Skip to content

Harden bootstrap token parsing#451

Open
fallintoplace wants to merge 1 commit into
openai:mainfrom
fallintoplace:fix/bootstrap-token-validation
Open

Harden bootstrap token parsing#451
fallintoplace wants to merge 1 commit into
openai:mainfrom
fallintoplace:fix/bootstrap-token-validation

Conversation

@fallintoplace

Copy link
Copy Markdown

Summary

  • reject empty decoded service account credentials when parsing serialized bootstrap tokens
  • return invalid token format errors for malformed or unparsable certificate segments
  • cover malformed certificate and empty credential cases with regression tests

Testing

  • go test ./internal/bootstraptoken
  • go test -run '^$' ./...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant