Struct MemoryRevocationStore 

pub struct MemoryRevocationStore(/* private fields */);

In-process revocation log — tests, and single-process deployments that do not need the set to survive a restart. Clones share one log, so an authority-side writer and an edge-side reader see the same set.

Implementations

impl MemoryRevocationStore

pub fn new() -> Self

pub fn gc(&self, now: i64) -> u64

Drop jtis lapsed at or before now, advancing the epoch when anything went. Returns the number removed. Same contract as the SQL stores’ gc.

Trait Implementations

impl Clone for MemoryRevocationStore

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MemoryRevocationStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for MemoryRevocationStore

fn default() -> Self

Returns the “default value” for a type.

impl RevocationReader for MemoryRevocationStore

fn is_membership_revoked<'life0, 'life1, 'life2, 'life3, 'life4, 'async_trait>( &'life0 self, _key: &'life1 RevocationKey, kind: &'life2 str, id: &'life3 str, principal: &'life4 PrincipalId, snapshot_epoch: u64, ) -> Pin<Box<dyn Future<Output = Result<bool, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait, 'life4: 'async_trait,

Plaintext rows: key is not needed.

fn is_revoked<'life0, 'life1, 'async_trait>( &'life0 self, jti: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<bool, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

true if the credential with this jti has been revoked (Revoked::Jti). Cryptographic expiry is enforced separately by the TokenVerifier.

fn is_device_revoked<'life0, 'life1, 'async_trait>( &'life0 self, device: &'life1 DeviceId, seq: u64, ) -> Pin<Box<dyn Future<Output = Result<bool, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

true if a standing binding of device at sequence seq is revoked: a Revoked::Device entry exists with seq < at_seq — the check a standing node binding (R732-F5) makes. A binding minted after the revoke (re-enrollment) carries a higher seq and reads false.

impl RevocationWriter for MemoryRevocationStore

fn revoke<'life0, 'life1, 'async_trait>( &'life0 self, entry: &'life1 Revoked, ) -> Pin<Box<dyn Future<Output = Result<(), StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Add entry to the set, advancing the epoch (next_epoch) in the same atomic write. An identity already present keeps the larger bound (Revoked::cmp_bound); the epoch advances only when a row was inserted or its bound rose. Idempotent — re-revoking with an equal or lower bound is a no-op, not an error, and leaves the epoch alone. Propagation to edge cheers_verify::RevocationReaders is asynchronous (see the module contract).

fn snapshot<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<RevocationSnapshot, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

The current epoch and entries, read as one consistent view: the contents are exactly those the epoch was advanced to. Includes lapsed jtis that gc has not yet removed; RevocationPublisher::current filters those.