Struct OidcDiscoveryDoc 

pub struct OidcDiscoveryDoc {
    pub authorization_endpoint: String,
    pub token_endpoint: String,
    pub userinfo_endpoint: Option<String>,
    pub jwks_uri: Option<String>,
    pub issuer: String,
    pub token_endpoint_auth_methods_supported: Vec<String>,
}

Fields we extract from an OIDC provider’s /.well-known/openid-configuration document. Everything else is ignored — pylon’s auth flow only uses these.

Fields

authorization_endpoint: String

token_endpoint: String

userinfo_endpoint: Option<String>

jwks_uri: Option<String>

issuer: String

token_endpoint_auth_methods_supported: Vec<String>

Per OIDC Discovery: when present, lists the auth methods the token endpoint accepts. When omitted the OIDC default is client_secret_basic (NOT client_secret_post!) — getting this wrong silently breaks every IdP that follows the spec.

Implementations

impl OidcDiscoveryDoc

pub fn parse(json: &str) -> Result<Self, String>

Parse a discovery JSON blob. Returns the relevant fields or an error if the doc is missing required endpoints.

pub fn into_spec(self) -> DiscoveredSpec

Convert into a runtime DiscoveredSpec using OIDC-standard scopes + parser. Token-exchange shape is selected from the discovered token_endpoint_auth_methods_supported:

• client_secret_post → TokenExchangeShape::Standard
• everything else (including the spec default of client_secret_basic) → TokenExchangeShape::BasicAuth

Trait Implementations

impl Clone for OidcDiscoveryDoc

fn clone(&self) -> OidcDiscoveryDoc

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcDiscoveryDoc

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OidcDiscoveryDoc

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.