Skip to content

Fix crasher on callout for a leafnode connection with hand-rolled creds that are mistmatched#7844

Merged
neilalexander merged 2 commits intomainfrom
fix-7841
Feb 18, 2026
Merged

Fix crasher on callout for a leafnode connection with hand-rolled creds that are mistmatched#7844
neilalexander merged 2 commits intomainfrom
fix-7841

Conversation

@aricart
Copy link
Copy Markdown
Member

@aricart aricart commented Feb 17, 2026

this is leafnode scenario only with bad creds rolled for the leafnode (jwt and nkey don't match so user cannot be placed into the account as the user validation fails, but the callout is delegated for verification.

Fixes #7841

Signed-off-by: Your Name alberto@synadia.com

…ds that are mistmatched

Signed-off-by: Alberto Ricart <alberto@synadia.com>
@aricart aricart requested a review from a team as a code owner February 17, 2026 18:35
Copy link
Copy Markdown
Member

@derekcollison derekcollison left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - One nit to put full issue URL in the comment.

acc = c.acc
}
if acc == nil {
// FIX for 7841 - hand rolled creds on leafnode became crasher here
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Put full issue URL here..

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed.

Signed-off-by: Alberto Ricart <alberto@synadia.com>
Copy link
Copy Markdown
Member

@derekcollison derekcollison left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Member

@neilalexander neilalexander left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@neilalexander neilalexander merged commit e2feb51 into main Feb 18, 2026
48 checks passed
@neilalexander neilalexander deleted the fix-7841 branch February 18, 2026 09:54
neilalexander added a commit that referenced this pull request Feb 20, 2026
Includes the following:

- #7839
- #7843
- #7824
- #7826
- #7845
- #7844
- #7840
- #7827
- #7846
- #7848
- #7849
- #7855
- #7850
- #7857
- #7856

Signed-off-by: Neil Twigg <neil@nats.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Nats Server Crash when mismatched JWT/Seed is used in decentralized auth callout

3 participants