Type Alias SourceCredential

SourceCredential: Message<"virtufin.SourceCredential"> & {
    scheme:
        | { case: "basic"; value: BasicAuthCredential }
        | { case: "bearer"; value: BearerTokenCredential }
        | { case: "named"; value: string }
        | { case: undefined; value?: undefined };
}

Per-request authorization for a CodeSource URL fetch. Never persisted beyond the fetch it authorizes (see RegistryAuthHandler's removal -- this replaces its unconditional shared-bot-by-host model). basic/ bearer carry the secret directly; named is a server-resolved reference (e.g. "virtufin" for the org's own shared registry credential) so that secret never has to be distributed to callers.

Type declaration

  • scheme:
        | { case: "basic"; value: BasicAuthCredential }
        | { case: "bearer"; value: BearerTokenCredential }
        | { case: "named"; value: string }
        | { case: undefined; value?: undefined }

    from oneof virtufin.SourceCredential.scheme

from message virtufin.SourceCredential