Skip to main content

Module sso

tuwunel_api_client::session

Module sso 

Source

Re-exports§

use std::borrow::Cow; 🔒
use std::collections::BTreeMap; 🔒
use std::net::IpAddr; 🔒
use std::time::Duration; 🔒
use axum::extract::State; 🔒
use axum::response::Html; 🔒
use axum::response::IntoResponse; 🔒
use axum::response::Response; 🔒
use axum_extra::extract::cookie::Cookie; 🔒
use axum_extra::extract::cookie::CookieJar; 🔒
use axum_extra::extract::cookie::SameSite; 🔒
use base64::Engine as _; 🔒
use base64::engine::general_purpose::URL_SAFE_NO_PAD as b64; 🔒
use const_str::format as const_format; 🔒
use futures::TryFutureExt; 🔒
use futures::future::try_join; 🔒
use reqwest::header::CACHE_CONTROL; 🔒
use reqwest::header::CONTENT_SECURITY_POLICY; 🔒
use reqwest::header::CONTENT_TYPE; 🔒
use reqwest::header::HeaderValue; 🔒
use reqwest::header::REFERRER_POLICY; 🔒
use ruma::Mxc; 🔒
use ruma::OwnedMxcUri; 🔒
use ruma::OwnedUserId; 🔒
use ruma::ServerName; 🔒
use ruma::UserId; 🔒
use ruma::api::client::session::SsoRedirectAction; 🔒
use ruma::api::client::session::sso_callback; 🔒
use ruma::api::client::session::sso_callback::unstable::Response as SsoCallbackResponse; 🔒
use ruma::api::client::session::sso_login; 🔒
use ruma::api::client::session::sso_login_with_provider; 🔒
use ruma::api::client::uiaa::AuthType; 🔒
use ruma::api::error::ErrorKind; 🔒
use serde::Deserialize; 🔒
use serde::Deserialize; 🔒
use serde::Serialize; 🔒
use serde::Serialize; 🔒
use serde_html_form::from_str as from_form_str; 🔒
use serde_html_form::to_string as to_form_string; 🔒
use serde_json::Value as JsonValue; 🔒
use tuwunel_core::Err; 🔒
use tuwunel_core::Result; 🔒
use tuwunel_core::at; 🔒
use tuwunel_core::config::IdentityProvider; 🔒
use tuwunel_core::debug::INFO_SPAN_LEVEL; 🔒
use tuwunel_core::debug_info; 🔒
use tuwunel_core::debug_warn; 🔒
use tuwunel_core::err; 🔒
use tuwunel_core::info; 🔒
use tuwunel_core::info; 🔒
use tuwunel_core::is_not_equal_to; 🔒
use tuwunel_core::itertools::Itertools; 🔒
use tuwunel_core::utils; 🔒
use tuwunel_core::utils::content_disposition::make_content_disposition; 🔒
use tuwunel_core::utils::deadline_has_passed; 🔒
use tuwunel_core::utils::deserialize_lenient_bool; 🔒
use tuwunel_core::utils::hash::sha256; 🔒
use tuwunel_core::utils::html::escape as html_escape; 🔒
use tuwunel_core::utils::result::FlatOk; 🔒
use tuwunel_core::utils::result::LogErr; 🔒
use tuwunel_core::utils::stream::ReadyExt; 🔒
use tuwunel_core::utils::string::EMPTY; 🔒
use tuwunel_core::utils::timepoint_from_now; 🔒
use tuwunel_core::utils::url::redirect_allowlisted; 🔒
use tuwunel_core::warn; 🔒
use tuwunel_service::Services; 🔒
use tuwunel_service::client::read_response_capped; 🔒
use tuwunel_service::media::MXC_LENGTH; 🔒
use tuwunel_service::oauth::CODE_VERIFIER_LENGTH; 🔒
use tuwunel_service::oauth::Provider; 🔒
use tuwunel_service::oauth::SESSION_ID_LENGTH; 🔒
use tuwunel_service::oauth::Session; 🔒
use tuwunel_service::oauth::TokenResponse; 🔒
use tuwunel_service::oauth::UserInfo; 🔒
use tuwunel_service::oauth::fallback_localpart; 🔒
use tuwunel_service::oauth::unique_id_sub; 🔒
use tuwunel_service::threepid::canonicalize_email; 🔒
use tuwunel_service::users::PASSWORD_SENTINEL; 🔒
use tuwunel_service::users::Register; 🔒
use url::Url; 🔒
pub(crate) use self::uiaa::sso_complete_js_route; 🔒
pub(crate) use self::uiaa::sso_css_route; 🔒
pub(crate) use self::uiaa::sso_fallback_route; 🔒
use super::TOKEN_LENGTH; 🔒
use crate::ClientIp; 🔒
use crate::Ruma; 🔒
use crate::RumaResponse; 🔒
use crate::router::ACCOUNT_HEAD; 🔒
use crate::utils::bind_new_account_email; 🔒

Modules§

uiaa 🔒

Structs§

GrantCookie 🔒
GrantQuery 🔒
Grant phase query string.

Statics§

CONFIRM_HTML 🔒
GRANT_SESSION_COOKIE 🔒

Functions§

append_login_token 🔒
apply_token_response 🔒
bind_email 🔒
chain_next_idp_id 🔒
confirm_login_redirect 🔒
decide_user_id 🔒
decode_apple_userinfo_from_id_token 🔒
display_login_target 🔒
finalize_login_redirect 🔒
grant_session_cookie 🔒
grant_session_cookie_path 🔒
Path attribute for the grant-session cookie. The set and removal cookies must use the same value: a cookie is only replaced (and thus removed) when its name, domain and path all match (RFC 6265 5.3), and a Set-Cookie without an explicit path defaults to the request-URI’s directory.
handle_sso_login 🔒
handle_uiaa 🔒
ldap_user_exists 🔒
parse_user_id 🔒
redirect_trusted 🔒
register_user 🔒
set_avatar 🔒
sso_callback_route 🔒
sso_login_route 🔒
GET /_matrix/client/v3/login/sso/redirect
sso_login_with_provider_route 🔒
GET /_matrix/client/v3/login/sso/redirect/{idpId}
try_user_id 🔒
validate_redirect_url 🔒
validate_session_cookie 🔒