credentialexchange

Jan 31, 2024

Changes in this version

+ func MergeRoleChain(role string, roleChain []string, insertRoleIntoChain bool) []string

Nov 3, 2023

Changes in this version

+ var ErrFailedToClearSecretStorage = errors.New("failed to clear secret storage on OS")

+ var ErrUnmarshalCred = errors.New("unable to unmarshal credential from string")

+ func InsertRoleIntoChain(role string, roleChain []string) []string

type AWSCredentials

+ func AssumeRoleInChain(ctx context.Context, baseCreds *AWSCredentials, svc AuthSamlApi, ...) (*AWSCredentials, error)

+ func (a *AWSCredentials) FromRoleCredString(cred string) (*AWSCredentials, error)

type AuthSamlApi

+ AssumeRole func(ctx context.Context, params *sts.AssumeRoleInput, optFns ...func(*sts.Options)) (*sts.AssumeRoleOutput, error)

type BaseConfig

+ RoleChain []string

+ Username string

+ type CredentialConfig struct

+ AcsUrl string

+ BaseConfig BaseConfig

+ Duration int

+ IsSso bool

+ PrincipalArn string

+ ProviderUrl string

+ SsoCredFedEndpoint string

+ SsoRegion string

+ SsoRole string

+ SsoUserEndpoint string

Nov 1, 2023

Changes in this version

+ const AWS_ROLE_ARN

+ const INI_CONF_SECTION

+ const SELF_NAME

+ const WEB_ID_TOKEN_VAR

+ var ErrCannotLockDir = errors.New("unable to create lock dir")

+ var ErrConfigFailure = errors.New("config error")

+ var ErrMissingEnvVar = errors.New("missing env var")

+ var ErrSectionNotFound = errors.New("section not found")

+ var ErrTokenExpired = errors.New("token expired")

+ var ErrUnableAssume = errors.New("unable to assume")

+ var ErrUnableSessionCreate = errors.New("unable to create a sesion")

+ var ErrUnableToAcquireLock = errors.New("cannot acquire lock")

+ var ErrUnableToLoadAWSCred = errors.New("unable to laod AWS credential")

+ var ErrUnableToLoadDueToLock = errors.New("cannot load secret due to lock error")

+ var ErrUnableToRetrieveSections = errors.New("unable to retrieve sections")

+ var ErrUnmarshallingSecret = errors.New("cannot unmarshal secret")

+ func ConfigIniFile(basePath string) string

+ func GetAllIniSections() ([]string, error)

+ func GetWebIdTokenFileContents() (string, error)

+ func HomeDir() string

+ func IsValid(ctx context.Context, currentCreds *AWSCredentials, reloadBeforeTime int, ...) (bool, error)

+ func KeyRoleConverter(key string) string

+ func ReloadBeforeExpiry(expiry time.Time, reloadBeforeSeconds int) bool

+ func RoleKeyConverter(role string) string

+ func SessionName(username, selfName string) string

+ func SetCredentials(creds *AWSCredentials, config SamlConfig) error

+ func WriteIniSection(role string) error

+ type AWSCredentials struct

+ AWSAccessKey string

+ AWSSecretKey string

+ AWSSessionToken string

+ Expires time.Time

+ PrincipalARN string

+ Version int

+ func AssumeRoleWithCreds(ctx context.Context, currentCreds *AWSCredentials, svc authAssumeRoleCredsApi, ...) (*AWSCredentials, error)

+ func LoginAwsWebToken(ctx context.Context, username string, svc authWebTokenApi) (*AWSCredentials, error)

+ func LoginStsSaml(ctx context.Context, samlResponse string, role AWSRole, svc AuthSamlApi) (*AWSCredentials, error)

+ type AWSRole struct

+ Duration int

+ Name string

+ PrincipalARN string

+ RoleARN string

+ type AWSRoleConfig struct

+ Name string

+ PrincipalARN string

+ RoleARN string

+ type AuthSamlApi interface

+ AssumeRoleWithSAML func(ctx context.Context, params *sts.AssumeRoleWithSAMLInput, ...) (*sts.AssumeRoleWithSAMLOutput, error)

+ GetCallerIdentity func(ctx context.Context, params *sts.GetCallerIdentityInput, ...) (*sts.GetCallerIdentityOutput, error)

+ type BaseConfig struct

+ CfgSectionName string

+ DoKillHangingProcess bool

+ ReloadBeforeTime int

+ Role string

+ StoreInProfile bool

+ type SamlConfig struct

+ AcsUrl string

+ BaseConfig BaseConfig

+ Duration int

+ PrincipalArn string

+ ProviderUrl string

+ type SecretStore struct

+ AWSCredJson string

+ AWSCredentials *AWSCredentials

+ func NewSecretStore(roleArn, namer, lockDir string) (*SecretStore, error)

+ func (s *SecretStore) AWSCredential() (*AWSCredentials, error)

+ func (s *SecretStore) Clear() error

+ func (s *SecretStore) ClearAll() error

+ func (s *SecretStore) SaveAWSCredential(cred *AWSCredentials) error

+ func (s *SecretStore) WithKeyring(keyring keyring.Keyring) *SecretStore

+ func (s *SecretStore) WithLocker(locker lockgate.Locker) *SecretStore