nornir-auth-oidc
OIDC / OAuth2 auth PROVIDER for the nordisk servers — validate a bearer JWT OFFLINE against a cached/pre-provisioned JWKS (airgap), fetched from jwks_uri (online) — a JWT that does not verify is REFUSED, never sent to /userinfo — with an opt-in opaque-token check (introspection at the discovered endpoint, bound to the audience), plus the device-authorization-grant (RFC 8628) flow for interactive CLI login. Covers Entra ID / Okta / Auth0 / Google / Keycloak / Zitadel through the one protocol. Implements the shared `nornir_service::AuthProvider` seam. Feature-gated sub-crate: the jsonwebtoken/JWKS closure is linked ONLY when a tier pins `oidc` (the embedded/mini bearer-only tier links none of it). Consumed by holger (reference impl), korp, dwarves + the shared `nornir-auth-client` login.
Activity
- Latest release
- 3d ago
- Total releases
- 7
- Cadence
- ~14 days
- Last 12 months
- 7
Reach
- Downloads
- 192
Details
- License
- MIT OR Apache-2.0
- First release
- Aug 05, 2026
| Version | Released | |
|---|---|---|
0.2.0
minor
|
0.2.0
minor
Dependencies (17)
+ 9 more |
|
0.1.5
patch
|
0.1.5
patch
Dependencies (17)
+ 9 more |
|
0.1.4
patch
|
0.1.4
patch
Dependencies (14)
+ 6 more |
|
0.1.3
patch
|
0.1.3
patch
Dependencies (12)
+ 4 more |
|
0.1.2
patch
|
0.1.2
patch
Dependencies (10)
+ 2 more |
|
0.1.1
patch
|
0.1.1
patch
Dependencies (10)
+ 2 more |
|
0.1.0
initial
|
0.1.0
initial
Dependencies (10)
+ 2 more |