Skip to main content

hand_out_nonce

didbot_serve::routes

Function hand_out_nonce 

Source 
async fn hand_out_nonce(
    verifier: Arc<dyn DpopVerifier>,
    request: Request,
    next: Next,
) -> Response
Expand description

Hands the client a DPoP nonce on the answer to any request that carried a DPoP proof, success and refusal alike, unless the answer names one already, as a nonce challenge does.

The atproto OAuth profile has a client refuse an answer to a DPoP request that carries no DPoP-Nonce, and RFC 9449 ยง8.2 lets every answer carry the nonce for the next request.