GetMockTokenServer returns a stub http test server for dealing with token lookup-self and renew-self API calls.

NewClient constructs a secret store *Client which communicates with OpenBao via HTTP(S) lc is any logging client that implements the loggingClient interface; today EdgeX's logger.LoggingClient from go-mod-core-contracts satisfies this implementation.

NewSecretsClient constructs a secret store *Client which communicates with OpenBao via HTTP(S) for basic usage of secrets.

nolint: gosec.

nolint: gosec.

nolint: gosec.

NamespaceHeader specifies the header name to use when including Namespace information in a request.

nolint: gosec.

nolint: gosec.

nolint: gosec.

Accessor.

Client defines the behavior for interacting with the OpenBao REST secret key/value store via HTTP(S).

CreateEntityAliasRequest is used to bind an authenticator to an identity.

CreateNamedKeyRequest is the request to POST /v1/identity/oidc/key/:name:.

CreateOrUpdateIdentityRoleRequest is the request to POST /v1/identity/oidc/role/:name.

CreateOrUpdateUserRequest is used to create a secret store login.

CreateOrUpdateUserResponse is the response to get entity by name.

CreateUpdateEntityRequest enables or updates a secret store Identity.

CreateUpdateEntityResponse is the response to CreateUpdateEntityRequest.

EnableAuthMethodRequest enables a secret store Identity authentication method.

EnableSecretsEngineRequest is the POST request to /v1/sys/mounts.

ErrCaRootCert error when the provided CA Root certificate is invalid.

InitRequest contains a secret store init request regarding the Shamir Secret Sharing (SSS) parameters.

JsonID.

ListAuthMethodsResponse is used to look up the accessor ID of an auth method.

ListNamedKeysResponse is the response to LIST /v1/identity/oidc/key.

ListSecretEnginesResponse is the response to GET /v1/sys/mounts (and /v1/sys/auth).

ListTokenAccessorsResponse is the response to the list accessors API.

LookupAccessorRequest is used by accessor lookup API.

ReadEntityByIdResponse is the response to get entity by id.

ReadEntityByNameResponse is the response to get entity by name.

parameters structure for request method.

RevokeTokenAccessorRequest is the input to the revoke token by accessor API.

RootTokenControlResponse is the response to /v1/sys/generate-root/attempt.

RootTokenRetrievalRequest is the request to /v1/sys/generate-root/update.

RootTokenRetrievalResponse is the response to /v1/sys/generate-root/update.

SecretsEngineConfig is config for /v1/sys/mounts.

UnsealRequest contains a secret store unseal request.

UnsealResponse contains a secret store unseal response.

UpdateACLPolicyRequest contains a ACL policy create/update request.

UserPassLoginRequest is used to to log in an identity with the userpass auth engine.