Enum TokenError 

pub enum TokenError {
    UnsupportedGrantType(String),
    MissingParameter(&'static str),
    InvalidCode,
    RedirectUriMismatch,
    PkceFailed,
    CodeKeyMismatch,
    ClientMismatch,
    ClientAssertionRequired,
    ClientAuthenticationChanged,
    Dpop(DpopError),
    InvalidRefreshToken,
    RefreshReused,
    DpopKeyMismatch,
    ClientRefused,
    NotKept,
}

Why token issuance or refresh was refused.

Variants

UnsupportedGrantType(String)

grant_type named something other than authorization_code or refresh_token.

MissingParameter(&'static str)

A required parameter for the requested grant type was absent.

InvalidCode

code is unknown, expired, or was already redeemed.

RedirectUriMismatch

redirect_uri does not match the one the code was issued for.

PkceFailed

code_verifier does not hash to code_challenge.

CodeKeyMismatch

The exchange’s DPoP proof was signed with a key other than the one the sign-in’s push was signed with (RFC 9449 §10).

ClientMismatch

client_id does not match the one the code was issued to.

ClientAssertionRequired

This code or login belongs to a confidential client, and the request carries no client assertion.

ClientAuthenticationChanged

The request authenticated its client differently from how the login began: an assertion signed with another key, or one brought to a public client’s login.

Dpop(DpopError)

The DPoP proof presented was refused; see DpopError.

InvalidRefreshToken

refresh_token is unknown or has expired.

RefreshReused

refresh_token had already been rotated away; its whole family has been revoked as a result of this call.

DpopKeyMismatch

The DPoP proof presented a different key than the one this token family was minted bound to.

ClientRefused

This server’s policy refuses the client a token for this account. Nothing is revoked: if the policy lifts, the same refresh token works again.

NotKept

The grant could not be written down, so no pair was issued. A pair this deployment will not remember is one that stops working at the next restart with nothing saying why.

Trait Implementations

impl Clone for TokenError

fn clone(&self) -> TokenError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TokenError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for TokenError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<DpopError> for TokenError

fn from(source: DpopError) -> Self

Converts to this type from the input type.

impl PartialEq for TokenError

fn eq(&self, other: &TokenError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for TokenError

impl StructuralPartialEq for TokenError