subscription

type Provider interface {
	Current(ctx context.Context) (Token, error)
	// Peek returns the stored token for a status surface: no cache fill, and
	// unlike Current it does not reject an expired token.
	Peek() (Token, error)
}

type Token struct {
	Value     string
	ExpiresAt time.Time
}