Struct OidcClientAssertionKeyBuilder

pub struct OidcClientAssertionKeyBuilder { /* private fields */ }

Builder for OidcClientAssertionKey.

Implementations

impl OidcClientAssertionKeyBuilder

pub fn pem_key(&mut self, value: String) -> &mut Self

PemKey is an RSA private key, in pem format. It is used to sign the JWT. Mutually exclusive with PemKeyFile.

pub fn pem_key_file(&mut self, value: String) -> &mut Self

PemKeyFile is an absolute path to a private key on Nomad servers’ disk, in pem format. It is used to sign the JWT. Mutually exclusive with PemKey.

pub fn key_id_header( &mut self, value: OidcClientAssertionKeyIdHeader, ) -> &mut Self

KeyIDHeader is which header the provider will use to find the public key to verify the signed JWT. Its default values vary based on which of the other required fields is set:

• KeyID: “kid”
• PemCert: “x5t#S256”
• PemCertFile: “x5t#S256”

Refer to the JWS RFC for information on these headers:

• “kid”: https://datatracker.ietf.org/doc/html/rfc7515#section-4.1.4
• “x5t”: https://datatracker.ietf.org/doc/html/rfc7515#section-4.1.7
• “x5t#S256”: https://datatracker.ietf.org/doc/html/rfc7515#section-4.1.8

If you need to set some other header not supported here, you may use OIDCClientAssertion.ExtraHeaders.

pub fn key_id(&mut self, value: String) -> &mut Self

KeyID may be set manually and becomes the “kid” header. Mutually exclusive with PemCert and PemCertFile. Allowed KeyIDHeader values: “kid” (the default)

pub fn pem_cert(&mut self, value: String) -> &mut Self

PemCert is an x509 certificate, signed by the private key or a CA, in pem format. It is used to derive an x5t#S256 (or x5t) header. Mutually exclusive with PemCertFile and KeyID. Allowed KeyIDHeader values: “x5t”, “x5t#S256” (default “x5t#S256”)

pub fn pem_cert_file(&mut self, value: String) -> &mut Self

PemCertFile is an absolute path to an x509 certificate on Nomad servers’ disk, signed by the private key or a CA, in pem format. It is used to derive an x5t#S256 (or x5t) header. Mutually exclusive with PemCert and KeyID. Allowed KeyIDHeader values: “x5t”, “x5t#S256” (default “x5t#S256”)

pub fn build( &self, ) -> Result<OidcClientAssertionKey, OidcClientAssertionKeyBuilderError>

Builds a new OidcClientAssertionKey.

Errors

If a required field has not been initialized.

Trait Implementations

impl Clone for OidcClientAssertionKeyBuilder

fn clone(&self) -> OidcClientAssertionKeyBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for OidcClientAssertionKeyBuilder

fn default() -> Self

Returns the “default value” for a type.