Struct ProviderAuthRegistry 

pub struct ProviderAuthRegistry { /* private fields */ }

Provider authentication registry

Manages authentication for multiple providers with priority-based resolution. All resolution is file-based — no environment variables are used.

Priority:

1. Runtime override (CLI –api-key)
2. Stored credential (auth.json) ← Primary source
3. OAuth token (with auto-refresh)
4. Ambient credentials (AWS IAM via ~/.aws, Google ADC via ~/.config/gcloud)
5. Fallback resolver (custom provider config from models.json)

Implementations

impl ProviderAuthRegistry

pub fn new() -> Self

Create a new empty registry

pub fn with_defaults() -> Self

Create a registry with default providers pre-registered

pub fn register_defaults(&mut self)

Register default providers

pub fn register_api_key(&mut self, provider: &str, api_key: Option<String>)

Register an API key provider

pub fn register_oauth(&mut self, provider: &str, token: OAuthTokenInfo)

Register an OAuth provider

pub fn register_ambient<F>(&mut self, provider: &str, check_fn: F)

where F: Fn() -> bool + Send + Sync + 'static,

Register an ambient credential provider

pub fn register<P: ProviderAuth + 'static>(&mut self, provider: &str, auth: P)

Register a custom provider auth implementation

pub fn set_runtime_key(&self, provider: &str, api_key: String)

Set a runtime API key override

pub fn remove_runtime_key(&self, provider: &str)

Remove a runtime override

pub fn set_fallback_resolver<F>(&self, resolver: F)

where F: Fn(&str) -> Option<String> + Send + Sync + 'static,

Set a fallback resolver for providers not in the registry

pub fn clear_fallback_resolver(&self)

Remove fallback resolver

pub fn get_api_key(&self, provider: &str) -> Option<String>

Get API key for a provider using the resolution chain

Priority:

1. Runtime override (–api-key)
2. Stored credential (auth.json)
3. OAuth token
4. Ambient credentials (AWS IAM, Google ADC via SDK/filesystem)
5. Fallback resolver (custom provider config from models.json)
6. Environment variable (last resort for CI/CD)

pub fn has_auth(&self, provider: &str) -> bool

Check if any auth is configured for a provider

Note: Environment variables don’t count as “configured” — they are a last-resort fallback. Use oxicode setup to store credentials properly in auth.json for persistent authentication.

pub fn needs_oauth_refresh(&self, provider: &str) -> bool

Check if an OAuth provider needs refresh

pub fn set_oauth_token(&mut self, provider: &str, token: OAuthTokenInfo)

Update OAuth token for a provider

pub fn set_api_key(&mut self, provider: &str, api_key: String)

Update API key directly

pub fn list_providers(&self) -> Vec<String>

List all providers with configured auth

pub fn get_auth_status(&self, provider: &str) -> AuthStatus

Get auth status for a provider

Trait Implementations

impl Default for ProviderAuthRegistry

fn default() -> Self

Returns the “default value” for a type.