Struct VendedCredentials 

pub struct VendedCredentials {
    pub token: String,
    pub expires_at_epoch_s: i64,
    pub access: Access,
}

Temporary, scoped credentials vended by the catalog, inheriting the requesting principal’s privileges. The engine never holds static secrets.

This is an opaque carrier: the token payload and its interpretation are the backend’s concern. expires_at_epoch_s is UTC seconds since the Unix epoch, supplied by the backend (this crate never reads the clock).

Refresh ahead of expiry, never at it. Vended Unity Catalog / Databricks credentials live at most ~1 hour, and an in-flight write must not cross the expiry boundary holding a credential the server has already rotated. A consumer (the sink) should re-vend once Self::needs_refresh returns true — comfortably before expires_at_epoch_s — rather than reacting to a mid-write auth failure.

Fields

token: String

Opaque credential material (e.g. a temporary token or STS payload).

expires_at_epoch_s: i64

Expiry as UTC seconds since the Unix epoch.

access: Access

The access this credential grants.

Implementations

impl VendedCredentials

pub fn needs_refresh(&self, now_epoch_s: i64, refresh_skew_s: i64) -> bool

Whether these credentials should be proactively re-vended: true once the current time is within refresh_skew_s of expiry (or already past it).

The caller supplies now_epoch_s (this crate never reads the clock). Use a generous skew — several minutes — so a long write never races the rotation.

Trait Implementations

impl Clone for VendedCredentials

fn clone(&self) -> VendedCredentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VendedCredentials

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Never prints the token — credentials must not leak into logs.

impl PartialEq for VendedCredentials

fn eq(&self, other: &VendedCredentials) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for VendedCredentials

impl StructuralPartialEq for VendedCredentials