Improve error handling when TTL is invalid

RiotGames / key-conjurer

Temporary Credential Service

https://technology.riotgames.com/news/key-conjurer-our-policy-least-privilege

Apache License 2.0

167 stars 33 forks source link

Improve error handling when TTL is invalid #106

Closed punmechanic closed 7 months ago

punmechanic commented 7 months ago

A common error scenario when requesting keys using keyconjurer get was that the ttl would exceed the maximum allowed for the account + role. This error would be displayed as "failed to exchange credentials" with no additional info.

This PR fixes this issue by:

Reducing default TTL back down to 8 from 1
Displaying a unique error if the TTL is invalid.