]
Darran Lofthouse commented on WFWIP-375:
----------------------------------------
I think this is another one I will prioritise to avoid the loss of previously stored
credentials.
remove-alias on credential-store removes all entries for the given
alias
------------------------------------------------------------------------
Key: WFWIP-375
URL:
https://issues.redhat.com/browse/WFWIP-375
Project: WildFly WIP
Issue Type: Bug
Components: Security
Reporter: Ondrej Kotek
Assignee: Darran Lofthouse
Priority: Critical
The {{remove-alias}} operation of the {{credential-store}} resource removes all entries
for the given alias, not just one entry according to the given type.
{noformat}
[standalone@localhost:9990 /]
/subsystem=elytron/credential-store=a:add-alias(alias=a2,secret-value=a2)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/credential-store=a:remove-alias(alias=a2,entry-type=SecretKeyCredential)
{
"outcome" => "failed",
"failure-description" => "WFLYELY00920: Credential alias
'a2' of credential type 'SecretKeyCredential' does not exist in the
store",
"rolled-back" => true
}
[standalone@localhost:9990 /]
/subsystem=elytron/credential-store=a:generate-secret-key(alias=a2)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/credential-store=a:remove-alias(alias=a2,entry-type=SecretKeyCredential)
{
"outcome" => "success",
"response-headers" => {"warnings" => [{
"warning" => "Update dependent resources as alias 'a2'
does not exist anymore",
"level" => "WARNING",
"operation" => {
"address" => [
("subsystem" => "elytron"),
("credential-store" => "a")
],
"operation" => "remove-alias"
}
}]}
}
[standalone@localhost:9990 /]
/subsystem=elytron/credential-store=a:add-alias(alias=a2,secret-value=a2)
{"outcome" => "success"}
{noformat}