Skip to content

feat(security): implement zeroize secrets pool and system.injectCredentials (#8) - #26

Merged
ZhuchkaTriplesix merged 1 commit into
devfrom
issue/8-in-memory-secrets-store
Jul 11, 2026
Merged

feat(security): implement zeroize secrets pool and system.injectCredentials (#8)#26
ZhuchkaTriplesix merged 1 commit into
devfrom
issue/8-in-memory-secrets-store

Conversation

@ZhuchkaTriplesix

Copy link
Copy Markdown
Member

Summary of Changes

  • Created ConnectionSecretsPool in src/utils/secret_guard.rs backed by secrecy::SecretString ( upon drop).
  • Implemented system.injectCredentials RPC handler to safely inject passwords / JWT tokens into the memory pool without any disk persistence or logging.
  • Hooked system.shutdown handler to call ConnectionSecretsPool::global().clear_all() to guarantee immediate zeroization of heap allocations before process exit.
  • Added fast-track routing in src/main.rs for system.injectCredentials ( latency).
  • Added 4 new unit tests ().

Closes #8

@ZhuchkaTriplesix
ZhuchkaTriplesix merged commit 60561ab into dev Jul 11, 2026
@ZhuchkaTriplesix
ZhuchkaTriplesix deleted the issue/8-in-memory-secrets-store branch July 30, 2026 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant