Enum Auth 

pub enum Auth {
    ClientCredentials {
        client_id: String,
        client_secret: String,
    },
    Bearer {
        token: String,
    },
    Password {
        user: String,
        pass: String,
        client_id: Option<String>,
    },
    RefreshToken {
        refresh_token: String,
        client_id: String,
        client_secret: Option<String>,
    },
}

How the SDK authenticates. Configure once when building the client.

The Debug impl redacts the secret-bearing fields (client_secret, pass, token, refresh_token) so a stray {:?} in logs or an error report can’t leak credentials.

Variants

ClientCredentials

Server-to-server OAuth2 client_credentials grant against /oauth/token, resolved at connect into a bearer token and transparently re-granted shortly before it expires. Requires an OAuth2 application (client id/secret); see the Authentication guide for the current availability caveat.

Fields

client_id: String

OAuth2 application client id.

client_secret: String

OAuth2 application client secret.

Bearer

A bearer token you already hold (e.g. the access token from a PKCE flow). Used as-is for the client’s lifetime — the SDK cannot renew a token it didn’t obtain itself.

Fields

token: String

The bearer access token, sent as Authorization: Bearer <token>.

Password

OAuth2 password grant against /oauth/token, resolved at connect and transparently re-granted shortly before the token expires.

Fields

user: String

Resource-owner username.

pass: String

Resource-owner password.

client_id: Option<String>

OAuth2 client id to present with the grant. None uses the default "manager" client; set it to authenticate through a custom OAuth2 application — matching the TypeScript/Go SDKs.

RefreshToken

A refresh token from the Authorization Code + PKCE flow, exchanged at connect into a bearer token and transparently re-exchanged shortly before that token expires — matching the TypeScript/Go SDKs. Refresh tokens are rotated on every use: the SDK captures the newly issued refresh token from each grant response and uses it for the next exchange.

Fields

refresh_token: String

The refresh token to exchange for an access token.

client_id: String

OAuth2 application client id the refresh token was issued to.

client_secret: Option<String>

Client secret, for refresh tokens issued to a confidential client. None (public PKCE clients) omits it from the exchange — matching the TypeScript/Go SDKs.

Trait Implementations

impl Clone for Auth

fn clone(&self) -> Auth

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Auth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.