pfzetto/axum-oidc
1
0
Fork 0
mirror of https://codeberg.org/pfzetto/axum-oidc synced 2025-12-08 06:05:16 +01:00
Code Issues Projects Releases Packages Wiki Activity

update example to use exported types for Scope and IssuerUrl

Browse source
This commit is contained in:
JuliDi 2025-11-25 13:55:27 +01:00
parent 3acdd41a9a
commit a5e0bc705e
No known key found for this signature in database
GPG key ID: E1E90AE563D09D63
1 changed files with 12 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

18
examples/basic/src/main.rs
View file

@ -1,20 +1,22 @@
use axum::{ use axum::{
Router,
error_handling::HandleErrorLayer, error_handling::HandleErrorLayer,
http::Uri, http::Uri,
response::IntoResponse, response::IntoResponse,
routing::{any, get}, routing::{any, get},
Router,
}; };
use axum_oidc::{ use axum_oidc::{
error::MiddlewareError, handle_oidc_redirect, openidconnect::{Audience, ClientId, ClientSecret},
EmptyAdditionalClaims, OidcAuthLayer, OidcClaims, OidcClient, OidcLoginLayer, EmptyAdditionalClaims, OidcAuthLayer, OidcClaims, OidcClient, OidcLoginLayer,
OidcRpInitiatedLogout, OidcRpInitiatedLogout,
error::MiddlewareError,
handle_oidc_redirect,
openidconnect::{Audience, ClientId, ClientSecret, IssuerUrl, Scope},
}; };
use tokio::net::TcpListener; use tokio::net::TcpListener;
use tower::ServiceBuilder; use tower::ServiceBuilder;
use tower_sessions::{ use tower_sessions::{
cookie::{time::Duration, SameSite},
Expiry, MemoryStore, SessionManagerLayer, Expiry, MemoryStore, SessionManagerLayer,
cookie::{SameSite, time::Duration},
}; };
use tracing::Level; use tracing::Level;
@ -47,15 +49,19 @@ async fn main() {
.with_default_http_client() .with_default_http_client()
.with_redirect_url(Uri::from_static("http://localhost:8080/oidc")) .with_redirect_url(Uri::from_static("http://localhost:8080/oidc"))
.with_client_id(ClientId::new(client_id)) .with_client_id(ClientId::new(client_id))
.add_scope("profile") .add_scope(Scope::new("profile".into()))
.add_scope("email") .add_scope(Scope::new("email".into()))
// Optional: add untrusted audiences. If the `aud` claim contains any of these audiences, the token is rejected. // Optional: add untrusted audiences. If the `aud` claim contains any of these audiences, the token is rejected.
.add_untrusted_audience(Audience::new("123456789".to_string())); .add_untrusted_audience(Audience::new("123456789".to_string()));
if let Some(client_secret) = client_secret { if let Some(client_secret) = client_secret {
oidc_client = oidc_client.with_client_secret(ClientSecret::new(client_secret)); oidc_client = oidc_client.with_client_secret(ClientSecret::new(client_secret));
} }
let oidc_client = oidc_client.discover(issuer).await.unwrap().build(); let oidc_client = oidc_client
.discover(IssuerUrl::new(issuer.into()).expect("Invalid IssuerUrl"))
.await
.unwrap()
.build();
let oidc_auth_service = ServiceBuilder::new() let oidc_auth_service = ServiceBuilder::new()
.layer(HandleErrorLayer::new(|e: MiddlewareError| async { .layer(HandleErrorLayer::new(|e: MiddlewareError| async {