oauth 0.0.2

Universal OAuth 2.0 adapter for Rust web frameworks
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

use std::time::SystemTime;

use crate::error::TokenStoreError;

mod in_memory;

pub use in_memory::InMemoryTokenStore;

/// Record persisted in a [`TokenStore`] representing an issued token.
#[derive(Debug, Clone)]
pub struct TokenRecord {
    pub(crate) access_token: String,
    pub(crate) refresh_token: Option<String>,
    pub(crate) client_id: String,
    pub(crate) scope: Option<String>,
    pub(crate) issued_at: SystemTime,
    pub(crate) expires_at: SystemTime,
}

impl TokenRecord {
    /// Construct a new record from the supplied parts.
    pub fn new(
        access_token: String,
        refresh_token: Option<String>,
        client_id: String,
        scope: Option<String>,
        expires_at: SystemTime,
    ) -> Self {
        Self {
            access_token,
            refresh_token,
            client_id,
            scope,
            issued_at: SystemTime::now(),
            expires_at,
        }
    }

    /// Access token value.
    pub fn access_token(&self) -> &str {
        &self.access_token
    }

    /// Refresh token, if any.
    pub fn refresh_token(&self) -> Option<&str> {
        self.refresh_token.as_deref()
    }

    /// Associated OAuth client identifier.
    pub fn client_id(&self) -> &str {
        &self.client_id
    }

    /// Granted scope.
    pub fn scope(&self) -> Option<&str> {
        self.scope.as_deref()
    }

    /// Expiry instant for the access token.
    pub fn expires_at(&self) -> SystemTime {
        self.expires_at
    }
}

/// Storage abstraction for access and refresh tokens.
pub trait TokenStore: Send + Sync {
    /// Persist a new token record.
    fn save(&self, record: TokenRecord) -> Result<(), TokenStoreError>;
    /// Revoke a record by its access token.
    fn revoke(&self, access_token: &str) -> Result<(), TokenStoreError>;
    /// Fetch a record by its access token.
    fn find(&self, access_token: &str) -> Result<Option<TokenRecord>, TokenStoreError>;
}