Struct LoadedCredential 

pub struct LoadedCredential {
    pub inject_mode: InjectMode,
    pub proxy_inject_mode: InjectMode,
    pub raw_credential: Zeroizing<String>,
    pub header_name: String,
    pub proxy_header_name: String,
    pub header_value: Zeroizing<String>,
    pub path_pattern: Option<String>,
    pub proxy_path_pattern: Option<String>,
    pub path_replacement: Option<String>,
    pub query_param_name: Option<String>,
    pub proxy_query_param_name: Option<String>,
}

A loaded credential ready for injection.

Contains only credential-specific fields (injection mode, header name/value, raw secret). Route-level configuration (upstream URL, L7 endpoint rules, custom TLS CA) is stored in crate::route::LoadedRoute.

Fields

inject_mode: InjectMode

Upstream injection mode

proxy_inject_mode: InjectMode

Proxy-side injection mode used for phantom token parsing.

raw_credential: Zeroizing<String>

Raw credential value from keystore (for modes that need it directly)

header_name: String

Header name to inject (e.g., “Authorization”)

proxy_header_name: String

Header name used for proxy-side phantom token validation.

header_value: Zeroizing<String>

Formatted header value (e.g., “Bearer sk-…”)

path_pattern: Option<String>

Pattern to match in incoming path (with {} placeholder)

proxy_path_pattern: Option<String>

Pattern to match in incoming proxy path (with {} placeholder)

path_replacement: Option<String>

Pattern for outgoing path (with {} placeholder)

query_param_name: Option<String>

Query parameter name

proxy_query_param_name: Option<String>

Proxy-side query parameter name for phantom token validation.

Trait Implementations

impl Debug for LoadedCredential

Custom Debug impl that redacts secret values to prevent accidental leakage in logs, panic messages, or debug output.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.