Struct Server 

pub struct Server {
    services: Arc<OnceServices>,
    db: Data,
    jwk: Value,
    key: SigningKey,
    device_locks: MutexMap<String, ()>,
    auth_request_locks: MutexMap<String, ()>,
}

Fields

services: Arc<OnceServices>

db: Data

jwk: Value

key: SigningKey

device_locks: MutexMap<String, ()>

Serializes the read-check-consume of a device grant by its device_code so concurrent polls of one approved grant cannot each mint a device.

auth_request_locks: MutexMap<String, ()>

Serializes selection, claim and completion of one authorization request by its id, holding one entry per request with a holder in flight.

Implementations

impl Server

pub fn create_auth_code( &self, auth_req: &AuthRequest, user_id: OwnedUserId, ) -> String

impl Server

pub fn store_auth_request(&self, req_id: &str, request: &AuthRequest)

impl Server

pub async fn peek_auth_request(&self, req_id: &str) -> Result<AuthRequest>

Read an authorization request without consuming it.

A flow that pauses for a user gesture reads the request to decide what to show, then takes it with take_auth_request or retires it with retire_auth_request once the gesture arrives. An unknown or expired request is a NotFound, and an expired one is evicted as it is found, so no caller ever renders against a stale request.

impl Server

pub async fn bind_auth_request_to_provider( &self, req_id: &str, provider_id: &str, ) -> Result

Bind a native authorization request to one selected upstream provider.

A different provider or a local claim is refused, so one request cannot complete through two branches. Choosing the same provider again is harmless, so a repeated click still redirects.

impl Server

pub async fn check_local_auth_request(&self, req_id: &str) -> Result

Check that a pending request may still complete through the local branch.

A request bound to an upstream provider is refused. One the local branch already claimed passes, so a resubmitted form still completes.

impl Server

pub async fn bind_auth_request_to_local(&self, req_id: &str) -> Result

Claim the local branch of a native authorization request.

A request already bound to a provider is refused. Repeating the claim is harmless, so a resubmitted form still completes, and the request stays single-use when it is taken.

impl Server

pub async fn take_auth_request( &self, req_id: &str, expected: &AuthRequest, ) -> Result<AuthRequest>

Take a pending request exactly once, removing it.

A request that changed since the caller read it is refused. The lock is the one provider selection and local claims acquire, so neither can change the request between the comparison and the removal.

impl Server

pub async fn retire_auth_request(&self, req_id: &str)

Retire a pending request under its lock without reading it.

A refusal needs nothing from the request, and holding the lock keeps a concurrent provider selection from writing it back.

impl Server

pub fn remove_auth_request(&self, req_id: &str)

Remove a pending authorization request without taking its lock.

The request is single-use, so a flow removes it before minting anything against it. Removing a key that is already gone is a no-op.

impl Server

pub async fn exchange_auth_code( &self, code: &str, client_id: &str, redirect_uri: &str, code_verifier: Option<&str>, require_pkce: bool, ) -> Result<AuthCodeSession>

impl Server

async fn update_auth_request<F>(&self, req_id: &str, update: F) -> Result

where F: FnOnce(AuthRequest) -> Result<AuthRequest> + Send,

Rewrite a pending request under its lock.

A selection decided against one read cannot then be lost to a concurrent one.

impl Server

pub async fn register_client( &self, request: DcrRequest, ) -> Result<ClientRegistration>

impl Server

pub async fn get_client(&self, client_id: &str) -> Result<ClientRegistration>

impl Server

pub fn create_device_grant(&self, client_id: &str, scope: &str) -> DeviceGrant

impl Server

async fn resolve_device_code(&self, user_code: &str) -> Result<String>

Resolve a user-entered (possibly hyphenated, lower-case) code to its stored device_code via the index.

impl Server

pub async fn verify_device_grant(&self, user_code: &str) -> Result<DeviceGrant>

Look up a pending grant for the browser consent step, counting the attempt and self-invalidating the grant past MAX_VERIFY_ATTEMPTS (RFC 8628 §5.1).

impl Server

pub async fn approve_device_grant( &self, user_code: &str, user_id: OwnedUserId, idp_id: Option<String>, ) -> Result

impl Server

pub async fn deny_device_grant(&self, user_code: &str) -> Result

impl Server

pub async fn poll_device_grant( &self, device_code: &str, client_id: &str, ) -> Result<DeviceGrantPoll>

Poll a device grant by its device_code (RFC 8628 §3.4). A terminal outcome consumes the grant; a pending grant is left in place for the next poll.

impl Server

async fn get_device_grant(&self, device_code: &str) -> Result<DeviceGrant>

impl Server

async fn set_device_grant_status( &self, user_code: &str, status: DeviceGrantStatus, ) -> Result

impl Server

fn remove_device_grant(&self, device_code: &str, user_code: &str)

impl Server

pub fn jwks(&self) -> JsonValue

impl Server

pub fn sign_id_token(&self, claims: &IdTokenClaims) -> Result<String>

impl Server

pub fn at_hash(access_token: &str) -> String

impl Server

pub(super) fn build(args: &Args<'_>) -> Result<Option<Self>>

impl Server

fn can_build(args: &Args<'_>) -> bool

impl Server

pub fn issuer_url(&self) -> Result<String>