Struct Pkce 

pub struct Pkce { /* private fields */ }

A PKCE secret pair, as described by RFC 7636.

The verifier is kept private until the token exchange; the challenge is what gets sent in the authorization request. Only the challenge travels over the initial redirect, so an eavesdropper who intercepts the authorization code cannot exchange it without the verifier.

Keep the verifier out of URLs and off insecure connections. For fully client-side apps the user themselves can always extract it, which is fine.

Implementations

impl Pkce

pub fn generate() -> Self

Generate a new random verifier and its derived challenge.

pub fn derive_challenge(verifier: &str) -> String

BASE64URL(SHA256(code_verifier)), the S256 challenge method.

pub fn verifier(&self) -> &str

The secret sent only in the token exchange.

pub fn challenge(&self) -> &str

The derived value sent in the authorization request.

Trait Implementations

impl Clone for Pkce

fn clone(&self) -> Pkce

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Pkce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.