Enum OauthError 

pub enum OauthError {
    NeedsReauth(String),
    StateInvalid(String),
    ResourceMismatch(String),
    IssuerMismatch(String),
    UnsupportedMethod(String),
    Internal(String),
}

Stable error kinds for upstream OAuth flows.

These must be kept in sync with docs/dev/ERRORS.md.

Variants

NeedsReauth(String)

Refresh token was rejected (invalid_grant) or decryption failed after key rotation. User must re-initiate the authorization flow.

StateInvalid(String)

Callback state is missing, expired, replayed, or bound to a different subject / upstream.

ResourceMismatch(String)

Upstream AS refused the resource parameter or issued a token with the wrong audience (RFC 8707).

IssuerMismatch(String)

AS metadata issuer did not match the discovered AS URL (RFC 8414 §3.3).

UnsupportedMethod(String)

AS only offered plain PKCE or omitted code_challenge_methods_supported.

Internal(String)

Internal / configuration errors that are not caller-recoverable.

Implementations

impl OauthError

pub fn kind(&self) -> &'static str

Stable kind string for structured log / envelope fields.

pub const fn http_status_code(&self) -> u16

Transport-neutral HTTP status code for this error.

Returns a bare u16 rather than axum::http::StatusCode so the upstream OAuth runtime carries no transport dependency; the product binary maps it onto its own response type at the route boundary.

Trait Implementations

impl Debug for OauthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for OauthError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for OauthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.