pub struct DynamicRegistration {
pub registration_access_token_hash: SecretHash,
pub client_id_issued_at: Option<u64>,
pub client_secret_expires_at: Option<u64>,
pub token_endpoint_auth_method: String,
}Expand description
What a dynamically registered client carries beyond an ordinary registration: the RFC 7592
section 2 management credential, and the RFC 7591 section 3.2.1 members that are not
recoverable from the rest of the Client.
The registration access token is held as a one-way SecretHash, never as itself. It is a
bearer credential that reads, rewrites and DELETES a registration, so it is at least as
sensitive as the client secret next to it, and it is stored the same way for the same reason:
a dump of the client table must not be a set of working credentials.
Fields§
§registration_access_token_hash: SecretHashThe stored verifier for the RFC 7592 section 2 registration access token.
client_id_issued_at: Option<u64>RFC 7591 section 3.2.1 client_id_issued_at: seconds since the Unix epoch.
client_secret_expires_at: Option<u64>RFC 7591 section 3.2.1 client_secret_expires_at: seconds since the Unix epoch, or 0
for a secret that never expires. None when no secret was issued.
token_endpoint_auth_method: StringRFC 7591 section 2 token_endpoint_auth_method, as registered. Kept verbatim because
ClientAuth deliberately does not distinguish client_secret_basic from
client_secret_post (RFC 6749 section 2.3.1 lets a confidential client use either), so the
value the client registered cannot be recovered from it.
Trait Implementations§
Source§impl Clone for DynamicRegistration
impl Clone for DynamicRegistration
Source§fn clone(&self) -> DynamicRegistration
fn clone(&self) -> DynamicRegistration
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more