Struct InMemoryRevocationStore 

pub struct InMemoryRevocationStore { /* private fields */ }

In-memory revocation store for testing and single-instance dev.

Implementations

impl InMemoryRevocationStore

pub fn new() -> Self

Create a new, empty in-memory revocation store.

pub fn cleanup_expired(&self)

Remove expired entries (single-JTI revocations and per-user epochs).

Trait Implementations

impl Default for InMemoryRevocationStore

fn default() -> Self

Returns the “default value” for a type.

impl RevocationStore for InMemoryRevocationStore

fn is_revoked<'life0, 'life1, 'async_trait>( &'life0 self, jti: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<bool, RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Check if a JTI has been revoked.

fn revoke<'life0, 'life1, 'async_trait>( &'life0 self, jti: &'life1 str, ttl_secs: u64, ) -> Pin<Box<dyn Future<Output = Result<(), RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Revoke a single JTI. ttl_secs is the remaining JWT lifetime — the store should auto-expire the entry after this duration.

fn revoke_all_for_user<'life0, 'life1, 'async_trait>( &'life0 self, sub: &'life1 str, ttl_secs: u64, ) -> Pin<Box<dyn Future<Output = Result<(), RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Revoke all of a user’s tokens by recording a per-user epoch: every token for sub whose iat (issued-at) is at or before now is henceforth rejected by user_revoked_after.

fn user_revoked_after<'life0, 'life1, 'async_trait>( &'life0 self, sub: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<i64>, RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Return the revoke-all epoch (unix seconds) currently in effect for sub, or None when the user has no active epoch. Tokens with iat <= epoch are revoked.