Struct IntrospectResponse 

pub struct IntrospectResponse {

    pub active: bool,
    pub scope: Option<String>,
    pub client_id: Option<String>,
    pub username: Option<String>,
    pub exp: Option<i64>,
    pub iat: Option<i64>,
    pub sub: Option<String>,
    pub aud: Option<Vec<String>>,
    pub iss: Option<String>,
    pub jti: Option<String>,
    pub token_type: Option<String>,
    pub upstream_id: Option<i32>,
    pub client_bearer_allowed: Option<bool>,
}

Response from the OAuth 2.0 token introspection endpoint (RFC 7662).

This response indicates whether a token is active and includes metadata about the token if it is active.

This is a cross-repo wire contract. tmc-server’s app/services/courses_mooc_fi_token_introspector.rb reads active, sub, scope, exp, iss, token_type, upstream_id and client_bearer_allowed by name from this JSON. The handler declares its body as serde_json::Value, so the OpenAPI drift gate cannot see a rename here — tests::golden_serialized_shape is the only thing that can.

Fields

active: bool

Whether the token is active (required).

scope: Option<String>

Space-separated list of scopes (optional, only if active).

client_id: Option<String>

Client identifier (optional, only if active).

username: Option<String>

Username/subject (optional, only if active and token has user).

exp: Option<i64>

Expiration timestamp as Unix time (optional, only if active).

iat: Option<i64>

Issued at timestamp as Unix time (optional, only if active).

sub: Option<String>

Subject identifier (optional, only if active and token has user).

aud: Option<Vec<String>>

Audience (optional, only if active).

iss: Option<String>

Issuer (optional, only if active).

jti: Option<String>

JWT ID (optional, only if active).

token_type: Option<String>

Token type: “Bearer” or “DPoP” (optional, only if active).

upstream_id: Option<i32>

The token owner’s legacy TMC upstream_id, when the token has a user and that user has one. A non-standard claim consumed by tmc-server: it lets tmc-server resolve a courses.mooc.fi token to a local user by upstream id while the courses_mooc_fi_user_id backfill is still incomplete.

client_bearer_allowed: Option<bool>

Whether the client the token was issued to (the one named by client_id in this same response, not the introspecting caller) may present it as a plain Bearer credential. Non-standard; it lets a resource server introspecting our tokens apply the same bearer_allowed = false rejection domain::exercise_services::token::UserFromOAuthToken applies here.

Privileged, gated like upstream_id: disclosed only to a confidential caller, and omitted rather than serialized as false when withheld, so a false is always an authoritative denial.

Consumers must fail closed: an absent member means “not disclosed” or “server predates it”, never “allowed”, so treat it as not permitted and reject the token.

Implementations

impl IntrospectResponse

pub fn inactive() -> Self

The RFC 7662 §2.2 minimal negative response: {"active": false} and nothing else. Disclosing any metadata alongside active: false would leak token existence.

Trait Implementations

impl Clone for IntrospectResponse

fn clone(&self) -> IntrospectResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IntrospectResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IntrospectResponse

fn default() -> IntrospectResponse

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IntrospectResponse

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for IntrospectResponse

fn eq(&self, other: &IntrospectResponse) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for IntrospectResponse

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for IntrospectResponse

impl StructuralPartialEq for IntrospectResponse