Crate barbed 

Small building blocks for Twitch integrations.

barbed currently includes:

• OAuth authorize URL construction and signed state verification
• Helix request builders and response parsers
• EventSub WebSocket payload decoding and chat subscription helpers
• HMAC signing helpers for short-lived tokens and state payloads

The default crate stays runtime-agnostic. Enable the cloudflare-worker feature to send http::PreparedRequest values via the Cloudflare Workers Fetch API. Enable the reqwest-client and tokio-eventsub features for a native Rust runtime.

Feature Flags

• cloudflare-worker: adds transport helpers built on the Cloudflare Workers Fetch API.
• reqwest-client: adds native HTTP helpers built on reqwest.
• tokio-eventsub: adds the native EventSub websocket client/runtime.

MSRV

barbed currently targets Rust 1.85.0.

Example

use barbed::http::percent_decode;
use barbed::oauth::{OAuthStatePayload, build_authorize_url, verify_oauth_state};
use serde::{Deserialize, Serialize};

#[derive(Debug, Serialize, Deserialize, PartialEq, Eq)]
struct AuthState {
    redirect_to: String,
    expires_at_ms: i64,
}

impl OAuthStatePayload for AuthState {
    fn expires_at_ms(&self) -> i64 {
        self.expires_at_ms
    }
}

let state = AuthState {
    redirect_to: "/dashboard".to_string(),
    expires_at_ms: 1_700_000_060_000,
};

let authorize_url = build_authorize_url(
    "client-id",
    "https://example.com/twitch/callback",
    &["user:read:chat"],
    &state,
    "super-secret",
)?;

let encoded_state = authorize_url
    .split("&state=")
    .nth(1)
    .expect("missing state parameter");
let signed_state = percent_decode(encoded_state)?;
let verified: AuthState =
    verify_oauth_state("super-secret", &signed_state, 1_700_000_000_000)?;

assert_eq!(verified, state);

This crate is intentionally small and still settling; expect API breakage across 0.0.x releases.

Re-exports

pub use identity::TwitchIdentity;

Modules

cloudflare_worker

Cloudflare Workers transport helpers for prepared Twitch API requests.

eventsub

EventSub payload types and websocket subscription helpers.

helix

Helix request builders and response parsers.

http

Percent-encoding and form-body helpers used by the request builders.

identity

Identity types for authenticated Twitch users.

native

Native async helpers for OAuth, Helix, and EventSub interactions.

oauth

OAuth URL construction, token lifecycle helpers, and signed state handling.

signing

Shared HMAC signing helpers for short-lived payloads.