OpenID Connect Library for Rust

This library provides extensible, strongly-typed interfaces for the OpenID Connect protocol.

API documentation and examples are available on docs.rs.

Standards

• OpenID Connect Core
  • This crate passes the Relying Party Certification conformance tests for response_type=code
  • Supported features:
  • Relying Party flows: code, implicit, hybrid
  • Standard claims
  • UserInfo endpoint
  • RSA, HMAC, and ECDSA (P-256/P-384 curves) ID token verification
  • Unsupported features:
  • Aggregated and distributed claims
  • Passing request parameters as JWTs
  • Verification of the azp claim (see discussion)
  • ECDSA-based ID token verification using the P-521 curve
  • JSON Web Encryption (JWE)
• OpenID Connect Discovery
  • Supported features:
  • Provider Metadata
  • Unsupported features:
  • WebFinger
• OpenID Connect Dynamic Client Registration
  • Supported features:
  • Client Metadata
  • Client Registration endpoint
  • Unsupported features:
  • Client Configuration endpoint
• OAuth 2.0 Token Introspection
• OAuth 2.0 Token Revocation

Sponsorship

This project is sponsored by Unflakable, a service for tracking and quarantining flaky tests.