mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-10-29 17:52:32 +00:00
Fix incorrect OpenAPI operation ID (#21543)
The operation ID for `GET auth/token/lookup` has been overridden in a way which *implies* it can only perform lookup-self operations. This is not true, as shown: 1) Here is my current token: ``` $ vault read -field=display_name auth/token/lookup userpass-admin ``` 2) I create a second token, with a different display name to distinguish it: ``` $ othertoken=$(vault token create -field=token -display-name=testing123) ``` 3) I use this operation, still authenticated with the first token, to lookup the second token, proving it does not have lookup-self nature: ``` $ vault read -field=display_name auth/token/lookup token=$othertoken token-testing123 ``` I have set the new operation ID suffix to `"2"` adhering to current conventions in `vault-client-go` and `vault-client-dotnet` for secondary versions of APIs which should be excluded from the generated library code.
This commit is contained in:
@@ -430,7 +430,7 @@ func (ts *TokenStore) paths() []*framework.Path {
|
||||
logical.ReadOperation: &framework.PathOperation{
|
||||
Callback: ts.handleLookup,
|
||||
DisplayAttrs: &framework.DisplayAttributes{
|
||||
OperationSuffix: "self3", // avoid collision with lookup-self
|
||||
OperationSuffix: "2",
|
||||
},
|
||||
},
|
||||
logical.UpdateOperation: &framework.PathOperation{
|
||||
|
||||
Reference in New Issue
Block a user