mirror of https://github.com/k3s-io/k3s
057b7af798
Right now if a JWT for an unknown issuer, for any subject hits the serviceaccount token authenticator, we return a errors as if the token was meant for us but we couldn't find a key to verify it. We should instead return nil, false, nil. This change helps us support multiple service account token authenticators with different issuers. |
||
|---|---|---|
| .. | ||
| admission | ||
| authenticator | ||
| authorizer | ||
| options | ||
| server | ||
| BUILD | ||
| OWNERS | ||
| default_storage_factory_builder.go | ||
| doc.go | ||