Struct KeyVaultClient 

pub struct KeyVaultClient { /* private fields */ }

Client for fetching secrets from Azure KeyVault.

Implementations

impl KeyVaultClient

pub fn new(vault_url: &str) -> Result<Self>

Creates a new KeyVault client for the specified vault URL.

Credentials are determined in the following order:

1. Environment variables: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET
2. Developer Tools credential (Azure CLI, VS Code, etc.) unless disabled via AZURE_IDENTITY_DISABLE_MANAGED_IDENTITY_CREDENTIAL=true

pub fn with_config(vault_url: &str, config: CredentialConfig) -> Result<Self>

Creates a new KeyVault client with explicit credential configuration.

pub async fn fetch_secret(&self, name: &str) -> Result<Option<String>>

Fetches a secret from KeyVault by name.

Returns Ok(None) if the secret name is empty. Returns Err if the secret fetch fails.

pub async fn fetch_secrets(&self, names: &[&str]) -> Result<Vec<Option<String>>>

Fetches multiple secrets from KeyVault in parallel.

Returns a vector of Option<String> in the same order as the input names. Empty names will result in None values.

Trait Implementations

impl Debug for KeyVaultClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.