Struct ClientAssertionCredential

pub struct ClientAssertionCredential { /* private fields */ }

Client Credentials Using an Assertion.

The OAuth 2.0 client credentials grant flow permits a web service (confidential client) to use its own credentials, instead of impersonating a user, to authenticate when calling another web service.

Everything in the request is the same as the certificate-based flow, with the crucial exception of the source of the client_assertion. In this flow, your application does not create the JWT assertion itself. Instead, your app uses a JWT created by another identity provider. This is called workload identity federation, where your apps identity in another identity platform is used to acquire tokens inside the Microsoft identity platform. This is best suited for cross-cloud scenarios, such as hosting your compute outside Azure but accessing APIs protected by Microsoft identity platform. For information about the required format of JWTs created by other identity providers, read about the assertion format. https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow#third-case-access-token-request-with-a-federated-credential

Implementations

impl ClientAssertionCredential

pub fn new( tenant_id: impl AsRef<str>, client_id: impl AsRef<str>, assertion: impl AsRef<str>, ) -> ClientAssertionCredential

Trait Implementations

impl Clone for ClientAssertionCredential

fn clone(&self) -> ClientAssertionCredential

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientAssertionCredential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<ClientAssertionCredential> for ConfidentialClientApplication<ClientAssertionCredential>

fn from(value: ClientAssertionCredential) -> Self

Converts to this type from the input type.

impl TokenCache for ClientAssertionCredential

type Token = Token

fn get_token_silent(&mut self) -> Result<Self::Token, AuthExecutionError>

fn get_token_silent_async<'life0, 'async_trait>( &'life0 mut self, ) -> Pin<Box<dyn Future<Output = Result<Self::Token, AuthExecutionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

fn with_force_token_refresh(&mut self, force_token_refresh: ForceTokenRefresh)

impl TokenCredentialExecutor for ClientAssertionCredential

fn form_urlencode(&mut self) -> IdentityResult<HashMap<String, String>>

fn client_id(&self) -> &Uuid

fn authority(&self) -> Authority

fn azure_cloud_instance(&self) -> AzureCloudInstance

fn app_config(&self) -> &AppConfig

fn uri(&mut self) -> IdentityResult<Url>

fn request_parts(&mut self) -> IdentityResult<AuthorizationRequestParts>

fn build_request(&mut self) -> AuthExecutionResult<RequestBuilder>

fn build_request_async(&mut self) -> AuthExecutionResult<RequestBuilder>

fn basic_auth(&self) -> Option<(String, String)>

fn extra_header_parameters(&self) -> &HeaderMap

fn issuer(&self) -> Result<Url, ParseError>

fn extra_query_parameters(&self) -> &HashMap<String, String>

fn execute(&mut self) -> AuthExecutionResult<Response>

fn execute_async<'life0, 'async_trait>( &'life0 mut self, ) -> Pin<Box<dyn Future<Output = AuthExecutionResult<Response>> + Send + 'async_trait>>

where Self: Send + 'async_trait, 'life0: 'async_trait,