Configuration & authentication

Related guidance: getting-started/configuration, getting-started/authentication, security/credentials.

Runnable examples: preflight.py.

Symbol	Summary
ECNConfig	Configure one immutable SDK MQTT v5 connection.
ReconnectPolicy	Configure one bounded exponential reconnect policy with mandatory full jitter.
ReviewedContainerNetwork	Record an operator attestation the SDK cannot prove; the SDK enforces that every resolved address is private and revalidated on connect and reconnect.
load_config	Load a named non-secret profile with environment overrides.
AuthConfig	Authentication configuration discriminated by the literal kind field.
BearerTokenAuth	Configure MQTT CONNECT authentication with a current bearer token.
MTLSAuth	Configure MQTT authentication with a client certificate and private key.
NoAuth	Configure no-auth, which is not a standalone unauthenticated mode and is accepted only with an explicit reviewed-container-network attestation and explicit TLS disablement.
CertificateMaterial	Provide a certificate from a filesystem path or secret PEM text.
PrivateKeyMaterial	Provide a private key from a filesystem path or secret PEM text.
TLSConfig	Configure TLS transport and optional custom certificate authority material.
TokenProvider	A cooperative asynchronous callable that supplies the current bearer token.
CredentialsProvider	A cooperative asynchronous callable supplying one username-token pair.
WireFormat	Select the entity and location payload encoding.