Add revoke Vault token functionality to OIDC lookup creds#176

Merged

webknjaz merged 39 commits intoansible:develfrom

fincamd:AAP-64519-vault-token-revocation

Apr 1, 2026

Commits on Mar 31, 2026

Add revoke Vault token functionality to OIDC lookup creds

fincamd
authored and
webknjaz
committed
Add linter suggestions

fincamd
authored and
webknjaz
committed
Add more unit tests

fincamd
authored and
webknjaz
committed
Refactor tests

fincamd
authored and
webknjaz
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks

pre-commit-ci[bot]
authored and
webknjaz
committed
Address pre-commit failures

fincamd
authored and
webknjaz
committed
Add test case for kv_backend v2

fincamd
authored and
webknjaz
committed
Add more test cases

fincamd
authored and
webknjaz
committed
Use urllib join instead of ospath join

fincamd
authored and
webknjaz
committed
Move token definition out of try block

fincamd
authored and
webknjaz
committed
Simplify kv_backend to meet pre-commit linter

fincamd
authored and
webknjaz
committed
Fix token typing linter

fincamd
authored and
webknjaz
committed
Remove unused parameter in test token empty

fincamd
authored and
webknjaz
committed
Add context manager to manage vault token

fincamd
authored and
webknjaz
committed
Address linter issues and restore removed comments

fincamd
authored and
webknjaz
committed
Addressed PR review suggestions

fincamd
and
webknjaz
committed
Fix typevar definition in decorator function for mypy

fincamd
authored and
webknjaz
committed
Made utility revoke_self_token function private

fincamd
authored and
webknjaz
committed
Set default value for namespace and cacert calling revoke_self_token

fincamd
authored and
webknjaz
committed
Use autospec in the test mocks

fincamd
authored and
webknjaz
committed
Remove suppress exception context

fincamd
authored and
webknjaz
committed
Use backend function reference instead of getattr lookup in tests

fincamd
authored and
webknjaz
committed
Use less generic name in a test kwargs var

fincamd
authored and
webknjaz
committed
Use a more realistic exception being raised in tests

fincamd
authored and
webknjaz
committed
Add back lost comment

fincamd
authored and
webknjaz
committed
📝 Record the detached param spec justification
webknjaz
committed
✨ Enforce `_revoke_self_token` to be kwarg-only
webknjaz
committed
💅 Pass token injection in decorator explicitly
webknjaz
committed
💅 Concat token type in decorated callable def
webknjaz
committed
🧪 Let MyPy know that `token` is internal
webknjaz
committed
🧪 Patch `requests.Session` though actual module
webknjaz
committed
🧪💅 Move most in-test mock defs into fixtures
webknjaz
committed
🧪 Use indentity check for test function params
webknjaz
committed
Unify mock @ test_backend_revokes_oidc_token
webknjaz
committed
💅 Replace token arg injection w/ `contextvars`
webknjaz
committed
🧪 Suppress WPS201 in `hashivault` module
webknjaz
committed
🧪 Let pylint know private access is ok in tests
webknjaz
committed
🧪 Make MyPy allow private attr access in tests
webknjaz
committed
🩹📝 Suppress types that Sphinx can't resolve
webknjaz
committed