Struct PostgresRevocationStore 

pub struct PostgresRevocationStore { /* private fields */ }

PostgreSQL-backed JWT revocation store.

Persists revoked jti claims in fraiseql_revoked_tokens, so revocations survive a restart and are shared across replicas — unlike the in-memory backend, which the server silently fell back to for backend = "postgres" before this was implemented (#357). Each row carries an expires_at matching the JWT’s remaining lifetime; is_revoked ignores expired rows and cleanup_expired prunes them.

Implementations

impl PostgresRevocationStore

pub async fn new(pool: PgPool) -> Result<Self, RevocationError>

Create a Postgres revocation store, ensuring the backing table exists (idempotent DDL).

Errors

Returns RevocationError::Backend if the schema cannot be created.

pub async fn cleanup_expired(&self) -> Result<u64, RevocationError>

Delete expired revocation rows. Optional housekeeping; is_revoked already ignores expired entries, so this only reclaims space.

Errors

Returns RevocationError::Backend if the delete fails.

Trait Implementations

impl RevocationStore for PostgresRevocationStore

fn is_revoked<'life0, 'life1, 'async_trait>( &'life0 self, jti: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<bool, RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Check if a JTI has been revoked.

fn revoke<'life0, 'life1, 'async_trait>( &'life0 self, jti: &'life1 str, ttl_secs: u64, ) -> Pin<Box<dyn Future<Output = Result<(), RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Revoke a single JTI. ttl_secs is the remaining JWT lifetime — the store should auto-expire the entry after this duration.

fn revoke_all_for_user<'life0, 'life1, 'async_trait>( &'life0 self, sub: &'life1 str, ttl_secs: u64, ) -> Pin<Box<dyn Future<Output = Result<(), RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Revoke all of a user’s tokens by recording a per-user epoch: every token for sub whose iat (issued-at) is at or before now is henceforth rejected by user_revoked_after.

fn user_revoked_after<'life0, 'life1, 'async_trait>( &'life0 self, sub: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<i64>, RevocationError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Return the revoke-all epoch (unix seconds) currently in effect for sub, or None when the user has no active epoch. Tokens with iat <= epoch are revoked.