Struct CustomJwtAuthorizerConfiguration 

#[non_exhaustive]
pub struct CustomJwtAuthorizerConfiguration {
    pub discovery_url: String,
    pub allowed_audience: Option<Vec<String>>,
    pub allowed_clients: Option<Vec<String>>,
    pub allowed_scopes: Option<Vec<String>>,
    pub custom_claims: Option<Vec<CustomClaimValidationType>>,
    pub private_endpoint: Option<PrivateEndpoint>,
    pub private_endpoint_overrides: Option<Vec<PrivateEndpointOverride>>,
}

Configuration for a custom JWT authorizer that validates inbound bearer tokens against an OpenID Connect identity provider.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

discovery_url: String

The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.

allowed_audience: Option<Vec<String>>

The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.

allowed_clients: Option<Vec<String>>

The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.

allowed_scopes: Option<Vec<String>>

The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.

custom_claims: Option<Vec<CustomClaimValidationType>>

Additional custom claim validations applied to the inbound JWT.

private_endpoint: Option<PrivateEndpoint>

The private endpoint used to reach the identity provider's discovery URL over a private network path.

private_endpoint_overrides: Option<Vec<PrivateEndpointOverride>>

Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.

Implementations

impl CustomJwtAuthorizerConfiguration

pub fn discovery_url(&self) -> &str

The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.

pub fn allowed_audience(&self) -> &[String]

The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .allowed_audience.is_none().

pub fn allowed_clients(&self) -> &[String]

The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .allowed_clients.is_none().

pub fn allowed_scopes(&self) -> &[String]

The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .allowed_scopes.is_none().

pub fn custom_claims(&self) -> &[CustomClaimValidationType]

Additional custom claim validations applied to the inbound JWT.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .custom_claims.is_none().

pub fn private_endpoint(&self) -> Option<&PrivateEndpoint>

The private endpoint used to reach the identity provider's discovery URL over a private network path.

pub fn private_endpoint_overrides(&self) -> &[PrivateEndpointOverride]

Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .private_endpoint_overrides.is_none().

impl CustomJwtAuthorizerConfiguration

pub fn builder() -> CustomJwtAuthorizerConfigurationBuilder

Creates a new builder-style object to manufacture CustomJwtAuthorizerConfiguration.

Trait Implementations

impl Clone for CustomJwtAuthorizerConfiguration

fn clone(&self) -> CustomJwtAuthorizerConfiguration

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CustomJwtAuthorizerConfiguration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CustomJwtAuthorizerConfiguration

fn eq(&self, other: &CustomJwtAuthorizerConfiguration) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CustomJwtAuthorizerConfiguration