Trait SecretVo 

pub trait SecretVo: ValueObject {
    type Inner;
    type Error: Error + Send + Sync + 'static;

    // Required methods
    fn try_new(inner: Self::Inner) -> Result<Self, Self::Error>;
    fn expose_secret(&self) -> &Self::Inner;
}

A value object that wraps a secret (API key, password, token, …) which must never appear in logs or error messages by accident.

This trait cannot force a redacting Debug impl: ValueObject requires Debug to exist, but nothing in the type system can require what it prints. A hand-written impl SecretVo (as in this crate’s own test fixtures) is only as safe as its own Debug/Display impls - it is the implementor’s responsibility to redact. #[derive(SecretVo)] in ddd-toolkit-macro closes this gap for derived types: it always generates a Debug impl that prints TypeName(***) and never the wrapped value, so prefer the derive over a manual impl wherever possible.

Required Associated Types

type Inner

The wrapped secret’s raw type.

type Error: Error + Send + Sync + 'static

The error produced when a value fails validation.

Required Methods

fn try_new(inner: Self::Inner) -> Result<Self, Self::Error>

Validates and wraps inner.

fn expose_secret(&self) -> &Self::Inner

Returns the wrapped secret. Named to make call sites (key.expose_secret() rather than key.0) an explicit, greppable signal that a secret is about to be handled directly.

Dyn Compatibility

This trait is not dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors