schema.cql

CREATE SCHEMA revocation
    WITH replication = {'class': 'SimpleStrategy', 'replication_factor' : 1};

CREATE TABLE revocation.revocation (
    bucket_date TEXT,
    bucket_interval INT,    -- 0: 0-8 1: 8-16 2:16-24
    bucket_uuid TIMEUUID,
    revocation_type TEXT,
    revocation_data TEXT,
    revoked_at INT,
    revoked_by TEXT,
    PRIMARY KEY ((bucket_date, bucket_interval), revoked_at, bucket_uuid)
)
WITH CLUSTERING ORDER BY (revoked_at DESC);

CREATE TABLE revocation.refresh (
    refresh_year INT,    -- only bucket we need
    refresh_ts INT,      -- seconds since epoch
    refresh_from INT,    -- from when to refresh revocations. Seconds since epoch
    created_by TEXT,     -- name of the user who created this entry
    PRIMARY KEY(refresh_year, refresh_ts)
)
WITH CLUSTERING ORDER BY (refresh_ts DESC);


CREATE TABLE revocation.authorization_rule (
    uuid TIMEUUID,
    required_user_claims Map<TEXT, TEXT>,
    allowed_revocation_claims Map<TEXT, TEXT>,
    created_by TEXT,
    last_modified_by TEXT,
    PRIMARY KEY(uuid)
);

ALTER TABLE revocation.revocation
WITH default_time_to_live = 7200;