Struct GitHubOAuth 

pub struct GitHubOAuth { /* private fields */ }

GitHub OAuth provider wrapper

Handles GitHub-specific OAuth flows and team mapping to FraiseQL roles.

Implementations

impl GitHubOAuth

pub async fn new( client_id: String, client_secret: String, redirect_uri: String, ) -> Result<Self>

Create a new GitHub OAuth provider

Arguments

• client_id - GitHub OAuth app client ID
• client_secret - GitHub OAuth app client secret
• redirect_uri - Redirect URI after authentication (e.g., “http://localhost:8000/auth/callback”)

Errors

Returns AuthError if OIDC discovery against GitHub fails.

pub fn map_teams_to_roles(teams: Vec<String>) -> Vec<String>

Map GitHub teams to FraiseQL roles

Maps organization:team slugs to role names. Example: “my-org:admin-team” -> “admin”

Arguments

• teams - List of “org:team” strings from GitHub

pub async fn get_user_with_teams( &self, access_token: &str, ) -> Result<(GitHubUser, Vec<String>)>

Get user info including teams from GitHub API

Arguments

• access_token - GitHub access token

Errors

Returns AuthError::OAuthError if the GitHub API request fails or returns a non-success status code.

pub fn extract_org_id_from_teams( teams: &[(GitHubUser, Vec<String>)], ) -> Option<String>

Extract organization ID from GitHub teams (primary org)

Returns the first organization the user belongs to as the org_id. In multi-org scenarios, this should be overridden with explicit org selection.

Trait Implementations

impl Debug for GitHubOAuth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl OAuthProvider for GitHubOAuth

fn name(&self) -> &'static str

Provider name for logging/debugging

fn authorization_url(&self, state: &str) -> String

Generate authorization URL for user to visit

fn exchange_code<'life0, 'life1, 'async_trait>( &'life0 self, code: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<TokenResponse>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Exchange authorization code for tokens

fn user_info<'life0, 'life1, 'async_trait>( &'life0 self, access_token: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<UserInfo>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Get user information using access token

fn refresh_token<'life0, 'life1, 'async_trait>( &'life0 self, refresh_token: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<TokenResponse>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Refresh the access token (optional, default returns error)

fn revoke_token<'life0, 'life1, 'async_trait>( &'life0 self, token: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Revoke a token (optional, default is no-op)