Struct OAuthStateStore 

pub struct OAuthStateStore { /* private fields */ }

Stores OAuth state parameters to prevent CSRF attacks on the callback.

State tokens are short-lived (10 minutes) and single-use. Backed by an OAuthStateBackend; defaults to in-memory but the runtime persists them to SQLite so they survive a restart that happens mid-OAuth-handshake.

Implementations

impl OAuthStateStore

pub fn new() -> Self

pub fn with_backend(backend: Box<dyn OAuthStateBackend>) -> Self

pub fn create(&self, provider: &str) -> String

Generate and store a new state parameter. Returns the random state string.

pub fn validate(&self, state: &str, expected_provider: &str) -> bool

Validate and consume a state parameter. Returns true iff the state existed, has not expired, and matches expected_provider. The token is removed either way to make replay impossible.

Trait Implementations

impl Default for OAuthStateStore

fn default() -> Self

Returns the “default value” for a type.