SecretStringSerializer

TypeSerializer for SecretString values.

Serialization: calls SecretString.expose to obtain the plaintext for storage. This is the only place in the serialization pipeline where the secret is intentionally unwrapped.

Deserialization: wraps the raw value (converted via toString()) in a new SecretString, re-establishing the safety guarantees.

Example:

val serializer = SecretStringSerializer

val secret = SecretString("my-api-key")
val raw    = serializer.serialize(secret)      // "my-api-key"
val back   = serializer.deserialize(raw)       // SecretString("my-api-key")
println(back)                                  // "********"

See also