Module oauth 

Re-exports

pub use self::providers::ProviderId;

pub use self::server::Server;

pub use self::sessions::CODE_VERIFIER_LENGTH;

pub use self::sessions::SESSION_ID_LENGTH;

pub use self::sessions::Session;

pub use self::sessions::SessionId;

pub use self::token_response::TokenResponse;

pub use self::user_info::UserInfo;

Modules

providers

server

sessions

token_response

user_info

Structs

Provider

Service

Constants

DEVICE_RC_BURST 🔒

DEVICE_RC_PER_SECOND 🔒

Always-on throttle for the RFC 8628 device user-code endpoints. The user_code is low-entropy by design (§6.1), so §5.1 requires bounding guesses regardless of the optional oidc_rc_* knobs; the burst stays generous for the one code a real user enters.

RATELIMIT_MAP_CAP 🔒

Cap on the rate-limit table; fully refilled buckets are pruned past it.

Functions

check_bucket 🔒

identity_issuer 🔒

Issuer string used as input to the identity hash. Pinned per-brand for providers whose published issuer has changed under us, so existing account associations survive the change.

unique_id

Generate a unique-id string determined by the combination of Provider and Session instances.

unique_id_iss

Generate a unique-id string determined by the combination of issuer_url and Session instance.

unique_id_iss_parts 🔒

unique_id_iss_sub

Generate a unique-id string determined by the issuer_url and the sub strings directly.

unique_id_parts 🔒

unique_id_sub

Generate a unique-id string determined by the combination of Provider instance and sub string.

unique_id_sub_parts 🔒

Type Aliases

Ratelimiter 🔒

Per-client-IP token-bucket table: last-refill instant and remaining tokens.