Struct ExternalAuthClient 

pub struct ExternalAuthClient { /* private fields */ }

External-mode AuthClient that validates RS256 JWTs locally and talks to the allowthem server for code exchange.

Cheap to clone (Arc internals).

Implementations

impl ExternalAuthClient

pub fn builder( base_url: impl Into<String>, client_id: impl Into<String>, client_secret: impl Into<String>, redirect_uri: impl Into<String>, login_url: impl Into<String>, ) -> ExternalAuthClientBuilder

Shorthand for ExternalAuthClientBuilder::new(...).

pub fn authorize_url(&self) -> (String, AuthorizeRequest)

Generate PKCE challenge and state for an authorization request.

Returns the full authorize URL and the AuthorizeRequest containing the code_verifier and state for later verification.

pub async fn exchange_code( &self, code: &str, code_verifier: &str, redirect_uri: &str, ) -> Result<TokenExchangeResponse, AuthError>

Exchange an authorization code for tokens.

Trait Implementations

impl AuthClient for ExternalAuthClient

fn validate_session<'a>( &'a self, token: &'a SessionToken, ) -> AuthFuture<'a, Option<User>>

Validate a session token and return the active user.

fn check_role<'a>( &'a self, user_id: &'a UserId, role: &'a RoleName, ) -> AuthFuture<'a, bool>

Check whether a user has the given role.

fn check_permission<'a>( &'a self, user_id: &'a UserId, permission: &'a PermissionName, ) -> AuthFuture<'a, bool>

Check whether a user has the given permission (direct or via role).

fn resolve_highest_role<'a>( &'a self, user_id: &'a UserId, hierarchy: &'a [&str], ) -> AuthFuture<'a, Option<String>>

Return the name of the first role in hierarchy that the user holds.

fn logout<'a>(&'a self, token: &'a SessionToken) -> AuthFuture<'a, ()>

Invalidate a session. Fire-and-forget — non-existent sessions are not errors.

fn login_url(&self) -> &str

The URL/path where users should be directed to log in.

fn session_cookie_name(&self) -> &str

The cookie name used for session tokens.

impl Clone for ExternalAuthClient

fn clone(&self) -> ExternalAuthClient

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.