Struct DbOtpStore 

pub struct DbOtpStore { /* private fields */ }

Database-backed OTP store for production use.

Stores OTP records in kipuka’s configured database (SQLite, PostgreSQL, or MariaDB via sqlx). Hash-indexed for O(1) lookup during validation.

Token hashes are stored as hex-encoded strings in the token_hash TEXT column. The id column is a database auto-increment integer; the OtpRecord.id UUID is mapped bijectively via Uuid::from_u128.

Implementations

impl DbOtpStore

pub fn new(pool: AnyPool, is_postgres: bool) -> Self

Create a database-backed store.

The is_postgres flag controls parameter placeholder style: PostgreSQL requires $1, $2, … while SQLite and MariaDB use ?.

Trait Implementations

impl OtpStore for DbOtpStore

Available on crate feature db only.

async fn insert(&self, record: OtpRecord) -> OtpResult<()>

Insert a new OTP record.

async fn find_by_hash(&self, hash: &[u8]) -> OtpResult<Option<OtpRecord>>

Find a record by its token hash.

async fn increment_uses(&self, id: &Uuid, max_uses: u32) -> OtpResult<()>

Atomically increment the usage counter for a record.

async fn revoke(&self, id: &Uuid) -> OtpResult<()>

Mark a record as revoked.

async fn cleanup_expired(&self) -> OtpResult<u64>

Remove all expired records (RHELBU-3536 R12).