Struct AuthorizationSession 

pub struct AuthorizationSession {
    pub tenant: TenantId,
    pub principal: PrincipalId,
    pub scope: ScopeSet,
    pub state: String,
    pub redirect_uri: Url,
    pub authorize_url: Url,
    /* private fields */
}

Authorization Code + PKCE handshake metadata returned by [Broker::start_authorization].

Fields

tenant: TenantId

Tenant identifier tied to the session.

principal: PrincipalId

Principal identifier tied to the session.

scope: ScopeSet

Requested scope set (prior to any provider overrides during exchange).

state: String

Opaque state value that must round-trip via the redirect handler.

redirect_uri: Url

Redirect URI supplied when constructing the authorize URL.

authorize_url: Url

Fully-formed HTTPS authorize URL that callers should send end-users to.

Implementations

impl AuthorizationSession

pub fn code_challenge(&self) -> &str

PKCE code challenge derived from the secret verifier.

pub fn code_challenge_method(&self) -> PkceCodeChallengeMethod

PKCE challenge method (currently always S256).

pub fn validate_state(&self, returned_state: &str) -> Result<()>

Validates the returned state parameter after the authorization redirect.

Trait Implementations

impl Clone for AuthorizationSession

fn clone(&self) -> AuthorizationSession

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthorizationSession

fn fmt(&self, f: &mut Formatter<'_>) -> FmtResult

Formats the value using the given formatter.