Struct CredentialStore 

pub struct CredentialStore { /* private fields */ }

Credential store for all configured routes.

Implementations

impl CredentialStore

pub fn load(routes: &[RouteConfig]) -> Result<Self>

Load credentials for all configured routes from the system keystore.

Routes without a credential_key are skipped (no credential injection). Routes whose credential is not found (e.g. unset env var) are skipped with a warning — this allows profiles to declare optional credentials without failing when they are unavailable.

Returns an error only for hard failures (keystore access errors, config parse errors, non-UTF-8 values).

pub fn empty() -> Self

Create an empty credential store (no credential injection).

pub fn get(&self, prefix: &str) -> Option<&LoadedCredential>

Get a credential for a route prefix, if configured.

pub fn is_empty(&self) -> bool

Check if any credentials are loaded.

pub fn len(&self) -> usize

Number of loaded credentials.

pub fn loaded_prefixes(&self) -> HashSet<String>

Returns the set of route prefixes that have loaded credentials.

pub fn is_credential_upstream(&self, host_port: &str) -> bool

Check whether host_port (e.g. "gitlab.example.com:443") matches any credential upstream. Used to block CONNECT tunnels that would bypass L7 path filtering.

pub fn credential_upstream_hosts(&self) -> HashSet<String>

Return the set of normalised host:port strings for all credential upstreams. Used to compute smart NO_PROXY — hosts in this set must NOT be bypassed because they need reverse proxy credential injection.

Trait Implementations

impl Debug for CredentialStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.