awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 11:27:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

pam: allow account credentials to be fetched more than once

Browse Source
This commit is contained in:
x032205
2025-11-19 11:11:35 -05:00
parent 4bff4ca20c
commit 39aa338ce5
1 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pam-account/pam-account-service.ts
+6 -9
View File
@@ -668,11 +668,6 @@ export const pamAccountServiceFactory = ({
throw new BadRequestError({ message: "Session has ended or expired" }); throw new BadRequestError({ message: "Session has ended or expired" });
} }
// Verify that the session has not already had credentials fetched
if (session.status !== PamSessionStatus.Starting) {
throw new BadRequestError({ message: "Session has already been started" });
}
const account = await pamAccountDAL.findById(session.accountId); const account = await pamAccountDAL.findById(session.accountId);
if (!account) throw new NotFoundError({ message: `Account with ID '${session.accountId}' not found` }); if (!account) throw new NotFoundError({ message: `Account with ID '${session.accountId}' not found` });
@@ -690,10 +685,12 @@ export const pamAccountServiceFactory = ({
const decryptedResource = await decryptResource(resource, session.projectId, kmsService); const decryptedResource = await decryptResource(resource, session.projectId, kmsService);
// Mark session as started // Mark session as started
await pamSessionDAL.updateById(sessionId, { if (session.status === PamSessionStatus.Starting) {
status: PamSessionStatus.Active, await pamSessionDAL.updateById(sessionId, {
startedAt: new Date() status: PamSessionStatus.Active,
}); startedAt: new Date()
});
}
return { return {
credentials: { credentials: {