Set is admin to be explicitly false when not true

Update IAM principal meta data to have is_admin = false rather than having be missing when it does not have admin permissions.
Nike-Inc · Apr 4, 2017 · a1e93dd · a1e93dd
1 parent 3100ee9
commit a1e93dd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/java/com/nike/cerberus/service/AuthenticationService.java b/src/main/java/com/nike/cerberus/service/AuthenticationService.java
@@ -217,6 +217,8 @@ public IamRoleAuthResponse authenticate(IamRoleCredentialsV2 credentials) {
         if (getAdminRoleArnSet().contains(iamRoleArn)) {
             meta.put(VaultAuthPrincipal.METADATA_KEY_IS_ADMIN, Boolean.toString(true));
             groups.add("admin-iam-principals");
+        } else {
+             meta.put(VaultAuthPrincipal.METADATA_KEY_IS_ADMIN, Boolean.toString(false));
         }
         meta.put(VaultAuthPrincipal.METADATA_KEY_GROUPS, StringUtils.join(groups, ','));