Struct ProviderConfig 

pub struct ProviderConfig {

    pub provider_type: ProviderType,
    pub client_id: String,
    pub client_secret: String,
    pub issuer_url: String,
    pub authorization_endpoint: Option<String>,
    pub token_endpoint: Option<String>,
    pub userinfo_endpoint: Option<String>,
    pub device_authorization_endpoint: Option<String>,
    pub jwks_uri: Option<String>,
    pub scopes: Vec<String>,
    pub allowed_domains: Vec<String>,
    pub required_groups: Vec<String>,
    pub group_claim: String,
    pub email_claim: String,
    pub name_claim: String,
    pub additional_params: HashMap<String, String>,
}

Provider configuration

Fields

provider_type: ProviderType

Provider type

client_id: String

OAuth2 Client ID

client_secret: String

OAuth2 Client Secret (encrypted at rest)

issuer_url: String

Issuer URL (for OIDC discovery)

authorization_endpoint: Option<String>

Authorization endpoint (optional, discovered via OIDC)

token_endpoint: Option<String>

Token endpoint (optional, discovered via OIDC)

userinfo_endpoint: Option<String>

UserInfo endpoint (optional)

device_authorization_endpoint: Option<String>

Device authorization endpoint (for device flow)

jwks_uri: Option<String>

JWKS URI for token validation

scopes: Vec<String>

Scopes to request

allowed_domains: Vec<String>

Allowed domains (empty = all allowed)

required_groups: Vec<String>

Required groups (user must be in at least one)

group_claim: String

Group claim name in ID token

email_claim: String

Email claim name in ID token

name_claim: String

Name claim name in ID token

additional_params: HashMap<String, String>

Additional parameters for authorization URL

Implementations

impl ProviderConfig

pub fn google( client_id: &str, client_secret: &str, allowed_domain: Option<&str>, ) -> Self

Create a Google provider configuration

pub fn microsoft(client_id: &str, client_secret: &str, tenant_id: &str) -> Self

Create a Microsoft provider configuration

pub fn okta( client_id: &str, client_secret: &str, domain: &str, auth_server_id: Option<&str>, ) -> Self

Create an Okta provider configuration

pub fn generic(client_id: &str, client_secret: &str, issuer_url: &str) -> Self

Create a generic OIDC provider configuration

pub fn validate(&self) -> Result<()>

Validate configuration

Trait Implementations

impl Clone for ProviderConfig

fn clone(&self) -> ProviderConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProviderConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProviderConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ProviderConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.