Struct AAuthSettings 

pub struct AAuthSettings {
    pub provider: String,
    pub key_file: String,
    pub enrollment_token: Option<String>,
    pub enroll_assertion_file: Option<String>,
    pub person_server: Option<String>,
}

AAuth agent-identity settings. Serde-serializable so it rides the spawn payload verbatim, giving one identity per process tree. The struct is always defined rather than feature-gated, so the payload plumbing compiles the same either way; the CLI flags that populate it require --features aauth at validation.

Fields

provider: String

The Agent Provider base URL (https://apd.example) — enroll + agent-token.

key_file: String

The durable Ed25519 key file (created 0600 if absent). A SHARED-FS path, like --tls-ca, so a re-exec’d subagent resolves the same identity.

enrollment_token: Option<String>

A one-time enrollment token template ({{secret:…}}), if the provider is in token mode. Secret-free (a reference, never an inline secret).

enroll_assertion_file: Option<String>

Path to an enrollment assertion file the provider federates against — e.g. a Kubernetes projected ServiceAccount token whose audience is the provider. Re-read fresh on every enroll (projected tokens rotate), so this is a PATH, not the assertion itself; it rides the spawn payload like key_file. Presented in the /enroll body; never logged.

person_server: Option<String>

The user’s Person Server (ps claim), which scopes the identity to a user. It is carried through enrollment; agentd does not run the interactive consent flow itself.

Trait Implementations

impl Clone for AAuthSettings

fn clone(&self) -> AAuthSettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AAuthSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AAuthSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AAuthSettings

impl PartialEq for AAuthSettings

fn eq(&self, other: &AAuthSettings) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AAuthSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AAuthSettings