#pragma once

#include "source/common/secret/secret_provider_impl.h"

namespace Envoy {

namespace Extensions {

namespace Http {

namespace InjectedCredentials {

namespace Common {

// Helper class used to fetch secrets (usually from SDS).

class SecretReader {

public:

  virtual const std::string& credential() const PURE;

};

using SecretReaderConstSharedPtr = std::shared_ptr<const SecretReader>;

class SDSSecretReader : public SecretReader {

public:

  SDSSecretReader(Secret::GenericSecretConfigProviderSharedPtr secret_provider,

                  ThreadLocal::SlotAllocator& tls, Api::Api& api)

            Secret::ThreadLocalGenericSecretProvider::create(std::move(secret_provider), tls, api),

private:

  std::unique_ptr<Secret::ThreadLocalGenericSecretProvider> credential_;

};

} // namespace Common

} // namespace InjectedCredentials

} // namespace Http

} // namespace Extensions

} // namespace Envoy