feat: resolve auth profiles through secret ids

crates/crank-core/src/auth.rs

@@ -1,45 +1,32 @@
 use serde::{Deserialize, Serialize};
 
 use crate::{
-    ids::{AuthProfileId, WorkspaceId},
+    ids::{AuthProfileId, SecretId, WorkspaceId},
     protocol::AuthKind,
 };
 
-#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
-pub struct SecretRef(pub String);
-
-impl SecretRef {
-    pub fn new(value: impl Into<String>) -> Self {
-        Self(value.into())
-    }
-
-    pub fn as_str(&self) -> &str {
-        &self.0
-    }
-}
-
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct BearerAuthConfig {
     pub header_name: String,
-    pub secret_ref: SecretRef,
+    pub secret_id: SecretId,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct BasicAuthConfig {
-    pub username_secret_ref: SecretRef,
-    pub password_secret_ref: SecretRef,
+    pub username_secret_id: SecretId,
+    pub password_secret_id: SecretId,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct ApiKeyHeaderAuthConfig {
     pub header_name: String,
-    pub secret_ref: SecretRef,
+    pub secret_id: SecretId,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct ApiKeyQueryAuthConfig {
     pub param_name: String,
-    pub secret_ref: SecretRef,
+    pub secret_id: SecretId,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
@@ -51,6 +38,17 @@ pub enum AuthConfig {
     ApiKeyQuery(ApiKeyQueryAuthConfig),
 }
 
+impl AuthConfig {
+    pub fn secret_ids(&self) -> Vec<&SecretId> {
+        match self {
+            Self::Bearer(config) => vec![&config.secret_id],
+            Self::Basic(config) => vec![&config.username_secret_id, &config.password_secret_id],
+            Self::ApiKeyHeader(config) => vec![&config.secret_id],
+            Self::ApiKeyQuery(config) => vec![&config.secret_id],
+        }
+    }
+}
+
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
 pub struct AuthProfile {
     pub id: AuthProfileId,