salt icon indicating copy to clipboard operation
salt copied to clipboard

Provide token storage using the salt.cache interface

Open mattp- opened this issue 5 months ago • 4 comments
trafficstars

What does this PR do?

Rather than implement custom drivers for tokens, the existing cache drivers can be leveraged for token management. This also moves token expiry responsibility to the token(cache) implementation with a naive fallback.

Implicitly the default token backend will move to either what the global 'cache' is set to, or, if overridden, the eauth_tokens.cache_driver opt. This means on upgrade, tokens will be invalidated. The only other token driver is 'rediscluster', which I've added a deprecation for, since cache.redis_cache provides the same functionality.

NOTE: this PR depends on https://github.com/saltstack/salt/pull/68030 being merged; once done I can rebase. 1e505cbd7 is the only relevant commit for this PR.

What issues does this PR fix or reference?

Fixes

Previous Behavior

Remove this section if not relevant

New Behavior

Remove this section if not relevant

Merge requirements satisfied?

[NOTICE] Bug fixes or features added to Salt require tests.

  • [ ] Docs
  • [x] Changelog - https://docs.saltproject.io/en/master/topics/development/changelog.html
  • [x] Tests written/updated

Commits signed with GPG?

Yes

mattp- avatar May 27 '25 17:05 mattp-