Module native 

Re-exports

use std::fmt::Write; 🔒

use std::net::IpAddr; 🔒

use axum::extract::Form; 🔒

use axum::extract::Request; 🔒

use axum::extract::State; 🔒

use axum::response::Redirect; 🔒

use axum::response::Response; 🔒

use const_str::format as const_format; 🔒

use http::StatusCode; 🔒

use itertools::Either::Left; 🔒

use itertools::Either::Right; 🔒

use ruma::OwnedUserId; 🔒

use ruma::UserId; 🔒

use serde::Deserialize; 🔒

use serde::Deserialize; 🔒

use serde_json::json; 🔒

use tuwunel_api::router::ACCOUNT_HEAD; 🔒

use tuwunel_core::Err; 🔒

use tuwunel_core::Error; 🔒

use tuwunel_core::Result; 🔒

use tuwunel_core::config::IdentityProvider; 🔒

use tuwunel_core::err; 🔒

use tuwunel_core::smallstr::SmallString; 🔒

use tuwunel_core::utils; 🔒

use tuwunel_core::utils::BoolExt; 🔒

use tuwunel_core::utils::hash::verify_password; 🔒

use tuwunel_core::utils::html::escape as html_escape; 🔒

use tuwunel_service::Services; 🔒

use tuwunel_service::users::Register; 🔒

use url::Url; 🔒

use super::account::account_error_response; 🔒

use super::account::account_html_response; 🔒

use super::account::account_redirect_response; 🔒

use super::account::account_sso_redirect; 🔒

use super::account::validate_account_action; 🔒

use super::authorization_sso_url; 🔒

use super::device::device_sso_redirect; 🔒

use super::require_account_usable; 🔒

use super::url_encode; 🔒

use crate::ClientIp; 🔒

use crate::RateLimitIp; 🔒

Structs

NativeQuery 🔒

NativeSubmit 🔒

Enums

Flow 🔒

PasswordAuth 🔒

Password authentication the login page offers beside the providers.

Constants

LOGIN_TOKEN_LENGTH 🔒

Statics

BOUND_HTML 🔒

LOGIN_HTML 🔒

PASSWORD_FORM 🔒

REGISTER_HTML 🔒

TOKEN_FIELD 🔒

Functions

authenticate_local 🔒

Authenticate through the local branch of an authorization request.

complete_redirect 🔒

Redirects with 303 so the browser cannot replay the password form into the completion or callback route.

configured_password_auth 🔒

do_register 🔒

error_block 🔒

native_get_route 🔒

Renders the native login or registration page for a pending authorization, device, or account flow.

native_submit 🔒

native_submit_route 🔒

Authenticates submitted credentials and sends the login token to the authorization completion, device-consent, or account-management callback.

parse_flow 🔒

provider_choice 🔒

provider_redirect 🔒

Send the browser to the provider chosen on the login page.

record_accepted_terms 🔒

render_bound 🔒

Offer only the provider a pending request is bound to.

render_login 🔒

render_page 🔒

Render the page for a flow, reading an authorization request’s binding.

render_register 🔒

render_sso_options 🔒

List each provider as a link that preserves the authentication flow.

render_submit_error 🔒

Re-render the page a failed submission came from, carrying its error.

require_native 🔒

sso_choices 🔒

Providers the login page offers, as the client login flows list them.

terms_block 🔒

verify_credentials 🔒

Authenticate a local account by password, mirroring the /login password flow (password_login).

Type Aliases

AccountAction 🔒

DeviceId 🔒

IdpId 🔒

LoginAddress 🔒

ProviderChoice 🔒