async fn authenticated_client(
state: &AppState,
client_id: Option<&str>,
credentials: &ClientCredentials,
) -> Result<Option<AuthenticatedClient>, Refused>Expand description
The confidential client a POST /oauth/token request authenticated as,
or None when it carries no client assertion.
A request with no assertion fetches nothing. Whether its code or refresh
token needed one is the grant’s to say; see crate::oauth::token. One
with an assertion is checked against the key set its client publishes
now, read with its metadata document.