Package org.apache.juneau.commons.secret

package org.apache.juneau.commons.secret

A small, JDK-only SPI for storing and retrieving secrets by key — the secure, mutable sibling of PropertySource.

The interface + built-in implementations in this package have zero third-party runtime dependencies. Sensitivity is intrinsic: secret values are held as char[] (never String) and are never toString()'d, logged, or dumped. Backends that reach an OS keychain, a remote vault, or a cloud secret manager live in separate opt-in modules, never here.

Key types:

• SecretStore — the SPI (store / find / exists / delete).
• InMemorySecretStore — the zero-config, process-local default.
• EnvVarSecretStore — a read-only, environment-variable-backed source.
• SecretStoreProvider — ServiceLoader discovery.
• SecretStores — BeanStore resolution (default InMemorySecretStore).
• SecretStorePropertySource — an opt-in bridge exposing a store as a redacting PropertySource.

Since:

10.0.0

Related Packages

Package	Description
org.apache.juneau.commons	Foundational classes and annotations shared across the Juneau Commons libraries.

Class	Description
EnvVarSecretStore	A read-only SecretStore backed by System.getenv(String).
EnvVarSecretStoreProvider	Provider for EnvVarSecretStore, discoverable through SecretStores.fromServiceLoader().
FailMode	The policy a network- or OS-backed SecretStore applies when its backing store cannot answer — for example when the OS keychain tool is missing or a remote vault is unreachable.
InMemorySecretStore	Built-in default SecretStore: a per-process, ConcurrentHashMap-backed key-to-secret map.
SecretStore	SPI for storing and retrieving a secret by key — the secure, mutable sibling of PropertySource.
SecretStorePropertySource	Opt-in bridge that exposes a chosen SecretStore as a PropertySource, so a secret can be resolved through the property/$P{...}/@Value machinery only where a consumer deliberately wires it in.
SecretStoreProvider	Provider SPI for contributing a SecretStore via ServiceLoader.
SecretStores	Resolution helpers for selecting the active SecretStore.
SensitivePropertySource	Marker specialization of PropertySource whose values are sensitive and must be redacted anywhere they would otherwise be surfaced — a toString(), a settings dump, or a log line.