OpenID Connect Library for Rust

This library provides extensible, strongly-typed interfaces for the OpenID Connect protocol.

API documentation and examples are available on docs.rs.

Standards

• OpenID Connect Core
  • This crate passes the Relying Party Certification conformance tests for response_type=code
  • Supported features:
  • Relying Party flows: code, implicit, hybrid
  • Standard claims
  • UserInfo endpoint
  • RSA, HMAC-based ID token verification
  • Unsupported features:
  • Aggregated and distributed claims
  • Passing request parameters as JWTs
  • Verification of the azp claim (see discussion)
  • ECDSA-based ID token verification
  • JSON Web Encryption (JWE)
• OpenID Connect Discovery
  • Supported features:
  • Provider Metadata
  • Unsupported features:
  • WebFinger
• OpenID Connect Dynamic Client Registration
  • Supported features:
  • Client Metadata
  • Client Registration endpoint
  • Unsupported features:
  • Client Configuration endpoint

Optional Features

To access trait aliases such as CoreAuthenticationFlow, enable the nightly feature, which requires the crate to be compiled with Nightly Rust.