Merge pull request #20 from ing-bank/bug/double-hashed-npa

Fix double encryption on NPA secretkey
ing-bank · Feb 6, 2019 · abce91c · abce91c
2 parents 27d1f00 + 59de352
commit abce91c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/build.sbt b/build.sbt
@@ -4,7 +4,7 @@ import scalariform.formatter.preferences._
 
 name := "airlock-sts"
 
-version := "0.1.7"
+version := "0.1.8"
 
 scalaVersion := "2.12.8"
 

diff --git a/src/main/scala/com/ing/wbaa/airlock/sts/api/AdminApi.scala b/src/main/scala/com/ing/wbaa/airlock/sts/api/AdminApi.scala
@@ -41,7 +41,7 @@ trait AdminApi extends LazyLogging with Encryption {
         formFields(('npaAccount, 'awsAccessKey, 'awsSecretKey)) { (npaAccount, awsAccessKey, awsSecretKey) =>
           authorizeToken(verifyAuthenticationToken) { keycloakUserInfo =>
             if (userInAdminGroups(keycloakUserInfo.userGroups)) {
-              val awsCredentials = AwsCredential(AwsAccessKey(awsAccessKey), AwsSecretKey(encryptSecret(awsSecretKey, npaAccount)))
+              val awsCredentials = AwsCredential(AwsAccessKey(awsAccessKey), AwsSecretKey(awsSecretKey))
               onComplete(insertAwsCredentials(UserName(npaAccount), awsCredentials, true)) {
                 case Success(true) =>
                   logger.debug(s"NPA: $npaAccount successfully created by ${keycloakUserInfo.userName}")