auth

type AuthProvider func(ctx context.Context) (*AuthSnapshot, error)

type AuthProviderInvalidator func(ctx context.Context)

type AuthSnapshot struct {
	Token         *serverv1.GetTokenResponse
	EnvironmentID string
}

type Inputs struct {
	// Token is a pre-issued JWT to authenticate with, instead of exchanging client
	// credentials
	Token *serverv1.GetTokenResponse

	// AuthProvider supplies a token and effective environment whenever the cached
	// token goes stale, instead of running the client-credentials exchange.
	// Sufficient on its own -- the first snapshot is obtained from it if Token is
	// unset. See AuthProvider.
	AuthProvider AuthProvider

	// AuthProviderInvalidator clears any cache owned by AuthProvider before a
	// forced refresh following an authentication rejection.
	AuthProviderInvalidator AuthProviderInvalidator

	// HttpClient is used as the underlying http.client. Connect provides an interface for abstracting over the
	// standard library version of the auth client
	HttpClient connect.HTTPClient

	// Manager holds the credentials for this client to use. Non-optional.
	Config *config.Manager

	Timeout *time.Duration

	// SkipEnvironmentNameMapping controls whether to skip validating and mapping
	// environment names to IDs. If true, the EnvironmentId will be used verbatim.
	SkipEnvironmentNameMapping bool

	// SkipEngineMapping controls whether to skip setting the query server based
	// on the token's engine maps. If true, the query server will not be
	// automatically resolved from the token.
	SkipEngineMapping bool
}

type Manager struct {
	// contains filtered or unexported fields
}