Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

agent: fix JWT cache #4309

Merged
merged 2 commits into from
Jun 30, 2023
Merged

agent: fix JWT cache #4309

merged 2 commits into from
Jun 30, 2023

Conversation

c4rlo
Copy link
Contributor

@c4rlo c4rlo commented Jun 30, 2023

Pull Request check list

  • Commit conforms to CONTRIBUTING.md?
  • Proper tests/regressions included?
  • Documentation updated? N/A

Affected functionality

JWT-SVID caching in spire-agent.

Description of change

The JWT cache in the agent has a bug whereby we do not distinguish between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to the way we build the cache keys.

Fix this.

Which issue this PR fixes

None I'm aware of.

The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <cteubner1@bloomberg.net>
Copy link
Member

@azdagron azdagron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Excellent catch. Thanks!

@azdagron azdagron added this to the 1.7.1 milestone Jun 30, 2023
@rturner3 rturner3 merged commit dddea72 into spiffe:main Jun 30, 2023
Neniel pushed a commit to Neniel/spire that referenced this pull request Jul 10, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <cteubner1@bloomberg.net>
Signed-off-by: Neniel <11655196+Neniel@users.noreply.github.com>
Neniel pushed a commit to Neniel/spire that referenced this pull request Jul 21, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <cteubner1@bloomberg.net>
Signed-off-by: Neniel <11655196+Neniel@users.noreply.github.com>
Neniel pushed a commit to Neniel/spire that referenced this pull request Aug 24, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <cteubner1@bloomberg.net>
Signed-off-by: Neniel <11655196+Neniel@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants