Enum AppEndpointAuthProviderConfig 

pub enum AppEndpointAuthProviderConfig {
    GoogleOidc {
        client_id: String,
        allowed_domains: Vec<String>,
    },
    Oidc {
        issuer: String,
        jwks_url: Option<String>,
    },
    OAuth2Introspection {
        introspection_url: String,
        client_id: Option<String>,
        client_secret: Option<String>,
    },
    HttpBasic {
        username: String,
        password: Option<String>,
        password_hash: Option<String>,
    },
    Mtls {
        header_name: String,
        allowed_values: Vec<String>,
        proxy_secret_header: Option<String>,
        proxy_secret: Option<String>,
    },
}

OIDC/OAuth/basic/mTLS provider details for one App endpoint.

Variants

GoogleOidc

Fields

client_id: String

allowed_domains: Vec<String>

Oidc

Fields

issuer: String

jwks_url: Option<String>

OAuth2Introspection

Fields

introspection_url: String

client_id: Option<String>

client_secret: Option<String>

HttpBasic

Fields

username: String

password: Option<String>

password_hash: Option<String>

Mtls

Fields

header_name: String

allowed_values: Vec<String>

proxy_secret_header: Option<String>

Header the trusted reverse proxy uses to prove its identity. Required. Configs without this field fail closed at verification time.

proxy_secret: Option<String>

Shared secret the trusted proxy includes in proxy_secret_header. Write-only: redacted in GET responses. See TM-AUTH-021.

Trait Implementations

impl Clone for AppEndpointAuthProviderConfig

fn clone(&self) -> AppEndpointAuthProviderConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AppEndpointAuthProviderConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AppEndpointAuthProviderConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AppEndpointAuthProviderConfig

impl PartialEq for AppEndpointAuthProviderConfig

fn eq(&self, other: &AppEndpointAuthProviderConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AppEndpointAuthProviderConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AppEndpointAuthProviderConfig