NatsCredentials

@override
def get_requirement(self) -> list[dict[str, Any]]:
    """Get the AsyncAPI requirement for NATS credentials authentication."""
    return [{"nats-jwt": []}]

@override
def get_schema(self) -> dict[str, dict[str, Any]]:
    """Get the AsyncAPI schema for NATS credentials authentication."""
    return {
        "nats-jwt": {
            "type": "asymmetricEncryption",
            "description": (
                "NATS user JWT authentication with NKey challenge signing."
            ),
            "x-nats-auth": "jwt-nkey",
            "x-nats-credential-source": "credentials-file",
        },
    }

@classmethod
def from_file(
    cls,
    credentials_file: str | Path,
    *,
    ssl_context: "SSLContext | None" = None,
    use_ssl: bool | None = None,
    tls_hostname: str | None = None,
    tls_handshake_first: bool = False,
) -> Self:
    """Load a combined NATS credentials file."""
    return cls(
        credentials_file,
        ssl_context=ssl_context,
        use_ssl=use_ssl,
        tls_hostname=tls_hostname,
        tls_handshake_first=tls_handshake_first,
    )

@classmethod
def from_files(
    cls,
    *,
    jwt: str | Path,
    seed: str | Path,
    ssl_context: "SSLContext | None" = None,
    use_ssl: bool | None = None,
    tls_hostname: str | None = None,
    tls_handshake_first: bool = False,
) -> Self:
    """Load separate NATS user JWT and seed files."""
    return cls(
        (str(jwt), str(seed)),
        ssl_context=ssl_context,
        use_ssl=use_ssl,
        tls_hostname=tls_hostname,
        tls_handshake_first=tls_handshake_first,
    )

@classmethod
def from_raw(
    cls,
    credentials: str,
    *,
    ssl_context: "SSLContext | None" = None,
    use_ssl: bool | None = None,
    tls_hostname: str | None = None,
    tls_handshake_first: bool = False,
) -> Self:
    """Use raw combined NATS credentials."""
    markers = ("BEGIN NATS USER JWT", "BEGIN USER NKEY SEED")
    if not credentials or any(marker not in credentials for marker in markers):
        msg = "Raw NATS credentials do not contain the required markers."
        raise ValueError(msg)

    return cls(
        RawCredentials(credentials),
        ssl_context=ssl_context,
        use_ssl=use_ssl,
        tls_hostname=tls_hostname,
        tls_handshake_first=tls_handshake_first,
    )