Method load

crates/chat-cli/src/auth/builder_id.rs:320–370

Load the token from the keychain, refresh the token if it is expired and return it

(
        database: &Database,
        telemetry: Option<&crate::telemetry::TelemetryThread>,
    )

    /// Load the token from the keychain, refresh the token if it is expired and return it
    pub async fn load(
        database: &Database,
        telemetry: Option<&crate::telemetry::TelemetryThread>,
    ) -> Result<Option<Self>, AuthError> {
        // Can't use #[cfg(test)] without breaking lints, and we don't want to require
        // authentication in order to run ChatSession tests. Hence, adding this here with cfg!(test)
        if cfg!(test) && !is_integ_test() {
            return Ok(Some(Self {
                access_token: Secret("test_access_token".to_string()),
                expires_at: time::OffsetDateTime::now_utc() + time::Duration::minutes(60),
                refresh_token: Some(Secret("test_refresh_token".to_string())),
                region: Some(OIDC_BUILDER_ID_REGION.to_string()),
                start_url: Some(START_URL.to_string()),
                oauth_flow: OAuthFlow::DeviceCode,
                scopes: Some(SCOPES.iter().map(|s| (*s).to_owned()).collect()),
            }));
        }

        trace!("loading builder id token from the secret store");
        match database.get_secret(Self::SECRET_KEY).await {
            Ok(Some(secret)) => {
                let token: Option<Self> = serde_json::from_str(&secret.0)?;
                match token {
                    Some(token) => {
                        let region = token.region.clone().map_or(OIDC_BUILDER_ID_REGION, Region::new);
                        let client = client(region.clone());

                        if token.is_expired() {
                            trace!("token is expired, refreshing");
                            token.refresh_token(&client, database, &region, telemetry).await
                        } else {
                            trace!(?token, "found a valid token");
                            Ok(Some(token))
                        }
                    },
                    None => {
                        debug!("secret stored in the database was empty");
                        Ok(None)
                    },
                }
            },
            Ok(None) => {
                debug!("no secret found in the database");
                Ok(None)
            },
            Err(err) => {
                error!(%err, "Error getting builder id token from keychain");
                Err(err)?
            },
        }
    }

    /// Refresh the access token
    pub async fn refresh_token(