ExecPassSecretManager

java.lang.Object

dev.enola.common.secret.exec.ExecPassSecretManager

All Implemented Interfaces:: SecretManager

@ThreadSafe public class ExecPassSecretManager extends Object implements SecretManager

ExecPassSecretManager is an implementation of SecretManager which "shells out" (exec) to [something like] pass (for every secret).

We recommend using this with GPG on a YubiKey that requires "touch" to decrypt secrets.

Constructor Summary

Constructors

Constructor

Description

ExecPassSecretManager()

ExecPassSecretManager(boolean throwToDebug)
Method Summary

Modifier and Type

Method

Description

void

delete(String key)

Deletes a secret from the manager.

Optional<Secret>

getOptional(String key)

Retrieves a secret by its key, with optionality.

static void

main(String[] args)

void

store(String key, char @Nullable [] value)

Stores a secret value associated with a unique key.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface dev.enola.common.secret.SecretManager
get

Constructor Details
- ExecPassSecretManager
  
  public ExecPassSecretManager(boolean throwToDebug)
- ExecPassSecretManager
  
  public ExecPassSecretManager()
Method Details
- getOptional
  
  public Optional<Secret> getOptional(String key)
  
  Description copied from interface: SecretManager
  
  Retrieves a secret by its key, with optionality.
  
  Specified by:
  
  getOptional in interface SecretManager
  
  Parameters:
  
  key - The unique key (name) of the secret to retrieve.
  
  Returns:
  
  An Optional containing the Secret, if found.
- store
  
  public void store(String key, char @Nullable [] value)
  
  Description copied from interface: SecretManager
  
  Stores a secret value associated with a unique key. The sensitive value is provided as a char array. Implementations will zero out the input value array immediately after calling this method for security. If a secret with the same key already exists, its value is overwritten.
  
  Specified by:
  
  store in interface SecretManager
  
  Parameters:
  
  key - The unique key (name) for the secret.
  
  value - The sensitive secret value as a character array.
- delete
  
  public void delete(String key)
  
  Description copied from interface: SecretManager
  
  Deletes a secret from the manager.
  
  Specified by:
  
  delete in interface SecretManager
  
  Parameters:
  
  key - The unique key (name) of the secret to delete.
- main
  
  public static void main(String[] args)