Describe the Bug
Hi colleagues, I am trying to implement x509_attested for Destination Service in my microservice but getting the error "Error during request to remote service: Failed to load destination. Caused by: Could not fetch client credentials token for service of type \"destination\". Caused by: Could not fetch client credentials token for service of type destination: Service credentials contain neither a client secret nor certificate based authentication information.'". When I contacted CAP colleagues, they mentioned CAP doesn't parse binding credentials, it delegates entirely to the SAP Cloud SDK. Also, that @sap/xssec only recognizes clientsecret or key+certificate and an x509_attested binding has neither, so the type isn't handled. Is this a bug planned to be address by SAP Cloud SDK?
Steps to Reproduce
Destination Service with x509_attested binding for a CAP Node.js microservice.
Expected Behavior
Should be able to use x509_attested and application should work.
Screenshots
No response
Used Versions
- Node version via
node -v: 24.16.0
- NPM version via `npm -v: 10.9.7
- SAP Cloud SDK version: 4.7.0
- For CAP users, CAP version: 9.9.2
Code Examples
Service instance binding in MTA file:
- name: destination-service
parameters:
config:
xsuaa:
credential-type: x509_attested
x509:
app-identifier: <name-of-the-app>
Log File
"Error during request to remote service: Failed to load destination. Caused by: Could not fetch client credentials token for service of type "destination". Caused by: Could not fetch client credentials token for service of type destination: Service credentials contain neither a client secret nor certificate based authentication information.'""
Affected Development Phase
Production
Impact
Impaired
Timeline
Issue impacts automated rotation of certificates.
Additional Context
No response
Describe the Bug
Hi colleagues, I am trying to implement x509_attested for Destination Service in my microservice but getting the error
"Error during request to remote service: Failed to load destination. Caused by: Could not fetch client credentials token for service of type \"destination\". Caused by: Could not fetch client credentials token for service of type destination: Service credentials contain neither a client secret nor certificate based authentication information.'". When I contacted CAP colleagues, they mentioned CAP doesn't parse binding credentials, it delegates entirely to the SAP Cloud SDK. Also, that @sap/xssec only recognizes clientsecret or key+certificate and an x509_attested binding has neither, so the type isn't handled. Is this a bug planned to be address by SAP Cloud SDK?Steps to Reproduce
Destination Service with x509_attested binding for a CAP Node.js microservice.
Expected Behavior
Should be able to use x509_attested and application should work.
Screenshots
No response
Used Versions
node -v: 24.16.0Code Examples
Service instance binding in MTA file:
Log File
"Error during request to remote service: Failed to load destination. Caused by: Could not fetch client credentials token for service of type "destination". Caused by: Could not fetch client credentials token for service of type destination: Service credentials contain neither a client secret nor certificate based authentication information.'""
Affected Development Phase
Production
Impact
Impaired
Timeline
Issue impacts automated rotation of certificates.
Additional Context
No response