Struct UserTokenRecord 

#[non_exhaustive]
pub struct UserTokenRecord {
    pub jti: String,
    pub user_id: UserId,
    pub name: String,
    pub scopes: Vec<Scope>,
    pub aud: String,
    pub created_at: i64,
    pub last_used_at: Option<i64>,
    pub expires_at: i64,
    pub revoked: bool,
}

One user API token’s metadata — everything except the secret.

jti is the token’s own id: the value baked into the signed claim, the key the revocation set is keyed on, and the {id} in DELETE /me/tokens/{id}. One id, three places, no mapping table.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

jti: String

The minted token’s jti — also the public id of this row.

user_id: UserId

Owner. Every read path filters on this; a jti alone is never enough to act on a row.

name: String

Human label the user chose (“ci-deploy”, “laptop”). Opaque to cheers.

scopes: Vec<Scope>

The scopes actually minted into the token — already intersected with the caller’s entitlement, so this is what the token can do, not what was asked for.

aud: String

The audience the token was minted for. Grants are keyed (principal, aud), so a token is never audience-portable.

created_at: i64

last_used_at: Option<i64>

Last observed use, when a resource server reports one. See the module docs — cheers itself never writes this.

expires_at: i64

revoked: bool

Set by UserTokenStore::mark_revoked. The signed token is killed by the revocation set; this is the half that makes the kill visible on GET /me/tokens.

Implementations

impl UserTokenRecord

pub fn new( jti: impl Into<String>, user_id: UserId, name: impl Into<String>, scopes: Vec<Scope>, aud: impl Into<String>, created_at: i64, expires_at: i64, ) -> Self

pub fn is_live_at(&self, now: i64) -> bool

Live at now — neither revoked nor past its expiry.

Trait Implementations

impl Clone for UserTokenRecord

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserTokenRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for UserTokenRecord

impl PartialEq for UserTokenRecord

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for UserTokenRecord