Struct EncryptedSecretStore 

pub struct EncryptedSecretStore { /* private fields */ }

Encrypted secret storage for sensitive data at rest

Implementations

impl EncryptedSecretStore

pub fn new() -> SecretResult<(Self, [u8; 32])>

Create a new encrypted secret store with a random key

pub fn from_data(secrets: HashMap<String, String>, salt: String) -> Self

Create an encrypted secret store from existing data

pub fn add_secret( &mut self, key: &[u8; 32], name: &str, value: &str, ) -> SecretResult<()>

Add an encrypted secret

pub fn get_secret(&self, key: &[u8; 32], name: &str) -> SecretResult<String>

Get and decrypt a secret

pub fn remove_secret(&mut self, name: &str) -> bool

Remove a secret

pub fn list_secrets(&self) -> Vec<String>

List all secret names

pub fn has_secret(&self, name: &str) -> bool

Check if a secret exists

pub fn secret_count(&self) -> usize

Get the number of stored secrets

pub fn clear(&mut self)

Clear all secrets

pub fn to_json(&self) -> SecretResult<String>

Serialize to JSON

pub fn from_json(json: &str) -> SecretResult<Self>

Deserialize from JSON. Detects the old serialization format (which had a top-level nonce field) and returns a clear error directing users to re-create their secret store.

pub async fn save_to_file(&self, path: &str) -> SecretResult<()>

Save to file

pub async fn load_from_file(path: &str) -> SecretResult<Self>

Load from file

Trait Implementations

impl Clone for EncryptedSecretStore

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedSecretStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EncryptedSecretStore

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for EncryptedSecretStore

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EncryptedSecretStore

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.