There's great feature introduced recently named 'Resource Wrapping'.
It would be useful to support in in Java client library.
Use case:
- Service A authenticates with
/auth/approle/login endpoint providing App Role role_id, secret_id and X-Vault-Wrap-TTL header.
- Response contains AccessorID and WrappedTokenID, first one left on Service A, second passed to Service B.
- Service B connects to Vault server and performs GET on
/sys/wrapping/unwrap?token=${WrappedTokenId} and receives proper token, then reconfigures itself and proceeds with operations.
Example was shown during Securing Applications Using Nomad
presentation.
There's great feature introduced recently named 'Resource Wrapping'.
It would be useful to support in in Java client library.
Use case:
/auth/approle/loginendpoint providing App Role role_id, secret_id andX-Vault-Wrap-TTLheader./sys/wrapping/unwrap?token=${WrappedTokenId}and receives proper token, then reconfigures itself and proceeds with operations.Example was shown during Securing Applications Using Nomad
presentation.