From feec44572dd2de8cf2f0298efcda438bdfb53bd4 Mon Sep 17 00:00:00 2001
From: Derek Nola <derek.nola@suse.com>
Date: Mon, 11 Oct 2021 10:00:22 -0700
Subject: [PATCH] Improve error message when using a "K10" prefixed token
 (#4180)

* Add new error message with a K10 prefixed secret token

Signed-off-by: dereknola <derek.nola@suse.com>
---
 pkg/cluster/storage.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/cluster/storage.go b/pkg/cluster/storage.go
index 7827be71c2..ff265974e4 100644
--- a/pkg/cluster/storage.go
+++ b/pkg/cluster/storage.go
@@ -201,7 +201,7 @@ func readTokenFromFile(serverToken, certs, dataDir string) (string, error) {
 func normalizeToken(token string) (string, error) {
 	_, password, ok := clientaccess.ParseUsernamePassword(token)
 	if !ok {
-		return password, errors.New("failed to normalize token")
+		return password, errors.New("failed to normalize token; must be in format K10<CA-HASH>::<USERNAME>:<PASSWORD> or <PASSWORD>")
 	}
 
 	return password, nil