@type t() :: %Lockspire.Domain.Token{
  account_id: String.t() | nil,
  audience: [String.t()],
  client_id: String.t(),
  cnf: map() | nil,
  code_challenge: String.t() | nil,
  code_challenge_method: :S256 | nil,
  consent_grant_id: integer() | nil,
  expires_at: DateTime.t(),
  family_id: String.t() | nil,
  generation: non_neg_integer(),
  id: integer() | nil,
  inserted_at: DateTime.t() | nil,
  interaction_id: String.t() | nil,
  issued_at: DateTime.t() | nil,
  jti: String.t() | nil,
  parent_token_id: integer() | nil,
  redeemed_at: DateTime.t() | nil,
  redirect_uri: String.t() | nil,
  reuse_detected_at: DateTime.t() | nil,
  revoked_at: DateTime.t() | nil,
  scopes: [String.t()],
  sid: String.t() | nil,
  token_hash: String.t(),
  token_type: token_type(),
  updated_at: DateTime.t() | nil
}

@type token_type() :: :authorization_code | :access_token | :refresh_token