OpenID Connect Library for Rust

This library provides extensible, strongly-typed interfaces for the OpenID Connect protocol.

API documentation and examples are available on docs.rs.

Standards

• OpenID Connect Core
  • This crate passes the Relying Party Certification conformance tests for response_type=code
  • Supported features:
    • Relying Party flows: code, implicit, hybrid
    • Standard claims
    • UserInfo endpoint
    • RSA, HMAC-based ID token verification
  • Unsupported features:
    • Aggregated and distributed claims
    • Passing request parameters as JWTs
    • Verification of the azp claim (see discussion)
    • ECDSA-based ID token verification
    • JSON Web Encryption (JWE)
• OpenID Connect Discovery
  • Supported features:
    • Provider Metadata
  • Unsupported features:
    • WebFinger
• OpenID Connect Dynamic Client Registration
  • Supported features:
    • Client Metadata
    • Client Registration endpoint
  • Unsupported features:
    • Client Configuration endpoint

Optional Features

To access trait aliases such as CoreAuthenticationFlow, enable the nightly feature, which requires the crate to be compiled with Nightly Rust.