Struct TokenRevocationManager 

pub struct TokenRevocationManager { /* private fields */ }

High-level token revocation manager wrapping a backend store.

Implementations

impl TokenRevocationManager

pub fn new( store: Arc<dyn RevocationStore>, require_jti: bool, fail_open: bool, ) -> Self

Create a new revocation manager.

pub async fn check_token(&self, jti: Option<&str>) -> Result<(), TokenRejection>

Check if a token should be rejected.

Returns Ok(()) if the token is allowed, or an error reason if rejected.

Errors

Returns TokenRejection::MissingJti if JTI is required but absent. Returns TokenRejection::Revoked if the token has been revoked. Returns TokenRejection::StoreUnavailable if the revocation store is unreachable and fail_open is false.

pub async fn revoke( &self, jti: &str, ttl_secs: u64, ) -> Result<(), RevocationError>

Revoke a single token by JTI.

Errors

Returns RevocationError if the underlying revocation store operation fails.

pub async fn revoke_all_for_user( &self, sub: &str, ) -> Result<u64, RevocationError>

Revoke all tokens for a user.

Errors

Returns RevocationError if the underlying revocation store operation fails.

pub const fn require_jti(&self) -> bool

Whether JTI is required.

Trait Implementations

impl Debug for TokenRevocationManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.