Struct wasm_oidc_plugin::config::PluginConfiguration

pub struct PluginConfiguration {

    pub config_endpoint: Url,
    pub reload_interval_in_h: u64,
    pub exclude_hosts: Vec<Regex>,
    pub exclude_paths: Vec<Regex>,
    pub exclude_urls: Vec<Regex>,
    pub access_token_header_name: Option<String>,
    pub access_token_header_prefix: Option<String>,
    pub id_token_header_name: Option<String>,
    pub id_token_header_prefix: Option<String>,
    pub cookie_name: String,
    pub filter_plugin_cookies: bool,
    pub cookie_duration: u64,
    pub token_validation: bool,
    pub aes_key: Secret<Aes256Gcm>,
    pub authority: String,
    pub redirect_uri: Url,
    pub client_id: String,
    pub scope: String,
    pub claims: String,
    pub client_secret: Secret<String>,
    pub audience: String,
}

Struct that holds the configuration for the plugin. It is loaded from the config file envoy.yaml

Fields

config_endpoint: Url

Config endpoint for the plugin.

reload_interval_in_h: u64

Reload interval in hours

exclude_hosts: Vec<Regex>

Exclude hosts. Example: localhost:10000

exclude_paths: Vec<Regex>

Exclude paths. Example: /health

exclude_urls: Vec<Regex>

Exclude urls. Example: localhost:10000/health

access_token_header_name: Option<String>

The header name that will be used for the access token. If the header name is empty, the access token will not be forwarded

access_token_header_prefix: Option<String>

Prefix for the access token header. If the prefix is empty, the access token will be forwarded without a prefix

id_token_header_name: Option<String>

The header name that will be used for the id token. If the header name is empty, the id token will not be forwarded

id_token_header_prefix: Option<String>

Prefix for the id token header. If the prefix is empty, the id token will be forwarded without a prefix

cookie_name: String

The cookie name that will be used for the session cookie

filter_plugin_cookies: bool

Filter out the cookies created and controlled by the plugin If the value is true, the cookies will be filtered out

cookie_duration: u64

The cookie duration in seconds

token_validation: bool

Option to skip Token Validation

aes_key: Secret<Aes256Gcm>

AES Key

authority: String

The authority that will be used for the dispatch calls

redirect_uri: Url

The redirect uri that the authorization endpoint will redirect to and provide the code

client_id: String

The client id

scope: String

The scope

claims: String

The claims

client_secret: Secret<String>

The client secret

audience: String

The audience. Sometimes its the same as the client id

Trait Implementations

impl Clone for PluginConfiguration

fn clone(&self) -> PluginConfiguration

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PluginConfiguration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PluginConfiguration

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.