Struct SecretContext 

pub struct SecretContext { /* private fields */ }

Context containing resolved secret values for dynamic redaction.

This struct collects actual secret values from environment variables referenced by x-aperture-secret extensions and config-based secrets, allowing them to be redacted from logs wherever they appear.

Implementations

impl SecretContext

pub fn empty() -> Self

Creates an empty SecretContext with no secrets to redact.

pub fn from_spec_and_config( spec: &CachedSpec, api_name: &str, global_config: Option<&GlobalConfig>, ) -> Self

Creates a SecretContext by collecting secrets from the spec and config.

This resolves environment variables referenced by:

1. x-aperture-secret extensions in the OpenAPI spec’s security schemes
2. Config-based secrets in the global configuration

Arguments

• spec - The cached API specification containing security schemes
• api_name - The name of the API (used to look up config-based secrets)
• global_config - Optional global configuration with config-based secrets

pub fn is_secret(&self, value: &str) -> bool

Checks if a value exactly matches any of the secrets.

pub fn redact_secrets_in_text(&self, text: &str) -> String

Redacts all occurrences of secrets in the given text.

Only redacts secrets that are at least MIN_SECRET_LENGTH_FOR_BODY_REDACTION characters long to avoid false positives with short values.

pub const fn has_secrets(&self) -> bool

Returns true if this context has any secrets to redact.

Trait Implementations

impl Clone for SecretContext

fn clone(&self) -> SecretContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretContext

fn default() -> SecretContext

Returns the “default value” for a type.