Struct GoogleOidcClient 

pub struct GoogleOidcClient { /* private fields */ }

Implementations

impl GoogleOidcClient

pub async fn new() -> Result<Self, Box<dyn Error>>

Creates a new Google OIDC client by performing discovery.

Errors

Returns an error if:

• GOOGLE_CLIENT_ID or GOOGLE_CLIENT_SECRET environment variables are malformed.
• The reqwest HTTP client cannot be initialized.
• OIDC discovery fails (e.g., network issues, Google’s discovery endpoint is unreachable).

pub fn verify_token( &self, id_token: &str, nonce: &str, ) -> Result<CoreIdTokenClaims, Status>

Verifies a Google ID token and returns its claims.

Errors

Returns a tonic::Status with Unauthenticated if:

• The ID token is malformed and cannot be parsed.
• The ID token signature is invalid.
• The ID token claims (issuer, audience, expiry) are invalid.