Return API key name as part of _authenticate response #70306
Assignees
Labels
>enhancement
:Security/Authentication
Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc)
Team:Security
Meta label for security team
Comments
|
Pinging @elastic/es-security (Team:Security) |
justincr-elastic
added a commit
to justincr-elastic/elasticsearch
that referenced
this issue
Oct 11, 2021
Responses to POST /_security/api_key includes id, name, metadata, api_key (shared secret), and encoded (base64 of id:api_key). Requests to GET /_security/_authenticate returns data about the user, but not the API KEY. When authenticating using an API KEY, return API KEY info map in the response. The initial feature request asked for 'name'. However, the request's Authentication header contains 'encoded', so the decoded 'id' will be returned for convenience too. When authenticating using any other method, API KEY info map is omitted. Closes elastic#70306
justincr-elastic
added a commit
to justincr-elastic/elasticsearch
that referenced
this issue
Oct 11, 2021
Responses to POST /_security/api_key includes id, name, metadata, api_key (shared secret), and encoded (base64 of id:api_key). Requests to GET /_security/_authenticate returns data about the user, but not the API KEY. When authenticating using an API KEY, return API KEY info map in the response. The initial feature request asked for 'name'. However, the request's Authentication header contains 'encoded', so the decoded 'id' will be returned for convenience too. When authenticating using any other method, API KEY info map is omitted. Closes elastic#70306
justincr-elastic
added a commit
that referenced
this issue
Oct 29, 2021
* Return API KEY name in _authentication response Requests to GET /_security/_authenticate returned data about a user, but not an API KEY. Return API KEY info map containing name and id. API KEY info map is omitted for other authentication types. Closes #70306
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Problem statement
When the
_authenticateAPI is called using an API key, the response includes information about the user but no details about the API key itself.The API key name could be useful to get, as it can be used to identify the key without using a separate call.
Proposed solution
Return the API key
namefield as part of the_authenticateresponse payload.The text was updated successfully, but these errors were encountered: