interface IAccessTokenRevocationStore

Store for access-token identifiers revoked before their JWT expiry.

Applications that run on more than one process must supply one shared implementation to both AuthPlugin and RefreshTokenService.

Methods

revoke(
jti: string,
expiresAt: number
): Promise<void>

Record an access-token identifier as revoked until its expiry timestamp.

isRevoked(jti: string): Promise<boolean>

Return whether an access-token identifier is currently revoked.

Usage

import { type IAccessTokenRevocationStore } from "auth-plugin/src/index.ts";