credseal

package

v0.5.0 Latest Latest Go to latest Published: Oct 13, 2026 License: MPL-2.0 Imports: 3 Imported by: 0

Details

Package credseal protects credentials stored outside the encrypted payload tables.

View Source

const CredentialKeyEnv = "DFBG_CREDENTIAL_KEY"

View Source

var ErrUnavailable = errors.New("credential sealing unavailable")

func ResolveEnvironmentKey(general, alias, aliasName string) (string, error)

ResolveEnvironmentKey applies the migration rule for a legacy alias.

type Sealer struct {
	// contains filtered or unexported fields
}

func New(ring *keyring.Keyring, environmentKey string) *Sealer

func (s *Sealer) Mode() string

func (s *Sealer) Seal(organizationID, projectID, kind, rowID, secret string) ([]byte, error)

func (s *Sealer) Unseal(organizationID, projectID, kind, rowID string, sealed []byte) (string, error)