Struct SecretsBroker 

pub struct SecretsBroker<B, P>
where
    B: SecretsBackend,
    P: KeyProvider,
{ /* private fields */ }

High-level API that pairs a backend with the envelope crypto stack.

Implementations

impl<B, P> SecretsBroker<B, P>

where B: SecretsBackend, P: KeyProvider,

pub fn new(backend: B, crypto: EnvelopeService<P>) -> Self

Construct a new broker façade from the provided backend and crypto service.

pub fn put_secret( &mut self, meta: SecretMeta, data: &[u8], ) -> Result<SecretVersion>

Encrypt and store a secret, returning the version assigned by the backend.

pub fn get_secret( &mut self, uri: &SecretUri, ) -> DecryptResult<Option<BrokerSecret>>

Retrieve and decrypt the latest revision of a secret.

pub fn get_secret_version( &mut self, uri: &SecretUri, version: Option<u64>, ) -> DecryptResult<Option<BrokerSecret>>

Retrieve and decrypt a specific revision of a secret.

pub fn list_secrets( &self, scope: &Scope, category_prefix: Option<&str>, name_prefix: Option<&str>, ) -> Result<Vec<SecretListItem>>

List available secrets for a scope with optional category/name prefixes.

pub fn delete_secret(&self, uri: &SecretUri) -> Result<SecretVersion>

Soft-delete a secret (tombstone).

pub fn versions(&self, uri: &SecretUri) -> Result<Vec<SecretVersion>>

Fetch all versions known for a secret.

pub fn exists(&self, uri: &SecretUri) -> Result<bool>

Determine whether the latest revision of the secret exists.

pub fn backend(&self) -> &B

Borrow the underlying backend reference.

pub fn crypto(&self) -> &EnvelopeService<P>

Borrow the envelope service for custom workflows.

pub fn crypto_mut(&mut self) -> &mut EnvelopeService<P>

Mutable access to the envelope service (mainly for tests).