Struct State 

pub struct State(/* private fields */);

An OAuth state value: the nonce tying one authorization response to one request.

Redaction

Renders as State(…). A state is a CSRF token — an attacker who learns one can replay the callback it belongs to — so it does not belong in a log line, and Debug is the boundary that keeps it out.

Implementations

impl State

pub fn new(value: impl AsRef<str>) -> Self

Wrap a value the client generated elsewhere.

pub fn as_str(&self) -> &str

The value as it travels in the query string.

pub fn matches(&self, presented: &str) -> bool

Whether this is the state the request expected.

Plain equality, and deliberately not a constant-time comparison: state is compared against a value the caller already holds, it is not a bearer secret being presented to a verifier that would otherwise leak its contents through timing. The PKCE verifier is the one compared against an attacker-supplied value, and that comparison happens at the authorization server, not here.

Trait Implementations

impl Clone for State

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for State

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for State

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for State

impl PartialEq for State

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for State