spring-credhub

Manage Spring application credentials with CredHub reads, writes, and interpolation.

Updated Apr 9, 2026
One-click install
npx skills add https://github.com/ririnto/sinon --skill spring-credhub
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-credhub
Source: https://github.com/ririnto/sinon/tree/main/plugins/spring/skills/spring-credhub
Command: npx skills add https://github.com/ririnto/sinon --skill spring-credhub

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Spring applications often require secrets to be stored and retrieved securely. This skill enables integrating with CredHub to perform credential reads, writes, and interpolations, including generated passwords and certificates, while supporting mutual-TLS or OAuth2 authentication.

Core Features & Use Cases

  • Read and write credentials from CredHub using typed credential classes (e.g., PasswordCredential, JsonCredential).
  • Generate credentials (passwords, certificates) on demand and wire them into application configuration.
  • Support interpolation of credentials into configuration values and runtime behavior.
  • Use with mutual TLS or OAuth2 authentication to secure CredHub access in Spring Boot apps.
  • Use case: A Spring service retrieves a database password from CredHub and uses it to configure a DataSource at startup.

Quick Start

Configure your Spring app to use CredHub, add the spring-credhub starter, and read credentials via a focused service.

Frequently Asked Questions about spring-credhub

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage credentials in Spring applications using CredHub?

To manage credentials in Spring apps using CredHub, use the spring-credhub starter to delegate storage and retrieval to CredHub, enabling typed reads, writes, and generated passwords or certificates via mutual-TLS or OAuth2.

How does credential interpolation work with CredHub and Spring Boot?

Credential interpolation injects retrieved CredHub secrets directly into Spring Boot configuration values and runtime behavior, wiring generated passwords or certificates into application configuration seamlessly.

Can I use OAuth2 and mutual TLS authentication to secure CredHub access in Spring?

Yes, you can secure CredHub access in Spring Boot apps by configuring either mutual-TLS or OAuth2 authentication modes to protect credential reads, writes, and interpolations.

What's the best way to generate passwords and certificates on demand for Spring services?

The best way is using CredHub's Java client libraries to generate typed credentials like PasswordCredential on demand and wire them directly into Spring application configuration at startup.

Does CredHub support typed credential classes for reading and writing secrets in Spring?

Yes, CredHub supports reading and writing secrets in Spring using typed credential classes such as PasswordCredential and JsonCredential, ensuring structured credential management via Java client libraries.