Struct TokenStore 

pub struct TokenStore { /* private fields */ }

Implementations

impl TokenStore

pub fn load( path: PathBuf, client_id: &str, access_ttl: Duration, refresh_ttl: Duration, ) -> Result<Self>

Load (or initialize) the store at path.

• Missing file → empty store (info log).
• Unreadable/corrupt file → rename aside to tokens.json.broken-{ts}, start empty (warn log).
• client_id_hash mismatch → wipe (warn log). Handles oauth.toml regeneration.
• Otherwise → drop expired entries and load.

pub async fn mint_pair(&self, chain_id: Option<ChainId>) -> Result<MintedPair>

Mint a new (access, refresh) pair. Pass None for chain_id to start a new chain (use case: authorization_code grant). Pass Some(id) to continue an existing chain (use case: refresh_token grant rotation). Persists to disk before returning. On persist failure logs an error and keeps the in-memory state — the caller still gets a valid pair.

pub async fn validate_access(&self, raw: &str) -> bool

Validate an access token. Returns true iff the token was issued, has not expired, and its chain has not been revoked.

pub async fn consume_refresh(&self, raw: &str) -> Result<ChainId, RefreshError>

Consume a refresh token. Returns the chain_id on success.

Returns Replayed { chain_id } if the token was already consumed — this is a leak signal and the caller MUST follow up with revoke_chain(chain_id). Returns Unknown for a refresh token in an already-revoked chain (we don’t disclose chain identity to a caller who doesn’t already know it).

pub async fn revoke_chain(&self, chain_id: ChainId)

Mark a chain as revoked. All access tokens in this chain stop validating immediately; any refresh tokens in this chain stop being consumable.