client/contracts.aug diagrams

OpenID Connect login application

Project overview · Compiled explanation

Sequences

Call arrows identify checked targets; loop and branch frames determine when they run. Open that target’s module to follow its implementation. Branches describe alternatives; loops describe repeated work. Native calls and interface dispatch stop at their declared contracts. Exit notes end that path; enclosing recovery and cleanup remain visible.

LoginTransaction constructor

Source

Browser-bound client state, nonce and PKCE verifier, consumed by the callback.

It takes state, nonce, and verifier as strings, kept read-only and expires as an integer, kept read-only.

Receive fields: state, nonce, verifier, expires. Explanation.

SessionClaims constructor

Source

Sessions require their own issuer, audience, key and JWT type, plus a live registry entry.

It takes iss, sub, and aud as strings, kept read-only, exp and iat as integers, kept read-only, and jti, csrf, and name as strings, kept read-only.

Receive fields: iss, sub, aud, exp, iat, jti, csrf, name. Explanation.

LogoutForm constructor

Source

It takes csrf as a string, kept read-only.

Receive fields: csrf. Explanation.

SessionError constructor

Source

It implements Error.

Explanation.