storage

package

v1.22.1 Latest Latest Go to latest Published: Jul 1, 2026 License: MIT Imports: 17 Imported by: 0

Documentation ¶

Index ¶

type Storage
- func New(c *clients.ClientRepository, a authcodes.Querier, o oidc.Querier, ...) *Storage

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Storage ¶

type Storage struct {
	// contains filtered or unexported fields
}

func New ¶

func New(
	c *clients.ClientRepository,
	a authcodes.Querier,
	o oidc.Querier,
	at accesstokens.Querier,
	rt refreshtokens.Querier,
	pkceRequests pkce.Querier,
) *Storage

func (*Storage) ClientAssertionJWTValid ¶

func (s *Storage) ClientAssertionJWTValid(_ context.Context, _ string) error

func (*Storage) CreateAccessTokenSession ¶

func (s *Storage) CreateAccessTokenSession(ctx context.Context, signature string, req fosite.Requester) error

func (*Storage) CreateAuthorizeCodeSession ¶

func (s *Storage) CreateAuthorizeCodeSession(ctx context.Context, signature string, req fosite.Requester) error

func (*Storage) CreateOpenIDConnectSession ¶

func (s *Storage) CreateOpenIDConnectSession(ctx context.Context, authorizeCode string, req fosite.Requester) error

func (*Storage) CreatePKCERequestSession ¶

func (s *Storage) CreatePKCERequestSession(ctx context.Context, signature string, req fosite.Requester) error

func (*Storage) CreateRefreshTokenSession ¶

func (s *Storage) CreateRefreshTokenSession(ctx context.Context, signature string, accessTokenSignature string, req fosite.Requester) error

func (*Storage) DeleteAccessTokenSession ¶

func (s *Storage) DeleteAccessTokenSession(ctx context.Context, signature string) error

func (*Storage) DeleteOpenIDConnectSession ¶

func (s *Storage) DeleteOpenIDConnectSession(ctx context.Context, authorizeCode string) error

func (*Storage) DeletePKCERequestSession ¶

func (s *Storage) DeletePKCERequestSession(ctx context.Context, signature string) error

func (*Storage) DeleteRefreshTokenSession ¶

func (s *Storage) DeleteRefreshTokenSession(ctx context.Context, signature string) error

func (*Storage) GetAccessTokenSession ¶

func (s *Storage) GetAccessTokenSession(ctx context.Context, signature string, session fosite.Session) (fosite.Requester, error)

func (*Storage) GetAuthorizeCodeSession ¶

func (s *Storage) GetAuthorizeCodeSession(ctx context.Context, signature string, session fosite.Session) (fosite.Requester, error)

func (*Storage) GetClient ¶

func (s *Storage) GetClient(ctx context.Context, id string) (fosite.Client, error)

func (*Storage) GetOpenIDConnectSession ¶

func (s *Storage) GetOpenIDConnectSession(ctx context.Context, authorizeCode string, requester fosite.Requester) (fosite.Requester, error)

func (*Storage) GetPKCERequestSession ¶

func (s *Storage) GetPKCERequestSession(ctx context.Context, signature string, session fosite.Session) (fosite.Requester, error)

func (*Storage) GetRefreshTokenSession ¶

func (s *Storage) GetRefreshTokenSession(ctx context.Context, signature string, session fosite.Session) (fosite.Requester, error)

func (*Storage) InvalidateAuthorizeCodeSession ¶

func (s *Storage) InvalidateAuthorizeCodeSession(ctx context.Context, signature string) error

func (*Storage) RevokeAccessToken ¶

func (s *Storage) RevokeAccessToken(ctx context.Context, requestID string) error

func (*Storage) RevokeRefreshToken ¶

func (s *Storage) RevokeRefreshToken(ctx context.Context, requestID string) error

func (*Storage) RotateRefreshToken ¶

func (s *Storage) RotateRefreshToken(ctx context.Context, requestID string, refreshTokenSignature string) error

RotateRefreshToken marks the refresh token (and the access token issued alongside it) inactive when the refresh grant rotates them. fosite calls this before issuing replacement tokens.

The access token is revoked first so that a partial failure leaves the old refresh+access pair intact (the pre-rotation state) rather than a live access token paired with a revoked refresh token.

refreshTokenSignature is required by the fosite interface for backends that track rotation lineage (RFC 6749 §10.4 token-family revocation); we revoke by request_id and don't need it for now.

TODO: make atomic when transactions land.

func (*Storage) SetClientAssertionJWT ¶

func (s *Storage) SetClientAssertionJWT(_ context.Context, _ string, _ time.Time) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL