More descriptive error for scoped token validation (#628)

Export-Source-Commit: 047da44764000c7210ca3c3bd0587b06d3cdc292
This commit is contained in:
Peter Willis
2026-08-25 11:35:10 -05:00
committed by Gus Rivera
parent 3f32994519
commit f25cc21af5
+7 -4
View File
@@ -649,10 +649,13 @@ func StrongValidateToken(token *joiningv1.ScopedToken) error {
return trace.Wrap(err)
}
switch TokenUsageMode(spec.GetUsageMode()) {
case TokenUsageModeSingle, TokenUsageModeUnlimited, TokenUsageModeBot:
default:
return trace.BadParameter("scoped token mode is not supported")
var allowedUsageModes = []string{
string(TokenUsageModeBot),
string(TokenUsageModeSingle),
string(TokenUsageModeUnlimited),
}
if !slices.Contains(allowedUsageModes, spec.GetUsageMode()) {
return trace.BadParameter("spec.usage_mode: %q is not one of [%s]", spec.GetUsageMode(), strings.Join(allowedUsageModes, ", "))
}
if len(spec.GetRoles()) == 0 {