Struct AclAuthMethodConfig

pub struct AclAuthMethodConfig {

    pub jwksurl: String,
    pub oidc_scopes: Vec<String>,
    pub signing_algs: Vec<String>,
    pub not_before_leeway: TimeDelta,
    pub claim_mappings: HashMap<String, String>,
    pub jwt_validation_pub_keys: Vec<String>,
    pub oidc_discovery_url: String,
    pub oidc_client_id: String,
    pub discovery_ca_pem: Vec<String>,
    pub jwksca_cert: String,
    pub clock_skew_leeway: TimeDelta,
    pub oidc_disable_user_info: bool,
    pub bound_audiences: Vec<String>,
    pub bound_issuer: Vec<String>,
    pub allowed_redirect_ur_is: Vec<String>,
    pub expiration_leeway: TimeDelta,
    pub list_claim_mappings: HashMap<String, String>,
    pub oidc_client_secret: String,
}

ACLAuthMethodConfig is used to store configuration of an auth method.

This struct was generated based on the Go types of the official Nomad API client.

Fields

jwksurl: String

JSON Web Key Sets url for authenticating signatures

oidc_scopes: Vec<String>

List of OIDC scopes

signing_algs: Vec<String>

A list of supported signing algorithms

not_before_leeway: TimeDelta

Duration in seconds of leeway when validating not before values of a token to account for clock skew.

claim_mappings: HashMap<String, String>

Mappings of claims (key) that will be copied to a metadata field (value).

jwt_validation_pub_keys: Vec<String>

A list of PEM-encoded public keys to use to authenticate signatures locally

oidc_discovery_url: String

The OIDC Discovery URL, without any .well-known component (base path)

oidc_client_id: String

The OAuth Client ID configured with the OIDC provider

discovery_ca_pem: Vec<String>

PEM encoded CA certs for use by the TLS client used to talk with the OIDC Discovery URL.

jwksca_cert: String

PEM encoded CA cert for use by the TLS client used to talk with the JWKS URL

clock_skew_leeway: TimeDelta

Duration in seconds of leeway when validating all claims to account for clock skew.

oidc_disable_user_info: bool

Disable claims from the OIDC UserInfo endpoint

bound_audiences: Vec<String>

List of auth claims that are valid for login

bound_issuer: Vec<String>

The value against which to match the iss claim in a JWT

allowed_redirect_ur_is: Vec<String>

A list of allowed values for redirect_uri

expiration_leeway: TimeDelta

Duration in seconds of leeway when validating expiration of a token to account for clock skew

list_claim_mappings: HashMap<String, String>

oidc_client_secret: String

The OAuth Client Secret configured with the OIDC provider

Implementations

impl AclAuthMethodConfig

pub fn builder() -> AclAuthMethodConfigBuilder

Trait Implementations

impl Clone for AclAuthMethodConfig

fn clone(&self) -> AclAuthMethodConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AclAuthMethodConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AclAuthMethodConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AclAuthMethodConfig

fn eq(&self, other: &AclAuthMethodConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AclAuthMethodConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AclAuthMethodConfig