credentialsource

Nov 5, 2026

Changes in this version

type ResolvedHeader

+ InvalidateWithStatus func(int)

Oct 21, 2026

Changes in this version

type GCPServiceAccountSource

+ func (s *GCPServiceAccountSource) StartupRetryWindow() time.Duration

Oct 21, 2026

Changes in this version

+ type GCPDefaultCredentialsSource struct

+ func NewGCPDefaultCredentialsSource(scopes, targetServiceAccount string) *GCPDefaultCredentialsSource

+ func (s *GCPDefaultCredentialsSource) Fetch(ctx context.Context) (string, error)

+ func (s *GCPDefaultCredentialsSource) StartupRetryWindow() time.Duration

+ func (s *GCPDefaultCredentialsSource) TTL() time.Duration

+ func (s *GCPDefaultCredentialsSource) Type() string

Oct 19, 2026

Changes in this version

+ type TokenExchangeNotFound struct

+ Description string

+ func (e *TokenExchangeNotFound) Error() string

Oct 19, 2026

Changes in this version

+ type ExchangedToken struct

+ AccessToken string

+ Upgrade UpgradeHint

type ResolvedHeader

+ Upgrade UpgradeHint

+ type TokenExchangeDeclined struct

+ Invalidate func()

+ Upgrade UpgradeHint

+ func (*TokenExchangeDeclined) Error() string

type TokenExchangeResponse

+ Upgrade UpgradeHint

type TokenExchangeSource

+ func (s *TokenExchangeSource) ResolveToken(ctx context.Context, subjectToken, actorToken, requestID string) (ExchangedToken, error)

+ type UpgradeHint map[string][]string

Oct 13, 2026

Changes in this version

+ func TokenExchangeStripHeaders(subjectHeader string) []string

+ type HeaderResolver func(ctx context.Context, proxyReq, innerReq *http.Request, host string) ([]ResolvedHeader, error)

+ func TokenExchangeResolver(cfg TokenExchangeResolverConfig) HeaderResolver

+ type ResolvedHeader struct

+ Grant string

+ Invalidate func()

+ Name string

+ Value string

+ type TokenExchangeResolverConfig struct

+ ActorTokenFrom string

+ AuthValue func(token, prefix, format string) string

+ BotSubject string

+ Format string

+ Grant string

+ Header string

+ Prefix string

+ ProxyAuth func(*http.Request) (user, password string)

+ RequestID func(context.Context) string

+ Source *TokenExchangeSource

+ SubjectFrom string

+ SubjectHeader string

Jul 9, 2026

Changes in this version

+ const DefaultProcessTTL

+ type ProcessSource struct

+ func NewProcessSource(command string, defaultTTL time.Duration) *ProcessSource

+ func (s *ProcessSource) Fetch(ctx context.Context) (string, error)

+ func (s *ProcessSource) TTL() time.Duration

+ func (s *ProcessSource) Type() string

type TokenExchangeSource

+ func (s *TokenExchangeSource) Invalidate(subjectToken, actorToken string)

Jun 12, 2026

Changes in this version

+ const DefaultNeonBaseURL

+ func ParseNeonEndpointID(host string) (string, error)

+ type NeonResolver struct

+ APIKey CredentialSource

+ BaseURL string

+ HTTPClient *http.Client

+ Project string

+ TTL time.Duration

+ func (r *NeonResolver) Close() error

+ func (r *NeonResolver) InvalidatePassword(host, user, database string)

+ func (r *NeonResolver) ResolvePassword(ctx context.Context, host, user, database string) (string, error)

+ func (r *NeonResolver) Type() string

Jun 10, 2026

Changes in this version

+ type GCPServiceAccountSource struct

+ func NewGCPServiceAccountSource(keyJSON []byte, scopes string) (*GCPServiceAccountSource, error)

+ func NewGCPServiceAccountSourceFromKeySource(keySource CredentialSource, scopes string) *GCPServiceAccountSource

+ func (s *GCPServiceAccountSource) Close() error

+ func (s *GCPServiceAccountSource) Fetch(ctx context.Context) (string, error)

+ func (s *GCPServiceAccountSource) TTL() time.Duration

+ func (s *GCPServiceAccountSource) Type() string

Apr 22, 2026

Changes in this version

type CredentialSource

+ func NewGCPSecretManagerSource(project, secret, version string) (CredentialSource, error)

+ type GCPSecretManagerClient interface

+ AccessSecretVersion func(ctx context.Context, resourceName string) (string, error)

Apr 21, 2026

Changes in this version

type TokenExchangeConfig

+ ActorTokenType string

Apr 21, 2026

Changes in this version

+ type TokenExchangeConfig struct

+ ClientID string

+ ClientSecret string

+ Endpoint string

+ Resource string

+ SubjectTokenType string

+ type TokenExchangeResponse struct

+ AccessToken string

+ ExpiresIn int

+ IssuedTokenType string

+ TokenType string

+ type TokenExchangeSource struct

+ func NewTokenExchangeSource(cfg TokenExchangeConfig) *TokenExchangeSource

+ func (s *TokenExchangeSource) Exchange(ctx context.Context, subjectToken string) (*TokenExchangeResponse, error)

+ func (s *TokenExchangeSource) Resolve(ctx context.Context, subjectToken string) (string, error)

Apr 21, 2026

Changes in this version

+ type CredentialSource interface

+ Fetch func(ctx context.Context) (string, error)

+ Type func() string

+ func NewAWSSecretsManagerSource(secretID, region string) (CredentialSource, error)

+ func NewEnvSource(varName string) CredentialSource

+ func NewStaticSource(value string) CredentialSource

+ type GitHubAppSource struct

+ func NewGitHubAppSource(appID, installationID string, privateKeyPEM []byte) (*GitHubAppSource, error)

+ func (s *GitHubAppSource) Fetch(ctx context.Context) (string, error)

+ func (s *GitHubAppSource) TTL() time.Duration

+ func (s *GitHubAppSource) Type() string

+ type RefreshingSource interface

+ TTL func() time.Duration

+ type SecretsManagerClient interface

+ GetSecretValue func(ctx context.Context, secretID string) (string, error)