desktop/src-tauri/src/receiver_auth.rs

Comment 1, line 1

//! Source-scoped credentials stay out of DTOs, SQLite, logs and ordinary state files.

// Supplemental spans stay isolated. User-configurable service.name/span names

// do not establish provenance; the credential binds the source.

// Omit Debug to prevent credential values appearing in formatted errors.

// Read-only system-store probe distinguishes missing entries from unavailable storage.

// Compare validated fixed-size hexadecimal strings without stopping at the first mismatch.

// A service may persist a write before its reply fails. Reclaim only the exact

// attempted content, preserving replaced or ambiguous values.

// Verify persistent storage before exporter configuration; reclaim the owned entry on failure.

// Verification failure may indicate replacement by another writer.

// Re-read and reclaim only the exact owned content.

// Native Windows tests saw a successful write, NOT_FOUND, then matching content

// 10 ms later. Only missing reads in mutation flows wait; authentication reads do not use this helper.

// Errors and present values return immediately; do not write again.

// Delete only the exact owned credential; reject external replacements.

// CredRead returns one allocation; free it even when its content is invalid.