Information about an authenticated account.

Client metadata discovery, PKCE validation, and client assertion validation.

JSON API endpoints for consent UI frontend.

Server-side DPoP (Demonstration of Proof-of-Possession) proof validation. Validates JWT proofs per RFC 9449, ensuring the client possesses the private key corresponding to the public key in the proof header.

OAuth HTTP endpoint handlers. Each handler is a pure function taking EndpointDeps and returning an HttpContext -> Task.

Grant type for OAuth token requests.

Store for user account authentication and lookup.

In-memory account store using ConcurrentDictionary. Suitable for development and testing.

In-memory replay detection store using ConcurrentDictionary. Suitable for development and testing.

In-memory request store using ConcurrentDictionary. Suitable for development and testing.

In-memory token store using ConcurrentDictionary. Suitable for development and testing.

Store for DPoP/nonce replay detection.

Store for pending authorization requests.

Store for authorization tokens.

Credentials provided during user sign-in.

Scopes module for AT Protocol OAuth scope handling.

Server builder for composing the OAuth authorization server.

Configuration for the OAuth authorization server.

Error type for OAuth server operations.

Data stored for an in-progress authorization request.

Data stored for an issued token.

Access token JWT creation and signing.