Struct SecretsManager 

pub struct SecretsManager { /* private fields */ }

Main secrets manager that handles caching and backend abstraction

Implementations

impl SecretsManager

pub fn new(backend: Arc<dyn SecretBackend>, cache_ttl: Duration) -> Self

Create a new secrets manager with a specific backend

pub async fn from_config(config: SecretsConfig) -> Result<Self>

Create from configuration

pub async fn from_env() -> Result<Self>

Create from environment variables

Uses environment backend by default.

pub async fn get(&self, key: &str) -> Result<String>

Get a secret by key

Checks cache first, then falls back to backend.

pub async fn get_as<T>(&self, key: &str) -> Result<T>

where T: DeserializeOwned + FromStr, T::Err: Display,

Get a secret and parse it to a specific type

Example

let port: u16 = secrets.get_as("database_port").await?;
let timeout: f64 = secrets.get_as("request_timeout").await?;

pub async fn set(&self, key: &str, value: &str) -> Result<()>

Set a secret (if backend supports it)

pub async fn delete(&self, key: &str) -> Result<()>

Delete a secret (if backend supports it)

pub async fn list(&self) -> Result<Vec<String>>

List all secret keys (if backend supports it)

pub async fn clear_cache(&self)

Clear the cache

pub async fn invalidate(&self, key: &str)

Invalidate a specific cache entry