Skip to content

Reject token issuance for edge sites and update tests (#2482)#2484

Merged
evanwang9x merged 3 commits into
skupperproject:mainfrom
evanwang9x:Evan/Reject-Edge-Tokens
Jun 11, 2026
Merged

Reject token issuance for edge sites and update tests (#2482)#2484
evanwang9x merged 3 commits into
skupperproject:mainfrom
evanwang9x:Evan/Reject-Edge-Tokens

Conversation

@evanwang9x

Copy link
Copy Markdown
Contributor

Fixes (#2482)

@evanwang9x evanwang9x force-pushed the Evan/Reject-Edge-Tokens branch from 4311692 to c84db04 Compare June 9, 2026 14:25
@evanwang9x evanwang9x requested review from Copilot and nluaces and removed request for nluaces June 9, 2026 14:55
@evanwang9x evanwang9x removed the request for review from Copilot June 9, 2026 14:58
@evanwang9x evanwang9x requested a review from AryanP123 June 9, 2026 14:59
@AryanP123

Copy link
Copy Markdown
Contributor

Nice work. The tokens.go fix looks good. The issue also mentions that skupper token issue can still succeed on edge sites, can we address that path too so issuance is rejected end-to-end, not only at redeem time? Add an edge-site check in token_issue.go ValidateInput so the CLI fails early, not only at redeem time

@fgiorgetti

Copy link
Copy Markdown
Member

@evanwang9x I agree with @AryanP123. It works, but it would be nice to improve on the handling of the AccessGrant by the controller as well, to prevent it from changing to a Ready state.

@fgiorgetti fgiorgetti closed this Jun 9, 2026
@fgiorgetti fgiorgetti reopened this Jun 10, 2026
@evanwang9x evanwang9x linked an issue Jun 10, 2026 that may be closed by this pull request
@AryanP123

Copy link
Copy Markdown
Contributor

LGTM. @fgiorgetti wdyt?

@fgiorgetti fgiorgetti left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me now! Thank you @evanwang9x !

@evanwang9x evanwang9x merged commit eab167f into skupperproject:main Jun 11, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reject access token issuance from edge sites

3 participants