Summary
Add storage-layer methods that the upstream token refresh service will depend on.
What
UpdateUpstreamTokens on UpstreamTokenStorage — atomically updates token values for an existing session and resets the sliding-window TTL.SessionRevoker interface with RevokeSessionByTSID — revokes all internal access and refresh tokens where the session's upstream session ID matches the given tsid. Implemented on MemoryStorage using the existing O(n) scan pattern.
Why
Foundation for the UpstreamTokenService. Separated from the service implementation to keep PRs focused.
Summary
Add storage-layer methods that the upstream token refresh service will depend on.
What
UpdateUpstreamTokensonUpstreamTokenStorage— atomically updates token values for an existing session and resets the sliding-window TTL.SessionRevokerinterface withRevokeSessionByTSID— revokes all internal access and refresh tokens where the session's upstream session ID matches the given tsid. Implemented onMemoryStorageusing the existing O(n) scan pattern.Why
Foundation for the UpstreamTokenService. Separated from the service implementation to keep PRs focused.