Module credentials 

Structs

CredentialDto

The credential object attached to a task.

DelegatedCredential

credential.delegated: built from RawDelegatedToken, for token.delegate.

InboundCredential

credential.inbound: built from RawInboundToken, for identity.resolve.

Constants

CAP_READ_DELEGATED

Capability a plugin declares to receive a delegated token.

CAP_READ_INBOUND

Capability a plugin declares to receive the inbound credential.

CREDENTIAL_FIELD

Task field the DTO rides on. Contract with worker.py’s CREDENTIAL_FIELD; both sides must agree verbatim.

Functions

attach_credential

Attach the credential object to a task, when the hook and the plugin’s declared capabilities both call for it.

attach_credential_for_payload

Attach the credential object for this invocation’s payload.