Struct OidcClient 

pub struct OidcClient { /* private fields */ }

Available on crate feature sso only.

A thin OIDC / OAuth 2.0 client that performs the authorization code flow.

Implementations

impl OidcClient

pub fn new(config: OidcConfig) -> OidcClient

Create a new client for the given configuration.

pub fn authorization_url( &self, pkce: &PkceVerifier, state: &str, nonce: &str, ) -> String

Build the URL to redirect the user to for authorization.

Returns the full URL including response_type, client_id, redirect_uri, scope, state, nonce, and (for OIDC providers) PKCE code_challenge / code_challenge_method.

Store state, nonce, and pkce.as_str() in the pre-auth session before issuing the redirect.

pub fn exchange_code( &self, code: &str, pkce_verifier: &str, ) -> Result<TokenResponse, SsoError>

Exchange an authorization code for tokens at the token endpoint.

pub fn fetch_user_info( &self, access_token: &str, ) -> Result<OidcClaims, SsoError>

Fetch user info from the provider’s UserInfo endpoint using access_token.

Trait Implementations

impl Clone for OidcClient

fn clone(&self) -> OidcClient

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.