pomerium / pomerium / 34238589469

53%

Build Type

push

github

Committed by web-flow

Commit Message

secrets: add ref parsing, canonical keys, payload selector (#6578)

Bottom of the secret-injection stack. `pkg/secrets/ref` parses a binding
URL into a `Ref` and derives the two keys the resolver dedupes on:
`FetchKey()` — the canonical URL without the fragment, so bindings
sharing a backend share one fetch loop — and `Key()`, which includes the
fragment so each selector yields a distinct cached value. A `Ref`
carries only configuration and is safe to log. `ApplySelector` extracts
a single scalar from a JSON payload via a dotted-path fragment.
Providers, caching, and config wiring layer on top in later PRs.

Coverage Stats

86 of 99 new or added lines in 2 files covered. (86.87%)

13 existing lines in 6 files now uncovered.

33602 of 63813 relevant lines covered (52.66%)

350.8 hits per line