Struct OAuthAuthCode

pub struct OAuthAuthCode {

    pub digest: Digest,
    pub user_id: Uuid,
    pub client_id: Uuid,
    pub redirect_uri: String,
    pub scopes: Vec<String>,
    pub jti: Uuid,
    pub nonce: Option<String>,
    pub code_challenge: Option<String>,
    pub code_challenge_method: Option<PkceMethod>,
    pub dpop_jkt: Option<String>,
    pub used: bool,
    pub expires_at: DateTime<Utc>,
    pub metadata: Value,
}

INTERNAL/DATABASE-ONLY MODEL - DO NOT EXPOSE TO CLIENTS

This struct is a database model that contains a Digest field, which contains raw bytes and uses custom (de)serialization. This model must never be serialized into external API payloads or returned directly to clients.

For external-facing responses, use DTOs such as TokenResponse, UserInfoResponse, or an explicit redacting wrapper that strips or converts Digest fields to safe types (e.g., strings).

Rationale: The Digest type contains sensitive raw bytes and uses custom serialization that is not suitable for external APIs. Exposing this model directly could leak internal implementation details or cause serialization issues.

Fields

digest: Digest

user_id: Uuid

client_id: Uuid

redirect_uri: String

scopes: Vec<String>

jti: Uuid

nonce: Option<String>

code_challenge: Option<String>

code_challenge_method: Option<PkceMethod>

dpop_jkt: Option<String>

used: bool

expires_at: DateTime<Utc>

metadata: Value

Implementations

impl OAuthAuthCode

pub async fn insert( conn: &mut PgConnection, params: NewAuthCodeParams<'_>, ) -> ModelResult<()>

pub async fn consume_in_transaction( tx: &mut Transaction<'_, Postgres>, digest: Digest, client_id: Uuid, ) -> ModelResult<OAuthAuthCode>

Consume an authorization code within an existing transaction.

Transaction Requirements

This method must be called within an existing database transaction. The caller is responsible for managing the transaction (begin, commit, rollback).

Returns the consumed code data.

pub async fn consume_with_redirect_in_transaction( tx: &mut Transaction<'_, Postgres>, digest: Digest, client_id: Uuid, redirect_uri: &str, ) -> ModelResult<OAuthAuthCode>

Consume an authorization code with redirect URI check within an existing transaction.

Transaction Requirements

This method must be called within an existing database transaction. The caller is responsible for managing the transaction (begin, commit, rollback).

Returns the consumed code data.

Trait Implementations

impl Debug for OAuthAuthCode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OAuthAuthCode

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<'a, R: Row> FromRow<'a, R> for OAuthAuthCode

where &'a str: ColumnIndex<R>, Digest: Decode<'a, R::Database> + Type<R::Database>, Uuid: Decode<'a, R::Database> + Type<R::Database>, String: Decode<'a, R::Database> + Type<R::Database>, Vec<String>: Decode<'a, R::Database> + Type<R::Database>, Option<String>: Decode<'a, R::Database> + Type<R::Database>, Option<PkceMethod>: Decode<'a, R::Database> + Type<R::Database>, bool: Decode<'a, R::Database> + Type<R::Database>, DateTime<Utc>: Decode<'a, R::Database> + Type<R::Database>, Value: Decode<'a, R::Database> + Type<R::Database>,

fn from_row(__row: &'a R) -> Result<Self>

impl Serialize for OAuthAuthCode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.