fix a bug reading auth mount using sys/internal/ui/mount endpoint whe…

…n filter paths are enforced (#23802) * fix a bug reading auth mount using sys/internal/ui/mount endpoint * CL * fix CL
hashicorp · Oct 30, 2023 · 26bae55 · 26bae55
1 parent 40e00d8
commit 26bae55
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/changelog/23802.txt b/changelog/23802.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/mounts: Fix reading an "auth" mount using "sys/internal/ui/mounts/" when filter paths are enforced returns 500 error code from the secondary
+```
diff --git a/vault/logical_system.go b/vault/logical_system.go
@@ -4551,7 +4551,12 @@ func (b *SystemBackend) pathInternalUIMountRead(ctx context.Context, req *logica
 		return errResp, logical.ErrPermissionDenied
 	}
 
-	filtered, err := b.Core.checkReplicatedFiltering(ctx, me, "")
+	var routerPrefix string
+	if strings.HasPrefix(me.APIPathNoNamespace(), credentialRoutePrefix) {
+		routerPrefix = credentialRoutePrefix
+	}
+
+	filtered, err := b.Core.checkReplicatedFiltering(ctx, me, routerPrefix)
 	if err != nil {
 		return nil, err
 	}