Struct WorkOSAuthOptions 

pub struct WorkOSAuthOptions<'a> {
    pub authkit_domain: String,
    pub mcp_server_url: String,
    pub required_scopes: Option<Vec<&'a str>>,
    pub token_verifier: Option<Box<dyn OauthTokenVerifier>>,
    pub resource_name: Option<String>,
    pub resource_documentation: Option<String>,
    pub validate_audience: Option<Audience>,
    pub disable_audience_validation: bool,
}

Configuration options for the WorkOS AuthKit OAuth provider.

Fields

authkit_domain: String

mcp_server_url: String

required_scopes: Option<Vec<&'a str>>

token_verifier: Option<Box<dyn OauthTokenVerifier>>

resource_name: Option<String>

resource_documentation: Option<String>

validate_audience: Option<Audience>

Audience to validate the token’s aud claim against. When None, the audience defaults to mcp_server_url (the resource identifier), unless disable_audience_validation is set.

disable_audience_validation: bool

Disables audience validation entirely. Strongly discouraged: without it a token issued for another resource can be replayed against this server.