Struct ExternalAuth 

pub struct ExternalAuth {
    pub token_endpoint: String,
    pub header: String,
    pub scheme: String,
}

Per-user bearer resolution for an external MCP server.

The MCP gateway exposes no token vault of its own; instead an extension banks the calling user’s third-party token and serves it from token_endpoint. At tool-call time core GETs that accessor with the user’s systemprompt JWT and injects the returned bearer onto header (as {scheme} {token}), replacing the systemprompt credential so nothing internal reaches the third party.

Fields

token_endpoint: String

header: String

scheme: String

Implementations

impl ExternalAuth

pub fn header_value(&self, bearer: &str) -> String

The value to send on Self::header for bearer: "{scheme} {token}", or the raw token when scheme is empty (providers that expect a bare credential, e.g. an X-Api-Key).

Trait Implementations

impl Clone for ExternalAuth

fn clone(&self) -> ExternalAuth

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExternalAuth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ExternalAuth

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ExternalAuth

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.