Enum ClientMetadataError 

pub enum ClientMetadataError {
    NotHttps(String),
    HasFragment(String),
    HasPort(String),
    Fetch(String, String),
    Malformed(String, String),
    ClientIdMismatch {
        fetched_from: String,
        claimed: String,
    },
    NoRedirectUris(String),
    BadRedirectUri(String),
    BadNativeRedirectUri(String),
    Redirected {
        client_id: String,
        to: String,
    },
    NotOk {
        client_id: String,
        status: StatusCode,
    },
    NotJson {
        client_id: String,
        content_type: String,
    },
    TooLarge(String),
    NotDpopBound(String),
    UnsupportedAuthMethod(String),
    UnsupportedSigningAlg(String),
    NoClientKeys(String),
    TwoKeySets(String),
    BadJwksUri(String),
    LoopbackRedirectUri(String),
    RefusedAddress(String),
}

Why a client metadata document could not be used.

Variants

NotHttps(String)

client_id is not an https:// URL (loopback http:// is the one exception, for development, mirroring didbot_identity’s own loopback carve-out for did:web).

HasFragment(String)

client_id has a fragment, which the spec forbids — a fragment is never sent to a server, so two client IDs differing only in one would be indistinguishable to anyone fetching them.

HasPort(String)

client_id names a port, which the profile forbids outside its http://localhost form.

Fetch(String, String)

The document could not be fetched at all.

Malformed(String, String)

The document did not parse as the expected shape.

ClientIdMismatch

The document’s own client_id did not equal the URL it was served from — the binding the whole scheme depends on.

Fields

fetched_from: String

The URL this server fetched.

claimed: String

What the document claimed instead.

NoRedirectUris(String)

No redirect_uris, or every one of them is unusable.

BadRedirectUri(String)

A web client’s redirect_uris entry is not https://, or carries a fragment.

BadNativeRedirectUri(String)

A native client’s redirect_uris entry breaks the profile’s rules for native clients; see is_native_redirect_uri (this module, private).

Redirected

The fetch did not stay at client_id.

A client metadata document is its client_id: the URL is the registration. A redirect means the document was served by something other than the identifier it claims, and nothing downstream re-checks where it actually landed — validate compares the document against the requested client_id, so an open redirect at an otherwise well-behaved client_id host would let a third party supply that host’s registration. Refused rather than capped for that reason.

Fields

client_id: String

The client_id that was requested.

to: String

Where the response tried to send this server instead.

NotOk

The fetch was answered with a status other than 200 OK, which the profile requires (“not another 2xx or a redirect”).

Fields

client_id: String

The client_id whose document, or key set, was fetched.

status: StatusCode

What the fetch was answered with.

NotJson

The document was not served as application/json, which the profile requires.

Fields

client_id: String

The client_id whose document was fetched.

content_type: String

The Content-Type it was served with, or nothing.

TooLarge(String)

The document is larger than MAX_DOCUMENT_BYTES.

NotDpopBound(String)

dpop_bound_access_tokens was absent or false.

UnsupportedAuthMethod(String)

token_endpoint_auth_method is neither none nor private_key_jwt.

UnsupportedSigningAlg(String)

token_endpoint_auth_signing_alg is none, or a confidential client names no algorithm this server verifies.

NoClientKeys(String)

A confidential client publishes no key a client assertion can be checked against.

TwoKeySets(String)

A confidential client names both jwks and jwks_uri, which the atproto profile forbids.

BadJwksUri(String)

jwks_uri is not https:// (or loopback http:// on a deployment that fetches from its own machine), or carries a fragment.

LoopbackRedirectUri(String)

A loopback client_id’s redirect_uri query parameter named a host other than 127.0.0.1 or [::1] — the atproto profile’s “Localhost Client Development” form allows any port on either, and nothing else, including localhost itself.

RefusedAddress(String)

client_id’s host is, or resolves to, an address outside didbot_http::REFUSED_BLOCKS — this deployment’s own network rather than the public internet.

Trait Implementations

impl Clone for ClientMetadataError

fn clone(&self) -> ClientMetadataError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientMetadataError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for ClientMetadataError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for ClientMetadataError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<ClientMetadataError> for ParError

fn from(source: ClientMetadataError) -> Self

Converts to this type from the input type.

impl PartialEq for ClientMetadataError

fn eq(&self, other: &ClientMetadataError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ClientMetadataError

impl StructuralPartialEq for ClientMetadataError