http

Module: secret_provider::http

Contents

Structs

• HttpSecretProviderConfig - One HTTP secret provider: which host to intercept and how to classify and

Enums

• HttpMatcherRuleConfig - One candidate rule for an [HttpSecretProviderConfig].

---

firma_config_schema::secret_provider::http::HttpMatcherRuleConfig

Enum

One candidate rule for an [HttpSecretProviderConfig].

Tagged by type (sensitive_command / safe_command / blocked_command) so it nests as a flat TOML table.

Variants:

• SensitiveCommand{ path: Option<String>, matcher: crate::secret_matcher::SecretMatcher } - Response whose body must be scanned and redacted using matcher.
• SafeCommand{ path: String } - Known-safe path whose response never carries secrets; forwarded
• BlockedCommand{ path: String } - Path that must always be denied.

Traits: Eq

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Clone
  • fn clone(self: &Self) -> HttpMatcherRuleConfig
• PartialEq
  • fn eq(self: &Self, other: &HttpMatcherRuleConfig) -> bool
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::secret_provider::http::HttpSecretProviderConfig

Struct

One HTTP secret provider: which host to intercept and how to classify and extract secrets from its responses.

Fields:

• provider_id: String - Stable integration identity (e.g. "aws-secrets-manager").
• host: String - Host glob pattern to match against MITM’d responses (e.g.
• matchers: Vec<HttpMatcherRuleConfig> - Candidate rules, tried against the request path. A single host can

Traits: Eq

Trait Implementations:

• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Clone
  • fn clone(self: &Self) -> HttpSecretProviderConfig
• PartialEq
  • fn eq(self: &Self, other: &HttpSecretProviderConfig) -> bool
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result