Struct TokenManager 

pub struct TokenManager { /* private fields */ }

Logs in and keeps the token fresh.

Refresh is single-flighted: concurrent callers that all observe a stale token share one RefreshToken round-trip. Without that, N tasks would each present the same single-use refresh token, one would win, and the rest would be told their credential is invalid.

Implementations

impl TokenManager

pub const DEFAULT_SKEW: Duration

Default refresh skew: refresh this long before actual expiry.

pub fn new(channel: Channel, meta: Metadata) -> Self

pub fn with_skew(channel: Channel, meta: Metadata, skew: Duration) -> Self

pub async fn peek(&self) -> Token

The currently stored token, without refreshing.

pub async fn login( &self, username: impl Into<String>, password: impl Into<String>, ) -> Result<Token, Status>

Authenticate with username and password, storing the result.

pub async fn access_token(&self) -> Result<String, Status>

The access token, refreshing first if it is stale.

pub async fn refresh(&self) -> Result<Token, Status>

Force a refresh. Holding the token lock across the RPC is what makes this single-flighted: a second caller waits and then observes the new token rather than presenting the spent one.

pub async fn authenticated_metadata(&self) -> Result<Metadata, Status>

Metadata carrying the current access token, ready for a data-plane client.

Trait Implementations

impl Clone for TokenManager

fn clone(&self) -> TokenManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenManager

Hand-written rather than derived: a derived Debug would print the stored access and refresh tokens, and this type is exactly the sort of thing that ends up in a tracing field or a panic message.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.