35 lines
1.0 KiB
Go
35 lines
1.0 KiB
Go
package provider
|
|
|
|
import (
|
|
"fmt"
|
|
"log/slog"
|
|
)
|
|
|
|
const masked = "••••••"
|
|
|
|
// SecretValue holds a secret's plaintext. Every formatting, logging and
|
|
// encoding path renders it masked; the plaintext is only available through
|
|
// Reveal, so it cannot leak through a stray Printf, slog call or error.
|
|
type SecretValue struct {
|
|
b []byte
|
|
}
|
|
|
|
func NewSecretValue(b []byte) SecretValue {
|
|
return SecretValue{b: append([]byte(nil), b...)}
|
|
}
|
|
|
|
// Reveal returns the plaintext. Call it only to display or copy the value.
|
|
func (v SecretValue) Reveal() string { return string(v.b) }
|
|
|
|
func (v SecretValue) Len() int { return len(v.b) }
|
|
|
|
func (v SecretValue) String() string { return masked }
|
|
func (v SecretValue) GoString() string { return masked }
|
|
|
|
// Format covers every fmt verb, including %#v and %x.
|
|
func (v SecretValue) Format(f fmt.State, _ rune) { _, _ = f.Write([]byte(masked)) }
|
|
|
|
func (v SecretValue) LogValue() slog.Value { return slog.StringValue(masked) }
|
|
|
|
func (v SecretValue) MarshalText() ([]byte, error) { return []byte(masked), nil }
|