droid-mcp-core/io.droidmcp.core.transport/TokenStore

TokenStore

class TokenStore(seedPrimary: String? = null)

Bearer-token authority for HttpTransport.

Holds one primary token (the value surfaced as DroidMcp.serverToken and embedded in the pairing QR) plus any number of paired-client tokens, each tied to an opaque host-supplied label so it can be revoked individually.

verify returns the label that owns a presented token, or null if none matches — callers use the label for audit attribution.
rotatePrimary mints a fresh primary, invalidating the old one. Paired clients are unaffected.
pair mints a new per-client token; revoke drops it.

All comparisons are constant-time over each candidate token so a presented value can't be recovered byte-by-byte via timing. The number of paired clients is small and host-controlled, so iterating them is not a concern.

Thread-safe: the primary is @Volatile, clients live in a ConcurrentHashMap.

Constructors

TokenStore

constructor(seedPrimary: String? = null)

Types

Companion

object Companion

PairedClient

data class PairedClient(val label: String, val token: String, val createdAt: Long)

A minted per-client credential.

Properties

primaryToken

val primaryToken: String

The current primary token.

Functions

pair

fun pair(label: String): String

Mint a token for a named client. Re-pairing an existing label replaces its token (and invalidates the previous one). Returns the new token.

pairedClients

fun pairedClients(): List<TokenStore.PairedClient>

Snapshot of paired clients (does not include the primary), oldest first. Ties on PairedClient.createdAt (two pairings within the same millisecond) break deterministically on the unique label, so the order is stable rather than dependent on map iteration order.

revoke

fun revoke(label: String): Boolean

Revoke a client's token. @return true if a client with that label existed.

rotatePrimary

fun rotatePrimary(): String

Replace the primary token with a fresh value and return it.

verify

fun verify(provided: String?): String?

Resolve a presented token to the label that owns it.