Struct AuthServer 

pub struct AuthServer { /* private fields */ }

Available on crate feature sso only.

A minimal OAuth 2.0 Authorization Server — see the module docs.

Implementations

impl AuthServer

pub fn new(config: AuthServerConfig) -> AuthServer

Available on crate feature sso-server only.

Create a new AuthServer. Defaults login_url to /login and subject_session_key to "user_id" — override with AuthServer::login_url / AuthServer::subject_session_key.

pub fn login_url(self, url: &str) -> AuthServer

Available on crate feature sso-server only.

Override where an unauthenticated browser is sent from /oauth/authorize (default: /login).

pub fn subject_session_key(self, key: &str) -> AuthServer

Available on crate feature sso-server only.

Override the session key read to identify the logged-in user at /oauth/authorize (default: "user_id").

Trait Implementations

impl Middleware for AuthServer

fn handle( &self, request: &Request, connection: &ConnectionInfo, next: &dyn Application, ) -> Result<Response, String>

fn runs_inline(&self, _request: &Request, _connection: &ConnectionInfo) -> bool

true when this layer’s own work for request never blocks (in-memory state, atomics, short mutexes) — see Application::runs_inline. A WithMiddleware stack runs inline only if every layer and the inner application agree. Default false.

fn is_passthrough( &self, _request: &Request, _connection: &ConnectionInfo, ) -> bool

true when handle would do nothing for request but call next (e.g. a rate limit that isn’t configured). A WithMiddleware stack offers the inner application’s execute_async only if every layer passes the request through. Default false.

fn accepts_streamed_body( &self, _request: &Request, _connection: &ConnectionInfo, ) -> bool

true when this layer never reads request.body, so the inner application may receive it as a stream (Application::streams_body). A layer that inspects the body (CSRF tokens in a form, request signatures, rewriting) must keep the default false: it would see an empty body.

fn answers_streamed_body( &self, _request: &Request, _connection: &ConnectionInfo, ) -> bool

true when this layer answers request itself — it doesn’t call next — and reads its body as a stream (a proxy forwarding it as it arrives). The body is then streamed whatever the layers after it and the application would say. Requires accepts_streamed_body. Since 18.3.0.

fn layer_name(&self) -> &'static str

A short name for this layer, as tools that describe an app list it (Application::middleware_names): by default the type’s name without its module path or generic parameters (CacheLayer). Since 18.28.0.