Struct BrokerClient 

pub struct BrokerClient { /* private fields */ }

HTTP client for a credential broker. Presents the machine’s own bearer token (NOT the provider credential) and receives a short-lived access token.

Implementations

impl BrokerClient

pub fn new( endpoint: impl Into<String>, machine_token: impl Into<String>, ) -> Self

pub fn with_client( endpoint: impl Into<String>, machine_token: impl Into<String>, http: Client, ) -> Self

Like new but reuses an existing reqwest::Client (shared connection pool) instead of building a fresh one per call. (#158 A5)

pub fn with_machine_token( endpoint: impl Into<String>, machine_token: MachineToken, http: Client, ) -> Self

Share an existing (reloadable) machine token, e.g. the super::RemoteBroker’s, so a reload after a 401 reaches both.

pub fn from_source(source: &CredentialSource) -> Option<Self>

Build from a CredentialSource. None for Local.

impl BrokerClient

pub fn scope(&self) -> String

Source scope for cache keys (endpoint + machine-principal digest).

Trait Implementations

impl TokenFetcher for BrokerClient

async fn fetch_token(&self, provider: &str) -> Result<BrokerToken, String>

async fn fetch_credential( &self, cred: &CredentialRef, ) -> Result<BrokerToken, TokenFetchError>

Account-addressed fetch. Default: the default slot goes through fetch_token; a named slot is unsupported (never silently served from the default slot).