TokenEncryptionKeyInvalidatedException

Platform-agnostic signal thrown by a TokenEncryptionHandler.decrypt implementation when the key protecting the ciphertext has been permanently invalidated (for example, an Android Keystore key invalidated by new biometric enrollment).

RoomTokenStorage catches this in TokenStorage.getToken and rethrows it as BiometricKeyInvalidatedException with the token ID, so platform-specific invalidation exceptions never leak through the KMP TokenEncryptionHandler contract.

Parameters