Struct FakeProvider 

pub struct FakeProvider { /* private fields */ }

An OpenID Connect provider serving its discovery document and token endpoint on a loopback port, which a panel’s OidcProvider reaches as it would a real one.

The browser’s visit to the provider is authorize: it reads the authorization URL the panel redirected to and answers the callback the provider would send the browser back to. The token endpoint checks the client’s secret, the PKCE verifier and the redirect URI, takes each code once, and issues an ID token carrying the nonce the panel sent.

Implementations

impl FakeProvider

pub async fn start(client_id: &str, client_secret: &str) -> Self

A provider for the client client_id with client_secret, listening on a free loopback port until dropped.

Panics

When no loopback port is free.

pub fn issuer(&self) -> &str

The issuer, http://127.0.0.1:{port}.

pub fn provider(&self, key: &str) -> OidcProvider

This provider as a panel installs it, under key, labelled key.

pub fn authorize(&self, location: &str, account: &FakeAccount) -> String

Signs account in at location, the authorization URL a panel redirected the browser to, and answers the path and query the provider sends the browser back to.

Panics

When location is not this provider’s authorization URL for its client, or asks for no PKCE S256 challenge.

pub fn deny(&self, location: &str) -> String

The account declines at location: the path and query the provider sends the browser back to, carrying error=access_denied.

Panics

As authorize.

pub fn redeemed(&self) -> usize

How many codes the token endpoint has redeemed.

Panics

When a request to the fake panicked while holding its lock.

Trait Implementations

impl Drop for FakeProvider

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.