Struct AuthConfig 

pub struct AuthConfig {
    pub remote_endpoint: Option<String>,
    pub machine_token: Option<String>,
    pub accounts: BTreeMap<String, String>,
    pub auto: BTreeMap<String, String>,
}

Auth configuration parsed from auth.* keys. Controls whether this client resolves provider tokens from the local auth.json (default) or from a remote credential broker. See task #157 / auth::credential_source.

Fields

remote_endpoint: Option<String>

Broker base URL. When set (here, or via SYNAPS_AUTH_ENDPOINT), the client fetches short-lived access tokens from the broker instead of reading/refreshing the local auth.json.

machine_token: Option<String>

Per-machine bearer presented to the broker (or SYNAPS_MACHINE_TOKEN). This is the machine’s own identity, never the provider credential.

accounts: BTreeMap<String, String>

Selected OAuth account per provider from auth.account.<provider> = <label|default|auto>. Keys are the raw provider ids as written; validation (and fail-closed handling of bad labels) happens in AccountPolicy::from_config_map.

auto: BTreeMap<String, String>

Raw automatic chooser settings, relative to auth.auto.

Implementations

impl AuthConfig

pub fn account_policy(&self) -> AccountPolicy

Account policy from config only (no env overlay). Invalid entries fail closed for their provider; see AccountPolicy::from_config_map.

pub fn account_selector(&self, provider: OAuthProviderId) -> AccountSelector

Effective selector for one provider (env > config > default).

pub fn credential_source(&self) -> CredentialSource

Resolve the credential source. Environment variables take precedence over config-file values: SYNAPS_AUTH_ENDPOINT / SYNAPS_MACHINE_TOKEN. Returns Remote iff an endpoint is set (env or config), else Local.

The machine token here is only ever the EXPLICIT one (env or config). When none is configured it stays empty, and that emptiness is the provenance record: the broker client (crate::core::auth::MachineToken) then uses — and may re-read after a 401 — the local broker’s auto-generated <base_dir>/auth-broker.token, but only for a loopback endpoint (#147 C1, prA N1). An explicit token is never replaced by, or sent alongside, the file token.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> AuthConfig

Returns the “default value” for a type.