Struct CachedPassphraseProvider 

pub struct CachedPassphraseProvider { /* private fields */ }

A PassphraseProvider that caches passphrases from an inner provider.

Cached values are stored in Zeroizing<String> for automatic zeroing on drop and expire after the configured TTL (time-to-live).

This is useful for agent sessions where prompting for every signing operation would be disruptive, but credentials shouldn’t persist indefinitely.

Security Considerations

• Cached passphrases are wrapped in Zeroizing<String> for secure memory cleanup
• TTL prevents stale credentials from persisting
• Call clear_cache() on logout or lock events

Implementations

impl CachedPassphraseProvider

pub fn new( inner: Arc<dyn PassphraseProvider + Send + Sync>, ttl: Duration, ) -> Self

Creates a new CachedPassphraseProvider wrapping the given provider.

Arguments

• inner - The underlying provider to fetch passphrases from on cache miss
• ttl - How long cached passphrases remain valid before expiring

pub fn clear_cache(&self)

Clears all cached passphrases.

Call this on logout, lock, or when the session ends to ensure cached credentials don’t persist in memory.

Trait Implementations

impl PassphraseProvider for CachedPassphraseProvider

fn get_passphrase( &self, prompt_message: &str, ) -> Result<Zeroizing<String>, AgentError>

Securely obtains a passphrase, potentially by prompting the user.

fn on_incorrect_passphrase(&self, prompt_message: &str)

Notifies the provider that the passphrase returned for prompt_message was wrong.