# `AshHooks.Endpoint.SecretRef`
[🔗](https://github.com/baselabs/ash_hooks/blob/v2.0.3/lib/ash_hooks/endpoint/secret_ref.ex#L1)

A reference to a consumer-held secret — never the secret itself.

Input casting rejects empty references and values beginning with `whsec_`,
`whsk_`, or `whpk_`, the Standard Webhooks key encodings. The same check
applies to package actions and consumer actions that accept this type.

Other nonempty binaries are references. The type cannot recognize arbitrary
unprefixed secret material; applications must store only identifiers that
their secret resolver can look up.

# `handle_change?`

# `prepare_change?`

---

*Consult [api-reference.md](api-reference.md) for complete listing*