store

Module: store

Contents

Structs

• SecretStore - In-memory placeholder ↔ secret dictionary.

---

firma_secret_provider::store::SecretStore

Struct

In-memory placeholder ↔ secret dictionary.

Each placeholder holds exactly one entry. The entry’s optional domain field scopes resolution: None resolves for any host; Some(host) resolves only for that exact host. Integrations that expose a URL/website field in their vault output (e.g. 1Password’s urls[0].href) populate this field via the matcher’s domain_path so the Sidecar cannot reuse a credential for a different service.

The dictionary is run-scoped: values are zeroized when the store is dropped.

Methods:

• fn new() -> Self - Create an empty store.
• fn insert(self: & mut Self, placeholder: SecretPlaceholder, domain: HashSet<Authority>, secret: SecretString) - Insert or replace a placeholder → secret mapping.
• fn resolve(self: &Self, placeholder: &SecretPlaceholder, domain: &Authority) -> Option<&SecretString> - Resolve a placeholder token to its secret bytes for the given request domain.
• fn len(self: &Self) -> usize - Number of stored secrets.
• fn is_empty(self: &Self) -> bool - Whether the store holds no secrets.

Trait Implementations:

• Default
  • fn default() -> SecretStore
• Clone
  • fn clone(self: &Self) -> SecretStore
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result