Struct OAuthService 

pub struct OAuthService<S> { /* private fields */ }

OAuth authentication service supporting multiple providers.

Providers are registered by name via OAuthService::register.

Implementations

impl<S> OAuthService<S>

where S: UserRepository + SessionRepository + OAuthAccountRepository + Clone + Send + Sync + 'static,

pub fn new( storage: S, events: EventBus, session_ttl_secs: i64, encryption_key: [u8; 32], ) -> Self

pub fn register(self, provider: impl OAuthProvider + 'static) -> Self

Register an OAuth provider.

pub fn begin( &self, provider_name: &str, _redirect_uri: &str, ) -> Result<OAuthBeginResponse>

Begin an OAuth flow. Generate PKCE verifier+challenge and a random state.

pub async fn callback( &self, req: OAuthCallbackRequest<'_>, ) -> Result<(User, Session, String)>

Handle the OAuth callback. Exchange the code, fetch user info, upsert the OAuth account, find-or-create the user by email, and create a session.

req.expected_state must be the value returned by begin() (stored server-side). req.received_state comes from the OAuth redirect query param. A mismatch is treated as a CSRF attempt and rejected immediately.