Struct OAuth2 

pub struct OAuth2 {
    pub enabled: bool,
    pub issuer_url: Option<String>,
    pub client_id: Option<String>,
    pub client_secret: Option<String>,
    pub scopes: Vec<String>,
    pub auto_provision_users: bool,
    pub admin_group_claim: Option<String>,
    pub admin_group_value: Option<String>,
    pub read_only_group_claim: Option<String>,
    pub read_only_group_value: Option<String>,
    pub button_text: String,
}

OAuth2/OpenID Connect authentication configuration

Fields

enabled: bool

Enable OAuth2/OIDC authentication

issuer_url: Option<String>

OIDC issuer URL (discovery URL, e.g., <https://authentik.example.com/application/o/kellnr/>)

client_id: Option<String>

OAuth2 client ID

client_secret: Option<String>

OAuth2 client secret (prefer setting via KELLNR_OAUTH2__CLIENT_SECRET env var)

scopes: Vec<String>

OAuth2 scopes to request (default: ["openid", "profile", "email"])

auto_provision_users: bool

Automatically create local user accounts for new OAuth2 users

admin_group_claim: Option<String>

Claim name to check for admin group membership (e.g., “groups”)

admin_group_value: Option<String>

Value in the admin group claim that grants admin privileges (e.g., “kellnr-admins”)

read_only_group_claim: Option<String>

Claim name to check for read-only group membership (e.g., “groups”)

read_only_group_value: Option<String>

Value in the read-only group claim that grants read-only access (e.g., “kellnr-readonly”)

button_text: String

Text displayed on the OAuth2 login button

Implementations

impl OAuth2

pub fn validate(&self) -> Result<(), String>

Validate the OAuth2 configuration Returns an error message if the configuration is invalid

Trait Implementations

impl ClapSerde for OAuth2

type Opt = ClapSerdeOptionalOAuth2

The same struct of the parent but with optional fields.

fn update(&mut self, other: impl BorrowMut<Self::Opt>)

Merge in place from Opt struct.

fn merge(self, other: impl BorrowMut<Self::Opt>) -> Self

Merge from Opts struct.

fn merge_clap(self) -> Self

Merge from clap to the object.

fn from_clap() -> Self

Create new object parsing from clap.

impl Clone for OAuth2

fn clone(&self) -> OAuth2

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuth2

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OAuth2

fn default() -> Self

Create default OAuth2

impl<'de> Deserialize<'de> for OAuth2

where OAuth2: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<&mut <OAuth2 as ClapSerde>::Opt> for OAuth2

fn from(data: &mut <Self as ClapSerde>::Opt) -> Self

Create new object from &mut Opt.

impl From<<OAuth2 as ClapSerde>::Opt> for OAuth2

fn from(data: <Self as ClapSerde>::Opt) -> Self

Create new object from Opt.

impl PartialEq for OAuth2

fn eq(&self, other: &OAuth2) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OAuth2

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for OAuth2

impl StructuralPartialEq for OAuth2