Struct OidcClient 

pub struct OidcClient { /* private fields */ }

The sign-in side for apps that render pages on a server (e.g. an Axum theme): the Authorization Code flow with PKCE and a nonce.

1. authorize_url gives the provider URL to redirect the browser to, and a PendingSignIn to keep (for example in a short-lived HttpOnly cookie).
2. On the redirect back, exchange checks the state, swaps the code for tokens and verifies the ID token (signature, issuer, audience, nonce). Send that ID token to the MCP backend as the bearer.

Implementations

impl OidcClient

pub async fn discover( issuer: &str, client_id: &str, client_secret: Option<&str>, ) -> Result<Self>

Discovers the provider for the app registered as client_id (client_secret for confidential clients, None for public ones).

pub fn authorize_url( &self, redirect_url: &str, ) -> Result<(String, PendingSignIn)>

The provider URL to send the browser to, and what to remember until it comes back to redirect_url (registered at the provider).

pub async fn exchange( &self, redirect_url: &str, code: &str, state: &str, pending: &PendingSignIn, ) -> Result<String>

Completes the sign-in started with pending: checks state, swaps code for tokens and returns the verified ID token.

Trait Implementations

impl Clone for OidcClient

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.