Enum DbAuthConfig 

pub enum DbAuthConfig {
    Password {
        database_url: String,
    },
    RdsIam {
        provider: Arc<RdsIamTokenProvider>,
    },
}

How the application authenticates to PostgreSQL.

Password is the legacy path: a static DATABASE_URL with embedded credentials. RdsIam generates short-lived AWS IAM tokens, refreshed automatically in the background.

Variants

Password

Static password embedded in the connection URL.

Fields

database_url: String

RdsIam

AWS RDS IAM authentication. The provider caches a fresh token and exposes current_url() for connection managers.

Fields

provider: Arc<RdsIamTokenProvider>

Implementations

impl DbAuthConfig

pub fn password(database_url: impl Into<String>) -> DbAuthConfig

Build a Password config from a database URL string.

pub async fn rds_iam(database_url: &str) -> Result<DbAuthConfig, Error>

Build an RdsIam config. Loads AWS credentials, generates the first token, and spawns a background refresh task.

pub fn current_url(&self) -> String

Return the current database URL (with valid credentials).

pub async fn from_env(database_url: &str) -> Result<DbAuthConfig, Error>

Build from the DB_AUTH_MODE env var convention.

• DB_AUTH_MODE=rds_iam (or rds-iam) → Self::rds_iam
• anything else (or unset) → Self::password

impl DbAuthConfig

pub fn rds_iam_with_provider(provider: Arc<RdsIamTokenProvider>) -> DbAuthConfig

Build an RdsIam variant with a pre-seeded URL (no AWS calls). Used by tests and any code that manages token lifecycle externally.

Trait Implementations

impl Clone for DbAuthConfig

fn clone(&self) -> DbAuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DbAuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.