Struct TokenExchangeConfig 

#[non_exhaustive]
pub struct TokenExchangeConfig {
    pub token_url: String,
    pub client_id: String,
    pub client_secret: Option<SecretString>,
    pub client_cert: Option<ClientCertConfig>,
    pub audience: String,
}

Configuration for RFC 8693 token exchange.

The MCP server uses this to exchange an inbound user access token (audience = MCP server) for a downstream access token (audience = the upstream API the application calls) via the authorization server’s token endpoint.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

token_url: String

Authorization server token endpoint used for the exchange (e.g. https://keycloak.example.com/realms/myrealm/protocol/openid-connect/token).

client_id: String

OAuth client_id of the MCP server (the requester).

client_secret: Option<SecretString>

OAuth client_secret for confidential-client authentication. Omit when using client_cert (mTLS) instead.

client_cert: Option<ClientCertConfig>

Client certificate for mTLS-based client authentication. When set, the exchange request authenticates with a TLS client certificate instead of a shared secret.

audience: String

Target audience - the client_id of the downstream API (e.g. upstream-api). The exchanged token will have this value in its aud claim.

Implementations

impl TokenExchangeConfig

pub fn new( token_url: String, client_id: String, client_secret: Option<SecretString>, client_cert: Option<ClientCertConfig>, audience: String, ) -> Self

Create a new token exchange configuration.

Trait Implementations

impl Clone for TokenExchangeConfig

fn clone(&self) -> TokenExchangeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenExchangeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TokenExchangeConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.