Skip to main content

default_credentials

origincloud_core::credentials

Function default_credentials 

Source 
pub fn default_credentials() -> Result<Arc<dyn Credentials>, Error>
Expand description

The first credentials found, in this order:

  1. ORIGINCLOUD_ACCESS_TOKEN: an access token, sent as it is.
  2. ORIGINCLOUD_CLIENT_ID and ORIGINCLOUD_CLIENT_SECRET: a service account’s credential, exchanged for access tokens as they expire. Only one of the two set is an error.
  3. The session the origin CLI stored at its last login (origin id login).
  4. The instance’s metadata service, on an instance that runs as a service account (InstanceMetadata). Nothing is requested until a token is; off an instance, that fails with Error::NoCredentials within about two seconds. ORIGINCLOUD_METADATA_DISABLED=true leaves this step out; ORIGINCLOUD_METADATA_ENDPOINT asks another address than METADATA_ENDPOINT.

It fails with Error::NoCredentials when the metadata service is left out and there are no others.