Struct UpstreamOauthStateRow 

pub struct UpstreamOauthStateRow {
    pub upstream_name: String,
    pub subject: String,
    pub csrf_token: String,
    pub pkce_verifier: String,
    pub expected_issuer: Option<String>,
    pub require_issuer: bool,
    pub requested_scopes_json: String,
    pub created_at: i64,
    pub expires_at: i64,
}

Short-lived upstream OAuth state row. Holds the CSRF token and PKCE verifier between /authorize redirect and /callback redemption.

expires_at - created_at MUST NOT exceed 600 seconds. The persistence helper rejects violations.

Debug is implemented manually with redaction — never derive it (pkce_verifier is sensitive).

Fields

upstream_name: String

subject: String

csrf_token: String

pkce_verifier: String

expected_issuer: Option<String>

RFC 9207 issuer recorded when the authorization request was created.

require_issuer: bool

Whether the authorization server advertised mandatory issuer responses.

requested_scopes_json: String

JSON-encoded scopes requested in this authorization round.

created_at: i64

expires_at: i64

Trait Implementations

impl Clone for UpstreamOauthStateRow

fn clone(&self) -> UpstreamOauthStateRow

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UpstreamOauthStateRow

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.