scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-10-31 02:28:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

systemview: adds method for plugins to generate identity tokens (#24929)

Browse Source 
* systemview: adds method for plugins to generate identity tokens

* change test name and godoc

* adds changelog

* make proto to include comment
This commit is contained in:
Austin Gebauer
2024-01-18 11:01:14 -08:00
committed by GitHub
parent ee1e7e1448
commit d90c7e8ab5
9 changed files with 563 additions and 236 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
sdk/plugin/grpc_system.go
View File

@@ -211,6 +211,21 @@ func (s gRPCSystemViewClient) ClusterID(ctx context.Context) (string, error) {
return reply.ClusterID, nil
}
func (s *gRPCSystemViewClient) GenerateIdentityToken(ctx context.Context, req *pluginutil.IdentityTokenRequest) (*pluginutil.IdentityTokenResponse, error) {
resp, err := s.client.GenerateIdentityToken(ctx, &pb.GenerateIdentityTokenRequest{
Audience: req.Audience,
TTL: int64(req.TTL.Seconds()),
})
if err != nil {
return nil, err
}
return &pluginutil.IdentityTokenResponse{
Token: pluginutil.IdentityToken(resp.Token),
TTL: time.Duration(resp.TTL) * time.Second,
}, nil
}
type gRPCSystemViewServer struct {
pb.UnimplementedSystemViewServer
@@ -394,3 +409,23 @@ func (s *gRPCSystemViewServer) ClusterInfo(ctx context.Context, _ *pb.Empty) (*p
ClusterID: clusterId,
}, nil
}
func (s *gRPCSystemViewServer) GenerateIdentityToken(ctx context.Context, req *pb.GenerateIdentityTokenRequest) (*pb.GenerateIdentityTokenResponse, error) {
if s.impl == nil {
return nil, errMissingSystemView
}
res, err := s.impl.GenerateIdentityToken(ctx, &pluginutil.IdentityTokenRequest{
Audience: req.GetAudience(),
TTL: time.Duration(req.GetTTL()) * time.Second,
})
if err != nil {
return &pb.GenerateIdentityTokenResponse{}, status.Errorf(codes.Internal,
"failed to generate plugin identity token")
}
return &pb.GenerateIdentityTokenResponse{
Token: res.Token.Token(),
TTL: int64(res.TTL.Seconds()),
}, nil
}