From 5839076b75fef400750efeb985fdee62a9883329 Mon Sep 17 00:00:00 2001
From: Andrew Martinez <andrew.p.martinez@gmail.com>
Date: Thu, 9 May 2024 14:43:13 -0400
Subject: [PATCH] fixes openziti/ziti#2032 auto ca enrollment fails with bad
 request

---
 ziti/token.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/ziti/token.go b/ziti/token.go
index 75720521..d0cb7705 100644
--- a/ziti/token.go
+++ b/ziti/token.go
@@ -25,6 +25,8 @@ import (
 
 var EnrollUrl, _ = url.Parse("/edge/client/v1/enroll")
 
+const EnrollmentMethodCa = "ca"
+
 type Versions struct {
 	Api           string `json:"api"`
 	EnrollmentApi string `json:"enrollmentApi"`
@@ -48,7 +50,11 @@ func (t *EnrollmentClaims) EnrolmentUrl() string {
 
 	query := enrollmentUrl.Query()
 	query.Add("method", t.EnrollmentMethod)
-	query.Add("token", t.ID)
+
+	if t.EnrollmentMethod != EnrollmentMethodCa {
+		query.Add("token", t.ID)
+	}
+
 	enrollmentUrl.RawQuery = query.Encode()
 
 	return enrollmentUrl.String()