Struct AuthorizationResponse 

pub struct AuthorizationResponse {
    pub code: String,
    pub state: Option<String>,
    pub iss: String,
}

The success redirect parameters (RFC 6749 section 4.1.2).

Debug is HAND-WRITTEN (above) and does not print the code. The RECORD form of the same value, AuthorizationCodeRecord, has been hand-redacted since it was written, for the reason stated there – RFC 6749 section 4.1.2 makes a code a credential in its own right – and this type, which carries the same string to the client, was left deriving until 0.9.2. A host that logs the response it is about to redirect with would have written a live, unredeemed code into its logs; PKCE binds the code to a DIFFERENT client, not to a reader who has the log and the verifier, and for a confidential client it does not bind at all.

Fields

code: String

The single-use authorization code.

state: Option<String>

The request’s state, echoed verbatim; REQUIRED iff the request carried one.

iss: String

RFC 9207 section 2: this server’s issuer identifier, so a client talking to several authorization servers can tell WHICH one answered.

Not an Option: this server always supports RFC 9207 and its metadata says so (authorization_response_iss_parameter_supported), and section 2 makes the parameter mandatory for a server that does. A response that could omit it would be a response a client cannot rely on, which defeats the mix-up countermeasure RFC 9700 section 4.4 is asking for.

Implementations

impl AuthorizationResponse

pub fn location(&self, redirect_uri: &str) -> String

The Location header value for the success redirect.

Parameter ORDER is not constrained by any RFC (RFC 6749 section 4.1.2 and RFC 9207 section 2 both describe an unordered set of query parameters), so iss is appended last purely to keep the existing prefix of the URL unchanged.

Trait Implementations

impl Clone for AuthorizationResponse

fn clone(&self) -> AuthorizationResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthorizationResponse

Hand-written so the one-time code never prints. state and iss print in full: state is the client’s own opaque value echoed back and iss is this server’s public identifier.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthorizationResponse

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthorizationResponse

impl PartialEq for AuthorizationResponse

fn eq(&self, other: &AuthorizationResponse) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthorizationResponse

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthorizationResponse