Struct TokenBundle 

pub struct TokenBundle { /* private fields */ }

An OAuth token bundle crossing the credential port: the access token, the refresh token (absent when the provider does not return one), the honest expiry derived from the provider’s expires_in, and the granted scope.

This is the ONLY secret-bearing shape in the module. Material is private, redacted in Debug, and zeroized on drop; accessors hand out &str references for constructing provider requests (the token-exchange form, the userinfo Authorization header) — never an owned copy.

Implementations

impl TokenBundle

pub fn new( access_token: String, refresh_token: Option<String>, expires_at: DateTime<Utc>, scope: Option<String>, ) -> Self

Assemble a bundle from a verified provider token response. Callers pass expires_at = now + expires_in; a response without an expiry is rejected upstream as unstoreable and never reaches this constructor.

pub fn access_token(&self) -> &str

The access token — for the Authorization header of a provider call.

pub fn refresh_token(&self) -> Option<&str>

The refresh token, when the provider issued one — for the grant_type=refresh_token exchange form.

pub fn expires_at(&self) -> DateTime<Utc>

The honest expiry (mirrored on the account row; drives the refresh-before-expiry window).

pub fn scope(&self) -> Option<&str>

The granted scope, when the provider echoes it.

pub fn metadata(&self) -> TokenMetadata

Metadata safe for a response or log line — everything except the tokens. This is the shape HTTP surfaces may carry (the store’s metadata-only rule applied at the port).

Trait Implementations

impl Debug for TokenBundle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for TokenBundle

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.