Merge pull request #117 from cyberark/no-host-login

Avoid calling login for host

Author: szh

CHANGELOG.md

@@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Changed
+- Avoid calling `login` for host
+  [cyberark/conjur-api-java#117](https://github.com/cyberark/conjur-api-java/pull/117)
 
 ## [3.0.4] - 2023-02-27
 

src/main/java/com/cyberark/conjur/api/clients/AuthnClient.java

@@ -45,7 +45,10 @@ public AuthnClient(final Credentials credentials,
 
         // replacing the password with an API key
         this.apiKey = credentials.getPassword();
-        if(credentials.getAuthnUrl().endsWith("/authn")){
+        // login() exchanges a user's password for an API key. This is not relevant for hosts since they
+        // don't have passwords (only API keys). It's also only relevant for standard API key authentication
+        // (authn), not other authentication methods.
+        if(credentials.getAuthnUrl().endsWith("/authn") && !credentials.getUsername().startsWith("host/")){
             this.apiKey = login();
         }
     }