Struct OAuthServerConfig 

pub struct OAuthServerConfig {

    pub issuer: String,
    pub access_token_lifetime: Duration,
    pub refresh_token_lifetime: Duration,
    pub authorization_code_lifetime: Duration,
    pub allow_public_clients: bool,
    pub min_code_verifier_length: usize,
    pub max_code_verifier_length: usize,
    pub max_clients: usize,
    pub max_authorization_codes: usize,
    pub max_authorization_codes_per_client: usize,
    pub max_access_tokens: usize,
    pub max_access_tokens_per_client: usize,
    pub max_refresh_tokens: usize,
    pub max_refresh_tokens_per_client: usize,
    pub max_revocation_tombstones: usize,
    pub max_revocation_tombstones_per_client: usize,
}

Configuration for the OAuth authorization server.

Fields

issuer: String

Issuer identifier (URL) for this authorization server.

access_token_lifetime: Duration

Access token lifetime.

refresh_token_lifetime: Duration

Refresh token lifetime.

authorization_code_lifetime: Duration

Authorization code lifetime (should be short; the default is 5 minutes).

allow_public_clients: bool

Whether to allow public clients (clients without a secret).

min_code_verifier_length: usize

Minimum PKCE code verifier length (default: 43, min: 43, max: 128).

max_code_verifier_length: usize

Maximum PKCE code verifier length.

max_clients: usize

Maximum number of registered clients (hard-capped by HARD_MAX_OAUTH_CLIENTS).

max_authorization_codes: usize

Maximum number of pending authorization codes globally (hard-capped by HARD_MAX_AUTHORIZATION_CODES).

max_authorization_codes_per_client: usize

Maximum number of pending authorization codes for one client (hard-capped by HARD_MAX_AUTHORIZATION_CODES_PER_CLIENT).

max_access_tokens: usize

Maximum number of active access tokens globally (hard-capped by HARD_MAX_ACCESS_TOKENS).

max_access_tokens_per_client: usize

Maximum number of active access tokens for one client (hard-capped by HARD_MAX_ACCESS_TOKENS_PER_CLIENT).

max_refresh_tokens: usize

Maximum number of active refresh tokens globally (hard-capped by HARD_MAX_REFRESH_TOKENS).

max_refresh_tokens_per_client: usize

Maximum number of active refresh tokens for one client (hard-capped by HARD_MAX_REFRESH_TOKENS_PER_CLIENT).

max_revocation_tombstones: usize

Maximum number of revocation tombstones globally (hard-capped by HARD_MAX_REVOCATION_TOMBSTONES).

max_revocation_tombstones_per_client: usize

Maximum number of revocation tombstones for one client (hard-capped by HARD_MAX_REVOCATION_TOMBSTONES_PER_CLIENT).

Implementations

impl OAuthServerConfig

pub fn validate(&self) -> Result<(), OAuthError>

Validates PKCE policy, state-retention limits, and token lifetimes.

Errors

Returns an error when PKCE bounds are outside RFC 7636, a state cap is zero, above its hard ceiling, incoherent, or over the checked aggregate retention ceiling, or a configured lifetime is zero or excessive.

Trait Implementations

impl Clone for OAuthServerConfig

fn clone(&self) -> OAuthServerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OAuthServerConfig

fn default() -> Self

Returns the “default value” for a type.