gtema · gtema · Jun 18, 2026 · Jun 18, 2026
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -19,6 +19,7 @@ default-members = [
   "sdk/auth-application-credential",
   "sdk/auth-multifactor",
   "sdk/auth-oidcaccesstoken",
+  "sdk/auth-oidcclientcredentials",
   "sdk/auth-password",
   "sdk/auth-receipt",
   "sdk/auth-totp",

diff --git a/openstack_sdk/Cargo.toml b/openstack_sdk/Cargo.toml
@@ -80,6 +80,7 @@ openstack-sdk-auth-core.workspace = true
 openstack-sdk-auth-federation = { version = "0.22", path = "../sdk/auth-federation/", optional = true }
 openstack-sdk-auth-jwt = { version = "0.22", path = "../sdk/auth-jwt/", optional = true }
 openstack-sdk-auth-oidcaccesstoken = { version = "0.22", path = "../sdk/auth-oidcaccesstoken/" }
+openstack-sdk-auth-oidcclientcredentials = { version = "0.1", path = "../sdk/auth-oidcclientcredentials/" }
 openstack-sdk-auth-passkey = { version = "0.22", path = "../sdk/auth-passkey/", optional = true }
 openstack-sdk-auth-password = { version = "0.22", path = "../sdk/auth-password/" }
 openstack-sdk-auth-receipt = { version = "0.22", path = "../sdk/auth-receipt/" }

diff --git a/openstack_sdk/src/auth/authtoken.rs b/openstack_sdk/src/auth/authtoken.rs
@@ -33,6 +33,8 @@ pub enum AuthType {
     V3ApplicationCredential,
     /// OIDC Access token
     V3OidcAccessToken,
+    /// OIDC Client Credentials
+    V3OidcClientCredentials,
     /// v3 Password
     V3Password,
     /// v3 Token
@@ -64,6 +66,7 @@ impl FromStr for AuthType {
             }
             "v3password" | "password" => Ok(Self::V3Password),
             "v3oidcaccesstoken" | "accesstoken" => Ok(Self::V3OidcAccessToken),
+            "v3oidcclientcredentials" | "clientcredentials" => Ok(Self::V3OidcClientCredentials),
             "v3token" | "token" => Ok(Self::V3Token),
             "v3totp" => Ok(Self::V3Totp),
             "v3multifactor" => Ok(Self::V3Multifactor),
@@ -97,6 +100,7 @@ impl AuthType {
             Self::V3ApplicationCredential => "v3applicationcredential",
             Self::V3Password => "v3password",
             Self::V3OidcAccessToken => "v3oidcaccesstoken",
+            Self::V3OidcClientCredentials => "v3oidcclientcredentials",
             Self::V3Token => "v3token",
             Self::V3Multifactor => "v3multifactor",
             Self::V3Totp => "v3totp",

diff --git a/release-plz.toml b/release-plz.toml
@@ -99,6 +99,9 @@ name = "openstack-sdk-auth-multifactor"
 version_group = "sdk-auth"
 [[package]]
 name = "openstack-sdk-auth-oidcaccesstoken"
+
+[[package]]
+name = "openstack-sdk-auth-oidcclientcredentials"
 version_group = "sdk-auth"
 [[package]]
 name = "openstack-sdk-auth-passkey"

diff --git a/sdk/auth-oidcclientcredentials/CHANGELOG.md b/sdk/auth-oidcclientcredentials/CHANGELOG.md
@@ -0,0 +1,14 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2025-MM-DD
+
+### Added
+
+- Initial OIDC client credentials grant authentication plugin
diff --git a/sdk/auth-oidcclientcredentials/Cargo.toml b/sdk/auth-oidcclientcredentials/Cargo.toml
@@ -0,0 +1,29 @@
+[package]
+name = "openstack-sdk-auth-oidcclientcredentials"
+description = "OpenStack SDK auth plugin for OIDC client credentials flow"
+version = "0.1.0"
+license.workspace = true
+edition.workspace = true
+authors.workspace = true
+rust-version.workspace = true
+homepage.workspace = true
+repository.workspace = true
+
+[dependencies]
+async-trait.workspace = true
+inventory.workspace = true
+openstack-sdk-auth-core.workspace = true
+secrecy.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+reqwest = { workspace = true, features = ["form"] }
+thiserror.workspace = true
+tokio.workspace = true
+tracing.workspace = true
+url.workspace = true
+
+[lints]
+workspace = true
+
+[dev-dependencies]
+httpmock.workspace = true