Struct OidcConfig 

pub struct OidcConfig {
    pub provider: OidcProvider,
    pub client_id: String,
    pub client_secret: String,
    pub redirect_uri: String,
    pub scopes: Vec<String>,
    pub post_login_redirect: String,
}

Available on crate feature sso only.

All parameters needed to perform an OIDC / OAuth 2.0 authorization flow.

Fields

provider: OidcProvider

Provider endpoint URLs.

client_id: String

OAuth client ID.

client_secret: String

OAuth client secret (empty for PKCE-only public clients).

redirect_uri: String

Redirect URI registered with the identity provider.

scopes: Vec<String>

Requested OAuth scopes.

post_login_redirect: String

Path to redirect to after a successful login.

Implementations

impl OidcConfig

pub fn google( client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

Google OIDC configuration.

pub fn microsoft( tenant_id: &str, client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

Microsoft Entra ID / Azure AD configuration.

tenant_id can be a GUID, "common", "organizations", or "consumers".

pub fn github( client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

GitHub OAuth 2.0 configuration.

pub fn okta( domain: &str, client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

Okta configuration.

domain is your Okta org URL, e.g. "dev-12345.okta.com".

pub fn auth0( domain: &str, client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

Auth0 configuration.

domain is your Auth0 domain, e.g. "myapp.us.auth0.com".

pub fn keycloak( base_url: &str, realm: &str, client_id: &str, client_secret: &str, redirect_uri: &str, ) -> OidcConfig

Keycloak configuration.

pub fn discover( issuer: &str, client_id: &str, client_secret: &str, redirect_uri: &str, ) -> Result<OidcConfig, SsoError>

Discover a custom OIDC provider via {issuer}/.well-known/openid-configuration.

pub fn from_env() -> Result<OidcConfig, SsoError>

Load configuration from environment variables.

Required variables:

• RWS_OIDC_PROVIDER — google, github, microsoft, okta, auth0, keycloak, or custom
• RWS_OIDC_CLIENT_ID
• RWS_OIDC_REDIRECT_URI

Optional variables:

• RWS_OIDC_CLIENT_SECRET (default: empty)
• RWS_OIDC_ISSUER — required for okta, auth0, keycloak, custom
• RWS_OIDC_TENANT_ID — required for microsoft (tenant) and keycloak (realm)
• RWS_OIDC_SCOPES — space-separated (default: openid email profile)
• RWS_OIDC_POST_LOGIN_REDIRECT (default: /)

pub fn post_login_redirect(self, path: &str) -> OidcConfig

Override the post-login redirect path (default: "/").

pub fn scopes( self, scopes: impl IntoIterator<Item = impl Into<String>>, ) -> OidcConfig

Override the requested scopes.

Trait Implementations

impl Clone for OidcConfig

fn clone(&self) -> OidcConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.