Function newClient

action/command/api.go:79–126

newClient creates a client using either access-token or service-account authentication.

(url, accessToken, serviceAccount, serviceAccountSecret string, opts clientOptions)

// newClient creates a client using either access-token or service-account authentication.
func newClient(url, accessToken, serviceAccount, serviceAccountSecret string, opts clientOptions) (*client, error) {
	if opts.pageSize <= 0 {
		opts.pageSize = 100
	}
	if opts.pageSize > 1000 {
		opts.pageSize = 1000
	}

	httpClient := opts.httpClient
	if httpClient == nil {
		timeout := opts.timeout
		if timeout == 0 {
			timeout = 120 * time.Second
		}
		httpClient = &http.Client{Timeout: timeout}
	}
	if len(opts.customHeaders) > 0 {
		copiedClient := *httpClient
		httpClient = &copiedClient
		httpClient.Transport = newCustomHeaderTransport(httpClient.Transport, opts.customHeaders)
	}

	var tokenRefresher func(ctx context.Context) (string, error)
	if accessToken != "" {
		// Use the provided access token directly; no refresh needed.
		tokenRefresher = func(_ context.Context) (string, error) {
			return accessToken, nil
		}
	} else {
		tokenRefresher = getTokenRefresher(httpClient, serviceAccount, serviceAccountSecret, url)
	}

	// Create unified interceptor.
	unifiedInt := newUnifiedInterceptor(opts.retryConfig, tokenRefresher)
	interceptors := connect.WithInterceptors(unifiedInt)

	return &client{
		httpClient:           httpClient,
		url:                  url,
		serviceAccount:       serviceAccount,
		serviceAccountSecret: serviceAccountSecret,
		options:              opts,
		releaseClient:        v1connect.NewReleaseServiceClient(httpClient, url, interceptors),
		planClient:           v1connect.NewPlanServiceClient(httpClient, url, interceptors),
		rolloutClient:        v1connect.NewRolloutServiceClient(httpClient, url, interceptors),
		actuatorClient:       v1connect.NewActuatorServiceClient(httpClient, url, interceptors),
	}, nil
}

type customHeaderTransport struct {
	base    http.RoundTripper