Struct OidcFederationStrategyBuilder 

pub struct OidcFederationStrategyBuilder<P, S = NoStore> { /* private fields */ }

Builder for OidcFederationStrategy.

Created via OidcFederationStrategy::builder.

Implementations

impl<P, S> OidcFederationStrategyBuilder<P, S>

pub fn base_url(self, url: Url) -> Self

Override the base URL resolved by service discovery.

Takes precedence over both the CS_CTS_HOST environment variable and region-derived service discovery. Use this to point a single strategy instance at a specific CTS host — e.g. a self-hosted CTS, or a local mock auth server in development — without relying on the process-wide CS_CTS_HOST, which would also redirect any other CTS client (e.g. the protect-ffi encryption client) sharing the same process.

pub fn maybe_base_url(self, base_url: Option<String>) -> Result<Self, AuthError>

Apply an optional base-URL override supplied as a raw string.

The string-typed convenience the language bindings (napi, wasm) call, so the “empty means absent, otherwise parse-or-reject” semantics live in one place rather than being re-derived per binding. An absent or empty string is a no-op — base-URL resolution falls back to CS_CTS_HOST / region service discovery (see build); a non-empty but malformed string is rejected as AuthError::InvalidUrl. For an already-parsed URL, use base_url.

pub fn with_token_store<T: TokenStore>( self, store: T, ) -> OidcFederationStrategyBuilder<P, T>

Wire an external TokenStore into the strategy.

On every call to get_token, if no token is cached in memory, the store is consulted before falling back to re-federating. After every successful federation the new token is written back to the store. Use this from short-lived strategy instances (Edge Functions, Workers) to share a service-token cache across processes — e.g. an HTTP-only cookie.

Returns a new builder with the store type erased into the chain — see InMemoryTokenStore and TokenStoreFn for ready-made implementations.

impl<P: OidcProvider, S: TokenStore> OidcFederationStrategyBuilder<P, S>

pub fn build(self) -> Result<OidcFederationStrategy<P, S>, AuthError>

Build the OidcFederationStrategy.

Resolves the base URL in priority order: an explicit base_url override, then the CS_CTS_HOST environment variable, then service discovery using the CRN’s region.