provider/contracts.aug diagrams
OpenID Connect login application
Project overview · Compiled explanation
Sequences
Call arrows identify checked targets; loop and branch frames determine when they run. Open that target’s module to follow its implementation. Branches describe alternatives; loops describe repeated work. Native calls and interface dispatch stop at their declared contracts. Exit notes end that path; enclosing recovery and cleanup remain visible.
AuthorizationRequest constructor
A provider request is bound to a browser cookie, a form CSRF token, and a registered client.
It takes clientId, redirectUri, state, nonce, challenge, browser, and csrf as strings, kept read-only and expires as an integer, kept read-only.
Receive fields: clientId, redirectUri, state, nonce, challenge, browser, csrf, expires. Explanation.
AuthorizationCode constructor
Codes are short-lived, single-use and bound to a redirect URI and S256 challenge.
It takes clientId, redirectUri, challenge, nonce, subject, and name as strings, kept read-only and expires as an integer, kept read-only.
Receive fields: clientId, redirectUri, challenge, nonce, subject, name, expires. Explanation.
IdClaims constructor
It takes iss, sub, and aud as strings, kept read-only, exp and iat as integers, kept read-only, and nonce and name as strings, kept read-only.
Receive fields: iss, sub, aud, exp, iat, nonce, name. Explanation.
AccessGrant constructor
It takes subject and name as strings, kept read-only and expires as an integer, kept read-only.
Receive fields: subject, name, expires. Explanation.
TokenResponse constructor
It takes token_type, access_token, and id_token as strings, kept read-only, expires_in as an integer, kept read-only, and scope as a string, kept read-only.
Receive fields: token_type, access_token, id_token, expires_in, scope. Explanation.
OAuthError constructor
It takes error and error_description as strings, kept read-only.
Receive fields: error, error_description. Explanation.
TokenForm constructor
It takes grant_type, code, redirect_uri, client_id, and code_verifier as strings, kept read-only.
Receive fields: grant_type, code, redirect_uri, client_id, code_verifier. Explanation.
LoginForm constructor
It takes request_id, csrf, username, and password as strings, kept read-only.
Receive fields: request_id, csrf, username, password. Explanation.
UserInfo constructor
It takes sub and name as strings, kept read-only.
Receive fields: sub, name. Explanation.
LoginError constructor
It implements Error.
CodeError constructor
It implements Error.