Function grpc_client

crates/openshell-cli/src/tls.rs:437–441

Build a gRPC [`OpenShellClient`]. When `tls.edge_token` is set, the returned client is wrapped with an interceptor that injects authentication headers on every request. Otherwise, standard mTLS is used (interceptor is a no-op).

(server: &str, tls: &TlsOptions)

/// interceptor that injects authentication headers on every request.
/// Otherwise, standard mTLS is used (interceptor is a no-op).
pub async fn grpc_client(server: &str, tls: &TlsOptions) -> Result<GrpcClient> {
    let channel = build_channel(server, tls).await?;
    let interceptor = interceptor_from_tls(tls)?;
    Ok(OpenShellClient::with_interceptor(channel, interceptor))
}

fn interceptor_from_tls(tls: &TlsOptions) -> Result<EdgeAuthInterceptor> {
    EdgeAuthInterceptor::new(tls.oidc_token.as_deref(), tls.edge_token.as_deref())