RequestHandler
Module: handler::RequestHandler
Section titled “Module: handler::RequestHandler”Contents
Section titled “Contents”Functions
handle- Handles one normalized transport request.with_gateway_client- Enable secret placeholder rehydration via the firma-run secret gateway.with_http_secret_providers- Enable HTTP-origin secret interception for the givenproviders(the
firma_sidecar::handler::RequestHandler::handle
Section titled “firma_sidecar::handler::RequestHandler::handle”Function
Handles one normalized transport request.
The handler emits exactly one audit payload per call after dispatch work has completed for allow and passthrough outcomes.
fn handle(self: &Self, request: RawRequest, session_id: &str) -> HandledResponsefirma_sidecar::handler::RequestHandler::with_gateway_client
Section titled “firma_sidecar::handler::RequestHandler::with_gateway_client”Function
Enable secret placeholder rehydration via the firma-run secret gateway.
When set, the handler resolves [PLACEHOLDER_PREFIX]-prefixed tokens
in outbound request bodies before dispatch and masks raw secret
values in inbound response bodies before returning them to the agent.
fn with_gateway_client(self: Self, gc: GatewayClient) -> Selffirma_sidecar::handler::RequestHandler::with_http_secret_providers
Section titled “firma_sidecar::handler::RequestHandler::with_http_secret_providers”Function
Enable HTTP-origin secret interception for the given providers (the
Sidecar’s mirror of firma-run’s HTTP-shaped secret_providers
config, synthesized in at startup). A no-op when providers is
empty. Requires [Self::with_gateway_client] to have been called
too: when a provider’s matcher matches a response but no gateway
client is configured, the extracted secret cannot be pushed to the
broker, so the response is aborted fail-closed rather than forwarded
unmediated (see [RequestHandler::intercept_http_secrets]).
fn with_http_secret_providers(self: Self, providers: Vec<HttpIntegrationSpec<CompiledMatcher>>) -> Self