Module oauth_token_conversion 

Explicit administrative conversion of pre-Source native OAuth token rows.

This module registers no routes and is never called by live token readers. A trusted operator must supply the original secret and independently verified historical ownership; legacy ciphertext authenticates no account identity.

Structs

OAuthTokenConversion

Prepared row conversion. All encrypted fields authenticated before this value exists. Keep it private; the ID token may be plaintext.

OAuthTokenSnapshot

Exact physical values reviewed in a trusted ownership manifest.

OAuthTokenValues

Nullable physical access, refresh and ID token columns. Deliberately not Debug.

TrustedOAuthTokenManifest

Reviewed manifest entry. Do not build from untrusted client input or infer historical ownership from the current database owner. Deliberately not Debug.

Enums

TokenEncoding

Operator-provided classification, never inferred from stored text.

Traits

OAuthTokenConversionStore

Administrative storage capability, separate from live account operations. Use a physical adapter, without output transforms or account-update hooks.