Struct ClientSecretCredential 

pub struct ClientSecretCredential { /* private fields */ }

Authenticates a confidential client via the OAuth2 client-credentials flow (POST {authority}/{tenant}/oauth2/v2.0/token).

Implementations

impl ClientSecretCredential

pub fn new( tenant_id: impl Into<String>, client_id: impl Into<String>, client_secret: impl Into<String>, scope: impl Into<String>, ) -> Self

Create a client-secret credential for the given tenant/app registration, acquiring tokens for scope.

pub fn with_authority(self, authority: impl Into<String>) -> Self

Override the Entra authority (default DEFAULT_AUTHORITY) — e.g. a sovereign cloud, or a loopback in tests.

Trait Implementations

impl TokenCredential for ClientSecretCredential

fn get_token<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<String>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch a bearer token to send as Authorization: Bearer <token>.

fn get_token_for_scope<'life0, 'life1, 'async_trait>( &'life0 self, scope: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<String>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Fetch a bearer token for a specific scope (audience), e.g. "https://ai.azure.com/.default".