OptionalcontextRequired on server-side: The user context for the operation. Used for audit logging and database access.
OptionalcredentialOptional: Specific credential ID to retrieve. Takes precedence over credentialName lookup.
OptionalcredentialOptional: Override the credential name to look up. If not provided, uses the name passed to getCredential().
OptionaldirectOptional: Direct values to use instead of database lookup. Takes precedence over all other options. Useful for testing or when credentials are provided via other means.
OptionalexpirationOptional: Override the engine-wide expiration policy for this one call.
Pass 'warn' for the narrow set of callers that legitimately need to read
a credential because it has expired — chiefly credential rotation and
administration tooling, which must load the stale value in order to
replace it. Ordinary consumers should leave this unset and inherit the
engine's configured policy.
OptionalsubsystemOptional: Subsystem name for audit logging. Helps identify where credentials are being used.
Options for resolving credentials.