Struct OsKeyringSecretStore 

pub struct OsKeyringSecretStore { /* private fields */ }

SecretStore impl backed by the platform’s native credential store.

Each variable’s value is stored as a single credential keyed by the variable’s UUID. See the crate-level docs for the per-platform mapping.

Examples

use evault_store_keyring::OsKeyringSecretStore;

let store = OsKeyringSecretStore::new().expect("init keyring");

Implementations

impl OsKeyringSecretStore

pub fn new() -> Result<Self, SecretError>

Construct a store using the canonical "evault" service identifier.

Initializes the platform-native backend on first call; subsequent calls re-use the same backend.

Errors

Returns SecretError::Unavailable if the platform offers no usable secret store (e.g. headless Linux without D-Bus). Returns SecretError::Backend for other initialisation failures.

pub fn with_service(service: impl Into<String>) -> Result<Self, SecretError>

Construct a store using a caller-supplied service identifier. Useful for tests that need to isolate from any production data.

Errors

Returns SecretError::Backend with label "empty_service" if the service identifier is empty (platform behaviour for the empty case is inconsistent — Windows DPAPI accepts it, Linux Secret Service may reject it, macOS Keychain may silently accept). The remaining error cases are the same as Self::new.

Trait Implementations

impl Debug for OsKeyringSecretStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SecretStore for OsKeyringSecretStore

fn put(&self, id: VarId, value: SecretString) -> Result<(), SecretError>

Store value for id, replacing any previous value.

fn get(&self, id: VarId) -> Result<Option<SecretString>, SecretError>

Retrieve the secret value for id, or Ok(None) if absent.

fn delete(&self, id: VarId) -> Result<(), SecretError>

Delete the secret value for id. No-op if absent.