luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

docs: detail policies parameter for auth methods using tokenutil (#18015) 

* docs: detail policies parameter for auth methods using tokenutil

* Update website/content/partials/tokenfields.mdx


Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
This commit is contained in:
mickael-hc 2022-11-18 11:09:29 -05:00 committed by GitHub
parent 8461f096e2
commit 8927a55741
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
website/content/docs/concepts/policies.mdx
View File

@ -451,11 +451,12 @@ constrain requests, using the following options:
```ruby ```ruby
# This allows the user to update the userpass auth method's user # This allows the user to update the userpass auth method's user
# configurations (e.g., "password") but cannot update the "token_policies" # configurations (e.g., "password") but cannot update the "token_policies"
# parameter value. # and "policies" parameter values.
path "auth/userpass/users/*" { path "auth/userpass/users/*" {
capabilities = ["update"] capabilities = ["update"]
denied_parameters = { denied_parameters = {
"token_policies" = [] "token_policies" = []
"policies" = []
} }
} }
``` ```

3
website/content/partials/tokenfields.mdx
View File

@ -5,6 +5,9 @@
generated tokens. This current value of this will be referenced at renewal generated tokens. This current value of this will be referenced at renewal
time. time.
- `token_policies` `(array: [] or comma-delimited string: "")` - List of - `token_policies` `(array: [] or comma-delimited string: "")` - List of
token policies to encode onto generated tokens. Depending on the auth method, this
list may be supplemented by user/group/other values.
- `policies` `(array: [] or comma-delimited string: "")` - List of token
policies to encode onto generated tokens. Depending on the auth method, this policies to encode onto generated tokens. Depending on the auth method, this
list may be supplemented by user/group/other values. list may be supplemented by user/group/other values.