Skip to content

Conversation

c4rlo
Copy link
Contributor

@c4rlo c4rlo commented Jun 30, 2023

Pull Request check list

  • Commit conforms to CONTRIBUTING.md?
  • Proper tests/regressions included?
  • Documentation updated? N/A

Affected functionality

JWT-SVID caching in spire-agent.

Description of change

The JWT cache in the agent has a bug whereby we do not distinguish between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to the way we build the cache keys.

Fix this.

Which issue this PR fixes

None I'm aware of.

The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <[email protected]>
Copy link
Member

@azdagron azdagron left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Excellent catch. Thanks!

@azdagron azdagron added this to the 1.7.1 milestone Jun 30, 2023
@rturner3 rturner3 merged commit dddea72 into spiffe:main Jun 30, 2023
Neniel pushed a commit to Neniel/spire that referenced this pull request Jul 10, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <[email protected]>
Signed-off-by: Neniel <[email protected]>
Neniel pushed a commit to Neniel/spire that referenced this pull request Jul 21, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <[email protected]>
Signed-off-by: Neniel <[email protected]>
Neniel pushed a commit to Neniel/spire that referenced this pull request Aug 24, 2023
The JWT cache in the agent has a bug whereby we do not distinguish
between audience sets {"ab", "cd"} and {"a", "bcd"} (for example) due to
the way we build the cache keys.

Fix this.

Signed-off-by: Carlo Teubner <[email protected]>
Signed-off-by: Neniel <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants