Struct OAuthCredential 

pub struct OAuthCredential {
    pub access_token: String,
    pub refresh_token: String,
    pub expires_at: u64,
    pub email: Option<String>,
    pub id_token: Option<String>,
}

#20: ZeroizeOnDrop wipes access_token, refresh_token, and id_token from memory when the credential is dropped (e.g. after a token rotation). Clone is implemented manually so the derive doesn’t conflict with ZeroizeOnDrop.

Fields

access_token: String

refresh_token: String

expires_at: u64

Milliseconds since Unix epoch

email: Option<String>

Account email, fetched from roles endpoint after auth

id_token: Option<String>

OpenAI id_token — required by the Codex CLI’s ~/.codex/auth.json

Implementations

impl OAuthCredential

pub fn needs_refresh(&self) -> bool

True if the token expires within the next 5 minutes.

Trait Implementations

impl Clone for OAuthCredential

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthCredential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OAuthCredential

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Drop for OAuthCredential

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl From<OAuthCredential> for Credential

fn from(c: OAuthCredential) -> Self

Converts to this type from the input type.

impl Serialize for OAuthCredential

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.