Struct JwtRevocationStore 

pub struct JwtRevocationStore { /* private fields */ }

In-memory JWT-SVID deny-list with optional catalog-backed persistence.

Implementations

impl JwtRevocationStore

pub async fn load_from_manager( manager: &BackendManager, ) -> Result<Self, ManagerError>

Load the configured deny-list from the catalog value key labeled revocation_store=jwt-svid, if present.

Errors

Returns ManagerError::Backend when the configured store is malformed, unreadable, or attached to a non-value catalog key.

pub async fn refresh_from_manager( &self, manager: &BackendManager, ) -> Result<(), ManagerError>

Re-read the configured backing store and union it into the live deny-list.

Existing in-memory entries win when they live longer than the reloaded value, so a concurrent live revocation is never shortened or removed by a reload. A read/load error leaves this store untouched.

Errors

Returns ManagerError when the backing store cannot be loaded or the live deny-list locks are poisoned.

pub fn is_revoked(&self, trust_domain: &str, jti: &str) -> bool

Return true when jti is currently denied for trust_domain.

Expired entries are pruned before the lookup. Lock poisoning fails closed: a validator must not accept a token if the deny-list cannot be read.

pub fn insert( &self, trust_domain: &str, jti: &str, expires_at_unix: u64, ) -> Result<(), ManagerError>

Add or extend a revoked JWT-SVID jti.

Errors

Returns ManagerError::Backend if the in-memory deny-list lock is poisoned.

pub async fn persist( &self, manager: &BackendManager, ) -> Result<(), ManagerError>

Persist the current deny-list if a catalog-backed store is configured.

Errors

Returns ManagerError if the configured backend write fails or the in-memory deny-list cannot be serialized.

pub fn has_persistent_store(&self) -> Result<bool, ManagerError>

Whether live revocations have a configured catalog-backed value store.

Errors

Returns ManagerError::Backend if the store-key lock is poisoned.

Trait Implementations

impl Debug for JwtRevocationStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JwtRevocationStore

fn default() -> Self

Returns the “default value” for a type.