Struct SecretsCache 

pub struct SecretsCache {
    inner: Arc<RwLock<HashMap<String, SecretValue>>>,
}

A thread-safe, in-memory cache for IBM IAM bearer tokens.

Tokens are automatically refreshed when they are within 5 minutes of expiry. The cache is keyed by bucket name and shared across all Pingora worker threads via an Arc.

Fields

inner: Arc<RwLock<HashMap<String, SecretValue>>>

Implementations

impl SecretsCache

pub fn new() -> Self

Create a new, empty secrets cache.

pub fn insert(&self, key: String, value: String, expiration: u64)

Insert a token value for key that expires at the given UNIX timestamp.

pub async fn get<F, Fut>(&self, key: &str, bearer_fetcher: F) -> Option<String>

where F: Fn() -> Fut + Send + 'static, Fut: Future<Output = Result<IamResponse, Box<dyn Error>>> + Send,

Return a valid token for key, fetching a new one via bearer_fetcher if the cache is empty or the stored token is near expiry.

pub fn invalidate(&self, key: &str)

Remove the cached token for key, forcing a fresh fetch on the next call to get.

Trait Implementations

impl Clone for SecretsCache

fn clone(&self) -> SecretsCache

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsCache

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretsCache

fn default() -> Self

Returns the “default value” for a type.