Module server 

Modules

auth 🔒

client 🔒

device 🔒

jwk 🔒

signing_key 🔒

token 🔒

Structs

ApprovedDeviceGrant

The approved grant data the token endpoint consumes to issue tokens.

AuthCodeSession

AuthRequest

ClientRegistration

Data 🔒

DcrRequest

DeviceGrant

A pending RFC 8628 device authorization grant, keyed in the store by its device_code and reachable for the browser approval step through a separate user_code index.

IdTokenClaims

Server

Enums

DeviceGrantPoll

The outcome of a token-endpoint poll, mapped to the RFC 8628 §3.5 error codes by the caller.

DeviceGrantStatus

Constants

API_SCOPE_PREFIXES 🔒

MSC2967 API-scope prefixes, stable spelling first.

AUTH_REQUEST_LIFETIME

DEVICE_GRANT_INTERVAL_SECS

DEVICE_GRANT_LIFETIME

DEVICE_SCOPE_PREFIXES 🔒

MSC2967 device-scope prefixes, stable spelling first.

Functions

format_user_code

Render a stored user code for display, grouped with a single hyphen.

is_scope_char 🔒

RFC 6749 appendix A NQCHAR: printable ASCII except space, double quote and backslash. MSC4108 clients use unpadded base64 device ids.

narrow_scope

Restricts a requested OAuth scope to supported tokens per RFC 6749 §3.3.