Function resolve_identity_from_url

atomic-cli/src/commands/auth.rs:98–117

Pure identity resolution from a URL plus the configured server bindings. userinfo → server-host match (longest suffix) → first-label subdomain. Split from the config-loading wrapper so it can be unit-tested without a config file on disk.

(remote_url: &str, servers: &[(String, String)])

/// Split from the config-loading wrapper so it can be unit-tested without a
/// config file on disk.
fn resolve_identity_from_url(remote_url: &str, servers: &[(String, String)]) -> Option<String> {
    let url = Url::parse(remote_url).ok()?;

    // 1. Explicit in the URL: http://bob@host/...
    let username = url.username();
    if !username.is_empty() {
        return Some(username.to_string());
    }

    let host = url.host_str()?;

    // 2. Configured server binding: identity follows the server (apex), so any
    //    tenant under it resolves to the same identity.
    if let Some(identity) = match_server_identity(host, servers) {
        return Some(identity);
    }

    // 3. Legacy: treat the first DNS label as the identity name.
    extract_subdomain(host)
}

/// Pick the identity bound to the configured server whose host is the longest
/// dot-boundary suffix of `remote_host`.