token_store.go RawHistoryFolder

1package out
2
3import (
4	"context"
5
6	"github.com/bnema/gordon/internal/domain"
7)
8
9// TokenStore defines the contract for storing and managing authentication tokens.
10// Implementations may use different backends (pass, sops, unsafe file storage).
11type TokenStore interface {
12	// SaveToken stores a token JWT and metadata.
13	SaveToken(ctx context.Context, token *domain.Token, jwt string) error
14
15	// GetToken retrieves token JWT by subject.
16	GetToken(ctx context.Context, subject string) (string, *domain.Token, error)
17
18	// ListTokens returns all stored tokens.
19	ListTokens(ctx context.Context) ([]domain.Token, error)
20
21	// Revoke adds token ID to revocation list.
22	Revoke(ctx context.Context, tokenID string) error
23
24	// IsRevoked checks if token ID is in revocation list.
25	IsRevoked(ctx context.Context, tokenID string) (bool, error)
26
27	// DeleteToken removes token from store.
28	DeleteToken(ctx context.Context, subject string) error
29
30	// UpdateTokenExpiry updates the JWT and expiry/LastExtendedAt metadata for an existing token.
31	// Used by token sliding expiry to re-sign tokens without changing the JTI.
32	UpdateTokenExpiry(ctx context.Context, token *domain.Token, newJWT string) error
33}