Skip to main content

resolve_bearer_token

headless_lms_models::library::oauth::bearer

Function resolve_bearer_token 

Source 
pub async fn resolve_bearer_token(
    conn: &mut PgConnection,
    token: &str,
    token_hmac_key: &SecretString,
) -> Result<BearerToken, BearerTokenError>
Expand description

Resolves a token presented as Authorization: Bearer. A sender-constrained (DPoP) token is rejected, since these APIs verify no proof of possession. Callers check scopes and audience.