-
Notifications
You must be signed in to change notification settings - Fork 4.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
make token create case insensitive [VAULT-1021] #10743
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good.
been specified, the entity will not be inherited from the parent. Note that | ||
`allowed_entity_aliases` is not case sensitive. For example, creating tokens | ||
with alias `aLiAs` and alias `alias` will both succeed even if the | ||
`allowed_entity_aliases` list only allows for token creation for entity alias | ||
`alias`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this is a bit wordy, I would maybe note in allowed_entity_aliases that the matching is not case-sensitive.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done!
This pull request is being automatically deployed with Vercel (learn more). vault-storybook – ./ui🔍 Inspect: https://vercel.com/hashicorp/vault-storybook/elozqdr8v |
https://hashicorp.atlassian.net/browse/VAULT-1021
This allows for tokens creation to be case insensitive against allowed aliases. Previously there was a mix of case sensitivity and case insensitivity, so mixed case aliases were disallowed. Note that entity aliases will still retain their case sensitivity internally, but for every verification step, they will be checked in a case-insensitive way.