Struct LinkOAuthIdentityRequest 

pub struct LinkOAuthIdentityRequest {
    pub provider: String,
    pub webauthn_assertion: Option<Vec<u8>>,
    pub client_operation_id: String,
    pub oauth_proof: Option<OauthProof>,
}

Fields

provider: String

Which OAuth provider this proof is from. Used by the server to pick the correct ID-token verifier (JWKS for Google/Apple, /user + /user/emails API path for GitHub).

“google” | “apple” | “github”

webauthn_assertion: Option<Vec<u8>>

OPTIONAL: a fresh WebAuthn assertion proving ownership of the existing user account that this OAuth identity is being attached to. Required only when the OAuth-validated email collides with an existing user (per the email-collision passkey gate, weft spike §4.6); otherwise empty.

client_operation_id: String

oauth_proof: Option<OauthProof>

The provider’s cryptographic proof of identity.

• Google / Apple: OIDC id_token (provider-signed JWT).
• GitHub: OAuth2 access token (server validates via /user + /user/emails).

Server validates this proof and extracts (sub, email, email_verified) from the verified result; the request itself carries NO user-identity claims the caller can forge. Closes the OAuth-link forge bypass surfaced on HeddleCo/weft#193 r2 (Codex cid 3294026240); design rationale in the HeddleCo/weft#195 spike amendment.

Implementations

impl LinkOAuthIdentityRequest

pub fn webauthn_assertion(&self) -> &[u8]

Returns the value of webauthn_assertion, or the default value if webauthn_assertion is unset.

Trait Implementations

impl Clone for LinkOAuthIdentityRequest

fn clone(&self) -> LinkOAuthIdentityRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LinkOAuthIdentityRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LinkOAuthIdentityRequest

fn default() -> Self

Returns the “default value” for a type.

impl Eq for LinkOAuthIdentityRequest

impl Hash for LinkOAuthIdentityRequest

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for LinkOAuthIdentityRequest

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for LinkOAuthIdentityRequest

fn eq(&self, other: &LinkOAuthIdentityRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for LinkOAuthIdentityRequest