Empty cluster_traffic value should default to "system" in JWT

Signed-off-by: Neil Twigg <neil@nats.io>
nats-io · Sep 17, 2024 · ff5c337 · ff5c337
1 parent cec21b7
commit ff5c337
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/server/accounts.go b/server/accounts.go
@@ -3687,7 +3687,7 @@ func (s *Server) updateAccountClaimsWithRefresh(a *Account, ac *jwt.AccountClaim
 		a.mu.Lock()
 		previous := ajs.nrgAccount
 		switch tokens := strings.SplitN(ac.ClusterTraffic, ":", 2); tokens[0] {
-		case "system":
+		case "system", _EMPTY_:
 			a.js.nrgAccount = _EMPTY_
 		case "owner":
 			a.js.nrgAccount = a.Name

diff --git a/server/opts.go b/server/opts.go
@@ -2147,7 +2147,7 @@ func parseJetStreamForAccount(v any, acc *Account, errors *[]error) error {
 					return &configErr{tk, fmt.Sprintf("Expected either 'system' or 'account' string value for %q, got %v", mk, mv)}
 				}
 				switch tokens := strings.SplitN(vv, ":", 2); strings.ToLower(tokens[0]) {
-				case "system":
+				case "system", _EMPTY_:
 					acc.js.nrgAccount = _EMPTY_
 				case "owner":
 					acc.js.nrgAccount = acc.Name