tree 8769fd6bbb640364f6dd4908f714149c620af135
parent 67d3c2c17188cc1d16abf7c651eec8fdd7770ff5
author Carlos Amedee <carlos@golang.org> 1656715162 -0400
committer Gopher Robot <gobot@golang.org> 1657559142 +0000

internal/coordinator/remote: check for ownerID in principals of cert

This change checks that the owner ID which has been set in the
certificates principals correspond with the session being
authenticated. The certificate contains the session ID and
owner ID in the principals section. The session ID is checked
before the owner ID is checked.

For golang/go#52594

Change-Id: I5cedde248e01cbec22bf1c4c77aabf29a1edb2a7
Reviewed-on: https://go-review.googlesource.com/c/build/+/415679
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Run-TryBot: Carlos Amedee <carlos@golang.org>
Auto-Submit: Carlos Amedee <carlos@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>