hashicorp / hashicorp/vault-lambda-extension

Don't override existing authentication headers

Open
#119 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
148
Forks
31
PR merge metrics
No merged PRs in 30d

Description

I'd like to be able to run the extension to get the caching functionality, but do my own authentication. It seems like the auth header [is added unconditionally](https://github.com/hashicorp/vault-lambda-extension/blob/14b548bd4b6e1aef4f6e45a410949458320bd0a4/internal/proxy/proxy.go#L140-L141) - could this be changed to only add the header if it is not present in the original request?

My use case is a Lambda function that post-processes some PKI certificates produced by Vault. So the user will do their own authentication, and that should be passed through unaltered to Vault. Having the extension's cache functionality would be useful to reduce duplicate credentials created if the user refreshes the page.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.