client/contracts.aug

OpenID Connect login application · Source and specification

Files in this project

• main.aug
• client/contracts.aug
• client/endpoints.aug
• client/export.aug
• client/login.aug
• client/logout.aug
• client/protocol.aug
• client/session.aug
• client/views.aug
• common/export.aug
• common/headers.aug
• common/keys.aug
• common/settings.aug
• common/views.aug
• provider/authorization.aug
• provider/contracts.aug
• provider/credentials.aug
• provider/discovery.aug
• provider/export.aug
• provider/token.aug
• provider/userinfo.aug
• provider/views.aug

Code

Indentation

// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
/** Browser-bound client state, nonce and PKCE verifier, consumed by the callback. */
Explanation 1Explanation 2
record LoginTransaction(string state, string nonce, string verifier, int expires)
/** Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. */
Explanation 1Explanation 2
record SessionClaims(string iss, string sub, string aud, int exp, int iat, string jti, string csrf, string name)
Explanation 1Explanation 2
record LogoutForm(string csrf)
Explanation 1Explanation 2
SessionError() implements Error:
    pass

Braces

// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
/** Browser-bound client state, nonce and PKCE verifier, consumed by the callback. */
Explanation 1Explanation 2
record LoginTransaction(string state, string nonce, string verifier, int expires)
/** Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. */
Explanation 1Explanation 2
record SessionClaims(string iss, string sub, string aud, int exp, int iat, string jti, string csrf, string name)
Explanation 1Explanation 2
record LogoutForm(string csrf)
Explanation 1Explanation 2
SessionError() implements Error {
    pass
}

Compiled specification

Interactions and sequences

LoginTransaction · immutable record · source

Browser-bound client state, nonce and PKCE verifier, consumed by the callback. It takes state, nonce, and verifier as strings, kept read-only and expires as an integer, kept read-only.

SessionClaims · immutable record · source

Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. It takes iss, sub, and aud as strings, kept read-only, exp and iat as integers, kept read-only, and jti, csrf, and name as strings, kept read-only.

LogoutForm · immutable record · source

It takes csrf as a string, kept read-only.

SessionError · class · source

It implements Error.