Struct Credential 

pub struct Credential {
    pub service_account: Option<ServiceAccount>,
    pub token: Option<Token>,
}

Credential represents Google credentials that may contain both service account and token.

IMPORTANT: This is a specially designed structure that can hold both ServiceAccount and Token simultaneously. This design is intentional and critical for Google’s authentication:

• Service account only: Used for signed URL generation and JWT-based authentication
• Token only: Used for Bearer authentication (e.g., from metadata server, OAuth2)
• Both: The RequestSigner is responsible for exchanging service account for tokens when needed, and can use cached tokens when available to avoid unnecessary exchanges

The RequestSigner implementation handles the logic of when to use which credential type and when to perform token exchanges. Providers should return credentials as they receive them without trying to perform exchanges themselves.

Fields

service_account: Option<ServiceAccount>

Service account information, if available.

token: Option<Token>

OAuth2 access token, if available.

Implementations

impl Credential

pub fn with_service_account(service_account: ServiceAccount) -> Self

Create a credential with only a service account.

pub fn with_token(token: Token) -> Self

Create a credential with only a token.

pub fn has_service_account(&self) -> bool

Check if the credential has a service account.

pub fn has_token(&self) -> bool

Check if the credential has a token.

pub fn has_valid_token(&self) -> bool

Check if the credential has a valid token.

Trait Implementations

impl Clone for Credential

fn clone(&self) -> Credential

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Credential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Credential

fn default() -> Credential

Returns the “default value” for a type.

impl SigningCredential for Credential

fn is_valid(&self) -> bool

Check if the signing credential is valid.