Struct AuthorizationCodeRecord 

pub struct AuthorizationCodeRecord {
    pub did: String,
    pub client_id: String,
    pub scope: ScopeSet,
    pub redirect_uri: String,
    pub code_challenge: String,
    pub code_challenge_method: String,
    pub client_auth_key: Option<ClientAuthKey>,
    pub dpop_jkt: DpopThumbprint,
}

The fields AuthorizationCodeStore::issue takes — the same shape as AuthorizationCode, public because a caller assembling one from a confirmed consent::PendingConsent needs to name every field.

Fields

did: String

The account this code grants access to.

client_id: String

The client this code was issued to.

scope: ScopeSet

What the decision record granted, which is what the agent approved; see this module’s doc.

redirect_uri: String

Where this code must be redirected back to; checked again at exchange.

code_challenge: String

The PKCE challenge code_verifier must hash to at exchange.

code_challenge_method: String

The PKCE method the challenge was computed with; always S256.

client_auth_key: Option<ClientAuthKey>

The key a confidential client authenticated with at PAR, which the exchange must be signed with too. None for a public client.

dpop_jkt: DpopThumbprint

The thumbprint of the DPoP key the sign-in’s push was signed with. The exchange’s proof must be signed with the same key (RFC 9449 §10).

Trait Implementations

impl From<PendingConsent> for AuthorizationCodeRecord

fn from(pending: PendingConsent) -> Self

Converts to this type from the input type.