Struct OAuth2Config 

pub struct OAuth2Config {
    pub token_url: String,
    pub client_id: String,
    pub client_secret: String,
    pub scope: String,
}

OAuth2 client_credentials configuration for automatic token exchange.

When configured on a route, the proxy handles the token lifecycle:

1. Exchanges client_id + client_secret for an access_token at startup
2. Caches the token with TTL from the expires_in response
3. Refreshes automatically before expiry (30s buffer)
4. Injects the access_token as Authorization: Bearer <token>

The agent never sees client_id or client_secret — only a phantom token.

Fields

token_url: String

Token endpoint URL (e.g., “https://auth.example.com/oauth/token”)

client_id: String

Client ID — plain value or credential reference (env://, file://, op://)

client_secret: String

Client secret — credential reference (env://, file://, op://)

scope: String

OAuth2 scopes (space-separated). Empty = no scope parameter sent.

Trait Implementations

impl Clone for OAuth2Config

fn clone(&self) -> OAuth2Config

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuth2Config

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OAuth2Config

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for OAuth2Config

fn eq(&self, other: &OAuth2Config) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OAuth2Config

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OAuth2Config