More descriptive error for scoped token validation (#628)

Export-Source-Commit: 047da44764000c7210ca3c3bd0587b06d3cdc292
This commit is contained in:
Peter Willis
2026-08-25 11:35:10 -05:00
committed by Gus Rivera
parent 3f32994519
commit f25cc21af5
+7 -4
View File
@@ -649,10 +649,13 @@ func StrongValidateToken(token *joiningv1.ScopedToken) error {
return trace.Wrap(err) return trace.Wrap(err)
} }
switch TokenUsageMode(spec.GetUsageMode()) { var allowedUsageModes = []string{
case TokenUsageModeSingle, TokenUsageModeUnlimited, TokenUsageModeBot: string(TokenUsageModeBot),
default: string(TokenUsageModeSingle),
return trace.BadParameter("scoped token mode is not supported") string(TokenUsageModeUnlimited),
}
if !slices.Contains(allowedUsageModes, spec.GetUsageMode()) {
return trace.BadParameter("spec.usage_mode: %q is not one of [%s]", spec.GetUsageMode(), strings.Join(allowedUsageModes, ", "))
} }
if len(spec.GetRoles()) == 0 { if len(spec.GetRoles()) == 0 {