Method Set

server/internal/auth/pat_cache.go:66–73

Set populates the cache with the given TTL. Callers MUST pass a TTL no longer than the token's remaining lifetime — otherwise an entry could outlive the PAT's expires_at and let an expired token pass auth on cache hit. Use TTLForExpiry to compute it from a token's expires_at. Errors are logged and

(ctx context.Context, hash, userID string, ttl time.Duration)

// Errors are logged and swallowed — a cache write failure is not a
// request failure.
func (c *PATCache) Set(ctx context.Context, hash, userID string, ttl time.Duration) {
	if c == nil || ttl <= 0 {
		return
	}
	if err := c.rdb.Set(ctx, patCacheKey(hash), userID, ttl).Err(); err != nil {
		slog.Warn("pat_cache: set failed", "error", err)
	}
}

// TTLForExpiry returns the cache TTL for a token given its expires_at.
//   - Zero expiresAt (token never expires) → full AuthCacheTTL.