Struct OidcSharedConfig 

pub struct OidcSharedConfig {
    pub remote: OAuthProviderRemoteConfig,
    pub client_id: Option<String>,
    pub client_secret: Option<String>,
    pub required_scopes: Vec<String>,
}

Shared OIDC alias configuration block — provider remote fallback skeleton.

When present in the application config (typically [oidc]), provides fallback values for OAuthProviderRemoteConfig fields that both oidc-client and oauth-resource-server need. Also holds optional confidential-client defaults (client_id, client_secret) that are commonly shared in single-provider deployments with introspection.

Current scope (supported fields)

• well_known_url, issuer_url, jwks_uri — URL fields with true presence-aware fallback (local Some > shared Some > None)
• client_id, client_secret — optional confidential-client defaults; not pure provider connectivity, but commonly shared between oidc_client (full client) and oauth_resource_server.introspection
• required_scopes — scopes that MUST appear in token endpoint responses; presence-aware (Vec::is_empty sentinel: local non-empty wins, else shared)

Known limitations

Duration fields (metadata_refresh_interval, jwks_refresh_interval) are non-optional in OAuthProviderRemoteConfig and use serde defaults. The current implementation uses sentinel heuristics and cannot distinguish “local explicitly set to the default” from “local not configured”. A future iteration should migrate these to Option<Duration>.

Shared but not provider connectivity

client_id and client_secret can be shared via [oidc], but they must be resolved separately from OAuthProviderRemoteConfig. They are exposed on this struct as optional fields and resolved through dedicated helpers.

Fields

remote: OAuthProviderRemoteConfig

Shared provider connectivity settings (URL + interval fields).

client_id: Option<String>

Optional confidential-client default. Not pure provider connectivity; shared when both oidc-client and resource-server introspection use the same client identity against a single provider.

client_secret: Option<String>

Optional confidential-client secret default. See client_id.

required_scopes: Vec<String>

Shared required-scopes list. Applied when the local client config does not specify its own required_scopes.

Implementations

impl OidcSharedConfig

pub fn resolve_remote( &self, local: &OAuthProviderRemoteConfig, ) -> OAuthProviderRemoteConfig

Resolve a local OAuthProviderRemoteConfig against this shared fallback. For Option<String> URL fields, local Some takes priority. For duration fields, see the struct-level doc on known limitations.

pub fn resolve_client_id(&self, local: Option<&str>) -> Option<String>

Resolve a local optional client_id String against the shared client_id default.

Returns local if it is Some; otherwise falls back to the shared default. None means neither local nor shared has a value.

pub fn resolve_client_secret(&self, local: Option<&str>) -> Option<String>

Resolve a local optional client_secret against the shared default.

pub fn resolve_required_scopes(&self, local: &[String]) -> Vec<String>

Resolve a local required_scopes list against the shared default.

Resolution: local non-empty wins; when local is empty the shared list is used instead. This allows partial overrides while still using Vec::is_empty as the “not set” sentinel (no Option wrapper needed).

Trait Implementations

impl Clone for OidcSharedConfig

fn clone(&self) -> OidcSharedConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcSharedConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for OidcSharedConfig

fn default() -> OidcSharedConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for OidcSharedConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<OidcSharedConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.