Struct StoredAccessToken 

pub struct StoredAccessToken {
    pub id: String,
    pub name: String,
    pub subject: String,
    pub roles: Vec<String>,
    pub scopes: Vec<TokenScope>,
    pub expires_at: DateTime<Utc>,
    pub created_at: DateTime<Utc>,
    pub created_by: String,
    pub revoked_at: Option<DateTime<Utc>>,
}

A persisted scoped access token record (the revocation handle + audit row for a token minted via the token-management API or for a container).

The token itself is a JWT carrying jti == id plus the scopes below; this record lets the daemon revoke it before expiry and list/audit issued tokens. The raw JWT is returned to the caller only once at creation and is never stored here.

Fields

id: String

UUID identifier — also the JWT jti claim (the revocation handle).

name: String

Human-friendly label for the token (e.g. "ci-runner").

subject: String

The token’s subject (JWT sub) — e.g. token:{id} for user-minted tokens or container:{deployment}:{service}:{id} for container tokens.

roles: Vec<String>

Role claims carried by the token (usually empty for purely-scoped tokens; never "admin" unless minted by an admin).

scopes: Vec<TokenScope>

The scopes baked into the token.

expires_at: DateTime<Utc>

When the token expires.

created_at: DateTime<Utc>

When the token was created.

created_by: String

The subject id (user id or "system") that created the token.

revoked_at: Option<DateTime<Utc>>

When the token was revoked, if it has been. None = still active.

Implementations

impl StoredAccessToken

pub fn new( name: impl Into<String>, subject: impl Into<String>, roles: Vec<String>, scopes: Vec<TokenScope>, expires_at: DateTime<Utc>, created_by: impl Into<String>, ) -> Self

Create a new active token record with a fresh UUID id.

pub fn is_inactive(&self, now: DateTime<Utc>) -> bool

Whether the token is revoked or has expired as of now.

Trait Implementations

impl Clone for StoredAccessToken

fn clone(&self) -> StoredAccessToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ComposeSchema for StoredAccessToken

fn compose(generics: Vec<RefOr<Schema>>) -> RefOr<Schema>

impl Debug for StoredAccessToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for StoredAccessToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for StoredAccessToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl ToSchema for StoredAccessToken

fn name() -> Cow<'static, str>

Return name of the schema.

fn schemas(schemas: &mut Vec<(String, RefOr<Schema>)>)

Implement reference utoipa::openapi::schema::Schemas for this type.