Struct OidcClientAssertion

pub struct OidcClientAssertion {
    pub audience: Vec<String>,
    pub key_source: OidcClientAssertionKeySource,
    pub key_algorithm: String,
    pub private_key: Option<OidcClientAssertionKey>,
    pub extra_headers: HashMap<String, String>,
}

OIDCClientAssertion (a.k.a private_key_jwt) is used to send a client_assertion along with an OIDC token request. Reference: https://oauth.net/private-key-jwt/ See also: structs.OIDCClientAssertion

This struct was generated based on the Go types of the official Nomad API client.

Fields

audience: Vec<String>

Audience is/are who will be processing the assertion. Defaults to the parent ACLAuthMethodConfig’s OIDCDiscoveryURL

key_source: OidcClientAssertionKeySource

KeySource is where to get the private key to sign the JWT. It is the one field that must be set to enable client assertions. Available sources:

• “nomad”: Use current active key in Nomad’s keyring
• “private_key”: Use key material in the PrivateKey field
• “client_secret”: Use the OIDCClientSecret inherited from the parent ACLAuthMethodConfig as an HMAC key

key_algorithm: String

KeyAlgorithm is the key’s algorithm. Its default values are based on the KeySource:

• “nomad”: “RS256” (from Nomad’s keyring, must not be changed)
• “private_key”: “RS256” (must be RS256, RS384, or RS512)
• “client_secret”: “HS256” (must be HS256, HS384, or HS512)

private_key: Option<OidcClientAssertionKey>

PrivateKey contains external key material provided by users. KeySource must be “private_key” to enable this.

extra_headers: HashMap<String, String>

ExtraHeaders are added to the JWT headers, alongside “kid” and “type” Setting the “kid” header here is not allowed; use PrivateKey.KeyID.

Trait Implementations

impl Clone for OidcClientAssertion

fn clone(&self) -> OidcClientAssertion

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcClientAssertion

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OidcClientAssertion

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for OidcClientAssertion

fn eq(&self, other: &OidcClientAssertion) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OidcClientAssertion

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OidcClientAssertion