Struct IdentityProviderRegistration 

pub struct IdentityProviderRegistration {

    pub tenant_id: String,
    pub provider_id: String,
    pub jwks_url: Url,
    pub require_https: bool,
    pub allowed_domains: Vec<String>,
    pub refresh_early: Duration,
    pub stale_while_error: Duration,
    pub min_ttl: Duration,
    pub max_ttl: Duration,
    pub max_response_bytes: u64,
    pub negative_cache_ttl: Duration,
    pub max_redirects: u8,
    pub pinned_spki: Vec<SpkiFingerprint>,
    pub prefetch_jitter: Duration,
    pub retry_policy: RetryPolicy,
}

Registration describing how to fetch and maintain JWKS for a provider.

Fields

tenant_id: String

Tenant identifier used for metrics, caching, and persistence scope.

provider_id: String

Provider identifier unique within the tenant.

jwks_url: Url

URL of the JWKS endpoint to fetch signing keys from.

require_https: bool

Whether HTTPS is required for JWKS retrieval.

allowed_domains: Vec<String>

Optional allowlist of domains permitted for redirects.

refresh_early: Duration

Lead time before expiry to trigger proactive refresh.

stale_while_error: Duration

Duration to continue serving stale data when refresh fails.

min_ttl: Duration

Minimum TTL applied to upstream responses.

max_ttl: Duration

Maximum TTL applied to upstream responses.

max_response_bytes: u64

Maximum size allowed for JWKS payloads in bytes.

negative_cache_ttl: Duration

TTL applied when persisting negative cache outcomes.

max_redirects: u8

Maximum number of redirects to follow during fetch.

pinned_spki: Vec<SpkiFingerprint>

Optional SPKI fingerprints used for TLS pinning.

prefetch_jitter: Duration

Random jitter applied when scheduling proactive refreshes.

retry_policy: RetryPolicy

Retry policy configuration for JWKS fetch attempts.

Implementations

impl IdentityProviderRegistration

pub fn new( tenant_id: impl Into<String>, provider_id: impl Into<String>, jwks_url: impl AsRef<str>, ) -> Result<Self>

Construct a new registration with default cache settings.

pub fn normalize_allowed_domains(&mut self)

Canonicalise the domain allowlist in-place.

pub fn with_require_https(self, require_https: bool) -> Self

Set HTTPS requirement to the desired value.

pub fn validate(&self) -> Result<()>

Validate the registration against the documented constraints.

Trait Implementations

impl Clone for IdentityProviderRegistration

fn clone(&self) -> IdentityProviderRegistration

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityProviderRegistration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for IdentityProviderRegistration

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IdentityProviderRegistration

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.