Struct PassStorageAdapter 

pub struct PassStorageAdapter { /* private fields */ }

Pass (password-store) storage adapter

Stores credentials as GPG-encrypted files in a password store directory. Uses prs-lib for password store operations.

Implementations

impl PassStorageAdapter

pub fn new_with_options( store_path: PathBuf, path: PathBuf, gpg_backend: GpgBackend, allow_create_without_prompt: bool, ) -> Result<Self>

pub fn audit_passkey_recipients(&self) -> Result<Vec<AuditEntry>>

Scan all passkey files and report those whose OpenPGP packet recipients differ from the effective .gpg-id policy.

Requires the gpg binary for packet inspection.

pub fn reencrypt_passkey_file(&mut self, path: &Path) -> Result<()>

Re-encrypt a passkey file so its OpenPGP recipients match the current .gpg-id policy.

1. Decrypts the file using an available secret key.
2. Resolves the effective recipients via resolve_recipients_for_target.
3. Re-encrypts to a temporary file.
4. Atomically renames the temporary over the original.
5. Commits the change via the password-store Git integration.

Trait Implementations

impl CredentialStorage for PassStorageAdapter

fn read_first(&mut self, filter: CredentialFilter) -> Result<Credential>

Start a new iteration and return the first matching credential

fn read_next(&mut self) -> Result<Credential>

Continue the current iteration and return the next credential

fn read(&mut self, id: &[u8]) -> Result<Credential>

Read a specific credential by ID and RP

fn write(&mut self, cred_ref: CredentialRef<'_>) -> Result<()>

Store a new credential

fn delete(&mut self, id: &[u8]) -> Result<()>

Delete a credential by ID

fn count_credentials(&self) -> usize

Count total number of stored credentials

fn disable_user_verification(&self) -> bool

Check if user verification should be disabled for this backend

fn cleanup_expired_cache(&mut self)

Cleanup expired cache entries (if caching is supported)