Struct AuthGenerator 

pub struct AuthGenerator {
    pub gen_type: AuthGenType,
    pub command: Option<String>,
    pub args: Vec<String>,
    pub interpreter: Option<String>,
    pub script: Option<String>,
    pub cache_ttl_secs: u64,
    pub output_format: AuthOutputFormat,
    pub env: HashMap<String, String>,
    pub inject: HashMap<String, InjectTarget>,
    pub timeout_secs: u64,
}

Dynamic auth generator configuration — produces short-lived credentials at call time.

Two types:

• command: runs an external command, captures stdout as the credential
• script: writes an inline script to a temp file and runs it via an interpreter

Variable expansion in args and env values:

• ${key_name} → keyring lookup
• ${JWT_SUB} → agent’s JWT sub claim
• ${JWT_SCOPE} → agent’s JWT scope claim
• ${TOOL_NAME} → tool being invoked
• ${TIMESTAMP} → current unix timestamp

Fields

gen_type: AuthGenType

command: Option<String>

Command to run (for type = "command")

args: Vec<String>

Arguments for the command

interpreter: Option<String>

Interpreter for inline script (for type = "script", e.g. “python3”)

script: Option<String>

Inline script body (for type = "script")

cache_ttl_secs: u64

TTL for cached credentials (0 = no cache)

output_format: AuthOutputFormat

Output format: “text” (trimmed stdout) or “json” (parsed, fields extracted via inject)

env: HashMap<String, String>

Environment variables for the subprocess (values support ${key} expansion)

inject: HashMap<String, InjectTarget>

For JSON output: map dot-notation JSON paths to injection targets

timeout_secs: u64

Subprocess timeout in seconds (default: 30)

Trait Implementations

impl Clone for AuthGenerator

fn clone(&self) -> AuthGenerator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthGenerator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthGenerator

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.