Function rewrite_uri_query_params

crates/openshell-core/src/secrets.rs:870–912

Rewrite placeholders in query parameter values. Returns `Some((resolved_query, redacted_query))` if any placeholders were found.

(
    query: &str,
    resolver: &SecretResolver,
)

///
/// Returns `Some((resolved_query, redacted_query))` if any placeholders were found.
fn rewrite_uri_query_params(
    query: &str,
    resolver: &SecretResolver,
) -> Result<Option<(String, String)>, UnresolvedPlaceholderError> {
    if !contains_reserved_credential_marker(query) {
        return Ok(None);
    }

    let mut resolved_params = Vec::new();
    let mut redacted_params = Vec::new();
    let mut any_rewritten = false;

    for param in query.split('&') {
        if let Some((key, value)) = param.split_once('=') {
            let decoded_value = percent_decode(value);
            if contains_raw_reserved_marker(&decoded_value) {
                let mut rewritten = decoded_value.clone();
                let replacements =
                    resolver.rewrite_text_placeholders(&mut rewritten, "query_param")?;
                if replacements == 0 || contains_raw_reserved_marker(&rewritten) {
                    return Err(UnresolvedPlaceholderError {
                        location: "query_param",
                    });
                }
                resolved_params.push(format!("{key}={}", percent_encode_query(&rewritten)));
                redacted_params.push(format!("{key}=[CREDENTIAL]"));
                any_rewritten = true;
            } else {
                resolved_params.push(param.to_string());
                redacted_params.push(param.to_string());
            }
        } else {
            resolved_params.push(param.to_string());
            redacted_params.push(param.to_string());
        }
    }

    if !any_rewritten {
        return Ok(None);
    }

    Ok(Some((resolved_params.join("&"), redacted_params.join("&"))))
}

// ---------------------------------------------------------------------------
// Public rewrite API