provider/contracts.aug
OpenID Connect login application · Source and specification
Files in this project
main.augclient/contracts.augclient/endpoints.augclient/export.augclient/login.augclient/logout.augclient/protocol.augclient/session.augclient/views.augcommon/export.augcommon/headers.augcommon/keys.augcommon/settings.augcommon/views.augprovider/authorization.augprovider/contracts.augprovider/credentials.augprovider/discovery.augprovider/export.augprovider/token.augprovider/userinfo.augprovider/views.aug
Code
// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
/** A provider request is bound to a browser cookie, a form CSRF token, and a registered client. */
record AuthorizationRequest(string clientId, string redirectUri, string state, string nonce, string challenge, string browser, string csrf, int expires)
/** Codes are short-lived, single-use and bound to a redirect URI and S256 challenge. */
record AuthorizationCode(string clientId, string redirectUri, string challenge, string nonce, string subject, string name, int expires)
record IdClaims(string iss, string sub, string aud, int exp, int iat, string nonce, string name)
record AccessGrant(string subject, string name, int expires)
record TokenResponse(string token_type, string access_token, string id_token, int expires_in, string scope)
record OAuthError(string error, string error_description)
record TokenForm(string grant_type, string code, string redirect_uri, string client_id, string code_verifier)
record LoginForm(string request_id, string csrf, string username, string password)
record UserInfo(string sub, string name)
LoginError() implements Error:
pass
CodeError() implements Error:
pass// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
/** A provider request is bound to a browser cookie, a form CSRF token, and a registered client. */
record AuthorizationRequest(string clientId, string redirectUri, string state, string nonce, string challenge, string browser, string csrf, int expires)
/** Codes are short-lived, single-use and bound to a redirect URI and S256 challenge. */
record AuthorizationCode(string clientId, string redirectUri, string challenge, string nonce, string subject, string name, int expires)
record IdClaims(string iss, string sub, string aud, int exp, int iat, string nonce, string name)
record AccessGrant(string subject, string name, int expires)
record TokenResponse(string token_type, string access_token, string id_token, int expires_in, string scope)
record OAuthError(string error, string error_description)
record TokenForm(string grant_type, string code, string redirect_uri, string client_id, string code_verifier)
record LoginForm(string request_id, string csrf, string username, string password)
record UserInfo(string sub, string name)
LoginError() implements Error {
pass
}
CodeError() implements Error {
pass
}Compiled specification
AuthorizationRequest · immutable record · source
A provider request is bound to a browser cookie, a form CSRF token, and a registered client. It takes clientId, redirectUri, state, nonce, challenge, browser, and csrf as strings, kept read-only and expires as an integer, kept read-only.
AuthorizationCode · immutable record · source
Codes are short-lived, single-use and bound to a redirect URI and S256 challenge. It takes clientId, redirectUri, challenge, nonce, subject, and name as strings, kept read-only and expires as an integer, kept read-only.
IdClaims · immutable record · source
It takes iss, sub, and aud as strings, kept read-only, exp and iat as integers, kept read-only, and nonce and name as strings, kept read-only.
AccessGrant · immutable record · source
It takes subject and name as strings, kept read-only and expires as an integer, kept read-only.
TokenResponse · immutable record · source
It takes token_type, access_token, and id_token as strings, kept read-only, expires_in as an integer, kept read-only, and scope as a string, kept read-only.
OAuthError · immutable record · source
It takes error and error_description as strings, kept read-only.
TokenForm · immutable record · source
It takes grant_type, code, redirect_uri, client_id, and code_verifier as strings, kept read-only.
LoginForm · immutable record · source
It takes request_id, csrf, username, and password as strings, kept read-only.
UserInfo · immutable record · source
It takes sub and name as strings, kept read-only.
LoginError · class · source
It implements Error.
CodeError · class · source
It implements Error.