Be a bit more consistent about 'token', the whole record, versus 'secret', the value in that record used to verify logins.

1 files changed, 2 insertions, 2 deletions

diff --git a/src/login/extract/login.rs b/src/login/extract/login.rs
index 405aea8..da0a90e 100644
--- a/src/login/extract/login.rs
+++ b/src/login/extract/login.rs
@@ -29,12 +29,12 @@ impl FromRequestParts<SqlitePool> for Login {
         let identity_token = IdentityToken::from_request_parts(parts, state).await?;
         let RequestedAt(requested_at) = RequestedAt::from_request_parts(parts, state).await?;
 
-        let token = identity_token.token().ok_or(LoginError::Forbidden)?;
+        let secret = identity_token.secret().ok_or(LoginError::Forbidden)?;
 
         let db = State::<SqlitePool>::from_request_parts(parts, state).await?;
         let mut tx = db.begin().await?;
         tx.tokens().expire(requested_at).await?;
-        let login = tx.tokens().validate(token, requested_at).await?;
+        let login = tx.tokens().validate(secret, requested_at).await?;
         tx.commit().await?;
 
         login.ok_or(LoginError::Forbidden)