Struct Provider 

pub struct Provider { /* private fields */ }

Opaque provider — holds all the stores and dispatches requests.

Implementations

impl Provider

pub fn new( config: ProviderConfig, client_store: ClientStore, session_store: SessionStore, user_store: Arc<dyn UserStore>, jwks: Jwks, ) -> Self

Construct a provider.

pub fn jwks(&self) -> &Jwks

Access the JWKS (for serving /.well-known/jwks.json).

pub fn config(&self) -> &ProviderConfig

Access the configuration.

pub fn client_store(&self) -> &ClientStore

Access the client store (for dynamic client registration endpoint).

pub fn session_store(&self) -> &SessionStore

Access the session store (for credentials-flow, logout, etc).

pub fn user_store_trait_object(&self) -> &dyn UserStore

Access the underlying UserStore through a trait object. Used by the optional axum binder to share one user store across the /credentials handler and the /auth handler.

pub fn discovery_document(&self) -> DiscoveryDocument

Render the discovery document for the configured issuer.

pub async fn authorize( &self, req: AuthorizeRequest, ) -> Result<AuthorizeResponse, ProviderError>

Start the authorization-code flow.

Returns AuthorizeResponse::Redirect on success (a code has been minted and the client should receive a 302 to redirect_uri?code=<code>&state=<state>), or AuthorizeResponse::NeedsLogin when there is no active session for the current request.

pub async fn token( &self, req: TokenRequest<'_>, ) -> Result<TokenResponse, ProviderError>

Exchange an authorization code at /token.

Requires a valid DPoP proof whose htu / htm match POST {issuer}/idp/token. The returned access token is bound to the proof’s JWK thumbprint (cnf.jkt).

pub async fn userinfo( &self, access_token: &str, dpop_jkt: &str, now_unix: u64, ) -> Result<UserInfo, ProviderError>

Resolve a bearer-authenticated request to UserInfo. Verifies the access token (ES256 signed by our JWKS) and matches its cnf.jkt against the supplied DPoP thumbprint.

Trait Implementations

impl Clone for Provider

fn clone(&self) -> Provider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.