Module delegation_token 

KIP-48 delegation-token deadline decisions.

Structs

TokenDeadlines

Absolute deadlines stored on a freshly created delegation token.

TokenMutationFacts

Scalar facts projected by the controller before it mutates token state.

Enums

ScramCredentialSource

Credential source selected for the first SCRAM round.

TokenApi

Delegation-token API whose admission policy is being evaluated.

TokenApiAdmission

Whether a connection may invoke a delegation-token API.

TokenCreateDecision

Whether the host configuration admits a create and, if so, its deadlines.

TokenExpireDecision

Mutation selected by ExpireDelegationToken.

TokenMutationDecision

Controller action for a generation-bound delegation-token mutation.

TokenMutationKind

Delegation-token mutation whose committed-state precondition is checked.

TokenMutationState

Relationship between the committed token and a guarded mutation.

TokenRenewDecision

Whether a token can be renewed and, if so, its next expiry.

Functions

create_token_deadlines

Derive both stored deadlines of a new token.

expire_token_deadline

Select deletion or a bounded expiry update.

renew_token_expiry

Derive a renewed expiry.

scram_credential_source

Classify the credential for SCRAM round 1.

token_api_admission

Admit delegation-token APIs only for a securely authenticated, non-token identity.

token_describe_visible

Whether one delegation token is visible to a Describe caller.

token_mutation_decision

Fence a token mutation against its exact committed generation.