Enum PkceError 

#[non_exhaustive]
pub enum PkceError {
    StateNotFound,
    StateExpired,
    StoreFull,
}

Errors returned by PkceStateStore::consume_state and PkceStateStore::create_state.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

StateNotFound

The state token was not found — either never issued, already consumed, or (when encryption is on) tampered/decryption failed.

Clients receive the same message for unknown and tampered tokens to avoid leaking information about the store.

StateExpired

The state token was found but its TTL has elapsed.

Distinct from PkceError::StateNotFound so that clients can show a useful “please restart the authorization flow” message rather than a generic invalid-state error.

StoreFull

The in-memory store has reached MAX_PKCE_ENTRIES entries.

This prevents unbounded memory growth under load or during a DoS attack. Callers should return HTTP 429 to the client and invite them to retry after a short delay.

Trait Implementations

impl Debug for PkceError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for PkceError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for PkceError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.