Behaviour for pluggable token storage backends.

A backend persists opaque, already-encrypted blobs keyed by an account identifier (typically the account DID). Backends never see plaintext tokens: encryption and decryption happen in ProtoRune.Security before the blob reaches the store.

ProtoRune.Security.TokenStore.Dets is the default implementation. Implement this behaviour to store tokens elsewhere (a database, a system keyring, Redis, etc):

defmodule MyApp.DBTokenStore do
  @behaviour ProtoRune.Security.TokenStore

  @impl true
  def put(id, blob, _opts), do: MyApp.Repo.upsert_token(id, blob)

  @impl true
  def fetch(id, _opts), do: MyApp.Repo.get_token(id)

  @impl true
  def delete(id, _opts), do: MyApp.Repo.delete_token(id)
end

Then pass {MyApp.DBTokenStore, []} as the store argument to the ProtoRune.Security functions.