Struct GetOutcome 

pub struct GetOutcome {
    pub value: SecretString,
    pub lease_duration: Option<Duration>,
}

Successful payload of SecretSource::get.

value is wrapped in SecretString so the plaintext doesn’t accidentally land in a Debug print or a log line. Only the final consumer (an HTTP header builder, an SDK call site) should call expose_secret().

lease_duration lets the router’s adaptive-TTL cache (P5.4) shrink its TTL to fit short-lived dynamic secrets — Vault’s dynamic database creds, AWS STS tokens, etc. Sources that don’t have a lease concept return None, in which case the cache uses its default TTL.

Fields

value: SecretString

The secret value.

lease_duration: Option<Duration>

Upstream-reported lease duration, if any. The router caps the cache TTL at this value (per ADR-021 §7).

Trait Implementations

impl Debug for GetOutcome

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.