Struct IssuerConfig 

pub struct IssuerConfig {

    pub scheme: String,
    pub host: String,
    pub port: u16,
    pub scopes_supported: HashSet<String>,
    pub claims_supported: Vec<String>,
    pub grant_types_supported: HashSet<String>,
    pub response_types_supported: HashSet<String>,
    pub token_endpoint_auth_methods_supported: HashSet<String>,
    pub code_challenge_methods_supported: HashSet<String>,
    pub subject_types_supported: Vec<String>,
    pub id_token_signing_alg_values_supported: Vec<String>,
    pub generate_client_secret_for_dcr: bool,
    pub allowed_origins: Vec<String>,
    pub default_user_id: String,
    pub require_state: bool,
    pub access_token_expires_in: u64,
    pub refresh_token_expires_in: u64,
    pub authorization_code_expires_in: u64,
    pub cleanup_interval_secs: u64,
}

Server-level configuration for the OAuth2 / OIDC issuer.

Construct via IssuerConfig::default() and override individual fields, or build one from scratch for full control.

Fields

scheme: String

host: String

port: u16

scopes_supported: HashSet<String>

claims_supported: Vec<String>

grant_types_supported: HashSet<String>

response_types_supported: HashSet<String>

token_endpoint_auth_methods_supported: HashSet<String>

code_challenge_methods_supported: HashSet<String>

subject_types_supported: Vec<String>

id_token_signing_alg_values_supported: Vec<String>

generate_client_secret_for_dcr: bool

allowed_origins: Vec<String>

CORS origins to allow. If empty, all origins are allowed.

default_user_id: String

Default sub claim value used when no user is logged in.

require_state: bool

Require state parameter in authorization requests (RFC 6749 compliance). Default: true

access_token_expires_in: u64

Access token expiration time in seconds. Default: 3600 (1 hour)

refresh_token_expires_in: u64

Refresh token expiration time in seconds. Default: 86400 * 30 (30 days)

authorization_code_expires_in: u64

Authorization code expiration time in seconds. Default: 600 (10 minutes)

cleanup_interval_secs: u64

Cleanup interval for expired tokens/codes in seconds. Default: 300 (5 minutes). Set to 0 to disable.

Implementations

impl IssuerConfig

pub fn from_env() -> Result<Self, Error>

Load configuration from environment variables, prefixed with OAUTH_.

pub fn to_discovery_document(&self, issuer: String) -> Value

Build the OpenID Connect Discovery document for this issuer.

pub fn validate_scope(&self, scope: &str) -> Result<String, String>

Validates that all requested scopes are in scopes_supported. Returns the original scope string on success, or an error message on failure.

pub fn validate_grant_type(&self, grant: &str) -> bool

Returns true if the given grant type is in grant_types_supported.

pub fn from_file(path: &Path) -> Result<Self, ConfigError>

Load configuration from a file (YAML or TOML). The format is detected from the file extension.

Example

let config = IssuerConfig::from_file("config.yaml").unwrap();
let config = IssuerConfig::from_file("config.toml").unwrap();

pub fn from_yaml(yaml: &str) -> Result<Self, ConfigError>

Load configuration from YAML string.

pub fn from_toml(toml_str: &str) -> Result<Self, ConfigError>

Load configuration from TOML string.

Trait Implementations

impl Clone for IssuerConfig

fn clone(&self) -> IssuerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IssuerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IssuerConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IssuerConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IssuerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.