Struct RefreshRotator 

pub struct RefreshRotator<'s, S: RefreshStore + ?Sized> { /* private fields */ }

Mint and rotate refresh tokens against a RefreshStore.

Holds a borrow of the store; the rotator itself is cheap to construct per request. ttl_seconds is the lifetime applied to every freshly minted token (root and successor).

Implementations

impl<'s, S: RefreshStore + ?Sized> RefreshRotator<'s, S>

pub fn new(store: &'s S, ttl_seconds: i64) -> Self

pub fn ttl_seconds(&self) -> i64

pub async fn mint_root( &self, user_id: UserId, device_id: DeviceId, now: i64, ) -> Result<Rotated, RefreshError>

Start a fresh chain. Returns the root token + persisted record.

pub async fn rotate( &self, presented: &str, now: i64, ) -> Result<Rotated, RefreshError>

Rotate presented → fresh successor.

Failure modes (in priority order):

• RefreshError::Unknown — no record matches.
• RefreshError::ChainRevoked — record exists but the chain is dead.
• RefreshError::Replay — the token was already consumed; the chain is revoked as a side effect of this call.
• RefreshError::Expired — within TTL is required.

pub async fn revoke_chain(&self, chain_id: &str) -> Result<(), RefreshError>

Revoke every token in chain_id. Idempotent. Use on logout or device-revoke flows.