credential

package

v0.4.0 Latest Latest Go to latest Published: Sep 18, 2026 License: Apache-2.0 Imports: 3 Imported by: 0

Details

This section is empty.

View Source

var (
	ErrBrokerNotConfigured = errors.New("credential broker not configured")
	ErrEmptyRef            = errors.New("credential ref is empty")
)

This section is empty.

type Broker interface {
	Resolve(ctx context.Context, ref string, scope string) (Data, error)
}

Broker resolves opaque credential references into usable secret material. Implementations must never leak secret values through returned errors.

type Data struct {
	Payload map[string][]byte `json:"-"`
	Expires *time.Time        `json:"-"`
}

Data contains resolved secret material for a single operation. Payload and expiry metadata are deliberately excluded from JSON output.

type NoopBroker struct{}

NoopBroker is the safe default when no secret backend is configured.

func (NoopBroker) Resolve(_ context.Context, ref string, _ string) (Data, error)

Path	Synopsis
openbao