API Reference wardrik_oauth v#0.1.0-rc.1

OAuth sign-in for WardrikCore agents. Grants are sealed in a WardrikVault.

Browser sign-in: the authorization code flow with PKCE, on the service's own page.

Seals client secrets in the vault, not the store.

Device sign-in (RFC 8628): the principal enters a code on any device.

A process for one sign-in under way. It ends when the principal finishes, or after 15 minutes.

An authorization server's metadata, discovered from its issuer or resource.

Serves the sign-in pages. Mount it at WardrikOAuth's page.

An OAuth app with a service. It has the same name as the credential it grants.

Makes Wardrik a client of an authorization server it has no client_id for.

Keeps a principal's grant usable by refreshing it when it expires.

Sends a flow's requests to an authorization server.

A token an authorization server granted. Kept in the vault as JSON.