Skip to main content

NonceBook

Struct NonceBook 

Source
pub struct NonceBook { /* private fields */ }
Expand description

Capacity-bounded LRU+TTL store of NonceObservations.

The store reuses the same LruTtlStore primitive the ChallengeMemory uses (T83). That keeps eviction + expiry semantics consistent across both short-horizon stores and satisfies the “no new cache store” requirement.

§Example

use stygian_charon::token_lifecycle::{ChallengeClass, NonceBook};
use stygian_charon::vendor_classifier::VendorId;
use std::num::NonZeroUsize;
use std::time::Duration;

let book = NonceBook::with_defaults();
book.record(VendorId::Cloudflare, ChallengeClass::Interstitial, "nonce-1");
assert_eq!(book.observation_count(VendorId::Cloudflare, "nonce-1"), Some(1));

Implementations§

Source§

impl NonceBook

Source

pub fn new(capacity: NonZeroUsize, ttl: Duration) -> Self

Create a new nonce book with explicit capacity and TTL.

§Example
use stygian_charon::token_lifecycle::NonceBook;
use std::num::NonZeroUsize;
use std::time::Duration;

let book = NonceBook::new(NonZeroUsize::new(8).expect("non-zero"), Duration::from_mins(1));
assert!(book.is_empty());
Source

pub fn with_default_ttl(capacity: NonZeroUsize) -> Self

Capacity-bounded NonceBook with DEFAULT_NONCE_TTL.

Source

pub fn with_defaults() -> Self

Capacity-bounded NonceBook with DEFAULT_NONCE_BOOK_CAPACITY and DEFAULT_NONCE_TTL.

§Example
use stygian_charon::token_lifecycle::NonceBook;

let book = NonceBook::with_defaults();
assert_eq!(book.ttl(), stygian_charon::token_lifecycle::DEFAULT_NONCE_TTL);
Source

pub const fn ttl(&self) -> Duration

Configured TTL for the backing store.

Source

pub fn record( &self, vendor: VendorId, challenge_class: ChallengeClass, nonce: &str, )

Record an observation for a (vendor, nonce) tuple. The observation count is incremented atomically with the read-modify-write sequence; the LRU recency is not bumped on the read so a high-volume key does not crowd out less common keys.

§Example
use stygian_charon::token_lifecycle::{ChallengeClass, NonceBook};
use stygian_charon::vendor_classifier::VendorId;

let book = NonceBook::with_defaults();
book.record(VendorId::PerimeterX, ChallengeClass::IntegrityCheck, "n");
book.record(VendorId::PerimeterX, ChallengeClass::IntegrityCheck, "n");
assert_eq!(book.observation_count(VendorId::PerimeterX, "n"), Some(2));
Source

pub fn observation_count(&self, vendor: VendorId, nonce: &str) -> Option<u32>

Look up the current observation count for a (vendor, nonce) tuple. Returns None when the key is absent or has expired.

§Example
use stygian_charon::token_lifecycle::NonceBook;
use stygian_charon::vendor_classifier::VendorId;

let book = NonceBook::with_defaults();
assert!(book.observation_count(VendorId::Unknown, "nope").is_none());
Source

pub fn lookup(&self, vendor: VendorId, nonce: &str) -> Option<NonceObservation>

Look up the full NonceObservation for a (vendor, nonce) tuple.

Source

pub fn len(&self) -> usize

Number of entries currently retained.

Source

pub fn is_empty(&self) -> bool

true when the book has zero entries.

Source

pub fn clear(&self)

Remove all entries.

Source

pub fn invalidate(&self, vendor: VendorId, nonce: &str)

Invalidate a single (vendor, nonce) key.

Trait Implementations§

Source§

impl Debug for NonceBook

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T> PolicyExt for T
where T: ?Sized,

§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more
§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more