quarkiverse / quarkus-vault

Quarkus HashiCorp Vault extension
Apache License 2.0
18 stars 22 forks source link

VaultToken.cached incorrectly extends the tokens lifetime #262

Closed kdubb closed 3 months ago

kdubb commented 3 months ago

This should only update the cached field but inadvertently updates the parent VaultTimeLimited.created field as well.

This creates tokens with expiration times that do not agree with Vault; therefore, the client can attempt to use expired tokens.

From discussion #261