Struct OidcClientConfig 

pub struct OidcClientConfig {
    pub discovery_url: String,
    pub client_id: String,
    pub client_secret_env: String,
    pub server_redirect_uri: String,
}

OAuth2 client configuration for server-side PKCE flows.

The client secret is intentionally absent — use client_secret_env to name the environment variable that holds the secret at runtime.

[auth]
discovery_url       = "https://accounts.google.com"
client_id           = "my-fraiseql-client"
client_secret_env   = "OIDC_CLIENT_SECRET"
server_redirect_uri = "https://api.example.com/auth/callback"

Fields

discovery_url: String

OIDC provider discovery URL (e.g. "https://accounts.google.com"). Used to fetch authorization_endpoint and token_endpoint at compile time.

client_id: String

OAuth2 client_id registered with the provider.

client_secret_env: String

Name of the environment variable that holds the client secret. The secret itself must never appear in TOML or the compiled schema.

server_redirect_uri: String

The full URL of this server’s /auth/callback endpoint, e.g. "https://api.example.com/auth/callback".

Trait Implementations

impl Clone for OidcClientConfig

fn clone(&self) -> OidcClientConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcClientConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OidcClientConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for OidcClientConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.