Enum SecretRef 

pub enum SecretRef {
    Env {
        name: String,
    },
    File {
        path: String,
    },
    Redacted {
        fingerprint: String,
    },
}

A parsed ${...} secret reference (DW-045). See the module docs for the grammar, the read-time model, and the redaction-placeholder round-trip contract.

Variants

Env

${ENV_NAME}: an environment variable (any case; see parse_secret_reference for the name grammar).

Fields

name: String

File

${file:/path}: a file read at resolution time.

Fields

path: String

Redacted

${redacted:...} (or bare ${redacted}): the placeholder redact_inline_secret writes. Never resolvable.

Fields

fingerprint: String

Implementations

impl SecretRef

pub fn resolve(&self) -> Result<String, String>

Resolve this reference NOW (see the module docs for when callers do that). Fails closed with a message safe for logs and validation issues: it names the env var / file path and the reason, never a resolved value.

Trait Implementations

impl Clone for SecretRef

fn clone(&self) -> SecretRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SecretRef

fn eq(&self, other: &SecretRef) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SecretRef

impl StructuralPartialEq for SecretRef