Struct TokenSet 

pub struct TokenSet {
    pub access_token: String,
    pub refresh_token: Option<String>,
    pub expires_at: Option<SystemTime>,
    pub scopes: Vec<String>,
}

A resolved OAuth2 / API bearer token with optional expiry metadata.

TokenSet deliberately does not implement Display — only Debug — to prevent accidental log or format-string leakage of access tokens.

Example

use stygian_graph::ports::auth::TokenSet;
use std::time::{SystemTime, Duration};

let ts = TokenSet {
    access_token: "tok_abc123".to_string(),
    refresh_token: Some("ref_xyz".to_string()),
    expires_at: SystemTime::now().checked_add(Duration::from_secs(3600)),
    scopes: vec!["read:user".to_string()],
};
assert!(!ts.is_expired());

Fields

access_token: String

Bearer token to inject into requests

refresh_token: Option<String>

Refresh token (may be absent for non-OAuth2 API keys)

expires_at: Option<SystemTime>

Absolute expiry time; None means the token does not expire

scopes: Vec<String>

OAuth2 scopes granted to this token

Implementations

impl TokenSet

pub fn is_expired(&self) -> bool

Returns true if the token has expired (with a 60-second safety margin).

A token without an expires_at is considered perpetually valid.

Example

use stygian_graph::ports::auth::TokenSet;
use std::time::{SystemTime, Duration};

let expired = TokenSet {
    access_token: "tok".to_string(),
    refresh_token: None,
    expires_at: SystemTime::now().checked_sub(Duration::from_secs(300)),
    scopes: vec![],
};
assert!(expired.is_expired());

Trait Implementations

impl Clone for TokenSet

fn clone(&self) -> TokenSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.