rails_kms_credentials 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0273094dabd151a67eb56db4f3211b88264a2cce57ca9ab1877cffc7b4ad691
-  data.tar.gz: 151cdc9835b37d4d6207af37cec2ac926ec31165790e91d1d8ad8a4a93bff334
+  metadata.gz: de88f7dce4457c9f658840f71929a0c6aa0673e30788aae0ea2a5bc3f02a36c2
+  data.tar.gz: abea6732234392d3fd6b61d4cb2cc5677021d40243986e2f6a8f090ef213642f
 SHA512:
-  metadata.gz: 6957d12ad6e5d28458248dac4ccec8b49a568237d9fcdf954341b486e190d78febdee246ddf7b70371ec7c87d4883afc7edc282a44ed5e301ad7db0c735d9d2e
-  data.tar.gz: 38bebac72a46d229b0b000c559863d901f2b2be1dd3e0d4ce9de1c3ec73b4de39db976aa6bf4284e65a592c393e1ce90e8619ddcebd43ab440ca465e641d252b
+  metadata.gz: d32fd25ff4c82aee6d86d6e46080d88e07127a988b2400ca30146a895a64339e90e3b23ef898ef8bd38c1ceb09b101b9cdeabfa31febe8969403fd1a723fe1ed
+  data.tar.gz: fdc5491be4b98e9e25e4a3066b7c541a10cc7961ee85a98c3c9e4a5d8b53f4206c10d6b712dc59f889e0827d164099ce73e1489254be6fab126d2d10404526b7

data/lib/rails_kms_credentials/store/azure_key_vault/client/aks_workload_identity.rb

@@ -46,18 +46,19 @@ module RailsKmsCredentials
 
           private
 
-            def client_secret
-              @client_secret ||= File.read(@federated_token_file)
+            def client_assertion
+              @client_assertion ||= File.read(@federated_token_file)
             end
 
             def access_token
               return @access_token if instance_variable_defined?(:@access_token)
               @_access_token_response = HTTParty.post(
-                "#{authority_host}/#{tenant_id}/oauth2/v2.0/token",
+                "#{authority_host}#{tenant_id}/oauth2/v2.0/token",
                 {
                   body: {
+                    client_assertion: client_assertion,
+                    client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
                     client_id: client_id,
-                    client_secret: client_secret,
                     scope: 'https://vault.azure.net/.default',
                     grant_type: 'client_credentials',
                   }

data/lib/rails_kms_credentials/version.rb

@@ -5,7 +5,7 @@ module RailsKmsCredentials
   module Version
     MAJOR = 0
     MINOR = 3
-    PATCH = 0
+    PATCH = 1
 
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_kms_credentials
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Taylor Yelverton
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-10 00:00:00.000000000 Z
+date: 2023-02-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport