Struct OAuthClientConfig 

pub struct OAuthClientConfig {
    pub token_endpoint: Option<Url>,
    pub issuer_url: Option<Url>,
    pub client_id: String,
    pub client_secret: SecretString,
    pub scopes: Vec<String>,
    pub auth_method: ClientAuthMethod,
    pub extra_headers: Vec<(String, String)>,
    pub refresh_offset: Duration,
    pub jitter_max: Duration,
    pub min_refresh_period: Duration,
    pub default_ttl: Duration,
    pub http_config: Option<HttpClientConfig>,
}

Configuration for an outbound OAuth2 client credentials flow.

Exactly one of token_endpoint or issuer_url must be set. Call validate to enforce this constraint.

Debug is manually implemented to redact client_secret.

Fields

token_endpoint: Option<Url>

Direct token endpoint URL (mutually exclusive with issuer_url).

issuer_url: Option<Url>

OIDC issuer URL for discovery (mutually exclusive with token_endpoint). The actual token endpoint is resolved via {issuer_url}/.well-known/openid-configuration.

client_id: String

OAuth2 client identifier.

client_secret: SecretString

OAuth2 client secret (redacted in Debug output).

scopes: Vec<String>

Requested scopes (normalized once, stable order).

auth_method: ClientAuthMethod

How client credentials are transmitted to the token endpoint.

extra_headers: Vec<(String, String)>

Extra headers attached to every token request (vendor quirks).

refresh_offset: Duration

How far before expiry the token should be refreshed (default: 30 min).

jitter_max: Duration

Maximum random jitter added to the refresh offset (default: 5 min).

min_refresh_period: Duration

Minimum period between consecutive refresh attempts (default: 10 s).

default_ttl: Duration

Fallback TTL when the token endpoint omits expires_in (default: 5 min).

http_config: Option<HttpClientConfig>

Override for the internal HTTP client configuration. When None, HttpClientConfig::token_endpoint() is used.

Implementations

impl OAuthClientConfig

pub fn validate(&self) -> Result<(), TokenError>

Validate that the configuration is self-consistent.

Errors

Returns TokenError::ConfigError if:

• both token_endpoint and issuer_url are set, or
• neither is set.

Trait Implementations

impl Clone for OAuthClientConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthClientConfig

Debug redacts client_secret to prevent accidental exposure in logs.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OAuthClientConfig

fn default() -> Self

Returns the “default value” for a type.