Struct OAuth2Handler 

pub struct OAuth2Handler { /* private fields */ }

OAuth2/OIDC authentication handler

Implementations

impl OAuth2Handler

pub async fn from_discovery( settings: &OAuth2Settings, redirect_url: &str, ) -> Result<Self, OAuth2Error>

Create a new OAuth2Handler using OIDC discovery

This performs automatic discovery of the OIDC provider’s configuration using the well-known endpoint.

pub fn generate_auth_url(&self) -> AuthRequest

Generate an authorization URL for the OAuth2 flow

Returns an AuthRequest containing the URL to redirect the user to, along with the state, PKCE verifier, and nonce that must be stored for later verification.

pub async fn exchange_and_validate( &self, code: &str, pkce_verifier: &str, nonce: &str, ) -> Result<TokenResult, OAuth2Error>

Exchange an authorization code for tokens and validate the ID token

Arguments

• code - The authorization code received from the provider
• pkce_verifier - The PKCE verifier stored during generate_auth_url
• nonce - The nonce stored during generate_auth_url

Returns

The validated ID token claims

pub fn extract_user_info(&self, result: &TokenResult) -> UserInfo

Extract user information from ID token claims

This extracts the subject, email, preferred_username, and group membership based on the OAuth2 settings configuration.

pub fn generate_username(user_info: &UserInfo) -> String

Generate a unique username for auto-provisioning

Priority:

1. preferred_username claim
2. Local part of email (before @)
3. Subject claim

pub fn issuer_url(&self) -> &str

Get the issuer URL string

pub fn settings(&self) -> &OAuth2Settings

Get a reference to the settings