Struct CredentialStore 

pub struct CredentialStore { /* private fields */ }

Credential store for all configured routes.

Implementations

impl CredentialStore

pub fn load( routes: &[RouteConfig], tls_connector: &TlsConnector, ) -> Result<Self>

Load credentials for all configured routes from the system keystore.

Routes without a credential_key or oauth2 block are skipped (no credential injection). Routes whose credential is not found remain configured but unavailable at request time, so managed-credential requests fail closed instead of silently accepting agent-supplied upstream credentials.

OAuth2 routes perform an initial token exchange at startup. If the exchange fails, the route remains configured but unavailable until token acquisition succeeds.

The tls_connector is required for OAuth2 token exchange HTTPS calls.

Returns an error only for hard failures (config parse errors, non-UTF-8 values). Missing or inaccessible credentials are logged as warnings and the route is skipped.

pub fn empty() -> Self

Create an empty credential store (no credential injection).

pub fn get(&self, prefix: &str) -> Option<&LoadedCredential>

Get a static credential for a route prefix, if configured.

pub fn get_oauth2(&self, prefix: &str) -> Option<&OAuth2Route>

Get an OAuth2 route (token cache + upstream) for a route prefix, if configured.

pub fn is_empty(&self) -> bool

Check if any credentials (static or OAuth2) are loaded.

pub fn len(&self) -> usize

Number of loaded credentials (static + OAuth2).

pub fn loaded_prefixes(&self) -> HashSet<String>

Returns the set of route prefixes that have loaded credentials (both static keystore and OAuth2 routes).

Trait Implementations

impl Debug for CredentialStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.