RefreshTokenStore
Defined in: types.ts:29
Tracks issued refresh tokens by jti so rotation and revocation work.
Methods are sync-or-async so a Redis-backed store can be injected without
an interface change.
Methods
Section titled “Methods”add(
jti,sub,expiresAt):void|Promise<void>
Defined in: types.ts:31
Record an issued refresh token. expiresAt is the JWT exp in epoch seconds.
Parameters
Section titled “Parameters”string
string
expiresAt
Section titled “expiresAt”number
Returns
Section titled “Returns”void | Promise<void>
consume()
Section titled “consume()”consume(
jti):boolean|Promise<boolean>
Defined in: types.ts:37
Atomically remove jti, returning whether it was present. A false return
for a token whose JWT still verifies means the token was already used —
treat it as theft and revoke the family.
Parameters
Section titled “Parameters”string
Returns
Section titled “Returns”boolean | Promise<boolean>
revokeAll()
Section titled “revokeAll()”revokeAll(
sub):void|Promise<void>
Defined in: types.ts:39
Revoke every outstanding refresh token for a subject.
Parameters
Section titled “Parameters”string
Returns
Section titled “Returns”void | Promise<void>