Struct OAuthConfig 

pub struct OAuthConfig {
    pub enabled: bool,
    pub issuer: String,
    pub audience: String,
    pub jwks_url: String,
    pub identity_mode: OAuthIdentityMode,
    pub role_claim: Option<String>,
    pub tenant_claim: Option<String>,
    pub default_role: Role,
    pub map_to_existing_users: bool,
    pub accept_bearer: bool,
}

Configuration for OAuth/OIDC auth. Multiple issuers can be registered in parallel — the validator tries each until one’s signature verification succeeds.

Fields

enabled: bool

Master switch. When false the validator is bypassed.

issuer: String

Expected iss claim. Tokens with a different issuer are rejected even when the signature validates against a shared key.

audience: String

Required aud claim. The JWT’s audience (string or array) must contain this value.

jwks_url: String

JWKS endpoint URL (e.g. https://id.example.com/.well-known/jwks.json). Fetched lazily on first token + periodically by the refresh task.

identity_mode: OAuthIdentityMode

How to turn JWT claims into a RedDB username.

role_claim: Option<String>

Optional claim whose string value maps to Role::from_str.

tenant_claim: Option<String>

Claim name carrying the tenant id. Optional — when None no tenant is extracted (the resulting identity is platform-scoped). Convention: "tenant". Override with RED_OAUTH_TENANT_CLAIM.

default_role: Role

map_to_existing_users: bool

accept_bearer: bool

Accept Bearer-prefixed Authorization headers. Always true in Phase 3.4; kept as a knob so custom auth schemes can bolt on without duplicating the validator.

Trait Implementations

impl Clone for OAuthConfig

fn clone(&self) -> OAuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OAuthConfig

fn default() -> Self

Returns the “default value” for a type.