sqlite

package

v0.32.0 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Package sqlite implements filament.Secrets over the secrets table in the shared Filament SQLite schema, mirroring secret/postgres.

This section is empty.

This section is empty.

This section is empty.

type Provider struct {
	// contains filtered or unexported fields
}

Provider encrypts secret values with AES-GCM before persisting them.

func New(db *sql.DB, keyID string, key []byte) (*Provider, error)

New constructs a provider over the handle shared with datastore/sqlite.Store (see its DB method). key must be 16, 24, or 32 bytes.

func NewFromEnv(db *sql.DB) (*Provider, error)

NewFromEnv constructs a provider from ENCRYPTION_KEY (base64-encoded AES key) and ENCRYPTION_KEY_ID (defaults to "default").

func (p *Provider) Delete(ctx context.Context, ref string) error

Delete removes the secret at ref; deleting a missing ref is a no-op.

func (p *Provider) Name() string

Name returns the provider identifier.

func (p *Provider) Read(ctx context.Context, ref string) (filament.Secret, error)

func (p *Provider) RotateSecret(ctx context.Context, ref string, secret filament.Secret) error

RotateSecret updates an existing tenant-owned secret without inserting a row.

func (p *Provider) Write(ctx context.Context, ref string, secret filament.Secret) error