postgres

type KeyServices struct {
	// Auth accepts the active keys of the configured environment; a valid
	// key is kept in memory for app.KeyCacheTTL while WatchRevocations
	// listens, and not at all otherwise.
	Auth *app.Authenticator
	// WatchRevocations makes Auth forget each revoked key at once, until
	// ctx is done; it reports each loss of its connection to report.
	WatchRevocations func(ctx context.Context, report func(error))
	// Purge deletes the keys revoked longer than
	// domain.RevokedKeyRetention ago, every app.KeyPurgeEvery.
	Purge *app.KeyPurge
	// Close closes the database, waiting for the connections in use.
	Close func()
	// Store is the database itself: the login requests and the account
	// keys of app.KeyRequests.
	Store *Keys
	// Environment is that of the keys accepted and issued.
	Environment domain.KeyEnvironment
}

type Keys struct {
	// contains filtered or unexported fields
}

type Option func(*options)

type Restorer struct {
	// contains filtered or unexported fields
}

type RevocationSink interface {
	Forget(d domain.KeyDigest)
	Suspend()
	Resume()
}