Struct CachedCredentialProvider 

pub struct CachedCredentialProvider<P> { /* private fields */ }

TTL cache wrapping any inner CredentialProvider. Resolves once, hands back the cached value until ttl elapses, then refreshes by calling the inner provider exactly once even under concurrent load (concurrent waiters share the in-flight refresh future).

The wrapper is the recommended baseline for production credential chains: short-lived bearer tokens (OAuth, AWS STS, Azure AAD) all expose a TTL, and refusing to cache hammers the credential source once per request.

On refresh failure the cache surfaces the inner error and does not poison the slot — a subsequent call retries. This keeps transient credential-source outages from cascading into permanent agent failure.

Implementations

impl<P> CachedCredentialProvider<P>

where P: CredentialProvider,

pub fn new(inner: P, ttl: Duration) -> Self

Wrap inner with a TTL cache. The first call to resolve populates the cache; subsequent calls within ttl reuse it.

pub fn from_arc(inner: Arc<P>, ttl: Duration) -> Self

Convenience constructor for impls already wrapped in Arc.

pub const fn ttl(&self) -> Duration

Effective TTL.

Trait Implementations

impl<P> CredentialProvider for CachedCredentialProvider<P>

where P: CredentialProvider,

fn resolve<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<Credentials>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Resolve current credentials. Long-running impls should respect tokio cancellation in their internals; the transport supplies the ExecutionContext indirectly via the surrounding async task.