support client credentials

internal/permissions/client.go

@@ -15,10 +15,14 @@ import (
 	"go.uber.org/zap"
 )
 
-const defaultPermissionsURL = "https://permissions-api.hollow-a.sv15.metalkube.net"
+const (
+	defaultPermissionsURL = "https://permissions-api.hollow-a.sv15.metalkube.net"
 
-var defaultHTTPClient = &http.Client{
-	Timeout: 5 * time.Second, // nolint:gomnd // unexported
+	DefaultHTTPClientTimeout = 5 * time.Second
+)
+
+var DefaultHTTPClient = &http.Client{
+	Timeout: DefaultHTTPClientTimeout,
 }
 
 // Client is the permissions client.
@@ -108,7 +112,7 @@ func encodeJSON(v any) (*bytes.Buffer, error) {
 func NewClient(token string, options ...Option) (*Client, error) {
 	client := &Client{
 		logger:     zap.NewNop().Sugar(),
-		httpClient: defaultHTTPClient,
+		httpClient: DefaultHTTPClient,
 		token:      token,
 	}