Enum InvalidationReason 

pub enum InvalidationReason {
    Expired {
        vendor: VendorId,
        challenge_class: ChallengeClass,
        age_secs: u64,
        ttl_secs: u64,
    },
    NonceMismatch {
        vendor: VendorId,
        challenge_class: ChallengeClass,
        expected: String,
        observed: String,
    },
    NonceReplayed {
        vendor: VendorId,
        challenge_class: ChallengeClass,
        observation_count: u32,
    },
    SessionBindingMiss {
        vendor: VendorId,
        challenge_class: ChallengeClass,
        expected: Option<String>,
        observed: Option<String>,
    },
    ContractMissing {
        vendor: VendorId,
        challenge_class: ChallengeClass,
    },
    NotApplicable {
        vendor: VendorId,
        challenge_class: ChallengeClass,
    },
}

Structured reason a TokenValidator rejected a token submission.

Every variant carries the vendor family and challenge class so the diagnostic payload can route the invalidation to the per-family audit log without inspecting the rest of the report. The kind tag is the routing key (see InvalidationKind); the variant embeds the diagnostic context (expected vs. observed values, age, observation count, etc.).

Example

use stygian_charon::token_lifecycle::{ChallengeClass, InvalidationKind, InvalidationReason};
use stygian_charon::vendor_classifier::VendorId;

let reason = InvalidationReason::Expired {
    vendor: VendorId::Cloudflare,
    challenge_class: ChallengeClass::Interstitial,
    age_secs: 1900,
    ttl_secs: 1800,
};
assert_eq!(reason.kind(), InvalidationKind::Expired);
assert_eq!(reason.vendor_family(), VendorId::Cloudflare);

Variants

Expired

Token TTL elapsed before submission.

Fields

vendor: VendorId

Vendor family that issued the token.

challenge_class: ChallengeClass

Challenge class the token is bound to.

age_secs: u64

Observed age at submission time, in seconds.

ttl_secs: u64

TTL the contract was issued with, in seconds.

NonceMismatch

Submission’s nonce does not match the contract’s nonce.

Fields

vendor: VendorId

Vendor family the contract was issued for.

challenge_class: ChallengeClass

Challenge class the contract is bound to.

expected: String

Nonce the contract was issued with.

observed: String

Nonce the submission carried.

NonceReplayed

A single-use nonce was observed more than once.

Fields

vendor: VendorId

Vendor family the contract was issued for.

challenge_class: ChallengeClass

Challenge class the contract is bound to.

observation_count: u32

Number of times the nonce has now been observed (capped at u32::MAX for monotonic counters).

SessionBindingMiss

Submission’s session id does not match the contract’s bound_session.

Fields

vendor: VendorId

Vendor family the contract was issued for.

challenge_class: ChallengeClass

Challenge class the contract is bound to.

expected: Option<String>

Session id the contract was bound to (None when the contract carried no binding).

observed: Option<String>

Session id the submission carried.

ContractMissing

No contract was supplied alongside the token.

Fields

vendor: VendorId

Vendor family the token was nominally issued for (when the caller had partial evidence).

challenge_class: ChallengeClass

Challenge class the token was nominally bound to.

NotApplicable

The token’s challenge class is not applicable for the supplied vendor family.

Fields

vendor: VendorId

Vendor family the contract was issued for.

challenge_class: ChallengeClass

Challenge class the contract claimed to cover.

Implementations

impl InvalidationReason

pub const fn kind(&self) -> InvalidationKind

Routing kind for this invalidation.

Example

use stygian_charon::token_lifecycle::{ChallengeClass, InvalidationKind, InvalidationReason};
use stygian_charon::vendor_classifier::VendorId;

let reason = InvalidationReason::NonceReplayed {
    vendor: VendorId::Akamai,
    challenge_class: ChallengeClass::ProofOfWork,
    observation_count: 2,
};
assert_eq!(reason.kind(), InvalidationKind::NonceReplayed);

pub const fn vendor_family(&self) -> VendorId

Vendor family the invalidation is attributed to.

Example

use stygian_charon::token_lifecycle::{ChallengeClass, InvalidationReason};
use stygian_charon::vendor_classifier::VendorId;

let reason = InvalidationReason::NonceMismatch {
    vendor: VendorId::PerimeterX,
    challenge_class: ChallengeClass::IntegrityCheck,
    expected: "n".to_string(),
    observed: "m".to_string(),
};
assert_eq!(reason.vendor_family(), VendorId::PerimeterX);

pub const fn challenge_class(&self) -> ChallengeClass

Challenge class the invalidation is attributed to.

Example

use stygian_charon::token_lifecycle::{ChallengeClass, InvalidationReason};
use stygian_charon::vendor_classifier::VendorId;

let reason = InvalidationReason::SessionBindingMiss {
    vendor: VendorId::DataDome,
    challenge_class: ChallengeClass::Captcha,
    expected: Some("s1".to_string()),
    observed: Some("s2".to_string()),
};
assert_eq!(reason.challenge_class(), ChallengeClass::Captcha);

pub const fn label(&self) -> &'static str

Stable wire label — equivalent to kind().label(). Useful for the JSON field that the diagnostic payload exposes.

Example

use stygian_charon::token_lifecycle::{ChallengeClass, InvalidationReason};
use stygian_charon::vendor_classifier::VendorId;

let reason = InvalidationReason::ContractMissing {
    vendor: VendorId::Unknown,
    challenge_class: ChallengeClass::Unknown,
};
assert_eq!(reason.label(), "contract_missing");

Trait Implementations

impl Clone for InvalidationReason

fn clone(&self) -> InvalidationReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for InvalidationReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for InvalidationReason

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for InvalidationReason

fn eq(&self, other: &InvalidationReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for InvalidationReason

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for InvalidationReason

impl StructuralPartialEq for InvalidationReason