api-services/org.cryptotrader.api.library.services.jwt

Package-level declarations

Types

Link copied to clipboard
@Service
class JwtTokenService(rsaKeyService: RsaKeyService, @Value(value = "${security.jwt.issuer:https://api.cryptotrader.com}") issuer: String, @Value(value = "${security.jwt.ttl-seconds:300}") ttlSeconds: Long, @Value(value = "${security.jwt.audience:crypto-trader-api}") audienceCsv: String)

Issues and validates short-lived JWT access tokens.

Link copied to clipboard
@Service
class RefreshTokenService(@Value(value = "${security.refresh.cookie-name:__Host-rt}") cookieName: String, @Value(value = "${security.refresh.ttl-days:30}") ttlDays: Long, @Value(value = "${security.refresh.allow-rebind-once:false}") allowRebindOnce: Boolean)

Refresh tokens, explained simply:

Link copied to clipboard
@Service
class TokenBlacklistService

Simple in-memory blacklist for JWT tokens to support logout for stateless auth.