Struct OidcConfig 

pub struct OidcConfig {
    pub jwks_url: String,
    pub issuer: String,
    pub audience: String,
    pub repo_mappings: HashMap<String, (String, Role)>,
    pub provider_type: OidcProviderType,
}

OIDC configuration for a single provider instance.

Fields

jwks_url: String

URL to fetch JWKS from (e.g. https://token.actions.githubusercontent.com/.well-known/jwks)

issuer: String

Expected issuer (e.g. https://token.actions.githubusercontent.com)

audience: String

Expected audience

repo_mappings: HashMap<String, (String, Role)>

Mapping from the identity claim value to (project_id, Role).

For GitHub the key is org/repo, for GitLab it is group/project, for custom providers it is whatever the configured claim field yields.

provider_type: OidcProviderType

The provider type driving claim extraction.

Implementations

impl OidcConfig

pub fn github(audience: impl Into<String>) -> Self

Creates a GitHub Actions OIDC configuration.

pub fn gitlab(audience: impl Into<String>) -> Self

Creates a GitLab CI OIDC configuration for gitlab.com.

pub fn gitlab_custom( issuer: impl Into<String>, audience: impl Into<String>, ) -> Self

Creates a GitLab CI OIDC configuration for a self-managed instance.

pub fn custom( issuer: impl Into<String>, jwks_url: impl Into<String>, audience: impl Into<String>, claim_field: impl Into<String>, ) -> Self

Creates a custom provider OIDC configuration.

pub fn add_mapping( self, identity: impl Into<String>, project_id: impl Into<String>, role: Role, ) -> Self

Adds a mapping entry.

Trait Implementations

impl Clone for OidcConfig

fn clone(&self) -> OidcConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.