Struct OidcClient 

pub struct OidcClient { /* private fields */ }

Thin wrapper around OpenID Connect provider discovery and RP interactions.

Implementations

impl OidcClient

pub async fn discover(issuer: &Url) -> Result<Self, OidcError>

Discovers the provider configuration and JSON Web Key Set for issuer.

pub fn set_client_credentials( &mut self, client_id: impl Into<String>, client_secret: Option<String>, ) -> Result<(), OidcError>

Configures the OAuth client credentials.

pub fn auth_url( &self, redirect: &Url, scopes: &[&str], ) -> Result<(Url, PkceState), OidcError>

Returns the authorization URL and PKCE material for the authorization code flow.

pub async fn exchange_code( &self, code: &str, pkce: &PkceState, redirect: &Url, ) -> Result<TokenSet, OidcError>

Exchanges the authorization code for tokens.

pub fn validate_id_token( &self, id_token: &str, expected_nonce: &str, ) -> Result<IdClaims, OidcError>

Validates an ID token using the downloaded JWKS.

pub async fn refresh(&self, refresh_token: &str) -> Result<TokenSet, OidcError>

Refreshes an access token using the refresh token.

pub async fn revoke( &self, token: &str, token_type_hint: Option<&str>, ) -> Result<(), OidcError>

Revokes a refresh or access token.

pub fn end_session_url( &self, id_token_hint: &str, post_logout_redirect_uri: &Url, ) -> Result<Url, OidcError>

Constructs the provider’s end-session URL.

Trait Implementations

impl Clone for OidcClient

fn clone(&self) -> OidcClient

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.