Struct OAuthClientCredentialsBuilder 

pub struct OAuthClientCredentialsBuilder { /* private fields */ }

Builder for OAuthClientCredentials.

Required Fields

• client_id
• client_secret
• token_endpoint
• resource

Example

use tower_mcp::client::OAuthClientCredentials;

let provider = OAuthClientCredentials::builder()
    .client_id("my-service")
    .client_secret("s3cret")
    .token_endpoint("https://auth.example.com/token")
    .resource("https://mcp.example.com")
    .build()?;

Implementations

impl OAuthClientCredentialsBuilder

pub fn client_id(self, client_id: impl Into<String>) -> Self

Set the OAuth client ID.

pub fn client_secret(self, client_secret: impl Into<String>) -> Self

Set the OAuth client secret.

pub fn token_endpoint(self, url: impl Into<String>) -> Self

Set the token endpoint URL.

pub fn token_endpoint_auth_method( self, method: OAuthTokenEndpointAuthMethod, ) -> Self

Set the token endpoint authentication method.

Direct configurations default to client_secret_basic. Discovery selects a compatible method from authorization-server metadata.

pub fn resource(self, resource: impl Into<String>) -> Self

Set the canonical MCP protected-resource URI.

The provider includes this value as the RFC 8707 resource parameter in every client-credentials token request.

pub fn scopes(self, scopes: impl IntoIterator<Item = impl Into<String>>) -> Self

Set the requested scopes.

Accepts an iterator of scope strings, which are joined with spaces per RFC 6749 Section 3.3.

pub fn refresh_buffer(self, duration: Duration) -> Self

Set the refresh buffer duration.

Tokens are refreshed this long before their actual expiry to avoid using a token that expires during a request. Default: 30 seconds.

pub fn http_client(self, client: Client) -> Self

Set a custom reqwest::Client for token requests.

Use this when you need custom TLS configuration or proxy settings.

pub fn build(self) -> Result<OAuthClientCredentials, OAuthClientError>

Build the OAuthClientCredentials provider.

Errors

Returns OAuthClientError::BuildError if client_id, client_secret, token_endpoint, or resource are not set.

Trait Implementations

impl Default for OAuthClientCredentialsBuilder

fn default() -> OAuthClientCredentialsBuilder

Returns the “default value” for a type.