Module oauth 

OAuth session-lifetime and reauthentication admission.

Structs

OAuthSessionFacts

Inputs that bind a validated token to one broker session.

Enums

OAuthAuthenticationKind

Authentication phase being admitted.

OAuthExpiryPresence

Whether token validation supplied an absolute expiry.

OAuthPrincipalMatch

Relationship between the prior and validated principals.

OAuthSessionCap

Whether the broker applies a maximum session lifetime.

OAuthSessionDecision

Session state selected after token validation.

Functions

oauth_session_admission

Admit exactly the admissible sessions, with the smaller of the token lifetime and the enabled cap, and the matching absolute expiry.

oauth_validation_admission

Bind validation completion to a forward clock observation and, when supplied, the still-current and fresh JWKS generation.