Struct CustomOidcSocialProvider 

pub struct CustomOidcSocialProvider { /* private fields */ }

Generic OIDC-compliant social provider.

Supports any IdP that publishes an OIDC discovery document or accepts explicit authorize_url / token_url / userinfo_url configuration.

Exactly one of discovery / pinned_endpoints is Some after construction; the other is always None.

Implementations

impl CustomOidcSocialProvider

pub async fn new(config: SocialProviderConfig) -> Result<Self, AuthError>

Build a CustomOidcSocialProvider from a decrypted config.

For the discovery_url path this performs one HTTP round-trip to fetch the discovery document. The HTTP client is built with a 15-second timeout and a User-Agent: allowthem-oauth header.

Returns AuthError::Validation for config problems; AuthError::OAuthHttp for discovery-fetch failures.

Trait Implementations

impl Debug for CustomOidcSocialProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SocialProvider for CustomOidcSocialProvider

fn authorize_url( &self, redirect_uri: &str, state: &str, pkce_challenge: &str, ) -> String

Build the OIDC authorization redirect URL.

Reads from the cached discovery doc (sync read-lock). The cache is always populated by new(), so the doc may be stale if the IdP rotated endpoints after the last refresh, but endpoint rotation within a single TTL window is an IdP misconfiguration, not a normal event.

fn provider_type(&self) -> ProviderType

Which provider type this instance represents.

fn exchange_code<'a>( &'a self, code: &'a str, redirect_uri: &'a str, pkce_verifier: &'a str, ) -> AuthFuture<'a, String>

Exchange an authorization code for an access token.

fn fetch_user_info<'a>( &'a self, access_token: &'a str, ) -> AuthFuture<'a, SocialUserInfo>

Fetch the authenticated user’s identity using the access token.