Exchanges an assertion or external credential for a Nebius access token.
The requester builds the exchange request. The SDK supplies the generated token-exchange client. This low-level bearer does not cache or renew access tokens; high-level bearers such as ServiceAccountBearer wrap it in a RenewableBearer.
Returns a JSON-safe value for logs.
Creates an exchange bearer.
sdk can be set later with ExchangeableBearer.setSDK. Calling
ExchangeableBearer.receiver before an SDK is set throws.
Optionallogger: LoggerOptionalmetrics: AuthMetricsInputReadonly$typeContains the fully qualified runtime type name.
Returns the provider name for authorization metrics.
Returns the stable credential name used by file-backed token caches.
Most bearers do not have a name. Wrappers can add one with NamedBearer.
Returns the next bearer in a wrapper chain, when this bearer wraps another source.
Returns a JSON-safe value for logs.
Stops owned background work and closes the wrapped bearer.
OptionalgraceMs: numberCreates a token receiver.
Sets or clears the SDK used for token exchange.
A promise delays client creation until the SDK is ready. Passing null
disables receiver creation.
Exchanges an assertion or external credential for a Nebius access token.
The requester builds the exchange request. The SDK supplies the generated token-exchange client. This low-level bearer does not cache or renew access tokens; high-level bearers such as ServiceAccountBearer wrap it in a RenewableBearer.