Struct OidcProviderFn 

pub struct OidcProviderFn<F> { /* private fields */ }

OidcProvider backed by a user-supplied async closure.

The closure fires on every federation — initial auth and every re-federation after expiry — so it must return the current JWT each time, not a value captured once. The point of the closure is to defer to the provider’s own session machinery on every call: a provider SDK (clerk.session.getToken(), supabase.auth.getSession()) hands back a freshly-minted short-lived JWT, transparently refreshing its own session as needed. Capturing a single token up front would instead pin a JWT that expires and can never be renewed.

Example

use stack_auth::{AuthError, OidcProviderFn, SecretToken};

// Each call asks the provider SDK for the *current* session token, so an
// expired JWT is refreshed upstream rather than reused.
let provider = OidcProviderFn::new(|| async {
    let jwt = clerk_session_get_token().await?;
    Ok::<_, AuthError>(SecretToken::new(jwt))
});

Implementations

impl<F> OidcProviderFn<F>

pub fn new(fetch: F) -> Self

Build an OidcProviderFn from an async closure returning the current JWT.

Trait Implementations

impl<F, Fut> OidcProvider for OidcProviderFn<F>

where F: Fn() -> Fut + Send + Sync, Fut: Future<Output = Result<SecretToken, AuthError>> + Send,

Available on non-WebAssembly only.

fn fetch(&self) -> impl Future<Output = Result<SecretToken, AuthError>> + Send

Fetch the current third-party OIDC JWT to federate.