Skip to content

Redis Token Revocation Store#1

Open
Hockenba wants to merge 3 commits into
masterfrom
feat/stateless-session-revocation
Open

Redis Token Revocation Store#1
Hockenba wants to merge 3 commits into
masterfrom
feat/stateless-session-revocation

Conversation

@Hockenba

@Hockenba Hockenba commented Jun 29, 2026

Copy link
Copy Markdown
Collaborator

Adds a token revocation store for stateless sessions. The ADR explaining the functionality can be found here: https://geico.atlassian.net/wiki/spaces/PLAID/pages/1078296854/APISIX+Stateless+Token+Revocation.

@Hockenba Hockenba requested a review from acolomba June 29, 2026 19:46
@Hockenba Hockenba changed the title Redis Token Révocation Store Redis Token Revocation Store Jun 29, 2026

@acolomba acolomba left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just some minor comments. spent 30 mins on this and lgtm

Comment thread lib/resty/session.lua Outdated
return nil
end

local redis_cfg = configuration.redis or configuration

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i'm not sure why we're doing configuration.redis or configuration

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Addressed.

Comment thread lib/resty/session.lua Outdated
local REDIS

load_revocation = function(configuration)
if not configuration then

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if not configuration or configuration.storage also works

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Addressed.

Comment thread lib/resty/session.lua Outdated
end


local load_revocation do

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just load_redis i think, since this code doesn't know about how redis is used?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It actually does know how redis is used, so we can keep this.

Comment thread lib/resty/session.lua Outdated


local load_revocation do
local REDIS

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is uppercase a convention in this library for static local singletons?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is. There are some examples in load_storage.

@Hockenba Hockenba requested a review from acolomba June 30, 2026 18:24
@Hockenba Hockenba marked this pull request as ready for review June 30, 2026 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants