bool

Whether a session’s origin keeps the full IP, User-Agent and city; see GuardConfigBuilder::keep_origin_client.

pub fn shadow_dedup_window(&self) -> Duration

Window in which repeated shadow events for the same session and kind are dropped.

pub fn alert_dedup_window(&self) -> Duration

Window in which repeated security alerts for the same subject and kind skip the hook. Zero means off.

pub fn max_header_len(&self) -> usize

Maximum length of a header value considered for fingerprinting.

pub fn token_prefix(&self) -> Option<&str>

Prefix of issued tokens, if any.

pub fn orphan_reissue_window(&self) -> Option<Duration>

How long after being superseded an orphaned token is still reissued, if limited.

Trait Implementations

impl Clone for GuardConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuardConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GuardConfig

fn default() -> Self

Returns the “default value” for a type.