Struct Pkce 

pub struct Pkce {
    pub verifier: String,
    pub challenge: String,
}

A PKCE pair (RFC 7636, S256): keep the verifier in the session, send the challenge.

PKCE ties the code the provider returns to the browser session that started the sign-in, so a stolen code is useless.

Examples

use ocre::oauth::Pkce;

let pkce = Pkce::new();
assert_eq!(pkce.verifier.len(), 43);
assert_eq!(Pkce::challenge_for(&pkce.verifier), pkce.challenge);

Fields

verifier: String

The secret, sent with the token request (exchange_code).

challenge: String

BASE64URL(SHA-256(verifier)), sent in the authorization URL.

Implementations

impl Pkce

pub fn new() -> Self

A new random verifier (32 bytes) and its challenge.

Examples

assert_ne!(ocre::oauth::Pkce::new(), ocre::oauth::Pkce::new());

pub fn challenge_for(verifier: &str) -> String

The S256 challenge of verifier.

Examples

// The example of RFC 7636, appendix B.
let challenge = ocre::oauth::Pkce::challenge_for("dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk");
assert_eq!(challenge, "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM");

Trait Implementations

impl Clone for Pkce

fn clone(&self) -> Pkce

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Pkce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Pkce

impl PartialEq for Pkce

fn eq(&self, other: &Pkce) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Pkce