search

dns3l / dns3l-core

Core functionality of dns3l written in Go
1 stars 3 forks source link

Auth failing in 1.1.6 #68

Closed iaean closed 10 months ago

iaean commented 1 year ago

1.1.6 seems to introduce auth issues again. Just dropin 1.1.6 for 1.1.5 with identical stack and config raises the following error, when we try to retrieve the PEM for an existing cert dns3l.example.com:

{"code":403,"message":"user has no permission for domain 'dns3l.example.com.'"}

There is no change in the token:

{ "iss": "https://auth:5554/auth",
  "aud": "dns3l-api",
  "groups": [
    "<PRFX>read",
    "<PRFX>example.com" ] }

Works in 1.1.5.