Struct FileBackendWithPassphrase 

pub struct FileBackendWithPassphrase {
    inner: FileBackend,
    passphrase: Zeroizing<String>,
}

Public file-based keychain backend.

Wraps FileBackend and stores the passphrase as a [zeroize::Zeroizing] string so it is scrubbed from memory on drop.

Fields

inner: FileBackend

passphrase: Zeroizing<String>

Implementations

impl FileBackendWithPassphrase

pub fn new(dir: impl Into<PathBuf>, passphrase: impl Into<String>) -> Self

Create a new file-based backend.

dir is the directory for secrets.enc. passphrase is the user-supplied passphrase for key derivation; it is zeroed on drop. The passphrase prompt UX lands in task 18.

Trait Implementations

impl KeychainBackend for FileBackendWithPassphrase

fn set(&mut self, profile_id: &str, secret: &Secret) -> Result<(), AppError>

Persist secret under profile_id, replacing any existing entry.

fn get(&self, profile_id: &str) -> Result<Option<Secret>, AppError>

Retrieve the secret for profile_id, or None if not present.

fn delete(&mut self, profile_id: &str) -> Result<(), AppError>

Remove the secret for profile_id. No-op if it does not exist.

fn unlock(&mut self, _passphrase: &str) -> Result<(), AppError>

Supply a passphrase to unlock a passphrase-protected backend.