vestibule/authorization_request

An opaque value carrying everything the middleware needs to start an authorization flow: the URL to redirect the browser to, the CSRF state, the PKCE code_verifier, and an optional OIDC nonce, all of which must be stored for the callback.

Types

AuthorizationRequest

Represents the result of generating an authorization URL.

Contains all values needed for the OAuth2 authorization phase, including PKCE parameters that must be stored for the callback phase.

Opaque so that new artifacts can be added without breaking consumers. Construct with new and read fields via the url, state, code_verifier, and nonce accessors.

pub type AuthorizationRequest

Functions

code_verifier

The PKCE code verifier (must be stored for token exchange).

pub fn code_verifier(AuthorizationRequest) -> String

new

Build an AuthorizationRequest.

nonce is Some for OIDC strategies that emit an id_token nonce, and None for plain OAuth2 strategies.

pub fn new(
  url: String,
  state: String,
  code_verifier: String,
  nonce: option.Option(String)
) -> AuthorizationRequest

nonce

The OIDC nonce (must be stored for id_token validation).

Some for OIDC strategies, None for plain OAuth2 strategies.

pub fn nonce(AuthorizationRequest) -> option.Option(String)

state

The CSRF state parameter (must be stored for validation).

Store a timestamp alongside it if you need time-based expiration.

pub fn state(AuthorizationRequest) -> String

url

The authorization URL to redirect the user to.

pub fn url(AuthorizationRequest) -> String