Struct OidcSection 

pub struct OidcSection {
    pub issuers: Vec<String>,
    pub freshness_secs: Option<u64>,
}

Which OpenID Connect issuers this server will fetch keys from, and how fresh a token has to be.

Reload: needs a restart. The values are read once, into the router.

Fields

issuers: Vec<String>

The issuers whose tokens are accepted, as their iss spells them. Empty admits any issuer reachable over HTTPS at a public address.

Reasonable range: 0 to 64 entries. A deployment names the platforms it runs on; a list longer than that is an allowlist nobody reviews.

freshness_secs: Option<u64>

How old a token’s iat may be, in seconds.

Reasonable range: 60 to 3600. Five minutes, the default, is clock skew and a slow network; past an hour a token a run left in a log is still a session.

Trait Implementations

impl Clone for OidcSection

fn clone(&self) -> OidcSection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcSection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OidcSection

fn default() -> OidcSection

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for OidcSection

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for OidcSection

fn eq(&self, other: &OidcSection) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OidcSection

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for OidcSection

impl StructuralPartialEq for OidcSection