pub struct OidcOptions {
pub strict_manual_endpoint_origins: bool,
pub allow_private_endpoint_ips: bool,
}Expand description
OIDC runtime and security behavior for SSO providers.
Fields§
§strict_manual_endpoint_origins: boolValidate manually configured OIDC endpoint origins against RustAuth trusted origins.
Disabled by default for compatibility with existing manual skipDiscovery
configurations. Enable this for stricter SSRF/configuration hardening.
allow_private_endpoint_ips: boolAllow OIDC discovery, JWKS, userinfo, and token requests to reach private, loopback, or otherwise non-public IP addresses.
Disabled by default: outbound requests are blocked at DNS resolution when a hostname resolves only to internal addresses, mitigating SSRF against cloud metadata services and internal infrastructure. Enable this only for deployments that intentionally talk to identity providers on a private network.
Trait Implementations§
Source§impl Clone for OidcOptions
impl Clone for OidcOptions
Source§fn clone(&self) -> OidcOptions
fn clone(&self) -> OidcOptions
Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl Debug for OidcOptions
impl Debug for OidcOptions
Source§impl Default for OidcOptions
impl Default for OidcOptions
Source§fn default() -> OidcOptions
fn default() -> OidcOptions
Returns the “default value” for a type. Read more
Source§impl<'de> Deserialize<'de> for OidcOptions
impl<'de> Deserialize<'de> for OidcOptions
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
impl Eq for OidcOptions
Source§impl PartialEq for OidcOptions
impl PartialEq for OidcOptions
Source§fn eq(&self, other: &OidcOptions) -> bool
fn eq(&self, other: &OidcOptions) -> bool
Tests for
self and other values to be equal, and is used by ==.Source§impl Serialize for OidcOptions
impl Serialize for OidcOptions
impl StructuralPartialEq for OidcOptions
Auto Trait Implementations§
impl Freeze for OidcOptions
impl RefUnwindSafe for OidcOptions
impl Send for OidcOptions
impl Sync for OidcOptions
impl Unpin for OidcOptions
impl UnsafeUnpin for OidcOptions
impl UnwindSafe for OidcOptions
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
Compare self to
key and return true if they are equal.Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more