Struct AclAuthMethodConfigBuilder

pub struct AclAuthMethodConfigBuilder { /* private fields */ }

Builder for AclAuthMethodConfig.

Implementations

impl AclAuthMethodConfigBuilder

pub fn jwt_validation_pub_keys(&mut self, value: Vec<String>) -> &mut Self

A list of PEM-encoded public keys to use to authenticate signatures locally

pub fn jwksurl(&mut self, value: String) -> &mut Self

JSON Web Key Sets url for authenticating signatures

pub fn oidc_discovery_url(&mut self, value: String) -> &mut Self

The OIDC Discovery URL, without any .well-known component (base path)

pub fn oidc_client_id(&mut self, value: String) -> &mut Self

The OAuth Client ID configured with the OIDC provider

pub fn oidc_client_secret(&mut self, value: String) -> &mut Self

The OAuth Client Secret configured with the OIDC provider

pub fn oidc_client_assertion( &mut self, value: Option<OidcClientAssertion>, ) -> &mut Self

Optionally send a signed JWT (“private key jwt”) as a client assertion to the OIDC provider

pub fn oidc_enable_pkce(&mut self, value: bool) -> &mut Self

Enable S256 PKCE challenge verification.

pub fn oidc_disable_user_info(&mut self, value: bool) -> &mut Self

Disable claims from the OIDC UserInfo endpoint

pub fn oidc_scopes(&mut self, value: Vec<String>) -> &mut Self

List of OIDC scopes

pub fn bound_audiences(&mut self, value: Vec<String>) -> &mut Self

List of auth claims that are valid for login

pub fn bound_issuer(&mut self, value: Vec<String>) -> &mut Self

The value against which to match the iss claim in a JWT

pub fn allowed_redirect_ur_is(&mut self, value: Vec<String>) -> &mut Self

A list of allowed values for redirect_uri

pub fn discovery_ca_pem(&mut self, value: Vec<String>) -> &mut Self

PEM encoded CA certs for use by the TLS client used to talk with the OIDC Discovery URL.

pub fn jwksca_cert(&mut self, value: String) -> &mut Self

PEM encoded CA cert for use by the TLS client used to talk with the JWKS URL

pub fn signing_algs(&mut self, value: Vec<String>) -> &mut Self

A list of supported signing algorithms

pub fn expiration_leeway(&mut self, value: TimeDelta) -> &mut Self

Duration in seconds of leeway when validating expiration of a token to account for clock skew

pub fn not_before_leeway(&mut self, value: TimeDelta) -> &mut Self

Duration in seconds of leeway when validating not before values of a token to account for clock skew.

pub fn clock_skew_leeway(&mut self, value: TimeDelta) -> &mut Self

Duration in seconds of leeway when validating all claims to account for clock skew.

pub fn claim_mappings(&mut self, value: HashMap<String, String>) -> &mut Self

Mappings of claims (key) that will be copied to a metadata field (value).

pub fn list_claim_mappings( &mut self, value: HashMap<String, String>, ) -> &mut Self

pub fn verbose_logging(&mut self, value: bool) -> &mut Self

Enables logging of claims and binding-rule evaluations when debug level logging is enabled.

pub fn build( &self, ) -> Result<AclAuthMethodConfig, AclAuthMethodConfigBuilderError>

Builds a new AclAuthMethodConfig.

Errors

If a required field has not been initialized.

Trait Implementations

impl Clone for AclAuthMethodConfigBuilder

fn clone(&self) -> AclAuthMethodConfigBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for AclAuthMethodConfigBuilder

fn default() -> Self

Returns the “default value” for a type.