Graphorin API reference v0.15.1

---

Graphorin API reference / @graphorin/core / / AuthTokenRecord

Interface: AuthTokenRecord

Defined in: packages/core/src/contracts/auth-token-store.ts:8

Stable

Persisted server auth token record. Holds a per-token HMAC hash + scope grammar; raw tokens are never persisted (the runtime carries them via SecretValue).

Properties

Property	Modifier	Type	Description	Defined in
createdAt	readonly	string	-	packages/core/src/contracts/auth-token-store.ts:17
expiresAt?	readonly	string	-	packages/core/src/contracts/auth-token-store.ts:18
hashHex	readonly	string	HMAC-SHA256 of the secret part, peppered. Hex-encoded.	packages/core/src/contracts/auth-token-store.ts:12
id	readonly	string	Stable identifier (the public part of the token, before the secret).	packages/core/src/contracts/auth-token-store.ts:10
label?	readonly	string	Optional human-readable label rendered in CLI listings.	packages/core/src/contracts/auth-token-store.ts:14
lastUsedAt?	readonly	string	-	packages/core/src/contracts/auth-token-store.ts:20
revokedAt?	readonly	string	-	packages/core/src/contracts/auth-token-store.ts:19
scopes	readonly	readonly string[]	Scope grammar - opaque strings of the form <resource>:<action>[:<id-or-glob>].	packages/core/src/contracts/auth-token-store.ts:16