sandboxcontrolapi

type Authenticator interface {
	Authenticate(context.Context, string) (Identity, error)
}

type Config struct {
	Store           sandboxcontrol.DurableStore
	Authenticator   Authenticator
	AssertionKey    []byte
	Entropy         io.Reader
	Clock           clock.Clock
	BindingLifetime time.Duration
	Retention       time.Duration
	WaitInterval    time.Duration
	// Wait is the injected cancellation-aware scheduling seam used between
	// durable reads. Production composition supplies a bounded context wait;
	// deterministic tests can advance without wall-clock sleeps.
	Wait      func(context.Context, time.Duration) error
	Admission sandbox.OperationAdmissionPolicy
}

type Identity struct {
	Authority string
	Tenant    string
	Subject   string
	Principal string
}

type StaticAuthenticator struct {
	// contains filtered or unexported fields
}