Struct UpstreamOauthCredentialRow 

pub struct UpstreamOauthCredentialRow {
    pub upstream_name: String,
    pub subject: String,
    pub client_id: String,
    pub granted_scopes_json: String,
    pub token_blob: Vec<u8>,
    pub token_blob_nonce: Vec<u8>,
    pub token_received_at: i64,
    pub access_token_expires_at: i64,
    pub refresh_token_present: bool,
}

Persisted upstream OAuth credential row.

The encrypted token_blob is chacha20poly1305(token_response_json) sealed with a fresh 12-byte nonce per write. access_token_expires_at is denormalized for cheap pruning in cleanup_expired. refresh_token_present enables dropping access-only stale rows while keeping rows that still have a refresh token for re-use (SEC-9).

Debug is implemented manually with redaction — never derive it.

Fields

upstream_name: String

subject: String

client_id: String

granted_scopes_json: String

token_blob: Vec<u8>

token_blob_nonce: Vec<u8>

token_received_at: i64

access_token_expires_at: i64

refresh_token_present: bool

Trait Implementations

impl Clone for UpstreamOauthCredentialRow

fn clone(&self) -> UpstreamOauthCredentialRow

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UpstreamOauthCredentialRow

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.