alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

Drop any query string from the admin tokens

Browse source 
This commit makes sure the admin token audience is passed without
a query string (or any fragment).
This commit is contained in:
Mariano Cano 2022-04-18 15:18:23 -07:00
parent 50a271edca
commit 4770b405ba
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
ca/adminClient.go
View file

@ -90,6 +90,13 @@ func (c *AdminClient) generateAdminToken(aud *url.URL) (string, error) {
return "", err
}
// Drop any query string parameter from the token audience
aud = &url.URL{
Scheme: aud.Scheme,
Host: aud.Host,
Path: aud.Path,
}
now := time.Now()
tokOptions := []token.Options{
token.WithJWTID(jwtID),