Function match_server_identity

atomic-cli/src/commands/auth.rs:125–131

Pick the identity bound to the configured server whose host is the longest dot-boundary suffix of `remote_host`. Longest-suffix wins so a more specific server (`staging.atomic.storage`) beats a broader one (`atomic.storage`) for hosts under both — e.g. `x.staging.atomic.storage` resolves to the staging identity, not prod.

(remote_host: &str, servers: &[(String, String)])

/// beats a broader one (`atomic.storage`) for hosts under both — e.g.
/// `x.staging.atomic.storage` resolves to the staging identity, not prod.
fn match_server_identity(remote_host: &str, servers: &[(String, String)]) -> Option<String> {
    servers
        .iter()
        .filter(|(server_host, _)| host_is_under(remote_host, server_host))
        .max_by_key(|(server_host, _)| server_host.len())
        .map(|(_, identity)| identity.clone())
}

/// Whether `remote_host` is the server host itself or a subdomain of it,
/// matching only on dot boundaries (so `notatomic.storage` does NOT match