Struct GuardBuilder 

pub struct GuardBuilder<St, S = Uuid> { /* private fields */ }

Builds a Guard. Start with Guard::builder.

Implementations

impl<St: SessionStore, S: Subject> GuardBuilder<St, S>

pub fn subject<T: Subject>(self) -> GuardBuilder<St, T>

Uses T as the subject type.

pub fn ip_intel(self, intel: impl IpIntel) -> Self

Country / ASN source. Without one, IP changes are judged by network prefix only.

pub fn on_event( self, hook: impl Fn(&SessionEvent) + Send + Sync + 'static, ) -> Self

Called synchronously once per state change, in the process that made the change, after the event is stored. When concurrent requests race, only the one whose change took effect reports it; the exception is step_up_required, which two requests that both trip it may each report. Keep it fast; a panic in the hook is caught and logged.

Delivery is at most once. There is no outbox, so a crash between the change and the hook loses the event.

With alert_dedup_window set, enforced security-relevant events reach the hook at most once per subject and kind per window; the rest are still logged and stored. If the store cannot claim the alert, the hook is called anyway.

pub fn clock(self, clock: impl Clock) -> Self

Time source (default SystemClock).

pub fn build(self) -> Guard<St, S>

Builds the guard.