FileChallengeStore

A challenge ledger on disk: each issued challenge kept until it is consumed once or expires. The shape mirrors the framework's other file stores — an exclusive lock around every mutation, JSON on disk. Consuming a challenge DELETES it, so a second attempt with the same one finds nothing: single-use is enforced by removal, not by a flag someone could forget to check.

public function __construct(string $path, int $ttlSeconds = 300, ?callable $clock = null):

Parameters

public function issue(): string

Mint a fresh random challenge, keep it until it expires, and return its raw bytes.

public function consume(string $challenge): bool

Accept a challenge once — true if issued and unexpired, then deleted so it can never be true again.

Parameters