Struct PermissionSets 

pub struct PermissionSets {
    resolver: Arc<dyn Resolve>,
    cache: Mutex<LruCache<String, Entry>>,
}

Every set this deployment has resolved, shared by every account.

Fields

resolver: Arc<dyn Resolve>

cache: Mutex<LruCache<String, Entry>>

Implementations

impl PermissionSets

pub fn new(resolver: Arc<dyn Resolve>) -> Self

Sets resolved by resolver.

pub fn over_network(doh: impl Into<String>, private: PrivateAddresses) -> Self

Sets resolved over the network; see Network::new.

pub async fn expand(&self, requested: &ScopeSet) -> ScopeSet

requested with each include: replaced by the atoms its set grants.

An include: grants nothing when it names no set, when its set does not resolve, and when its atoms would take the request past what one grant may hold (MAX_GRANT_ATOMS, MAX_GRANT_BYTES). Every other atom is kept as it was asked for.

async fn include( &self, nsid: &str, aud: Option<&str>, started: Instant, sets: &mut usize, ) -> Result<Vec<Scope>, String>

What one include: grants, or why it grants nothing.

async fn permissions( &self, nsid: &str, budget: Duration, ) -> Result<Arc<Vec<Value>>, Unresolved>

The published permissions of the set nsid names, from the cache or resolved within budget.

fn cached( &self, nsid: &str, now: Instant, ) -> Option<Result<Arc<Vec<Value>>, Unresolved>>

The cache’s answer for nsid at now, if it has one that needs no resolution: a copy still fresh, or a failure too recent to retry.

fn remember( &self, nsid: &str, resolved: Result<Vec<Value>, Unresolved>, ) -> Result<Arc<Vec<Value>>, Unresolved>

Stores what resolving nsid just established, and answers with what a sign-in should use: the new copy, or the last one while the authority cannot be reached and the copy is kept.

fn lock(&self) -> MutexGuard<'_, LruCache<String, Entry>>

Trait Implementations

impl Default for PermissionSets

fn default() -> Self

Sets resolved over the public internet, through Cloudflare’s resolver, didbot_http::doh::CLOUDFLARE.