Method Call

core/openapi/caller.go:58–87

Call executes the operation and returns the response body, with the configured ResultPath stripped. A 401 triggers exactly one retry after invalidating the auth provider's cached token — this handles the common case of a service-credential token expiring mid-flight.

(ctx context.Context, p CallParams)

// after invalidating the auth provider's cached token — this handles
// the common case of a service-credential token expiring mid-flight.
func (c *Caller) Call(ctx context.Context, p CallParams) ([]byte, error) {
	body, status, err := c.doOnce(ctx, p)
	if err != nil {
		return nil, err
	}
	if status == http.StatusUnauthorized {
		// Cached-token providers invalidate; stateless ones no-op.
		// Either way, we retry exactly once. Repeat 401s after refresh
		// surface as a real auth failure rather than a retry loop.
		if rerr := c.auth.OnUnauthorized(ctx); rerr != nil {
			return nil, fmt.Errorf("openapi: auth invalidate: %w", rerr)
		}
		body, status, err = c.doOnce(ctx, p)
		if err != nil {
			return nil, err
		}
	}
	if status/100 != 2 {
		return nil, fmt.Errorf("openapi: %s %s returned %d: %s",
			c.op.Method, c.op.PathTemplate, status, truncate(body, 200))
	}

	if len(c.op.ResultPath) > 0 {
		body, err = stripResultPath(body, c.op.ResultPath)
		if err != nil {
			return nil, fmt.Errorf("openapi: %s strip result_path: %w", c.op.OperationID, err)
		}
	}
	return body, nil
}

// doOnce builds and executes a single HTTP request. Separated out so
// the 401-retry path can call it twice without re-building the URL