mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-06 18:27:19 +00:00
allow service account to fetch secrets
This commit is contained in:
@@ -44,7 +44,7 @@ router.post(
|
|||||||
const secretIds = requests
|
const secretIds = requests
|
||||||
.map((request) => request.secret._id)
|
.map((request) => request.secret._id)
|
||||||
.filter((secretId) => secretId !== undefined)
|
.filter((secretId) => secretId !== undefined)
|
||||||
|
|
||||||
if (secretIds.length > 0) {
|
if (secretIds.length > 0) {
|
||||||
req.secrets = await validateClientForSecrets({
|
req.secrets = await validateClientForSecrets({
|
||||||
authData: req.authData,
|
authData: req.authData,
|
||||||
@@ -53,8 +53,8 @@ router.post(
|
|||||||
});
|
});
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
return true;
|
return true;
|
||||||
}),
|
}),
|
||||||
validateRequest,
|
validateRequest,
|
||||||
secretsController.batchSecrets
|
secretsController.batchSecrets
|
||||||
);
|
);
|
||||||
@@ -123,7 +123,7 @@ router.get(
|
|||||||
query('tagSlugs'),
|
query('tagSlugs'),
|
||||||
validateRequest,
|
validateRequest,
|
||||||
requireAuth({
|
requireAuth({
|
||||||
acceptedAuthModes: [AUTH_MODE_JWT, AUTH_MODE_API_KEY, AUTH_MODE_SERVICE_TOKEN]
|
acceptedAuthModes: [AUTH_MODE_JWT, AUTH_MODE_API_KEY, AUTH_MODE_SERVICE_TOKEN, AUTH_MODE_SERVICE_ACCOUNT]
|
||||||
}),
|
}),
|
||||||
requireWorkspaceAuth({
|
requireWorkspaceAuth({
|
||||||
acceptedRoles: [ADMIN, MEMBER],
|
acceptedRoles: [ADMIN, MEMBER],
|
||||||
|
|||||||
Reference in New Issue
Block a user