Struct AuthStore 

pub struct AuthStore { /* private fields */ }

Keys held for this machine, keyed by normalised endpoint.

Serialize/Deserialize drive the on-disk TOML directly; there is no separate wire type because the file is drep’s own and has one shape.

Implementations

impl AuthStore

pub fn new() -> Self

An empty store, for a machine that has never stored a key.

pub fn load(path: &Path) -> Result<Self, AuthError>

Read the store at path.

A missing file is an empty store, not an error: never having stored a key is the normal first-run state, and making the caller distinguish it from a real read failure would put that branch at every call site. A file that exists but cannot be read or parsed is an error, because silently treating a corrupt store as empty would send a user to re-paste keys they already have.

pub fn save(&self, path: &Path) -> Result<(), AuthError>

Write the store to path, creating the directory if needed.

The file is created mode 0600 and the directory 0700 on Unix, and the mode is applied to an existing file too - a store written before this ran, or one whose mode a user widened, is narrowed on the next save rather than left as found.

pub fn get(&self, endpoint: &str) -> Option<&str>

The key held for endpoint, if any.

pub fn set(&mut self, endpoint: &str, key: &str) -> Result<(), AuthError>

Store key for endpoint, replacing any previous one.

The rule about what a credential may be is vet’s, not this method’s; only the wording is here, because a paste at the prompt and a helper’s stdout send the reader to different fixes.

pub fn remove(&mut self, endpoint: &str) -> bool

Forget the key for endpoint. Returns whether one was held.

pub fn endpoints(&self) -> Vec<&str>

Every endpoint with a stored key, in sorted order. Never the keys.

pub fn is_empty(&self) -> bool

Whether the store holds nothing.

Trait Implementations

impl Debug for AuthStore

Hand-written so a key cannot reach a log.

The same reasoning as LlmConfig and LlmClient: a derived Debug prints every value, so one {:?} anywhere would emit every credential the user has. The endpoints are printed because they are not secret and they are the useful half when debugging.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthStore

fn default() -> AuthStore

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthStore

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuthStore

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.