Actor must not be null when using authorization_code grant type about credhub HOT 8 CLOSED

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/171370824

The labels on this github issue will be updated when the story is started.

from credhub.

Our gut feeling is that this is something that just fell through the cracks. I think this just might not have been a requirement at the time that CredHub was getting rolled out. We will do some more archeology on this, but seems like something we can add.

from credhub.

Did you run into this when building your CredHub web app?

from credhub.

@ankeesler It seems to us that the "authorization code" OAuth grant type is not supported by the Credhub server. I can think of 2 action items for us at this point:

1. Fix this code path by returning an actual error when a user tries to use the "auth code" grant type, by saying something like "Error: the authorization code grant flow is not supported", instead of apparently returning nothing.
2. Updating the docs to indicate that it's not supported (if they are not already)

from credhub.

@sneal We are trying to get a better gauge of this issue in order to prioritize the story that was created. Would you be able to explain your use case a little more specifically?

from credhub.

@jknostman3 I was attempting to get a Credhub web based admin tool working with individual user accounts in UAA (SAML origin). It unfortunately ended up only worked with a client. I'd like to see the error message cleaned up, it might save someone from having to dive into the code in the future.

We ended up giving granular access via the Credhub CLI which was workable. The annoying part was having to grant each individual developer access to specific folders in Credhub which required us to use UAAC to find every developers UAA id. Assigning groups would be nice here.

from credhub.

@sneal Thanks for the details on your use case. We updated the bug in the backlog to be more focused on a clearer error message. We will let you know when this has been implemented.

from credhub.

Closing this issue out since the Error message was improved and has shipped.

from credhub.