headless_lms_server/controllers/main_frontend/oauth/
mod.rs

1use actix_web::web::ServiceConfig;
2use utoipa::OpenApi;
3
4/// OAuth 2.0 and OpenID Connect implementation.
5///
6/// This module implements the following RFCs and specifications:
7///
8/// ## OAuth 2.0 Core
9/// - [RFC 6749 — OAuth 2.0 Authorization Framework](https://datatracker.ietf.org/doc/html/rfc6749)
10///   - §3.1 — Authorization Endpoint (`/authorize`)
11///   - §3.2 — Token Endpoint (`/token`)
12///
13/// ## OAuth 2.0 Extensions
14/// - [RFC 7009 — OAuth 2.0 Token Revocation](https://datatracker.ietf.org/doc/html/rfc7009) (`/revoke`)
15/// - [RFC 7636 — Proof Key for Code Exchange (PKCE)](https://datatracker.ietf.org/doc/html/rfc7636)
16/// - [RFC 7662 — OAuth 2.0 Token Introspection](https://datatracker.ietf.org/doc/html/rfc7662) (`/introspect`)
17/// - [RFC 8414 — OAuth 2.0 Authorization Server Metadata](https://www.rfc-editor.org/rfc/rfc8414) (`/.well-known/openid-configuration`)
18/// - [RFC 9449 — OAuth 2.0 Demonstrating Proof-of-Possession (DPoP)](https://datatracker.ietf.org/doc/html/rfc9449)
19///
20/// ## JSON Web Token (JWT)
21/// - [RFC 7517 — JSON Web Key (JWK)](https://datatracker.ietf.org/doc/html/rfc7517) (`/jwks.json`)
22///
23/// ## OpenID Connect
24/// - [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html)
25///   - §3 — Authorization Endpoint (`/authorize`)
26///   - §3.1.3 — Token Endpoint (`/token`)
27///   - §5.3 — UserInfo Endpoint (`/userinfo`)
28///   - §10 — JWKS endpoint for key discovery (`/jwks.json`) — Note: Currently exposes a single key; key rotation not implemented
29/// - [OpenID Connect Discovery 1.0](https://openid.net/specs/openid-connect-discovery-1_0.html) (`/.well-known/openid-configuration`)
30mod authorize;
31mod consent;
32mod device;
33mod discovery;
34mod grants;
35pub(crate) use discovery::authorization_server_metadata;
36mod introspect;
37mod revoke;
38mod token;
39mod userinfo;
40
41#[derive(OpenApi)]
42#[openapi(paths(
43    discovery::jwks,
44    discovery::well_known_openid,
45    authorize::authorize_get_doc,
46    authorize::authorize_post_doc,
47    token::token,
48    userinfo::user_info_get_doc,
49    userinfo::user_info_post_doc,
50    revoke::revoke,
51    consent::approve_consent,
52    consent::deny_consent,
53    consent::get_consent_info,
54    device::device_authorization,
55    device::device_verification,
56    device::approve_device_verification,
57    device::deny_device_verification,
58    grants::get_grants,
59    grants::revoke_grant,
60    introspect::introspect
61))]
62pub(crate) struct MainFrontendOauthApiDoc;
63
64pub fn _add_routes(cfg: &mut ServiceConfig) {
65    authorize::_add_routes(cfg);
66    token::_add_routes(cfg);
67    userinfo::_add_routes(cfg);
68    discovery::_add_routes(cfg);
69    revoke::_add_routes(cfg);
70    consent::_add_routes(cfg);
71    device::_add_routes(cfg);
72    grants::_add_routes(cfg);
73    introspect::_add_routes(cfg);
74}
headless_lms_server/controllers/main_frontend/oauth/mod.rs

headless_lms_server/controllers/main_frontend/oauth/
mod.rs
