-
Notifications
You must be signed in to change notification settings - Fork 4.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix identity token panic during invalidation #8015
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Don't know if it's the right fix but seems reasonable.
I'd also like to see some nil checks added to oidcCache though.
vault/identity_store_oidc.go
Outdated
@@ -1531,7 +1570,7 @@ func (i *IdentityStore) oidcPeriodicFunc(ctx context.Context) { | |||
i.Logger().Warn("error expiring OIDC public keys", "err", err) | |||
} | |||
|
|||
i.oidcCache.Flush(nilNamespace) | |||
i.oidcCache.Flush(noNamespace) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Here (and elsewhere in this PR where you call flush), and in SetDefault below, you've added error returns to the functions but aren't actually checking them here.
* Fix identity token crash during invalidation * Check for nil namespace * Fix test * Add nil check test * Check OIDC cache errors
No description provided.