Struct RevokedTokens 

pub struct RevokedTokens { /* private fields */ }

Best-effort, in-memory logout denylist for session tokens.

Deliberately NOT durable: a stateless token’s only revocation cost is the window between logout and its natural expiry, bounded by the caller’s own TTL policy; losing this set on restart means a logged-out token near the end of its TTL might verify again after a restart, which callers of this module accept as the tradeoff for a session that needs no durable store.

Implementations

impl RevokedTokens

pub fn new() -> Self

An empty denylist.

pub fn revoke(&self, token: &str)

Adds token to the denylist (logout). Idempotent.

pub fn reap(&self, now_ms: u64)

Evict every denylisted token that could never verify again anyway: a token past its OWN embedded expires_ms already fails verify_session’s expiry check regardless of denylist membership, so keeping it here forever only grows the set. A token that fails to even PARSE (decode_session_payload returns None — never produced by mint_session, but Self::revoke accepts whatever string a caller posts) can likewise never match a real session and is dropped too. Bounds this set’s memory to sessions logged out within their own TTL window, not the lifetime of the process.

Trait Implementations

impl Default for RevokedTokens

fn default() -> Self

Returns the “default value” for a type.