Struct CredentialStuffingDetector 

pub struct CredentialStuffingDetector { /* private fields */ }

Credential stuffing detector with concurrent access.

SECURITY: Implements multi-dimensional detection to catch distributed attacks:

• Per-entity (IP) failure tracking
• Fingerprint-based distributed attack correlation
• Username-targeted attack detection (multiple IPs targeting same username)
• Global velocity monitoring for coordinated attacks

Implementations

impl CredentialStuffingDetector

pub fn new(config: StuffingConfig) -> Self

Create a new detector with the given configuration.

Configuration is validated and sanitized before use.

pub fn with_defaults() -> Self

Create with default configuration.

pub fn is_auth_endpoint(&self, path: &str) -> bool

Check if an endpoint is an auth endpoint.

pub fn record_attempt(&self, attempt: &AuthAttempt) -> StuffingVerdict

Record an auth attempt (request phase).

Call this when a request hits an auth endpoint. Returns a verdict that may adjust risk or block.

pub fn record_result(&self, result: &AuthResult) -> Option<TakeoverAlert>

Record an auth result (response phase).

Call this when auth response is known (success/failure). Checks for account takeover pattern.

pub fn record_distributed_failure( &self, fingerprint: &str, endpoint: &str, now: u64, )

Record a failure in distributed attack tracking.

pub fn get_entity_metrics( &self, entity_id: &str, endpoint: &str, ) -> Option<AuthMetrics>

Get entity’s auth metrics.

pub fn get_all_entity_metrics(&self) -> Vec<AuthMetrics>

Get all entity metrics.

pub fn get_distributed_attacks(&self) -> Vec<DistributedAttack>

Get active distributed attacks.

pub fn get_takeover_alerts(&self, since: u64) -> Vec<TakeoverAlert>

Get recent takeover alerts.

pub fn get_all_takeover_alerts(&self) -> Vec<TakeoverAlert>

Get all takeover alerts.

pub fn get_events(&self, since: u64) -> Vec<StuffingEvent>

Get recent events since timestamp.

pub fn drain_events(&self) -> Vec<StuffingEvent>

Get all events.

pub fn get_stats(&self) -> StuffingStats

Get statistics.

pub fn clear(&self)

Clear all data.

pub fn len(&self) -> usize

Get entity count.

pub fn is_empty(&self) -> bool

Check if empty.

pub fn stop(&self)

Stop the detector (cleanup thread).

pub fn export(&self) -> StuffingState

Export state for persistence.

pub fn import(&self, state: StuffingState)

Import state from persistence.

Trait Implementations

impl Drop for CredentialStuffingDetector

fn drop(&mut self)

Executes the destructor for this type.