Struct OAuthUserClientScopes 

pub struct OAuthUserClientScopes {
    pub id: Uuid,
    pub user_id: Uuid,
    pub client_id: Uuid,
    pub scopes: Vec<String>,
    pub granted_at: DateTime<Utc>,
}

A user’s grant to a client: the scopes they consented to.

Fields

id: Uuid

user_id: Uuid

client_id: Uuid

scopes: Vec<String>

granted_at: DateTime<Utc>

Implementations

impl OAuthUserClientScopes

pub async fn insert( conn: &mut PgConnection, user_id: Uuid, client_id: Uuid, scopes: &[String], ) -> ModelResult<()>

pub async fn find_grant( conn: &mut PgConnection, user_id: Uuid, client_id: Uuid, ) -> ModelResult<Option<OAuthUserClientScopes>>

The user’s grant to the client, if any.

pub async fn find_scopes( conn: &mut PgConnection, user_id: Uuid, client_id: Uuid, ) -> ModelResult<Vec<String>>

The scopes the user has granted to the client; none without a grant.

pub async fn revoke_user_client_everything( conn: &mut PgConnection, user_id: Uuid, client_id: Uuid, ) -> ModelResult<Vec<Digest>>

One-shot revoke: remove all scopes and tokens for a (user, client) pair atomically.

Returns the digests of the deleted access tokens so the caller can evict their cached user mappings; without that they keep authenticating until the cache TTL.

pub async fn get_grants_for_user( conn: &mut PgConnection, user_id: Uuid, ) -> ModelResult<Vec<OAuthGrant>>

The user’s grants, most recently used first.

pub async fn mark_grant_used( conn: &mut PgConnection, grant_id: Uuid, last_used_at: Option<DateTime<Utc>>, ) -> ModelResult<()>

Records that a token of the grant was used, at most once a minute per grant. last_used_at is the grant’s value read with the token; while it is recent, no query is sent.

pub async fn revoke_grant_by_id( conn: &mut PgConnection, user_id: Uuid, grant_id: Uuid, ) -> ModelResult<Vec<Digest>>

Revokes one of the user’s grants with all its tokens. Errors with RecordNotFound if the grant is not the user’s. Returns the deleted access-token digests for cache eviction.

Trait Implementations

impl Clone for OAuthUserClientScopes

fn clone(&self) -> OAuthUserClientScopes

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthUserClientScopes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OAuthUserClientScopes

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<'a, R: Row> FromRow<'a, R> for OAuthUserClientScopes

where &'a str: ColumnIndex<R>, Uuid: Decode<'a, R::Database> + Type<R::Database>, Vec<String>: Decode<'a, R::Database> + Type<R::Database>, DateTime<Utc>: Decode<'a, R::Database> + Type<R::Database>,

fn from_row(__row: &'a R) -> Result<Self>

impl PartialEq for OAuthUserClientScopes

fn eq(&self, other: &OAuthUserClientScopes) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OAuthUserClientScopes

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OAuthUserClientScopes