The documentation for a Vault token helper specifies three methods that must be implemented: get
, store
, and erase
. I’ve created a token helper and in testing I’ve found that the vault cli works properly for both get
and store
but it doesn’t seem to call erase
. After searching through the vault source code, the only call to the Erase()
function is in command/token/testing.go#L28. Is that intentionally omitted, or would you be open to a PR to add the call to Erase()
in the token revocation function?
1 Like