mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-23 20:47:01 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Clear invalid tokens from unix resolver (#3256)

Browse source
This commit is contained in:
Firstyear 2024-11-30 16:32:10 +10:00 committed by William Brown
parent dafc98b1db
commit 7c82c951f5
1 changed files with 11 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
unix_integration/resolver/src/resolver.rs
View file

@ -412,9 +412,12 @@ impl Resolver {
} }
None => { None => {
error!(provider = ?tok.provider, "Token was resolved by a provider that no longer appears to be present."); error!(provider = ?tok.provider, "Token was resolved by a provider that no longer appears to be present.");
// We don't know if this is permanent or transient, so just useCached, unless
// the admin clears tokens from providers that are no longer present. // We don't want to use a token from a former provider, we want it refreshed,
Ok(UserTokenState::UseCached) // so lets indicate that we didn't find the token. If we return useCcahed like
// we did previously, we'd never clear and reset this token since we'd never
// locate it's provider.
Ok(UserTokenState::NotFound)
} }
} }
} else { } else {
@ -481,9 +484,11 @@ impl Resolver {
} }
None => { None => {
error!(provider = ?tok.provider, "Token was resolved by a provider that no longer appears to be present."); error!(provider = ?tok.provider, "Token was resolved by a provider that no longer appears to be present.");
// We don't know if this is permanent or transient, so just useCached, unless // We don't want to use a token from a former provider, we want it refreshed,
// the admin clears tokens from providers that are no longer present. // so lets indicate that we didn't find the token. If we return useCcahed like
Ok(GroupTokenState::UseCached) // we did previously, we'd never clear and reset this token since we'd never
// locate it's provider.
Ok(GroupTokenState::NotFound)
} }
} }
} else { } else {