KSLCore/ksl.app.dist.config/CredentialSource

CredentialSource

@Serializable

How database credentials are obtained at run time. The connection reference itself never carries secrets — only references to where the secret lives (an env-var name, a file path) or a hint to prompt for it.

Inheritors

Constructors

CredentialSource

protected constructor()

Types

Environment

@Serializable

data class Environment(val userVar: String, val passwordVar: String) : CredentialSource

Read the username/password from named environment variables.

ExternalFile

@Serializable

data class ExternalFile(val path: String) : CredentialSource

Read credentials from a TOML secrets file (outside the config) with username and password keys.

None

@Serializable

data object None : CredentialSource

No credentials required (embedded/file database, or otherwise trusted).

RuntimePrompt

@Serializable

data class RuntimePrompt(val usernameHint: String? = null) : CredentialSource

The front-end prompts the user at run time; never persisted.