chore(secrets): wire cache invalidation on rotate/delete, drop dead RevealEnabled, remove scaffold leftovers

2026-07-15 17:39:55 -04:00
parent 294f53b49a
commit e20812cbae
10 changed files with 74 additions and 29 deletions
@@ -96,6 +96,11 @@

        if (deleted)
        {
+            // Evict any cached plaintext so the ${secret:} / ISecretResolver path does not serve a
+            // stale value after this delete for the remainder of its TTL. Optional seam — a no-op
+            // when the host has not registered an invalidator.
+            Services.GetService<ISecretCacheInvalidator>()?.Invalidate(Name);
+
            await OnDeleted.InvokeAsync();
        }
    }