jfrog / vault-plugin-secrets-artifactory

HashiCorp Vault Secrets Plugin for Artifactory
https://jfrog.com
Apache License 2.0
41 stars 20 forks source link

slashes in admin token username shows wrong username #68

Closed TJM closed 1 year ago

TJM commented 1 year ago

Due to the simplistic parsing of username from the subject of the JWT token, it will display the username incorrectly in vault read /artifactory/config/admin if the username has a forward slash (/) in it. This does not affect anything, but should probably be fixed. I ran into this when I was using ${VAULT_NAMESPACE}-vault-admin for a "learning-center/tommy-mcneely" namespace, and I got "tommy-mcneely" as the username.

NOTE: The Artifactory Tokens UI also shows the same bug.

TJM commented 1 year ago

fixed with #78