Struct PkceCodePair 

pub struct PkceCodePair {
    pub verifier: String,
    pub challenge: String,
    pub method: CodeChallengeMethod,
}

PKCE code pair for secure OAuth flows

Proof Key for Code Exchange (PKCE) prevents authorization code interception attacks. Always use S256 method for production applications.

Example

// Generate a new PKCE code pair
let pkce = PkceCodePair::generate()?;

// Use the challenge in the authorization URL
println!("Challenge: {}", pkce.challenge);

// Store the verifier securely for token exchange
println!("Verifier: {}", pkce.verifier);

Fields

verifier: String

Code verifier (random string, 43-128 characters)

challenge: String

Code challenge (hash of verifier)

method: CodeChallengeMethod

Challenge method used

Implementations

impl PkceCodePair

pub fn generate() -> Result<Self, PkceError>

Generate a new PKCE code pair using S256 method

Creates a cryptographically secure random verifier and computes the SHA-256 challenge.

Errors

Returns an error if random number generation fails.

Example

let pkce = PkceCodePair::generate()?;
assert!(!pkce.verifier.is_empty());
assert!(!pkce.challenge.is_empty());

Trait Implementations

impl Clone for PkceCodePair

fn clone(&self) -> PkceCodePair

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PkceCodePair

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.