Interface VaultStore

interface VaultStore {
    consume(jti: string): Promise<false | VaultEntry | null>;
    revokeFamily(familyId: string): Promise<void>;
    set(jti: string, entry: VaultEntry): Promise<void>;
}

Implemented by

VaultMemoryStore

Index

Methods

consume revokeFamily set

Methods

consume

consume(jti: string): Promise<false | VaultEntry | null>
Atomically consume a token entry. Returns the entry if valid (first use). Returns null if the jti is unknown or was already revoked via revokeFamily. Returns false if the jti was already consumed (reuse attack signal).
Parameters
- jti: string
Returns Promise<false | VaultEntry | null>
- Defined in src/middleware/token-vault.ts:26

revokeFamily

revokeFamily(familyId: string): Promise<void>
Revoke all tokens belonging to a family (breach response / logout-all).
Parameters
- familyId: string
Returns Promise<void>
- Defined in src/middleware/token-vault.ts:29

set

set(jti: string, entry: VaultEntry): Promise<void>
Persist a newly issued refresh token entry.
Parameters
- jti: string
- entry: VaultEntry
Returns Promise<void>
- Defined in src/middleware/token-vault.ts:18