Struct ServerMetadata 

pub struct ServerMetadata {

    pub issuer: String,
    pub authorization_endpoint: String,
    pub token_endpoint: String,
    pub pushed_authorization_request_endpoint: String,
    pub require_pushed_authorization_requests: bool,
    pub response_types_supported: Vec<&'static str>,
    pub response_modes_supported: Vec<&'static str>,
    pub grant_types_supported: Vec<&'static str>,
    pub code_challenge_methods_supported: Vec<&'static str>,
    pub token_endpoint_auth_methods_supported: Vec<&'static str>,
    pub token_endpoint_auth_signing_alg_values_supported: Vec<&'static str>,
    pub scopes_supported: Vec<&'static str>,
    pub dpop_signing_alg_values_supported: Vec<&'static str>,
    pub authorization_response_iss_parameter_supported: bool,
    pub client_id_metadata_document_supported: bool,
}

The authorization server metadata document, RFC 8414 plus the fields the atproto OAuth profile requires.

Fields

issuer: String

This deployment’s own origin, read from its zone’s own service document; see issuer_for.

authorization_endpoint: String

GET /oauth/authorize.

token_endpoint: String

POST /oauth/token.

pushed_authorization_request_endpoint: String

POST /oauth/par.

require_pushed_authorization_requests: bool

Always true: PAR is not optional on this deployment.

response_types_supported: Vec<&'static str>

Always ["code"]: this profile is authorization-code only.

response_modes_supported: Vec<&'static str>

The modes a push may name as its response_mode; see crate::oauth::authorize::ResponseMode.

grant_types_supported: Vec<&'static str>

Always ["authorization_code", "refresh_token"].

code_challenge_methods_supported: Vec<&'static str>

Always ["S256"]: PKCE’s plain method is refused at PAR.

token_endpoint_auth_methods_supported: Vec<&'static str>

none for a public client and private_key_jwt for a confidential one, as the atproto profile requires; see crate::oauth::client_auth.

token_endpoint_auth_signing_alg_values_supported: Vec<&'static str>

Always ["ES256"]: the one algorithm a confidential client’s assertion is verified with.

scopes_supported: Vec<&'static str>

The scopes a client may name here; see SCOPES_SUPPORTED (this module, private). What any particular agent may be granted is plan/scope-policy.md’s ceiling.

dpop_signing_alg_values_supported: Vec<&'static str>

Always ["ES256"]: the DPoP proof signing algorithm this deployment accepts.

authorization_response_iss_parameter_supported: bool

Always true: authorization responses carry iss, per RFC 9207.

client_id_metadata_document_supported: bool

atproto’s own extension: this server accepts a client_id that is a fetchable metadata document URL rather than only a pre-registered identifier.

Trait Implementations

impl Clone for ServerMetadata

fn clone(&self) -> ServerMetadata

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerMetadata

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for ServerMetadata

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.