Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add denied details to errors on server authorization #3269

Merged
merged 5 commits into from
Aug 1, 2022

Conversation

MarcosDY
Copy link
Collaborator

Add denied details to PermissionDenied errors generated from Authorization process.
It allows agent to reattest when agent entry is removed

Which issue this PR fixes
fixes #3268

Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
Copy link
Member

@azdagron azdagron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @MarcosDY ! I just have one small comment. Thanks for the targeted fix and unit tests!

return ctx, false, err
}
return ctx, false, nil
return ctx, false, err
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we can refactor isAgent to no longer return a bool...

Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
…turn a boolean

Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
Copy link
Member

@azdagron azdagron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, @MarcosDY !

@MarcosDY MarcosDY merged commit 1b9b13e into spiffe:main Aug 1, 2022
@MarcosDY MarcosDY deleted the error-details branch August 1, 2022 13:55
@azdagron azdagron added this to the 1.4.0 milestone Aug 1, 2022
stevend-uber pushed a commit to stevend-uber/spire that referenced this pull request Oct 16, 2023
Add authentication error reason to opa error message

Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Server api errors no longer provides error details
2 participants