systemprompt-oauth 0.10.0

OAuth 2.0 / OIDC with PKCE, token introspection, and audience/issuer validation for systemprompt.io AI governance infrastructure. WebAuthn and JWT auth for the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

//! Lifecycle cleanup methods on [`OAuthRepository`] (deactivate, delete, list
//! stale).

use super::OAuthRepository;
use crate::error::OauthResult;
use chrono::Utc;
use systemprompt_identifiers::ClientId;

impl OAuthRepository {
    pub async fn cleanup_inactive_clients(&self) -> OauthResult<u64> {
        self.client_repo.cleanup_inactive().await
    }

    pub async fn cleanup_old_test_clients(&self, days_old: u32) -> OauthResult<u64> {
        self.client_repo.cleanup_old_test(days_old).await
    }

    pub async fn cleanup_unused_clients(&self, days_old: u32) -> OauthResult<u64> {
        let cutoff_timestamp = Utc::now().timestamp() - (i64::from(days_old) * 24 * 60 * 60);
        self.client_repo.delete_unused(cutoff_timestamp).await
    }

    pub async fn cleanup_stale_clients(&self, days_unused: u32) -> OauthResult<u64> {
        let cutoff_timestamp = Utc::now().timestamp() - (i64::from(days_unused) * 24 * 60 * 60);
        self.client_repo.delete_stale(cutoff_timestamp).await
    }

    pub async fn list_unused_clients(
        &self,
        days_old: u32,
    ) -> OauthResult<Vec<super::super::ClientUsageSummary>> {
        let cutoff_timestamp = Utc::now().timestamp() - (i64::from(days_old) * 24 * 60 * 60);
        self.client_repo.list_unused(cutoff_timestamp).await
    }

    pub async fn list_stale_clients(
        &self,
        days_unused: u32,
    ) -> OauthResult<Vec<super::super::ClientUsageSummary>> {
        let cutoff_timestamp = Utc::now().timestamp() - (i64::from(days_unused) * 24 * 60 * 60);
        self.client_repo.list_stale(cutoff_timestamp).await
    }

    pub async fn deactivate_old_test_clients(&self, days_old: u32) -> OauthResult<u64> {
        self.client_repo.deactivate_old_test(days_old).await
    }

    pub async fn list_inactive_clients(&self) -> OauthResult<Vec<super::super::ClientSummary>> {
        self.client_repo.list_inactive().await
    }

    pub async fn list_old_clients(
        &self,
        days_old: u32,
    ) -> OauthResult<Vec<super::super::ClientSummary>> {
        let cutoff_timestamp = Utc::now().timestamp() - (i64::from(days_old) * 24 * 60 * 60);
        self.client_repo.list_old(cutoff_timestamp).await
    }

    pub async fn update_client_last_used(&self, client_id: &ClientId) -> OauthResult<()> {
        let now = Utc::now().timestamp();
        self.client_repo.update_last_used(client_id, now).await
    }
}