Struct AdminPassword 

pub struct AdminPassword(/* private fields */);

Admin password newtype. Redacts in Debug; zeroes its allocation on drop. Resolved once from the env var named by admin_password_env at config load; v1.7 doesn’t yet wire the value into HTTP auth (that’s #86).

The newtype enforces:

• Debug never prints the secret (just AdminPassword(<redacted>)).
• Drop zeroes the underlying bytes via zeroize.
• No Serialize / Deserialize — the value comes from env, not config files.

Clone is permitted (the password may be cloned into HTTP client state when #86 lands); the cloned value is a new allocation and zeros independently.

Implementations

impl AdminPassword

pub fn new(s: String) -> Self

Construct from a resolved env-var value (or a test fixture).

In production the v1.7 resolver is the only call site; operator code outside the resolver shouldn’t conjure admin passwords from arbitrary strings — the env-var-resolver path is what makes the admin_password_env indirection meaningful for #83’s “no plaintext in TOML” posture. Promoted to pub so integration tests in tests/ozone_backend.rs (#87) can construct an OzoneBackendConfig for wiremock-backed tests without a per-test env-var dance.

pub fn as_str(&self) -> &str

Borrow the underlying password as a &str for use at the HTTP-auth boundary. Caller is responsible for not leaking the borrow into logs or error messages.

Trait Implementations

impl Clone for AdminPassword

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdminPassword

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for AdminPassword

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for AdminPassword

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.