mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-11 22:49:54 +00:00
More descriptive error for scoped token validation (#628)
Export-Source-Commit: 047da44764000c7210ca3c3bd0587b06d3cdc292
This commit is contained in:
@@ -649,10 +649,13 @@ func StrongValidateToken(token *joiningv1.ScopedToken) error {
|
|||||||
return trace.Wrap(err)
|
return trace.Wrap(err)
|
||||||
}
|
}
|
||||||
|
|
||||||
switch TokenUsageMode(spec.GetUsageMode()) {
|
var allowedUsageModes = []string{
|
||||||
case TokenUsageModeSingle, TokenUsageModeUnlimited, TokenUsageModeBot:
|
string(TokenUsageModeBot),
|
||||||
default:
|
string(TokenUsageModeSingle),
|
||||||
return trace.BadParameter("scoped token mode is not supported")
|
string(TokenUsageModeUnlimited),
|
||||||
|
}
|
||||||
|
if !slices.Contains(allowedUsageModes, spec.GetUsageMode()) {
|
||||||
|
return trace.BadParameter("spec.usage_mode: %q is not one of [%s]", spec.GetUsageMode(), strings.Join(allowedUsageModes, ", "))
|
||||||
}
|
}
|
||||||
|
|
||||||
if len(spec.GetRoles()) == 0 {
|
if len(spec.GetRoles()) == 0 {
|
||||||
|
|||||||
Reference in New Issue
Block a user