Authenticate to a Backend

Goal

Create or refresh credentials for a backend connection without leaking secrets into logs, route metadata, or tool output.

When to use this

Use this when adding a new direct-mode connection (file, http, omniverse-storage-service, s3, gcs, azure, opendal, or any other backend kind), or when an existing connection reports AuthRequired, CredentialExpired, or an inactive auth_state_kind in ovstorage_doctor.

Recipe