oauth2-lib's Introduction

oauth2-lib

This is an OAuth 2.0 library for the Rust language. It defines types and traits useful for implementing an OAuth 2.0 compliant system as specified by RFC 6749.

The current implementation allows you to build the most common and most secure type of OAuth 2.0 infrastructure, but is not complete, and may not be absolutely correct. Please file bug reports or pull requests if you notice any deviation from RFC 6749, or if you have any other issues.

Stability Note

This library is still undergoing heavy upheaval. I don't recommend using it yet unless you are a masochist. -Mike, 25 May 2016

License

Licensed under either of

Apache License, Version 2.0, (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

oauth2-lib's People

Contributors

Stargazers

Watchers

Forkers

jjl

oauth2-lib's Issues

Move away from String types

Strongly type the various data, and use the syntax rules on it.

Support refresh tokens

Make hyper optional

Move the API layer lower so that hyper is not involved at the core. Then implement a hyper layer above it for convenience.

Improve tests by checking that the entire sequence ran

Right now, the tests just look at the final HTTP status code. But we can get false positives if the sequence failed to run and we happen to get the same status code.

The plan is to store in the client and server bits that we turn on when their various bits of code have run. The test then needs to check those bits are all true.

Recommend Projects