kandra-core/io.kandra.core/KandraAuth

KandraAuth

object KandraAuth

Factory for standard KandraAuthProvider implementations.

The recommended default for production is fromEnv — no credentials ever appear in code.

Functions

fun custom(provider: () -> KandraCredentials): KandraAuthProvider

Custom provider — fetch credentials from Vault, AWS Secrets Manager, etc.

fun fromEnv(usernameVar: String = "SCYLLA_USERNAME", passwordVar: String = "SCYLLA_PASSWORD"): KandraAuthProvider

Reads credentials from environment variables.

fun fromFile(usernamePath: String, passwordPath: String): KandraAuthProvider

Reads credentials from files (Docker secrets / Kubernetes secrets mounted as files).

fun static(username: String, password: String): KandraAuthProvider

Returns static credentials.