Struct OidcClientAssertionBuilder

pub struct OidcClientAssertionBuilder { /* private fields */ }

Builder for OidcClientAssertion.

Implementations

impl OidcClientAssertionBuilder

pub fn audience(&mut self, value: Vec<String>) -> &mut Self

Audience is/are who will be processing the assertion. Defaults to the parent ACLAuthMethodConfig’s OIDCDiscoveryURL

pub fn key_source(&mut self, value: OidcClientAssertionKeySource) -> &mut Self

KeySource is where to get the private key to sign the JWT. It is the one field that must be set to enable client assertions. Available sources:

• “nomad”: Use current active key in Nomad’s keyring
• “private_key”: Use key material in the PrivateKey field
• “client_secret”: Use the OIDCClientSecret inherited from the parent ACLAuthMethodConfig as an HMAC key

pub fn key_algorithm(&mut self, value: String) -> &mut Self

KeyAlgorithm is the key’s algorithm. Its default values are based on the KeySource:

• “nomad”: “RS256” (from Nomad’s keyring, must not be changed)
• “private_key”: “RS256” (must be RS256, RS384, or RS512)
• “client_secret”: “HS256” (must be HS256, HS384, or HS512)

pub fn private_key( &mut self, value: Option<OidcClientAssertionKey>, ) -> &mut Self

PrivateKey contains external key material provided by users. KeySource must be “private_key” to enable this.

pub fn extra_headers(&mut self, value: HashMap<String, String>) -> &mut Self

ExtraHeaders are added to the JWT headers, alongside “kid” and “type” Setting the “kid” header here is not allowed; use PrivateKey.KeyID.

pub fn build( &self, ) -> Result<OidcClientAssertion, OidcClientAssertionBuilderError>

Builds a new OidcClientAssertion.

Errors

If a required field has not been initialized.

Trait Implementations

impl Clone for OidcClientAssertionBuilder

fn clone(&self) -> OidcClientAssertionBuilder

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for OidcClientAssertionBuilder

fn default() -> Self

Returns the “default value” for a type.