Struct OAuthResourceServerConfig 

pub struct OAuthResourceServerConfig {
    pub remote: OAuthProviderRemoteConfig,
    pub audiences: Vec<String>,
    pub required_scopes: Vec<String>,
    pub clock_skew: Duration,
    pub introspection: Option<OAuthResourceServerIntrospectionConfig>,
}

Fields

remote: OAuthProviderRemoteConfig

Shared remote-provider connectivity settings.

audiences: Vec<String>

Accepted aud values. Empty means audience validation is disabled.

required_scopes: Vec<String>

Required scopes. Empty means no scope requirement is enforced.

clock_skew: Duration

Allowed clock skew when validating exp and nbf.

introspection: Option<OAuthResourceServerIntrospectionConfig>

Optional opaque-token introspection configuration.

Example TOML:

[oauth_resource_server]
well_known_url = "https://issuer.example.com/.well-known/openid-configuration"
audiences = ["api://securitydept"]
required_scopes = ["entries.read", "entries.write"]

[oauth_resource_server.introspection]
client_id = "resource-server"
client_secret = "secret"
token_type_hint = "access_token"
# optional override:
# introspection_url = "https://issuer.example.com/oauth2/introspect"

Implementations

impl OAuthResourceServerConfig

pub fn validate(&self) -> Result<(), OAuthResourceServerError>

pub fn apply_shared_defaults(&mut self, shared: &OidcSharedConfig)

Apply shared defaults from an [oidc] block in-place.

Resolution order for supported fields:

• well_known_url, issuer_url, jwks_uri — local > shared > None
• introspection.client_id, introspection.client_secret — local > shared > None (only when introspection is already Some)
• required_scopes — local non-empty wins; else inherited from shared

Duration fields are resolved with sentinel heuristics; see OidcSharedConfig for the known limitation.

pub fn resolve_config( &mut self, shared: &OidcSharedConfig, ) -> Result<(), OAuthResourceServerError>

Recommended entry point. Apply shared defaults and validate in one step.

Equivalent to self.apply_shared_defaults(shared); self.validate() but eliminates manual glue.

[oidc]                      ──┐
                              ├──▸ resolve_config() ──▸ validated &mut self
[oauth_resource_server]     ──┘

pub fn provider_config(&self) -> OAuthProviderConfig

Trait Implementations

impl Clone for OAuthResourceServerConfig

fn clone(&self) -> OAuthResourceServerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthResourceServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for OAuthResourceServerConfig

fn default() -> OAuthResourceServerConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for OAuthResourceServerConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<OAuthResourceServerConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.