spring-projects / spring-projects/spring-vault
Usage query : OIDC Token short lived authentication for single operation support
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 306
- Forks
- 202
- PR merge metrics
- No merged PRs in 30d
Description
Background is that we allow users to authenticate using OIDC and get a short lived vault token. And they can use this to read/write secrets from vault based on access control policies of Vault. I am trying to write a utility tool which can use this token and read/write secrets to vault. I am looking for an authentication method that will allow me to connect with our corporate vault instance with an OIDC token and perform operations as long as token is valid. I couldn't find any such authentication method for the VaultTemplate. Is it possible to use this library for this use case?
Thanks in advance for your help in this regards.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the VaultTemplate authentication options and the issue's OIDC token use case. Done would mean establishing whether a supported authentication method can use the short-lived token for read/write operations while it remains valid.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100