Struct VaultState 

pub struct VaultState {
    pub users: Vec<User>,
    pub api_keys: Vec<(UserId, ApiKey)>,
    pub bootstrapped: bool,
    pub master_secret: Option<Vec<u8>>,
    pub kv: HashMap<String, String>,
}

Serializable snapshot of all auth state (users, api keys, bootstrap seal, the master secret for the certificate-based seal, and a key-value store for arbitrary encrypted secrets).

Fields

users: Vec<User>

api_keys: Vec<(UserId, ApiKey)>

(owner UserId, api_key) pairs. The owner carries tenant scope so an API key under (acme, alice) reattaches to the correct user when a same-named user exists in another tenant.

bootstrapped: bool

master_secret: Option<Vec<u8>>

The 32-byte master secret stored inside the encrypted vault. Present after bootstrap; None for legacy vaults that pre-date the certificate seal system.

kv: HashMap<String, String>

Arbitrary encrypted key-value store for secrets. Keys use dot-notation with red.secret.* prefix (e.g., “red.secret.aes_key”). Values are hex-encoded bytes or UTF-8 strings.

Implementations

impl VaultState

pub fn serialize(&self) -> Vec<u8>

Serialize the vault state to the text payload format.

pub fn deserialize(data: &[u8]) -> Result<Self, VaultError>

Deserialize the vault state from the text payload format.

Trait Implementations

impl Debug for VaultState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VaultState

fn default() -> VaultState

Returns the “default value” for a type.