Function NewAuthProvider

core/openapi/auth.go:39–62

NewAuthProvider builds the right AuthProvider for cfg.Scheme. An empty or unrecognised scheme returns the no-op provider — operations against the spec will simply send unauthenticated requests, which is the correct behaviour for public APIs. The returned provider holds httpClient when it needs to m

(cfg AuthConfig, httpClient *http.Client)

// requests (token exchange, oauth2 client_credentials). httpClient must
// not be nil for those schemes.
func NewAuthProvider(cfg AuthConfig, httpClient *http.Client) (AuthProvider, error) {
	switch strings.ToLower(strings.TrimSpace(cfg.Scheme)) {
	case "", "none":
		return noopAuth{}, nil
	case "bearer":
		return &bearerAuth{cfg: cfg}, nil
	case "basic":
		return &basicAuth{cfg: cfg}, nil
	case "api_key", "apikey":
		return &apiKeyAuth{cfg: cfg}, nil
	case "oauth2_client_credentials":
		if httpClient == nil {
			return nil, fmt.Errorf("openapi: oauth2_client_credentials requires an http client")
		}
		return &oauth2CCAuth{cfg: cfg, http: httpClient, tok: &cachedToken{}}, nil
	case "token_exchange":
		if httpClient == nil {
			return nil, fmt.Errorf("openapi: token_exchange requires an http client")
		}
		return &tokenExchangeAuth{cfg: cfg, http: httpClient, tok: &cachedToken{}}, nil
	default:
		return nil, fmt.Errorf("openapi: unknown auth scheme %q", cfg.Scheme)
	}
}

// noopAuth is the auth provider used when no auth is configured. It
// exists primarily so the resolver doesn't need to nil-check provider