RevocationStore
Module: revocation::RevocationStore
Section titled “Module: revocation::RevocationStore”Contents
Section titled “Contents”Functions
compact_file- Rewrite the revocation file, dropping entries that have expired.
firma_authority::revocation::RevocationStore::compact_file
Section titled “firma_authority::revocation::RevocationStore::compact_file”Function
Rewrite the revocation file, dropping entries that have expired.
An entry is considered expired when revoked_at + token_ttl < now:
the token would fail Stage 1 expiry checks regardless of its revocation
status, so the entry is no longer needed. This prevents unbounded file
growth for long-running deployments.
The file watcher will detect the rewrite and trigger a reload, which is a no-op since the same non-expired entries are already in memory.
Errors
Section titled “Errors”Returns an error if the file cannot be written.
fn compact_file(self: &Self) -> Result<()>