bloomberg/vault-auth-spire

SvidVerifier::Verify assumes an x509-based SVID

dennisgove opened this issue · 0 comments

dennisgove commented

The current implementation of SvidVerifier::Verify assumes the SVID will be an x509-SVID and doesn't consider the possibility of a JWT-SVID.

Purpose: This issue will track the discussion and implementation of one of the following

  1. Implementation of support for JWT-SVID documents
  2. Creation of clear documentation describing support for only x509-SVID documents