Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth0 user owner and KMS RSA keys out-of-sync #28

Open
Danziger opened this issue Sep 30, 2024 · 0 comments · May be fixed by #29
Open

Auth0 user owner and KMS RSA keys out-of-sync #28

Danziger opened this issue Sep 30, 2024 · 0 comments · May be fixed by #29

Comments

@Danziger
Copy link
Collaborator

Danziger commented Sep 30, 2024

When an Auth0 user is manually deleted and re-created (e.g. when testing), the createUser operation will either:

  • Throw an error, when using the production KMS server.
  • Update the Auth0 user with owner and walletAddress properties that do not match the RSA keys that were previously created in Google KMS.

We should:

  • Add checks to verify the keys in Google KMS and the ones in the Auth0 user match (probably in the server middleware).
  • Update the user creation logic to avoid/skip key creation if they already exist, which would also allow users who experienced some kind of error or malfunction when trying to create an user to try again (with the current implementation, they might be locked out).

Related to #15 (comment).

@Danziger Danziger linked a pull request Sep 30, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant