Enum AutoStrategy 

pub enum AutoStrategy {
    AccessKey(AccessKeyStrategy),
    OAuth(OAuthStrategy),
}

An AuthStrategy that automatically detects available credentials and delegates to the appropriate inner strategy.

Detection order

1. If the CS_CLIENT_ACCESS_KEY environment variable is set, an AccessKeyStrategy is created. The region is extracted from the CS_WORKSPACE_CRN environment variable.
2. If a token store file exists at the default location (~/.cipherstash/auth.json), an OAuthStrategy is created from it.
3. Otherwise, AuthError::NotAuthenticated is returned.

Examples

use stack_auth::{AuthStrategy, AutoStrategy};

// Auto-detect from env vars + profile store
let strategy = AutoStrategy::detect()?;
let token = (&strategy).get_token().await?;
println!("Authenticated! token={:?}", token);

use stack_auth::AutoStrategy;

// Provide explicit values with env/profile fallback
let strategy = AutoStrategy::builder()
    .with_access_key("CSAK...")
    .detect()?;

Variants

AccessKey(AccessKeyStrategy)

Authenticated via a static access key.

OAuth(OAuthStrategy)

Authenticated via OAuth tokens persisted on disk.

Implementations

impl AutoStrategy

pub fn builder() -> AutoStrategyBuilder

Create a builder for configuring credential resolution.

The builder lets callers provide explicit values (access key, workspace CRN) that take precedence over environment variables and the profile store.

Example

use stack_auth::AutoStrategy;
use cts_common::Crn;

let crn: Crn = "crn:ap-southeast-2.aws:workspace-id".parse()?;
let strategy = AutoStrategy::builder()
    .with_access_key("CSAKmyKeyId.myKeySecret")
    .with_workspace_crn(crn)
    .detect()?;

pub fn detect() -> Result<AutoStrategy, AuthError>

Detect credentials from environment variables and profile store.

Equivalent to AutoStrategy::builder().detect().

Resolution order:

1. CS_CLIENT_ACCESS_KEY env var → AccessKeyStrategy
2. ~/.cipherstash/auth.json → OAuthStrategy
3. AuthError::NotAuthenticated

Trait Implementations

impl AuthStrategy for &AutoStrategy

async fn get_token(self) -> Result<ServiceToken, AuthError>

Retrieve a valid access token, refreshing or re-authenticating as needed.