A comprehensive cross-platform .NET Library for HashiCorp's Vault, a secret management tool
488
stars
130
forks
source link
kv2/metadata: `ReadSecretPathsAsync` allows empty path value to list all secrets on the `mountPoint` #337
Closed
konidev20 closed 1 week ago
In the implementation of
the path is required which was built referencing -> https://developer.hashicorp.com/vault/api-docs/secret/kv/kv-v2#list-secrets
However, as reported in gh-334, it seems like
path
can be empty, if you want to list all the secrets on the mount point.I tried this with Vault v1.15.2, below are the results of my test.
Sample Request
Response
considering the above results, I felt removing the strict null check and adding a simple guard rail would be a better solution.
fixes #334