Struct CachedDeviceStore 

pub struct CachedDeviceStore<S>
where
    S: DeviceStore,
{ /* private fields */ }

Available on crate feature device only.

In-process cache decorator wrapping any DeviceStore.

Construct with CachedDeviceStore::new for default settings, or build via with_capacity / with_ttl / with_clock.

Implementations

impl<S> CachedDeviceStore<S>

where S: DeviceStore,

pub fn new(inner: S) -> Self

Wrap inner with default cache settings (10k entries, 60 s TTL, SystemClock).

pub fn with_options( inner: S, capacity: usize, ttl: Duration, clock: Arc<dyn Clock>, ) -> Self

Construct with explicit cache parameters.

pub fn with_capacity(self, capacity: usize) -> Self

Builder: override the cache capacity (default 10,000).

pub fn with_ttl(self, ttl: Duration) -> Self

Builder: override the cache TTL (default 60 s).

pub fn with_clock(self, clock: Arc<dyn Clock>) -> Self

Builder: inject a Clock for deterministic-simulation testing.

pub fn stats(&self) -> CacheStats

Snapshot of the underlying cache counters (axess_cache::CacheStats). Useful for ops dashboards.

pub fn invalidate_all(&self)

Drop every cached entry. Use after bulk operations that the cache wasn’t notified about (e.g. an offline migration).

pub fn invalidate_tenant(&self, tenant_id: &TenantId)

Drop every cached entry for a given tenant. Useful after a tenant-wide trust-policy change.

Trait Implementations

impl<S> Clone for CachedDeviceStore<S>

where S: DeviceStore,

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S> DeviceStore for CachedDeviceStore<S>

where S: DeviceStore,

type Error = <S as DeviceStore>::Error

The error type returned by storage operations.

fn load( &self, tenant_id: &TenantId, id: &DeviceId, ) -> impl Future<Output = Result<Option<Device>, Self::Error>> + Send

Load the device by id. Returns None if absent.

fn find_by_fingerprint( &self, tenant_id: &TenantId, hash: &FingerprintHash, ) -> impl Future<Output = Result<Option<Device>, Self::Error>> + Send

Look up a device by its keyed fingerprint within a tenant. Used as the fast-path during request handling when no device_id cookie is present yet. Collisions must be vanishingly rare given a per-tenant HMAC key, but implementations MUST scope the query by tenant_id to prevent cross-tenant correlation.

fn find_for_user( &self, tenant_id: &TenantId, user_id: &UserId, limit: usize, ) -> impl Future<Output = Result<Vec<Device>, Self::Error>> + Send

List active devices for a user, newest-sighted first. limit caps the result so a high-cardinality user doesn’t blow up device-management UIs.

fn find_by_refresh_family( &self, tenant_id: &TenantId, family_id: &str, ) -> impl Future<Output = Result<Vec<Device>, Self::Error>> + Send

Find every device in tenant carrying a DeviceBinding::Refresh { family_id } matching the supplied family_id. Used by the refresh-cascade path to convert “this refresh-token family was compromised” into the list of Devices to revoke.

fn save( &self, device: &Device, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Persist a new device row, or overwrite an existing one. Idempotent.

fn record_sighting( &self, tenant_id: &TenantId, id: &DeviceId, now: DateTime<Utc>, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Touch the last_seen_at timestamp for the given device. Implementations SHOULD perform this as a single UPDATE rather than a load-modify-save round trip.

fn set_trust_level( &self, tenant_id: &TenantId, id: &DeviceId, level: DeviceTrustLevel, now: DateTime<Utc>, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Set the trust level. Drives transitions across the DeviceTrustLevel ladder. Setting to DeviceTrustLevel::Revoked also stamps revoked_at = now.

fn delete( &self, tenant_id: &TenantId, id: &DeviceId, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Hard-delete the row. Idempotent. Used by the retention sweep once a Revoked device has aged out of the configured grace window, and by Art 17 erasure cascades.

fn sweep( &self, tenant_id: &TenantId, now: DateTime<Utc>, ) -> impl Future<Output = Result<SweepCounts, Self::Error>> + Send

Drive the three-stage retention ladder: Trusted → Seen (after the configured Trusted-idle window), Seen → Revoked (after the configured Seen-idle window), Revoked → purged (after the configured grace window). Returns the count of rows changed at each stage.

fn find_active_for_user( &self, tenant_id: &TenantId, user_id: &UserId, limit: usize, ) -> impl Future<Output = Result<Vec<Device>, Self::Error>> + Send

Same as find_for_user but excludes Revoked rows. Default implementation filters in-memory after a full find_for_user call; SQL backends SHOULD override with a WHERE trust_level != 'Revoked' clause that the optimiser can use against the trust-level index.