class

KemalIdentity::SQLite::RememberRepository

Inherits KemalIdentity::Sessions::RememberRepository < Reference < Object

Sessions::RememberRepository over auth_remember_tokens, SQLite dialect.

#consume is two statements and their order is the whole correctness argument, exactly as in the PostgreSQL adapter: the conditional UPDATE goes first so that spending is atomic, and only when it changes nothing does the second statement look up whether that was a replay or a digest nobody issued. Looking first would be the read-then-write race that lets a stolen cookie work silently instead of being detected.

Constants

COLUMNS = "id, account_id, family_id, token_digest, created_at, expires_at, used_at, revoked_at"

Constructors

new(db : DB::Database)

Source

Instance methods

consume(digest : Bytes, at : Time) : Sessions::RememberLookup

Spends the token with this digest, or reports why it could not.

Returns RememberAccepted exactly once per token. Every later presentation of the same digest returns RememberReplayed, until the row is swept.

An expired or revoked token returns RememberUnknown rather than a replay: neither is evidence of theft. An expired token is somebody returning after a month, and a revoked one is a family already killed — reporting that as a fresh detection would send a second alarm for the same incident.

Source

create(token : Sessions::RememberToken) : Nil

Stores a newly minted token.

Raises KemalIdentity::InfrastructureError on a duplicate digest.

Source

delete_expired(before : Time) : Int32

Deletes rows past their expiry, returning the count.

Disk reclamation, with one caveat that matters: a spent token must survive at least as long as its expiry, or replay detection stops working. Delete it early and a stolen token that comes back looks unknown rather than replayed, and nobody is told.

Source

revoke_all_for_account(account_id : String, at : Time) : Int32

Kills every token for an account, across all families. "Forget me everywhere", and the right response to a password change.

Source

revoke_family(family_id : String, at : Time) : Int32

Kills every token in a family, returning how many it killed.

The response to a replay. It ends that browser's remembered state — including the thief's — and leaves the account's other devices signed in, because a stolen cookie on one machine says nothing about the others.

Source

revoke_family_by_digest(digest : Bytes, at : Time) : Int32

Kills the family that this token belongs to, without spending the token, and returns how many it killed.

This is what logging out calls. Consuming the token instead would mark it used, and the browser's next visit with the same cookie would then look like a replay — the user would be told their cookie may have been stolen because they pressed "log out".

Returns zero when the digest is unknown.

Source