Struct TokenRecord 

pub struct TokenRecord {
    pub family: TokenFamily,
    pub scope: ScopeSet,
    pub access_token: TokenSecret,
    pub refresh_token: Option<TokenSecret>,
    pub issued_at: OffsetDateTime,
    pub expires_at: OffsetDateTime,
    pub revoked_at: Option<OffsetDateTime>,
}

Immutable record describing issued OAuth tokens.

Fields

family: TokenFamily

Logical token grouping (tenant/principal/provider).

scope: ScopeSet

Normalized scopes granted to this record.

access_token: TokenSecret

Access token secret; callers must avoid logging it.

refresh_token: Option<TokenSecret>

Refresh token secret, if the provider issued one.

issued_at: OffsetDateTime

Issued-at instant recorded from the provider response.

expires_at: OffsetDateTime

Expiry instant derived from issued_at plus expires_in or absolute expiry.

revoked_at: Option<OffsetDateTime>

Revocation instant if the record has been revoked.

Implementations

impl TokenRecord

pub fn builder(family: TokenFamily, scope: ScopeSet) -> TokenRecordBuilder

Returns a builder for constructing rotation-friendly records.

pub fn status_at(&self, instant: OffsetDateTime) -> TokenStatus

Computes the lifecycle status at a given instant.

pub fn status(&self) -> TokenStatus

Convenience helper that checks the status using the current UTC instant.

pub fn is_pending_at(&self, instant: OffsetDateTime) -> bool

Returns true if the record is considered pending at the provided instant.

pub fn is_pending(&self) -> bool

Returns true if the record is currently pending (issued_at in the future).

pub fn is_active(&self) -> bool

Returns true if the record is currently active (not pending/expired/revoked).

pub fn is_expired_at(&self, instant: OffsetDateTime) -> bool

Returns true if the record has expired at the provided instant.

pub fn is_expired(&self) -> bool

Returns true if the record is expired relative to the current clock.

pub fn is_revoked(&self) -> bool

Returns true if the record has been revoked.

pub fn revoke(&mut self, instant: OffsetDateTime)

Marks the record as revoked.

Trait Implementations

impl Clone for TokenRecord

fn clone(&self) -> TokenRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenRecord

fn fmt(&self, f: &mut Formatter<'_>) -> FmtResult

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TokenRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TokenRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.