Module oidc_client 

Canonical login-flow OIDC client construction (discovery + client building) Canonical login-flow OIDC client construction.

This module owns discovery of an OIDC provider’s metadata and construction of the openidconnect client used for the authorization code (login) flow. It is the single place where this happens; consumers (e.g. analytics-web-srv) should discover a provider once, cache the resulting [DiscoveredProvider], and call [DiscoveredProvider::build_client] whenever they need a configured client.

This is deliberately separate from crate::oidc’s internal discover_async call used to fetch JWKS for JWT validation: the two serve different lazy caches for different purposes (login-flow client vs. JWKS validation).

Structs

DiscoveredProvider

A discovered OIDC provider, ready to build login-flow clients from.

Type Aliases

ConfiguredCoreClient

Fully-parameterized openidconnect client with endpoints set from discovered provider metadata (public client, PKCE — no client secret).