Module supplied_session_review 

Transport-neutral contracts for one explicitly supplied authorization session.

The policy is non-secret and grants only a small ordered set of bodyless, operator-selected GET requests beneath one already selected application. Application-defined GET handling can still have server-side effects. The authorization value is move-only, zeroized on drop, never serialized, and exposed only to the crate-owned request-composition boundary.

Structs

SuppliedSessionAuthorization

One move-only complete Authorization header value.

SuppliedSessionCookieSummary

Non-secret aggregate of the supplied cookie metadata selected by a policy.

SuppliedSessionCookies

Move-only supplied cookie values bound to one validated V2 policy.

SuppliedSessionFormCredential

Move-only username/password pair for one bounded form-login attempt.

SuppliedSessionOAuthAuthorization

Move-only, explicitly selected private authorization-URI output.

SuppliedSessionOAuthGrant

Move-only imported grant bound to one selected policy and principal alias.

SuppliedSessionPolicy

Strict non-secret policy for one supplied session.

Enums

OAuthAuthorizationInputError

Static errors from the selected private OAuth handoff sink.

OAuthCodeInputError

Static failures which never include grant, token or provider text.

SuppliedSessionAuthorizationError

Static, redaction-safe authorization value validation failure.

SuppliedSessionCookieError

Static, redaction-safe supplied-cookie validation failure.

SuppliedSessionCookieSameSite

Preserved SameSite declaration for one supplied cookie.

SuppliedSessionCookieUpdatePolicy

V2 behavior when a selected cookie is reissued by a response.

SuppliedSessionCredential

Move-only supplied credential selected for one session runtime.

SuppliedSessionCredentialAcquisition

How the credential used for protected requests is established.

SuppliedSessionCredentialMechanism

Credential mechanism selected by a supplied-session policy.

SuppliedSessionFormCredentialError

Static, redaction-safe form credential validation failure.

SuppliedSessionPolicyError

Static, redaction-safe policy validation failure.

SuppliedSessionPolicyVersion

Supplied-session policy generation.

SuppliedSessionRuntimeInput

One prevalidated runtime input: either a ready outbound credential or the guarded values needed for the single bounded login transition.

Constants

HARD_MAX_SUPPLIED_SESSION_COOKIE_SECRET_BYTES

Maximum accepted supplied-cookie secret bytes.

HARD_MAX_SUPPLIED_SESSION_FORM_SECRET_BYTES

Maximum accepted username/password secret bytes for one form-login attempt.

HARD_MAX_SUPPLIED_SESSION_OAUTH_CODE_SECRET_BYTES

Maximum explicitly supplied code/PKCE transaction bytes. No browser is read.

HARD_MAX_SUPPLIED_SESSION_POLICY_BYTES

Maximum accepted policy bytes.

MAX_SUPPLIED_SESSION_CHECKPOINTS

Maximum health checkpoints: startup plus one after every selected resource.

MAX_SUPPLIED_SESSION_COOKIES

Maximum supplied cookies declared by V2.

MAX_SUPPLIED_SESSION_COOKIE_HEADER_BYTES

Maximum composed Cookie request-header bytes.

MAX_SUPPLIED_SESSION_REQUESTS

Maximum session-owned requests: startup health plus resource/checkpoint pairs.

MAX_SUPPLIED_SESSION_RESOURCES

Maximum explicitly selected protected resources.

MAX_SUPPLIED_SESSION_RESPONSE_BODY_BYTES

Maximum retained body bytes for one session-owned response.

MAX_SUPPLIED_SESSION_TOTAL_RESPONSE_BYTES

Maximum session-owned response bytes declared by one policy.

MAX_SUPPLIED_SESSION_WALL_TIME_MS

Maximum local wall-clock allowance declared by one policy.

SUPPLIED_SESSION_COOKIE_POLICY_SCHEMA

Strict V2 supplied-cookie policy schema.

SUPPLIED_SESSION_FORM_LOGIN_POLICY_SCHEMA

Strict V3 bounded form-login policy schema.

SUPPLIED_SESSION_OAUTH_AUTHORIZATION_POLICY_SCHEMA

Strict V7 client-initiated S256 transaction with one loopback form response.

SUPPLIED_SESSION_OAUTH_CODE_POLICY_SCHEMA

Strict V5 acquisition of a Bearer credential from an imported code transaction.

SUPPLIED_SESSION_OAUTH_REFRESH_POLICY_SCHEMA

Strict V6 imported-code acquisition and one explicitly scheduled IdP refresh.

SUPPLIED_SESSION_POLICY_SCHEMA

Strict V1 supplied-session policy schema.

SUPPLIED_SESSION_RENEWAL_POLICY_SCHEMA

Strict V4 supplied-cookie session with one explicitly scheduled renewal.