Skip to content

JwtRevocationService

Defined in: packages/auth/src/jwt/jwt-revocation.service.ts:37

new JwtRevocationService(store): JwtRevocationService

Defined in: packages/auth/src/jwt/jwt-revocation.service.ts:38

JwtDenylistStore

JwtRevocationService

assertNotRevoked(jti): Promise<void>

Defined in: packages/auth/src/jwt/jwt-revocation.service.ts:69

Throw JwtError (code: 'revoked') when the jti is denylisted.

string

Promise<void>


isRevoked(jti): Promise<boolean>

Defined in: packages/auth/src/jwt/jwt-revocation.service.ts:61

Whether a jti has been revoked. An empty jti reports revoked (fail-closed); store errors propagate to the caller.

string

Promise<boolean>


revoke(claims, atSeconds?): Promise<boolean>

Defined in: packages/auth/src/jwt/jwt-revocation.service.ts:45

Revoke a token by denylisting its jti for the token’s remaining lifetime (exp - atSeconds). Returns false without writing when the token is already expired (nothing left to revoke) or carries no jti.

Pick<JwtClaims, "jti" | "exp">

number = ...

Promise<boolean>