Struct ApprovalTokenStore 

pub struct ApprovalTokenStore { /* private fields */ }

Tracks approval-token use-count and revocation across calls (spec 109 FR-006a: max use count, revocation, replay prevention). In-memory only — tokens do not survive a process restart, which is safe since they are short-lived and bound to a specific pinned snapshot.

Implementations

impl ApprovalTokenStore

pub fn new() -> Self

pub fn check_and_record_use( &self, claims: &ApprovalTokenClaims, ) -> Result<(), ApprovalTokenError>

Atomically checks revocation and use-count, then records one use.

Errors

Returns ApprovalTokenError with ApprovalTokenErrorCode::Revoked or ApprovalTokenErrorCode::UseCountExhausted when the token cannot be used again, or ApprovalTokenErrorCode::StoreUnavailable (fail closed) if the internal store is poisoned by a prior panicking holder.

pub fn revoke(&self, token_id: &str)

Marks a token id as permanently unusable, regardless of remaining uses (spec 109 FR-006a revocation). A poisoned store is a no-op — there is nothing further to record, and check_and_record_use fails closed independently.

Trait Implementations

impl Default for ApprovalTokenStore

fn default() -> Self

Returns the “default value” for a type.