Struct OAuthIdTokenConfig 

pub struct OAuthIdTokenConfig {
    pub issuers: Vec<String>,
    pub audience: Option<Vec<String>>,
    pub client_ids: Option<Vec<String>>,
    pub jwks_source: Arc<dyn OAuthJwksSource>,
    pub max_age_secs: Option<u64>,
    pub allow_opaque_token: bool,
    pub algorithm: Option<Algorithm>,
    pub selection: OAuthJwksSelection,
    pub nonce_comparison: OAuthNonceComparison,
    pub verify_claims: Option<Arc<dyn OAuthIdTokenClaimsVerifier>>,
}

Trusted provider policy. An explicit audience overrides provider client IDs.

Fields

issuers: Vec<String>

audience: Option<Vec<String>>

client_ids: Option<Vec<String>>

Explicit client-ID array supplied by the provider builder, including an empty array.

jwks_source: Arc<dyn OAuthJwksSource>

max_age_secs: Option<u64>

When absent, issued-at is optional and is not bounded by token age.

allow_opaque_token: bool

Permits opaque candidates; the provider must independently authenticate the access token in its actual user-info operation before admission.

algorithm: Option<Algorithm>

Fixed import algorithm, or the JWK’s declared algorithm for Apple.

selection: OAuthJwksSelection

nonce_comparison: OAuthNonceComparison

verify_claims: Option<Arc<dyn OAuthIdTokenClaimsVerifier>>

A trusted additional policy, including tenant binding for multi-tenant issuers. Empty fixed issuers require this policy and otherwise fail closed.

Implementations

impl OAuthIdTokenConfig

pub fn google() -> Self

pub fn apple() -> Self

Trait Implementations

impl Clone for OAuthIdTokenConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthIdTokenConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.