Struct OidcClientRawConfig 

pub struct OidcClientRawConfig<PC>
where
    PC: PendingOauthStoreConfig,
{
    pub client_id: Option<String>,
    pub client_secret: Option<String>,
    pub remote: OAuthProviderRemoteConfig,
    pub provider_oidc: OAuthProviderOidcConfig,
    pub scopes: Vec<String>,
    pub required_scopes: Vec<String>,
    pub claims_check_script: Option<String>,
    pub pkce_enabled: bool,
    pub redirect_url: Option<String>,
    pub pending_store: Option<PC>,
    pub device_poll_interval: Duration,
}

Raw (pre-resolution) OIDC client configuration that allows optional fields to be filled from an [oidc] shared-defaults block.

Unlike OidcClientConfig, client_id here is optional so that it can be omitted from [oidc_client] and inherited from [oidc] instead. Call OidcClientRawConfig::apply_shared_defaults to resolve into a validated OidcClientConfig.

Resolution order: local > [oidc] shared > hardcoded default

Supported shared fields (from [oidc]):

• well_known_url, issuer_url, jwks_uri — true presence-aware
• client_id, client_secret — presence-aware optional credentials

Shareable from [oidc]:

• required_scopes — presence-aware (local non-empty wins; else shared)

Not shared (must stay in [oidc_client]):

• scopes, redirect_url, pkce_enabled, claims_check_script

Fields

client_id: Option<String>

Local client_id. If absent, falls back to [oidc].client_id.

client_secret: Option<String>

Local client_secret. If absent, falls back to [oidc].client_secret.

remote: OAuthProviderRemoteConfig

Local provider connectivity. URL fields fall back to [oidc] if absent.

provider_oidc: OAuthProviderOidcConfig

OIDC-specific overrides (never shared).

scopes: Vec<String>

required_scopes: Vec<String>

Scopes that MUST be present in the token endpoint response. Falls back to [oidc].required_scopes when local is empty.

claims_check_script: Option<String>

pkce_enabled: bool

redirect_url: Option<String>

Explicit redirect URL. When None (the default), each auth context uses its own hardcoded callback path at resolution time. In the combined apps/webui + apps/server deployment this field has no effect and will produce a startup warning if set.

pending_store: Option<PC>

device_poll_interval: Duration

Implementations

impl<PC> OidcClientRawConfig<PC>

where PC: PendingOauthStoreConfig,

pub fn apply_shared_defaults( self, shared: &OidcSharedConfig, ) -> Result<OidcClientConfig<PC>, OidcError>

Apply shared defaults from an [oidc] block and produce the final OidcClientConfig. Returns an error if client_id cannot be resolved (neither local nor shared has a value).

pub fn resolve_config( self, shared: &OidcSharedConfig, ) -> Result<OidcClientConfig<PC>, OidcError>

Recommended entry point. Resolve shared defaults and validate in one step.

Equivalent to self.apply_shared_defaults(shared)?.validate() but returns the validated config directly, eliminating manual glue.

[oidc]          ──┐
                  ├──▸ resolve_config() ──▸ validated OidcClientConfig
[oidc_client]   ──┘

Trait Implementations

impl<PC> Clone for OidcClientRawConfig<PC>

where PC: Clone + PendingOauthStoreConfig,

fn clone(&self) -> OidcClientRawConfig<PC>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<PC> Debug for OidcClientRawConfig<PC>

where PC: Debug + PendingOauthStoreConfig,

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<PC> Default for OidcClientRawConfig<PC>

where PC: PendingOauthStoreConfig,

fn default() -> OidcClientRawConfig<PC>

Returns the “default value” for a type.

impl<'de, PC> Deserialize<'de> for OidcClientRawConfig<PC>

where PC: PendingOauthStoreConfig + Default,

fn deserialize<__D>( __deserializer: __D, ) -> Result<OidcClientRawConfig<PC>, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<PC> From<&OidcClientRawConfig<PC>> for OptionalTokenSetOidcSharedIntersectionConfig

where PC: PendingOauthStoreConfig,

fn from(value: &OidcClientRawConfig<PC>) -> Self

Converts to this type from the input type.

impl<PC> From<&OidcClientRawConfig<PC>> for TokenSetOidcSharedIntersectionConfig

where PC: PendingOauthStoreConfig,

fn from(value: &OidcClientRawConfig<PC>) -> Self

Converts to this type from the input type.