Only support child tokens for AppRole credentials currently

Author: saville

src/main/java/com/datapipe/jenkins/vault/credentials/AbstractVaultTokenCredentialWithExpiration.java

@@ -43,13 +43,21 @@ protected Auth getVaultAuth(@NonNull Vault vault) {
     }
 
     /**
-     * Retrieves a new token with specific policies if a list of requested policies is provided.
+     * Should be implemented by classes that support creating child tokens.
+     * @return true if child tokens can be used, false otherwise
+     */
+    protected boolean supportsChildTokens() {
+        return false;
+    }
+
+    /**
+     * Retrieves a new child token with specific policies if a list of requested policies is provided.
      * @param vault the vault instance
      * @param policies the policies list
      * @return the new token or null if no policies are defined
      */
-    protected String getTokenWithPolicies(Vault vault, List<String> policies) {
-        if (policies == null || policies.isEmpty()) {
+    protected String getChildToken(Vault vault, List<String> policies) {
+        if (!supportsChildTokens() || policies == null || policies.isEmpty()) {
             return null;
         }
         Auth auth = getVaultAuth(vault);
@@ -90,7 +98,7 @@ public Vault authorizeWithVault(VaultConfig config, List<String> policies) {
             config.token(tokenCache.get(cacheKey));
 
             // After current token is configured, try to retrieve a new child token with limited policies
-            String childToken = getTokenWithPolicies(vault, policies);
+            String childToken = getChildToken(vault, policies);
             if (childToken != null) {
                 // A new token was generated, put it in the cache and configure vault
                 tokenCache.put(cacheKey, childToken);

src/main/java/com/datapipe/jenkins/vault/credentials/VaultAppRoleCredential.java

@@ -47,6 +47,11 @@ public String getPath() {
         return path;
     }
 
+    @Override
+    protected boolean supportsChildTokens() {
+        return true;
+    }
+
     @Override
     public String getToken(Auth auth) {
         try {

src/test/java/com/datapipe/jenkins/vault/credentials/AbstractVaultTokenCredentialWithExpirationTest.java

@@ -160,6 +160,11 @@ protected ExampleVaultTokenCredentialWithExpiration(Vault vault) {
             this.vault = vault;
         }
 
+        @Override
+        protected boolean supportsChildTokens() {
+            return true;
+        }
+
         @Override
         protected Vault getVault(VaultConfig config) {
             return vault;