Function delegation_header

atomic-cli/src/commands/auth.rs:440–457

The encoded certificate an agent identity should present, if any. `None` for a human — they have no certificate and need none. `None` too when an agent has no usable certificate, because the resulting 401 from the server ("carries no certificate") names the problem better than anything we could raise here, and a read against a public project may not need one at all.

(store: &IdentityStore, identity: &Identity, server: &str)

/// could raise here, and a read against a public project may not need one at
/// all.
fn delegation_header(store: &IdentityStore, identity: &Identity, server: &str) -> Option<String> {
    if !identity.identity_type.is_delegated() {
        return None;
    }

    match crate::commands::delegation::active_for(store, identity, Some(server)) {
        Ok(resolved) => Some(atomic_canonical::delegation::encode_for_transport(
            &resolved.document,
        )),
        Err(e) => {
            log::debug!(
                "No usable delegation for agent '{}' against {server}: {e}",
                identity.name
            );
            None
        }
    }
}

/// What went wrong (if anything) when checking for usable push credentials.
///