twitch_oauth_token 4.4.0

Type-safe Twitch OAuth 2.0 authentication library with CSRF protection and full scope support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use std::str::FromStr;

use twitch_oauth_token::{AuthorizationCode, RedirectUrl, TwitchOauth};

#[tokio::test]
async fn csrf_validation_failure() {
    let oauth = TwitchOauth::new("client_id", "client_secret")
        .with_redirect_uri(RedirectUrl::from_str("http://localhost:3000").unwrap());

    let result = oauth
        .exchange_code(AuthorizationCode::from("code"), "state".to_string())
        .await;

    assert!(result.is_err());
    let error = result.unwrap_err();
    assert!(error.is_oauth_error());
    assert_eq!(
        error.message(),
        Some("CSRF token validation failed - possible security issue")
    );
}