{"action":"opened","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/5504","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/5504/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/5504/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/5504/events","html_url":"https://github.com/hashicorp/vault/issues/5504","id":369659753,"node_id":"MDU6SXNzdWUzNjk2NTk3NTM=","number":5504,"title":"Token storage hooks","user":{"login":"kohend","id":309245,"node_id":"MDQ6VXNlcjMwOTI0NQ==","avatar_url":"https://avatars0.githubusercontent.com/u/309245?v=4","gravatar_id":"","url":"https://api.github.com/users/kohend","html_url":"https://github.com/kohend","followers_url":"https://api.github.com/users/kohend/followers","following_url":"https://api.github.com/users/kohend/following{/other_user}","gists_url":"https://api.github.com/users/kohend/gists{/gist_id}","starred_url":"https://api.github.com/users/kohend/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kohend/subscriptions","organizations_url":"https://api.github.com/users/kohend/orgs","repos_url":"https://api.github.com/users/kohend/repos","events_url":"https://api.github.com/users/kohend/events{/privacy}","received_events_url":"https://api.github.com/users/kohend/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-10-12T18:22:02Z","updated_at":"2018-10-12T18:22:02Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"**Is your feature request related to a problem? Please describe.**\r\nSomewhat related to #5475.\r\n\r\n**Describe the solution you'd like**\r\nTo have an option for plugin credentials to be revoked with the parent token, by the plugin registering a hook on the creating token.\r\n\r\n**Describe alternatives you've considered**\r\nCurrently we match the ttl of tokens with the credentials created by them and our flow gets credentials when the token is created.\r\n\r\n**Explain any additional use-cases**\r\nFor example, dynamic Cassandra credentials for a process using a periodic token, once the token expires the credentials should too, and replacing the credentials every periodic refresh is a pain.\r\n\r\n**Additional context**\r\nI may be able to write this feature (not sure regarding priorities though), I wanted to see if that's something that makes sense."}}
{"actor":{"display_login":"kohend"}}