Struct OidcClient 

pub struct OidcClient { /* private fields */ }

Implementations

impl OidcClient

pub fn new(config: OidcConfig, public_url: &str) -> Result<OidcClient>

pub async fn verify_logout_token(&self, token: &str) -> AppResult<String>

Checks a back-channel logout token (signature with the provider’s keys, issuer, audience, age, logout event) and returns its subject. A token that does not pass is a bad request (400, as the specification asks).

pub fn display_name(&self) -> &str

pub async fn start_login( &self, pool: &PgPool, return_to: &str, ) -> AppResult<String>

Starts a login and returns the URL to redirect the browser to.

pub async fn start_reauth( &self, pool: &PgPool, return_to: &str, session_hash: &str, ) -> AppResult<String>

Starts a fresh sign-in of the user of an existing web session (the hash of its token) to confirm a review decision: the provider is asked to authenticate again (prompt=login, max_age=0), and the callback marks that session instead of opening a new one.

pub async fn finish_login( &self, pool: &PgPool, code: &str, state: &str, ) -> AppResult<(OidcIdentity, String, Option<String>)>

Completes a login. Returns the identity, the local page to return to and – for a fresh sign-in started by Self::start_reauth – the hash of the session to mark.