Method create

nodedb/src/control/security/session_handle/store.rs:120–153

Create a handle bound to the captured client fingerprint.

(
        &self,
        auth_context: AuthContext,
        captured_fingerprint: ClientFingerprint,
    )

    /// Create a handle bound to the captured client fingerprint.
    pub fn create(
        &self,
        auth_context: AuthContext,
        captured_fingerprint: ClientFingerprint,
    ) -> String {
        let now = now_secs();
        let cached = CachedSession {
            auth_context,
            captured_fingerprint,
            expires_at: now + self.default_ttl_secs,
        };

        let mut sessions = self.sessions.write().unwrap_or_else(|p| p.into_inner());
        let handle = loop {
            let candidate = generate_handle();
            if !sessions.contains_key(&candidate) {
                break candidate;
            }
        };
        sessions.insert(handle.clone(), cached);

        // Lazy cleanup of expired handles (bounded per call).
        let expired: Vec<String> = sessions
            .iter()
            .filter(|(_, s)| now >= s.expires_at)
            .take(100)
            .map(|(k, _)| k.clone())
            .collect();
        for key in expired {
            sessions.remove(&key);
        }

        handle
    }

    /// Resolve a handle with full hygiene: per-connection rate limiting,
    /// fingerprint binding, miss counting, spike detection.