Struct Vault 

pub struct Vault {
    pub service: String,
    /* private fields */
}

A secure storage abstraction for tokens and keys.

Fields

service: String

The service name used for isolation in the keychain.

Implementations

impl Vault

pub fn keyring(service: &str) -> Self

Creates a vault backed by the OS keychain.

pub fn in_memory(service: &str) -> Self

Creates a vault backed by a fresh, process-local in-memory store.

pub fn from_env(service: &str) -> Self

Uses the in-memory backend when MCP_AIRLOCK_USE_MEMORY_VAULT is set, otherwise the OS keychain.

pub fn store_token(&self, user_id: &str, token: &str) -> Result<()>

Stores an access token securely in the vault.

pub fn get_token(&self, user_id: &str) -> Result<Option<String>>

Retrieves an access token from the vault.

pub fn delete_token(&self, user_id: &str) -> Result<()>

Deletes an access token from the vault.

pub fn store_dpop_key(&self, user_id: &str, key_bytes: &[u8]) -> Result<()>

Stores the DPoP private key securely.

pub fn get_dpop_key(&self, user_id: &str) -> Result<Option<Vec<u8>>>

Retrieves the DPoP private key from the vault.

pub fn delete_dpop_key(&self, user_id: &str) -> Result<()>

Deletes the DPoP private key from the vault.

pub fn store_refresh_token(&self, user_id: &str, token: &str) -> Result<()>

Stores a refresh token securely in the vault.

pub fn get_refresh_token(&self, user_id: &str) -> Result<Option<String>>

Retrieves the refresh token from the vault.

pub fn delete_refresh_token(&self, user_id: &str) -> Result<()>

Deletes the refresh token from the vault.

pub fn store_meta(&self, user_id: &str, meta: &CredentialMeta) -> Result<()>

Stores what the current credentials were issued for.

pub fn get_meta(&self, user_id: &str) -> Result<Option<CredentialMeta>>

Retrieves the credential metadata. Unreadable metadata counts as none.

pub fn clear(&self, user_id: &str) -> Result<()>

Deletes every credential stored for user_id.

Trait Implementations

impl Clone for Vault

fn clone(&self) -> Vault

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.