Struct DeviceCodeStrategy 

pub struct DeviceCodeStrategy { /* private fields */ }

Authenticates with CipherStash using the device code flow (RFC 8628).

This is the primary entry point for CLI and browserless authentication. Create a strategy with DeviceCodeStrategy::new, then call begin to start the flow.

Example

use stack_auth::DeviceCodeStrategy;
use cts_common::Region;

let region = Region::aws("ap-southeast-2").unwrap();
let strategy = DeviceCodeStrategy::new(region, "my-client-id").unwrap();

Implementations

impl DeviceCodeStrategy

pub fn new( region: Region, client_id: impl Into<String>, ) -> Result<Self, AuthError>

Create a new strategy for the given CipherStash region and OAuth client ID.

The auth endpoint is resolved automatically via service discovery.

Example

use stack_auth::DeviceCodeStrategy;
use cts_common::Region;

let strategy = DeviceCodeStrategy::new(
    Region::aws("ap-southeast-2").unwrap(),
    "my-client-id",
).unwrap();

pub fn builder( region: Region, client_id: impl Into<String>, ) -> DeviceCodeStrategyBuilder

Return a builder for configuring a DeviceCodeStrategy before construction.

pub async fn begin(&self) -> Result<PendingDeviceCode, AuthError>

Start the device code flow.

Requests a device code from the CipherStash auth server and returns a PendingDeviceCode with the user-facing codes and URIs. Show these to the user, then call PendingDeviceCode::poll_for_token to wait for authorization.

Errors

Returns AuthError::InvalidClient if the client ID is not recognized, or AuthError::Request if the server is unreachable.