secret-vault 0.1.0

Library provides a secure vault to store application secrets in memory coming from Google/AWS/other secret managers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

use crate::encryption::*;
use crate::vault_store::SecretVaultStore;
use crate::*;

pub struct SecretVaultBuilder;

impl SecretVaultBuilder {
    pub fn with_source<S: SecretsSource>(source: S) -> SecretVaultBuilderWithSource<S> {
        SecretVaultBuilderWithSource(source)
    }
}

pub struct SecretVaultBuilderWithSource<S: SecretsSource>(S);

impl<S: SecretsSource> SecretVaultBuilderWithSource<S> {
    pub fn with_encryption<E: SecretVaultEncryption>(
        self,
        encryption: E,
    ) -> SecretVaultBuilderWithEncryption<S, E> {
        SecretVaultBuilderWithEncryption {
            source: self.0,
            encryption,
        }
    }

    pub fn without_encryption(
        self,
    ) -> SecretVaultBuilderWithEncryption<S, SecretVaultNoEncryption> {
        SecretVaultBuilderWithEncryption {
            source: self.0,
            encryption: SecretVaultNoEncryption {},
        }
    }
}

pub struct SecretVaultBuilderWithEncryption<S: SecretsSource, E: SecretVaultEncryption> {
    source: S,
    encryption: E,
}

impl<S: SecretsSource, E: SecretVaultEncryption> SecretVaultBuilderWithEncryption<S, E> {
    pub fn with_memory_protection<AR: SecretVaultStoreValueAllocator>(
        self,
        allocator: AR,
    ) -> SecretVaultBuilderWithAllocator<S, E, AR> {
        SecretVaultBuilderWithAllocator {
            source: self.source,
            encryption: self.encryption,
            allocator,
        }
    }

    pub fn without_memory_protection(
        self,
    ) -> SecretVaultBuilderWithAllocator<S, E, SecretVaultNoAllocator> {
        SecretVaultBuilderWithAllocator {
            source: self.source,
            encryption: self.encryption,
            allocator: SecretVaultNoAllocator,
        }
    }
}

pub struct SecretVaultBuilderWithAllocator<
    S: SecretsSource,
    E: SecretVaultEncryption,
    AR: SecretVaultStoreValueAllocator,
> {
    source: S,
    encryption: E,
    allocator: AR,
}

impl<S: SecretsSource, E: SecretVaultEncryption, AR: SecretVaultStoreValueAllocator>
    SecretVaultBuilderWithAllocator<S, E, AR>
{
    pub fn build(self) -> SecretVaultResult<SecretVault<S, AR, E>> {
        let store = SecretVaultStore::new(self.encryption, self.allocator);
        SecretVault::new(self.source, store)
    }
}