Struct PushedRequest 

pub struct PushedRequest {

    pub client_id: String,
    pub client_key: ClientKey,
    pub client_metadata: ClientMetadataDocument,
    pub redirect_uri: String,
    pub scope: ScopeSet,
    pub state: Option<String>,
    pub response_mode: ResponseMode,
    pub code_challenge: String,
    pub code_challenge_method: String,
    pub login_hint: Option<String>,
    pub did: String,
    pub dpop_jkt: DpopThumbprint,
    pub expires_at: OffsetDateTime,
}

One pushed authorization request, as pushed.

Fields

client_id: String

The client that pushed it, exactly as presented — authorize and token both re-check this against what they are given, rather than trusting a request_uri to imply it.

client_key: ClientKey

The document client_id resolved to at push time, and its content key. Carried through rather than re-fetched, so a document that changes between PAR and authorize cannot smuggle a different redirect URI or capability into a request that was already admitted.

client_metadata: ClientMetadataDocument

The resolved document itself, carried through for the same reason.

redirect_uri: String

Where an authorization code may be delivered; checked against client_metadata.redirect_uris at push time and again at token.

scope: ScopeSet

The scope requested, before any ceiling narrows it, with each include: replaced by what its permission set grants.

state: Option<String>

The client’s own opaque state, echoed back unexamined.

response_mode: ResponseMode

Where the authorization response carries its parameters.

code_challenge: String

PKCE, mandatory for a public client and the norm for atproto OAuth.

code_challenge_method: String

The PKCE method the challenge was computed with; only S256 is accepted.

login_hint: Option<String>

The account this authorization is for. atproto’s own extension: login_hint names the at-identifier the client wants to sign in as.

did: String

The account login_hint resolved to, looked up here rather than at authorize: the decision record this push mints names an account. A login_hint naming nobody never reaches this struct at all — see push_authorization_request’s own doc for what it gets instead.

dpop_jkt: DpopThumbprint

The RFC 7638 thumbprint of the key the push’s DPoP proof was signed with: the request’s dpop_jkt (RFC 9449 §10.1). The code it leads to is exchanged only under the same key.

expires_at: OffsetDateTime

When this pushed request must be redeemed by, per REQUEST_URI_TTL.

Trait Implementations

impl Clone for PushedRequest

fn clone(&self) -> PushedRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PushedRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.