The documentation for a Vault token helper specifies three methods that must be implemented: get, store, and erase. I’ve created a token helper and in testing I’ve found that the vault cli works properly for both get and store but it doesn’t seem to call erase. After searching through the vault source code, the only call to the Erase() function is in command/token/testing.go#L28. Is that intentionally omitted, or would you be open to a PR to add the call to Erase() in the token revocation function?
1 Like