Enum CredentialKind 

pub enum CredentialKind {
    Bearer,
    Cookie,
    OauthAccess,
    OauthRefresh,
    OidcId,
    AwsSts,
    Macaroon,
    Other {
        name: CredentialKindName,
    },
}

What kind of credential this is. Tags storage decisions and drives the selection filter (AUTHZ-CRED-CLI-3). Closed for v1 — third crates cannot extend the enum; backends with bespoke schemes use the CredentialKind::Other escape valve.

The cost of going Other is loss of generic client integration — a method requiring Bearer will not auto-attach an Other-kinded credential.

Variants

Bearer

Static or short-lived bearer token (JWT, opaque token).

Cookie

Cookie-shaped session credential (server may issue Set-Cookie).

OauthAccess

OAuth/OIDC access token (paired with refresh; refresh_via populated).

OauthRefresh

OAuth/OIDC refresh token. Long-lived, used to mint new CredentialKind::OauthAccess credentials.

OidcId

OIDC ID token (informational identity assertion; not for auth).

AwsSts

AWS STS credential set (composite: access_key_id + secret + token + exp).

Macaroon

Macaroon-style capability token with caveats.

Other

Custom kind, for backends with bespoke schemes; stored opaquely.

Fields

name: CredentialKindName

Opaque name supplied by the backend.

Trait Implementations

impl Clone for CredentialKind

fn clone(&self) -> CredentialKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CredentialKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for CredentialKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl JsonSchema for CredentialKind

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for CredentialKind

fn eq(&self, other: &CredentialKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CredentialKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for CredentialKind

impl StructuralPartialEq for CredentialKind