Struct PersonalAccessToken 

pub struct PersonalAccessToken {
    pub id: TokenId,
    pub user_id: UserId,
    pub name: String,
    pub token_hash: String,
    pub token_prefix: String,
    pub scopes: Vec<TokenScope>,
    pub expires_at: Option<u64>,
    pub last_used_at: Option<u64>,
    pub created_at: u64,
}

A personal access token for authentication.

Fields

id: TokenId

Unique token ID.

user_id: UserId

User who owns this token.

name: String

User-provided name/description.

token_hash: String

Argon2id hash of the full token (prefix + secret).

token_prefix: String

First 8 characters for quick lookup.

scopes: Vec<TokenScope>

Scopes granted to this token.

expires_at: Option<u64>

Optional expiration timestamp.

last_used_at: Option<u64>

Last time the token was used.

created_at: u64

When the token was created.

Implementations

impl PersonalAccessToken

pub fn generate( id: TokenId, user_id: UserId, name: String, scopes: Vec<TokenScope>, expires_at: Option<u64>, ) -> Result<(Self, String)>

Generate a new token with a random value.

Returns the token struct and the plaintext token value (only shown once).

pub fn verify(&self, secret: &str) -> Result<()>

Verify a token secret against the stored hash.

pub fn is_expired(&self) -> bool

Check if the token is expired.

pub fn has_scope(&self, required: TokenScope) -> bool

Check if the token has a specific scope.

pub fn touch(&mut self)

Update the last_used_at timestamp.

pub fn to_response(&self, plaintext: Option<&str>) -> TokenResponse

Convert to a response (without the hash).

Trait Implementations

impl Clone for PersonalAccessToken

fn clone(&self) -> PersonalAccessToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PersonalAccessToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PersonalAccessToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PersonalAccessToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.