AuthScimCredentialRecord class final
Persisted credential record. The raw bearer secret is never represented.
Constructors
-
AuthScimCredentialRecord({required String id, required String connectionId, required String tenantId, required String organizationId, required String name, required String keyPrefix, required String secretDigest, required Iterable<
AuthScimScope> scopes, required DateTime createdAt, required DateTime updatedAt, DateTime? expiresAt, DateTime? lastUsedAt, DateTime? revokedAt}) - Creates a storage record without retaining the raw bearer secret.
Properties
- connectionId → String
-
Connection that owns this credential.
final
- createdAt → DateTime
-
Creation timestamp in UTC.
final
- expiresAt → DateTime?
-
Expiry timestamp, or
nullwhen it does not expire.final - hashCode → int
-
The hash code for this object.
no setterinherited
- id → String
-
Stable credential identifier.
final
- keyPrefix → String
-
Non-secret prefix used to identify the credential to operators.
final
- lastUsedAt → DateTime?
-
Last successful-use timestamp, when known.
final
- name → String
-
Human-readable credential name.
final
- organizationId → String
-
Organization containing the credential.
final
- revokedAt → DateTime?
-
Revocation timestamp, or
nullwhile not revoked.final - runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
-
scopes
→ Set<
AuthScimScope> -
Scopes granted by this credential.
final
- secretDigest → String
-
Strong digest used for lookup. Never expose this from public projections.
final
- tenantId → String
-
Tenant containing the credential.
final
- updatedAt → DateTime
-
Last update timestamp in UTC.
final
Methods
-
copyWith(
{DateTime? updatedAt, DateTime? lastUsedAt, DateTime? revokedAt}) → AuthScimCredentialRecord - Creates a copy with lifecycle timestamps replaced.
-
isActiveAt(
DateTime now) → bool -
Whether this credential is usable at
now. -
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toPublic(
{required DateTime now}) → AuthScimCredential - Projects this storage record without its secret digest or tenancy data.
-
toStorageJson(
) → Map< String, Object?> - Storage-only serialization including the non-reversible digest.
-
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited