root/golib
1
0
Fork 0
mirror of https://github.com/therootcompany/golib.git synced 2026-11-04 06:55:00 +00:00
Code Issues Projects Releases Wiki Activity

fix(auth/csvauth): ID() returns Name only, not Name~hashID for tokens

Browse Source 
Token hashID is an internal cache key for lookup disambiguation.
Exposing it in ID() leaks implementation detail to callers — JWT act
claims, audit logs, and session records all got the raw fingerprint
suffix instead of the human-readable credential name.
This commit is contained in:
AJ ONeal 2026-04-13 19:41:59 -06:00
parent 4a9c331ef9
commit 52b882dd1b
No known key found for this signature in database
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
auth/csvauth/credential.go
View File

@ -57,9 +57,6 @@ type Credential struct {
} }
func (c *Credential) ID() string { func (c *Credential) ID() string {
if c.Purpose == PurposeToken {
return c.Name + hashIDSep + c.hashID
}
return c.Name return c.Name
} }