Module vault 

The process-wide vault session and its audit.

One VaultSession per forge process, built from [vault] at boot and swapped on a reload that changes the section. It owns the tokens and the derived keys; the connector holds neither. A call the server rejects with 401 tries the refresh token, and only a failed refresh locks the session and makes the next held call ask for the master password. [vault] idle_minutes, when set, locks an unused session on its first read after the bound.

The master password never enters this struct. It arrives with one answer, is used to derive the master key, and is zeroized before the answer is dropped.

Re-exports

use std::path::Path; 🔒

use std::path::PathBuf; 🔒

use forge_connectors::vault::crypto; 🔒

use forge_connectors::vault::crypto::Unlocked; 🔒

use forge_connectors::vault::models::Prelogin; 🔒

use forge_connectors::vault::models::SyncData; 🔒

use forge_connectors::vault::models::TokenResponse; 🔒

use forge_connectors::vault::models::TwoFactorCode; 🔒

use forge_connectors::vault::VaultClient; 🔒

use forge_connectors::vault::VaultError; 🔒

use forge_primitives::vault::VaultReleased; 🔒

use forge_primitives::vault::VaultTool; 🔒

use serde_json::Value; 🔒

use zeroize::Zeroize; 🔒

use zeroize::Zeroize; 🔒

use zeroize::Zeroizing; 🔒

use crate::SessionSlot; 🔒

use crate::config::VaultConfig; 🔒

use crate::protocol::SessionUpdate; 🔒

use crate::update_fanout::UpdateFanout; 🔒

Structs

AuditFile 🔒

SessionState 🔒

The session’s live half: the tokens and the derived keys, or neither.

Tokens 🔒

The access and refresh tokens one unlock produced.

VaultAudit 🔒

The append-only audit file, rotated 10 MB x 6.

VaultSession 🔒

One process-wide Vaultwarden session.

VaultState

The shared vault session as a view draws it: whether it is locked and the idle bound the config set.

Constants

AUDIT_MAX_BYTES 🔒

AUDIT_MAX_FILES 🔒

Functions

production_client 🔒

The production vault clients: the machine’s extra TLS roots, https_only, the account’s own user agent, and the vault family’s bounds. The download client takes a longer read and total bound because an attachment is opaque ciphertext up to the server’s cap.

rotate 🔒

rotated_path 🔒