Interface IAccessTokenRevocationStore

Store for access-token identifiers revoked before their JWT expiry.

Applications that run on more than one process must supply one shared implementation to both AuthPlugin and RefreshTokenService.

interface IAccessTokenRevocationStore {
isRevoked(jti: string): Promise<boolean>;
revoke(jti: string, expiresAt: number): Promise<void>;
}

Implemented by

MemoryAccessTokenRevocationStore

Index

Methods

isRevoked revoke

Methods

isRevoked

isRevoked(jti: string): Promise<boolean>
Return whether an access-token identifier is currently revoked.
Parameters
- jti: string
Returns Promise<boolean>
- Defined in packages/auth-plugin/src/stores/access-token-revocation-store.ts:19

revoke

revoke(jti: string, expiresAt: number): Promise<void>
Record an access-token identifier as revoked until its expiry timestamp.
Parameters
- jti: string
- expiresAt: number
Returns Promise<void>
- Defined in packages/auth-plugin/src/stores/access-token-revocation-store.ts:17