Struct LoadedCredential 

pub struct LoadedCredential {
    pub inject_mode: InjectMode,
    pub upstream: String,
    pub raw_credential: Zeroizing<String>,
    pub header_name: String,
    pub header_value: Zeroizing<String>,
    pub path_pattern: Option<String>,
    pub path_replacement: Option<String>,
    pub query_param_name: Option<String>,
    pub endpoint_rules: CompiledEndpointRules,
    pub tls_connector: Option<TlsConnector>,
}

A loaded credential ready for injection.

Fields

inject_mode: InjectMode

Injection mode

upstream: String

Upstream URL (e.g., “https://api.openai.com”)

raw_credential: Zeroizing<String>

Raw credential value from keystore (for modes that need it directly)

header_name: String

Header name to inject (e.g., “Authorization”)

header_value: Zeroizing<String>

Formatted header value (e.g., “Bearer sk-…”)

path_pattern: Option<String>

Pattern to match in incoming path (with {} placeholder)

path_replacement: Option<String>

Pattern for outgoing path (with {} placeholder)

query_param_name: Option<String>

Query parameter name

endpoint_rules: CompiledEndpointRules

Pre-compiled endpoint rules for method+path filtering. Compiled once at load time to avoid per-request glob compilation.

tls_connector: Option<TlsConnector>

Per-route TLS connector with custom CA trust, if configured. Built once at startup from the route’s tls_ca certificate file. When None, the shared default connector (webpki roots only) is used.

Trait Implementations

impl Debug for LoadedCredential

Custom Debug impl that redacts secret values to prevent accidental leakage in logs, panic messages, or debug output.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.