OptionalauthAuthentication mode. Exactly one variant may be set. (-- Mutual exclusivity is enforced by the oneof on the wire. --)
Bearer token forwarded as the Authorization: Bearer ... header on
outbound requests. Supplied as inline plaintext via
ProviderSecret.plaintext. Set this for bearer-token auth.
OptionalbaseEndpoint URL of the OpenAI-compatible service (e.g.,
https://api.example.com/v1). Required on Create.
Direct form of custom provider config.
Authentication is one of two mutually exclusive modes, exactly one of which must be supplied on Create:
api_key, leaveheader_authunset. The secret is forwarded asAuthorization: Bearer <secret>.header_auth, leaveapi_keyunset. The secret is forwarded as<api_key_name>: <api_key_value>. Setting both modes or neither mode is rejected.