mirror of
https://github.com/hashicorp/vault.git
synced 2026-02-03 20:40:45 -05:00
816036b8d5
Vault agent redacts the token and accessor for `/auth/token/lookup-self` (and `lookup`) if the token is the auto auth token to prevent it from leaking. Similarly, we need to redact the token and accessor from `renew-self` and `renew`, which also leak the token and accessor. I tested this locally by starting up a Vault agent and querying the agent endpoints, and ensuring that the accessor and token were set to the empty string in the response. |
||
|---|---|---|
| .. | ||
| cacheboltdb | ||
| cachememdb | ||
| keymanager | ||
| api_proxy.go | ||
| api_proxy_test.go | ||
| cache_test.go | ||
| handler.go | ||
| lease_cache.go | ||
| lease_cache_test.go | ||
| listener.go | ||
| proxy.go | ||
| testing.go | ||