Add support for creating child tokens for token credential binding #338
Conversation
bluesliverx
changed the title
bluesliverx
changed the title
| @@ -161,7 +161,7 @@ private static StringSubstitutor getPolicyTokenSubstitutor(EnvVars envVars) { | |||
| return new StringSubstitutor(valueMap); | |||
| } | |||
|
|
|||
| protected static List<String> generatePolicies(String policies, EnvVars envVars) { | |||
| public static List<String> generatePolicies(String policies, EnvVars envVars) { | |||
There was a problem hiding this comment.
Necessary to use this method in the vault token credential binding code.
| @@ -21,4 +21,22 @@ public String getName(@NonNull VaultCredential credentials) { | |||
| return credentials.getDescription(); | |||
| } | |||
| } | |||
|
|
|||
| final class VaultAuthorizationResult { | |||
There was a problem hiding this comment.
This class was needed to return the actual token from authorizeWithVault instead of requiring another call to Vault to lookup the token after the fact (since it is unretrievable from a configured Vault class instance).
|
Cancel that, I found at least one issue in our prod environment, looking into it now. |
|
@jetersen this is ready for review now. We've been using this in our prod environment for at least a week now and it has been very stable (and has correctly limited access when child tokens are enabled). |
|
@jetersen any chance I can get a review here? |
Fixes #339