Crate pas_external 

pas-external

Ppoppo Accounts System (PAS) client for Rust.

• OAuth2 PKCE authentication flow
• PASETO v4.public token verification
• Axum middleware for plug-and-play auth routes

Usage

[dependencies]
pas-external = { version = "0.1", features = ["axum"] }

For downstream consumer integration tests, enable test-support to access MemoryPasAuth (deterministic in-memory PAS substitute, FIFO-scripted):

[dev-dependencies]
pas-external = { version = "0.1", features = ["axum", "test-support"] }

Pre-1.0: minor bumps (0.2, 0.3) may include breaking changes per SemVer §11. Versions 1.0.1 – 5.0.0 were yanked from crates.io on 2026-04-30 as part of a pre-1.0 version reset; 0.1.0 is equivalent in scope to the (yanked) 5.0.0 development line. See CHANGELOG.md for the design history and 0context/STANDARDS_SESSION_LIVENESS.md for the consumer-facing contract.

Re-exports

pub use error::Error;

pub use error::TokenError;

pub use oauth::AuthClient;

pub use oauth::AuthorizationRequest;

pub use oauth::OAuthConfig;

pub use oauth::TokenResponse;

pub use oauth::UserInfo;

pub use pkce::generate_code_challenge;

pub use pkce::generate_code_verifier;

pub use pkce::generate_state;

pub use session_version::MemorySessionVersionCache;

pub use session_version::SessionVersionCache;

pub use session_version::SV_CACHE_KEY_PREFIX;

pub use session_version::SV_CACHE_TTL;

pub use token::PublicKey;

pub use token::VerifiedClaims;

pub use token::extract_unverified_kid;

pub use token::parse_public_key_hex;

pub use token::verify_v4_public_access_token;

pub use token::verify_v4_with_keyset;

pub use types::KeyId;

pub use types::Ppnum;

pub use types::PpnumId;

pub use types::SessionId;

pub use types::UserId;

pub use well_known::WellKnownKeyStatus;

pub use well_known::WellKnownPasetoDocument;

pub use well_known::WellKnownPasetoKey;

Modules

error

oauth

pas_port

PAS network-boundary port and deep refresh core.

pkce

session_version

Building blocks for sv claim validation (STANDARDS_AUTH_INVALIDATION §5).

token

types

well_known

Structs

Url

A parsed URL record.