AuthScimCredentialRecord class final

Persisted credential record. The raw bearer secret is never represented.

Constructors

AuthScimCredentialRecord({required String id, required String connectionId, required String tenantId, required String organizationId, required String name, required String keyPrefix, required String secretDigest, required Iterable<AuthScimScope> scopes, required DateTime createdAt, required DateTime updatedAt, DateTime? expiresAt, DateTime? lastUsedAt, DateTime? revokedAt})
Creates a storage record without retaining the raw bearer secret.

Properties

connectionId → String
Connection that owns this credential.
final
createdAt → DateTime
Creation timestamp in UTC.
final
expiresAt → DateTime?
Expiry timestamp, or null when it does not expire.
final
hashCode → int
The hash code for this object.
no setterinherited
id → String
Stable credential identifier.
final
keyPrefix → String
Non-secret prefix used to identify the credential to operators.
final
lastUsedAt → DateTime?
Last successful-use timestamp, when known.
final
name → String
Human-readable credential name.
final
organizationId → String
Organization containing the credential.
final
revokedAt → DateTime?
Revocation timestamp, or null while not revoked.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
scopes → Set<AuthScimScope>
Scopes granted by this credential.
final
secretDigest → String
Strong digest used for lookup. Never expose this from public projections.
final
tenantId → String
Tenant containing the credential.
final
updatedAt → DateTime
Last update timestamp in UTC.
final

Methods

copyWith({DateTime? updatedAt, DateTime? lastUsedAt, DateTime? revokedAt}) → AuthScimCredentialRecord
Creates a copy with lifecycle timestamps replaced.
isActiveAt(DateTime now) → bool
Whether this credential is usable at now.
noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toPublic({required DateTime now}) → AuthScimCredential
Projects this storage record without its secret digest or tenancy data.
toStorageJson() → Map<String, Object?>
Storage-only serialization including the non-reversible digest.
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited