cyberark / conjur-spring-boot-sdk

Apache License 2.0
5 stars 8 forks source link

@ConjurValue not fetching latest secret update #60

Open jp15310 opened 2 years ago

jp15310 commented 2 years ago

Summary

When SpringBoot APP is currently deployed and the secret is updated in Conjur OSS, the @ConjurValue keeps showing the original secret: I would expect its latest version to be displayed.

Steps to Reproduce

  1. Deploy SpringBoot application and in a controller, display the content of @ConjurValue(myApp/mySecretVal)
  2. Update myApp/mySecretVal in Conjur Vault to a new value via CLI or REST API
  3. Re-access SpringBoot App to display the content of @ConjurValue(myApp/mySecretVal)
  4. The same original value is displayed - not the updated one

Expected Results

Actual Results

No errors were generated except the following info: Bean 'com.cyberark.conjur.springboot.processor.SpringBootConjurAutoConfiguration' of type [com.cyberark.conjur.springboot.processor.SpringBootConjurAutoConfiguration$$EnhancerBySpringCGLIB$$bb7dbc63] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying) Bean 'conjurRetrieveSecretService' of type [com.cyberark.conjur.springboot.processor.ConjurRetrieveSecretService] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)

Reproducible

v1.0.1/Release 3

Environment setup

Additional Information

rpothier commented 2 years ago

Hi @jp15310 Thanks for submitting this, we are looking into it.