oauth-as 0.9.2

An embeddable OAuth 2.1 Authorization Server library: spec-mirroring types (RFC 6749, RFC 8628, RFC 7636), a full device-authorization-grant state machine, and a storage trait the host implements. Deliberately host-agnostic with a tiny dependency set; nothing is allocated until the host constructs an AuthorizationServer, so an embedding host pays zero memory until its config enables the feature.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

// SPDX-License-Identifier: MIT OR Apache-2.0
// Copyright (C) 2026 Matthew Jackson

//! Unit tests for [`crate::grant`], kept out of the implementation file. These reach
//! private items, so they live in the crate rather than in `tests/`.

use super::*;

#[test]
fn device_grant_wire_spelling_is_the_full_urn() {
    assert_eq!(
        serde_json::to_value(GrantType::DeviceCode).unwrap(),
        serde_json::json!("urn:ietf:params:oauth:grant-type:device_code")
    );
    assert_eq!(
        "urn:ietf:params:oauth:grant-type:device_code"
            .parse::<GrantType>()
            .unwrap(),
        GrantType::DeviceCode
    );
}

#[test]
fn unknown_grant_type_is_rejected() {
    assert!(
        "password".parse::<GrantType>().is_err(),
        "the ROPC grant is removed in OAuth 2.1"
    );
    assert!(
        "implicit".parse::<GrantType>().is_err(),
        "the implicit grant is removed in OAuth 2.1"
    );
}