delegated-redis

Redis-backed [TrustStateStore] and [TrustStateAdmin] for multi-instance [delegated] deployments.

Usage

use delegated_redis::RedisTrustState;

let state = RedisTrustState::new("redis://127.0.0.1/")?;
state.revoke_token("https://issuer.example", "token-123")?;

Nonce consumption uses SET key NX EX ttl so concurrent evaluators share replay protection. Revocation and emergency-deny entries persist until removed by operators.

Requirements

A Redis 6+ server reachable from every evaluator instance. Configure a unique key prefix per environment when multiple services share one Redis cluster.