Enum Auth 

pub enum Auth {
    None,
    Bearer(String),
    Header {
        name: String,
        value: String,
    },
}

How a request proves who it is.

An enum rather than an Option<String> bearer token, because the shape varies by provider and was already known to vary before the first non-OpenAI one landed: Azure OpenAI authenticates with api-key, a local server wants nothing at all, and a future provider will want something else again. Widening an Option<String> later would break every caller; adding a variant here does not.

Variants

None

Send no credential header at all.

The default for a model running on the caller’s own machine. “No token” must mean no header, not an empty one: a server that validates the header’s presence rejects Authorization: Bearer with an error that reads like a bad credential rather than a missing one.

Bearer(String)

Authorization: Bearer <token> — the OpenAI convention.

Header

A verbatim name: value header, for a provider that authenticates some other way. No bearer is added alongside it.

Fields

name: String

Header name (e.g. api-key).

value: String

Header value. Treated as a secret.

Trait Implementations

impl Debug for Auth

Hand-written so a credential never reaches a log or a panic message through the derive. The same reflex crate::ExtractorSelection applies to a backend’s URL, applied to something that matters more.

The header NAME survives: it is not a secret, and printing it is what makes a provider misconfigured with the wrong scheme diagnosable at all.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.