Struct MemoryTokenStore 

pub struct MemoryTokenStore { /* private fields */ }

Tokens held in this process’s memory.

Wrong for production for the usual reason and one extra: a restart would empty the store, and an empty store answers “unknown token” to everything — which fails safe — but it also loses every revocation, and a revocation that a restart undoes is not a revocation.

Implementations

impl MemoryTokenStore

pub fn new() -> MemoryTokenStore

pub fn live_access(&self, now: u64) -> usize

How many access tokens are usable right now. For tests.

pub fn live_refresh(&self, now: u64) -> usize

How many refresh tokens are usable right now. For tests.

Trait Implementations

impl Default for MemoryTokenStore

fn default() -> Self

Returns the “default value” for a type.

impl TokenStore for MemoryTokenStore

fn store_access<'a>(&'a self, token: AccessToken) -> StoreFuture<'a, ()>

fn store_refresh<'a>(&'a self, token: RefreshToken) -> StoreFuture<'a, ()>

fn find_access<'a>( &'a self, hash: &'a str, ) -> StoreFuture<'a, Option<AccessToken>>

Look a token up by its digest — the record whatever its state, so the caller can tell “revoked” apart from “never existed” and act on it.

fn find_refresh<'a>( &'a self, hash: &'a str, ) -> StoreFuture<'a, Option<RefreshToken>>

fn rotate<'a>(&'a self, id: &'a str) -> StoreFuture<'a, bool>

Mark a refresh token rotated, returning whether this call did it.

fn revoke_access<'a>(&'a self, id: &'a str) -> StoreFuture<'a, ()>

fn revoke_refresh<'a>(&'a self, id: &'a str) -> StoreFuture<'a, ()>

fn revoke_family<'a>(&'a self, family: &'a str) -> StoreFuture<'a, usize>

Revoke everything descended from one authorisation, returning how many records changed. This is what a detected replay or reuse calls.

fn purge<'a>(&'a self, now: u64) -> StoreFuture<'a, usize>

Drop records that are past their lifetime. Housekeeping.