tree d131e108432ef423bb5b205f9a46d23e8051db7b
parent 8e8bbdfad429fdecc23de51070e3f696538739b4
author Nan Zhou <nanzhou@google.com> 1747779831 -0700
committer Copybara-Service <copybara-worker@google.com> 1747779872 -0700

HFT Authorization

Add the sampling rate based authorization. The following rules are implemented:

1. any subscription client must be authorized, with a maximum number of sampling per second allowed
2. if the subscription client hasn't reached to the upper limit, the subscription will be allowed, the current total sampling rate for this client will increase by the delta sampling rate made in this subscription
3. sampling rate check is done in the RPC level in a "all or none" manner. This means if a subscription is rejected because of too many sampling in a RPC, none of the subscriptions in that RPC is made
4. in all other cases, the client will be rejected

Comprehensive tests are added to make sure the sampling count code is correct.

Authorization code is modified accordingly to provide necessary APIs.

#tlbmc
#tlbmc-hft

PiperOrigin-RevId: 761251595
Change-Id: If8b5c140d000624356f855c79c530db2125f299a