Struct CredentialStore 

pub struct CredentialStore { /* private fields */ }

Credential store for all configured routes.

Implementations

impl CredentialStore

pub fn load( routes: &[RouteConfig], tls_connector: &TlsConnector, ) -> Result<Self>

Load credentials for all configured routes from the system keystore.

Routes without a credential_key or oauth2 block are skipped (no credential injection). Routes whose credential is not found (e.g. unset env var) are skipped with a warning — this allows profiles to declare optional credentials without failing when they are unavailable.

OAuth2 routes perform an initial token exchange at startup. If the exchange fails, the route is skipped (graceful degradation).

The tls_connector is required for OAuth2 token exchange HTTPS calls.

Returns an error only for hard failures (keystore access errors, config parse errors, non-UTF-8 values).

pub fn empty() -> Self

Create an empty credential store (no credential injection).

pub fn get(&self, prefix: &str) -> Option<&LoadedCredential>

Get a static credential for a route prefix, if configured.

pub fn get_oauth2(&self, prefix: &str) -> Option<&OAuth2Route>

Get an OAuth2 route (token cache + upstream) for a route prefix, if configured.

pub fn is_empty(&self) -> bool

Check if any credentials (static or OAuth2) are loaded.

pub fn len(&self) -> usize

Number of loaded credentials (static + OAuth2).

pub fn loaded_prefixes(&self) -> HashSet<String>

Returns the set of route prefixes that have loaded credentials (both static keystore and OAuth2 routes).

Trait Implementations

impl Debug for CredentialStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.