Struct ConfigEncryption 

pub struct ConfigEncryption { /* private fields */ }

Configuration encryptor: performs symmetric encryption on sensitive configuration values using XOR + Base64.

Applicable scenarios: database passwords, API keys, and other sensitive configuration should not be stored in plaintext in configuration files. Encryption format: ENC(base64(xor(plaintext, key)))

Implementations

impl ConfigEncryption

pub fn new(key: impl Into<String>) -> Self

pub fn encrypt(&self, plaintext: &str) -> String

Encrypt plaintext, returning an ENC(base64) formatted string

pub fn decrypt(&self, ciphertext: &str) -> Result<String, String>

Decrypt an ENC(base64) formatted string, returning the plaintext

pub fn is_encrypted(value: &str) -> bool

Check whether a value is encrypted (starts with ENC( )

pub fn decrypt_if_needed(&self, value: &str) -> Result<String, String>

Decrypt the value if it is encrypted; otherwise return it as-is

pub fn decrypt_config( &self, config: &HashMap<String, String>, ) -> Result<HashMap<String, String>, String>

Batch-decrypt all encrypted values in a configuration map