Struct EnvSecretProvider 

pub struct EnvSecretProvider { /* private fields */ }

Implementations

impl EnvSecretProvider

pub fn new(namespace: impl Into<String>) -> Self

pub fn env_var_name(&self, id: &SecretId) -> String

Trait Implementations

impl Clone for EnvSecretProvider

fn clone(&self) -> EnvSecretProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnvSecretProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SecretProvider for EnvSecretProvider

fn put<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 SecretId, value: SecretBytes, ) -> Pin<Box<dyn Future<Output = Result<(), SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Mutate the process environment so the secret is visible to callers (and unfortunately to every child process spawned after this point).

Safety / Soundness

std::env::set_var is unsafe in Rust 2024 because the underlying POSIX setenv(3) is not synchronized with concurrent getenv(3) calls; another thread reading the environment at the same moment can observe a half-updated or dangling pointer. The harn host process drives a tokio runtime, so this hazard is real even though no single call site currently triggers it. We mark this unsafe block to flag the existing risk; the proper fix is tracked as a follow-up — replace this with an in-process Mutex<HashMap<SecretId, SecretBytes>> consulted by get, and inject the secret narrowly via Command::env(key, val) at spawn time so it does not leak into unrelated children.

Child-process leakage

Beyond the soundness issue: once written here, the secret is inherited by every subsequent shell(...), exec(...), tokio::process::Command::spawn, and any tool we hand a child process to. A bash -c env or a debugger attaching to a child would see it. Treat this provider as a last-resort path; prefer the keyring-backed provider when available.

fn get<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 SecretId, ) -> Pin<Box<dyn Future<Output = Result<SecretBytes, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

fn rotate<'life0, 'life1, 'async_trait>( &'life0 self, _id: &'life1 SecretId, ) -> Pin<Box<dyn Future<Output = Result<RotationHandle, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

fn list<'life0, 'life1, 'async_trait>( &'life0 self, prefix: &'life1 SecretId, ) -> Pin<Box<dyn Future<Output = Result<Vec<SecretMeta>, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

fn namespace(&self) -> &str

fn supports_versions(&self) -> bool