vstockwell/wraith
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 67 Wiki Activity

fix: detect orphaned SSH key references and missing auth methods

Browse Source 
When a credential's sshKeyId points to a deleted/missing SSH key row,
the connection attempt silently had zero auth methods. Now throws a
clear error explaining the SSH key is missing. Also catches the case
where a credential has neither password nor SSH key configured.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Vantz Stockwell 2026-03-14 01:04:41 -04:00
parent f06dcbaa6b
commit 11e1705110
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
backend/src/vault/credentials.service.ts
View File

@ -81,6 +81,17 @@ export class CredentialsService {
? this.encryption.decrypt(cred.sshKey.passphraseEncrypted) ? this.encryption.decrypt(cred.sshKey.passphraseEncrypted)
: null; : null;
sshKey = { privateKey, passphrase }; sshKey = { privateKey, passphrase };
} else if (cred.sshKeyId) {
// Orphaned reference — credential points to a deleted/missing SSH key
throw new NotFoundException(
`Credential "${cred.name}" references SSH key #${cred.sshKeyId} which no longer exists. Re-import the key or update the credential.`,
);
}
if (!password && !sshKey) {
throw new NotFoundException(
`Credential "${cred.name}" has no password or SSH key configured.`,
);
} }
return { username: cred.username, domain: cred.domain, password, sshKey }; return { username: cred.username, domain: cred.domain, password, sshKey };