spring-projects / spring-vault

Provides familiar Spring abstractions for HashiCorp Vault
https://spring.io/projects/spring-vault
Apache License 2.0
283 stars 186 forks source link

Usage query : OIDC Token short lived authentication for single operation support #759

Open unbeatencoder opened 1 year ago

unbeatencoder commented 1 year ago

Background is that we allow users to authenticate using OIDC and get a short lived vault token. And they can use this to read/write secrets from vault based on access control policies of Vault. I am trying to write a utility tool which can use this token and read/write secrets to vault. I am looking for an authentication method that will allow me to connect with our corporate vault instance with an OIDC token and perform operations as long as token is valid. I couldn't find any such authentication method for the VaultTemplate. Is it possible to use this library for this use case? Thanks in advance for your help in this regards.

mp911de commented 1 year ago

I believe this is a duplicate of #689. We currently do not support JWT authentication yet. However, we're happy to review a pull request if you're interested in contributing such an authentication mechanism.

unbeatencoder commented 1 year ago

Got it. Thanks! :)