Enum AuthConfig 

pub enum AuthConfig {
    None,
    ApiKey {
        query_params: HashMap<String, String>,
        headers: HashMap<String, String>,
        required: bool,
    },
    Bearer {
        token: String,
        required: bool,
    },
    Basic {
        username: String,
        password: String,
        required: bool,
    },
    OAuth2ClientCredentials {
        token_url: String,
        client_id: String,
        client_secret: String,
        scopes: Vec<String>,
        required: bool,
    },
    OAuthPassthrough {
        target_header: String,
        required: bool,
    },
}

Outgoing-HTTP authentication configuration (OAPI-03 / D-05).

Lifted near-verbatim from the pmcp-run reference AuthConfig. The #[serde(tag = "type", rename_all = "snake_case")] shape means a config.toml [backend.auth] block selects the variant via type = "..." (none, api_key, bearer, basic, oauth2_client_credentials, oauth_passthrough). Default is AuthConfig::None.

Variants

None

No authentication.

ApiKey

API key passed as query parameters and/or headers.

Fields

query_params: HashMap<String, String>

API key values carried as query parameters.

headers: HashMap<String, String>

API key values carried as headers.

required: bool

Whether authentication is required.

Bearer

Bearer token (Authorization: Bearer <token>).

Fields

token: String

Token value. Supports a ${VAR} or env:VAR reference resolved from the process environment at provider-build time (an unset reference collapses to no-auth; the literal placeholder never reaches the wire).

required: bool

Whether authentication is required.

Basic

HTTP Basic auth (Authorization: Basic <base64(user:pass)>).

Fields

username: String

Username. Supports a ${VAR} / env:VAR reference (resolved at provider-build time) for symmetry with password.

password: String

Password. Supports a ${VAR} or env:VAR reference resolved from the process environment at provider-build time (the literal placeholder never reaches the wire).

required: bool

Whether authentication is required.

OAuth2ClientCredentials

OAuth2 client-credentials grant.

rename_all = "snake_case" derives the tag o_auth2_client_credentials, but the documented config form (README, line-56 doc comment) is type = "oauth2_client_credentials". The alias accepts the documented spelling so [backend.auth] configs deserialize as documented.

Fields

token_url: String

Token endpoint URL.

client_id: String

Client ID. Supports a ${VAR} / env:VAR reference resolved at provider-build time.

client_secret: String

Client secret. Supports a ${VAR} or env:VAR reference resolved from the process environment at provider-build time (the literal placeholder never reaches the token endpoint).

scopes: Vec<String>

Requested scopes.

required: bool

Whether authentication is required.

OAuthPassthrough

Forward the INCOMING MCP client token to the backend (SSO passthrough, H1).

rename_all = "snake_case" derives the tag o_auth_passthrough, but the documented config form (README, line-56 doc comment) is type = "oauth_passthrough". The alias accepts the documented spelling so [backend.auth] configs deserialize as documented.

Fields

target_header: String

Outgoing header to set (default Authorization).

required: bool

Whether to fail when no inbound token is present.

Implementations

impl AuthConfig

pub fn is_required(&self) -> bool

Whether this configuration requires authentication to succeed.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> AuthConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthConfig

fn eq(&self, other: &AuthConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuthConfig

impl StructuralPartialEq for AuthConfig