Module oauth 

OAuth 2.1 wire types shared between uptrakit-web-api (authorization server) and uptrakit-mcp (resource server).

Re-exports

pub use canonical_url::CanonicalResourceUrl;

pub use canonical_url::CanonicalUrlConfig;

pub use canonical_url::CanonicalUrlConfigError;

pub use canonical_url::CanonicalUrlError;

pub use canonical_url::MAX_ACCEPTED_AUDIENCE_HOSTS;

pub use device::DeviceAuthDenyRequest;

pub use device::DeviceAuthDenyResponse;

pub use device::DeviceAuthLookupQuery;

pub use device::DeviceAuthLookupResponse;

pub use device::DeviceAuthorizationRequest;

pub use device::DeviceAuthorizationResponse;

pub use device::OAuthAuthorizationServerMetadata;

pub use device::OAuthErrorCode;

pub use device::OAuthErrorResponse;

pub use device::OAuthTokenRequest;

pub use device::OAuthTokenResponse;

pub use device::ParseOAuthErrorCodeError;

pub use device::USER_CODE_ALPHABET;

pub use error::OAuthError;

pub use grant_type::CodeChallengeMethod;

pub use grant_type::OAuthGrantType;

pub use grant_type::ResponseType;

pub use grant_type::TokenEndpointAuthMethod;

pub use jwt_verifier::JwtError;

pub use jwt_verifier::McpOAuthJwtVerifier;

pub use metadata::AuthorizationServerMetadata;

pub use metadata::ProtectedResourceMetadata;

pub use requests::AuthorizeRequest;

pub use requests::ConsentDecision;

pub use requests::TokenRequest;

pub use responses::DcrRegistrationRequest;

pub use responses::DcrRegistrationResponse;

pub use responses::OAuthClientResponse;

pub use responses::OAuthConsentResponse;

pub use responses::TokenResponse;

pub use scope::McpScope;

pub use tokens::AuthorizationCode;

pub use tokens::McpAccessTokenClaims;

pub use tokens::OpaqueRefreshToken;

pub use tokens::TokenParseError;

Modules

canonical_url

Canonical resource URL newtype. Single source of truth for RFC 8707 audience binding.

device

RFC 8628 (Device Authorization Grant) + RFC 8414 (Authorization Server Metadata) request/response types.

error

Typed OAuth error enum per RFC 6749 §5.2 + RFC 8707 §2.

grant_type

OAuth AS-internal typed enums (RFC 6749 / RFC 8414 vocabulary).

jwt_verifier

MCP OAuth JWT verifier. HS256 pinned; shared between the authorization server (uptrakit-web-api) and the resource server (uptrakit-mcp).

metadata

RFC 8414 Authorization Server Metadata + RFC 9728 Protected Resource Metadata types.

requests

HTTP request types for OAuth AS endpoints. All implement Validate per the project rule: “All HTTP request types in uptrakit-web-api-types implement Validate”.

responses

HTTP response types for OAuth AS endpoints plus the Dynamic Client Registration (RFC 7591) request envelope.

scope

OAuth scope enum for MCP. Wire-safe per the standards-snapshot rule “Use wire_safe_enum! macro to generate Other(String), as_str, …”.

tokens

Token-shape newtypes + access-token claims envelope.

Constants

MCP_AUTH_SPEC_REVISION

MCP Authorization spec revision this implementation targets. Emitted by the PRM endpoint as x-uptrakit-mcp-auth-spec-revision per spec §23.1 so downstream tooling can correlate behavior with the spec revision.