Struct ACLAuthMethodConfig

pub struct ACLAuthMethodConfig {

    pub oidc_discovery_url: String,
    pub expiration_leeway: TimeDelta,
    pub clock_skew_leeway: TimeDelta,
    pub jwksurl: String,
    pub bound_audiences: Vec<String>,
    pub allowed_redirect_ur_is: Vec<String>,
    pub signing_algs: Vec<String>,
    pub claim_mappings: HashMap<String, String>,
    pub list_claim_mappings: HashMap<String, String>,
    pub oidc_client_id: String,
    pub oidc_disable_user_info: bool,
    pub oidc_scopes: Vec<String>,
    pub jwt_validation_pub_keys: Vec<String>,
    pub bound_issuer: Vec<String>,
    pub discovery_ca_pem: Vec<String>,
    pub jwksca_cert: String,
    pub not_before_leeway: TimeDelta,
    pub oidc_client_secret: String,
}

ACLAuthMethodConfig is used to store configuration of an auth method.

This struct was generated based on the Go types of the official Nomad API.

Fields

oidc_discovery_url: String

The OIDC Discovery URL, without any .well-known component (base path)

expiration_leeway: TimeDelta

Duration in seconds of leeway when validating expiration of a token to account for clock skew

clock_skew_leeway: TimeDelta

Duration in seconds of leeway when validating all claims to account for clock skew.

jwksurl: String

JSON Web Key Sets url for authenticating signatures

bound_audiences: Vec<String>

List of auth claims that are valid for login

allowed_redirect_ur_is: Vec<String>

A list of allowed values for redirect_uri

signing_algs: Vec<String>

A list of supported signing algorithms

claim_mappings: HashMap<String, String>

Mappings of claims (key) that will be copied to a metadata field (value).

list_claim_mappings: HashMap<String, String>

oidc_client_id: String

The OAuth Client ID configured with the OIDC provider

oidc_disable_user_info: bool

Disable claims from the OIDC UserInfo endpoint

oidc_scopes: Vec<String>

List of OIDC scopes

jwt_validation_pub_keys: Vec<String>

A list of PEM-encoded public keys to use to authenticate signatures locally

bound_issuer: Vec<String>

The value against which to match the iss claim in a JWT

discovery_ca_pem: Vec<String>

PEM encoded CA certs for use by the TLS client used to talk with the OIDC Discovery URL.

jwksca_cert: String

PEM encoded CA cert for use by the TLS client used to talk with the JWKS URL

not_before_leeway: TimeDelta

Duration in seconds of leeway when validating not before values of a token to account for clock skew.

oidc_client_secret: String

The OAuth Client Secret configured with the OIDC provider

Trait Implementations

impl Clone for ACLAuthMethodConfig

fn clone(&self) -> ACLAuthMethodConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ACLAuthMethodConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ACLAuthMethodConfig

fn default() -> ACLAuthMethodConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ACLAuthMethodConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ACLAuthMethodConfig

fn eq(&self, other: &ACLAuthMethodConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ACLAuthMethodConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ACLAuthMethodConfig