InMemoryConsentStore

A simple in-memory ConsentStore bounded against unauthenticated growth: the number of approved clients is capped, evicting the oldest approval first when the cap is reached, so the (otherwise insert-only) consent map cannot grow process memory without bound.

NOTE: even bounded, this in-memory default is unsuitable for an internet-exposed multi-process proxy: consent is per-process and lost on restart. Back it with shared, bounded storage (and consider a consent TTL) for such deployments.

@safe final

class InMemoryConsentStore : ConsentStore {

enum size_t defaultMaxApprovals;

this(size_t maxApprovals);

}

Constructors

this this(size_t maxApprovals): Construct with an explicit approval cap (used by tests to drive oldest-first eviction deterministically).

Members

Variables

defaultMaxApprovals enum size_t defaultMaxApprovals;: Maximum number of approved clients retained. When exceeded on grantConsent, the oldest approval is evicted.