minio

maxmustermann/minio

Fork 0

Commit graph

Author	SHA1	Message	Date
Harshavardhana	7e879a45d5	Add policy claim support for JWT (#6660 ) This way temporary credentials can use canned policies on the server without configuring OPA.	2018-10-29 11:08:59 -07:00
Harshavardhana	23b166b318	Remove applying custom policies with STS access keys (#6626 ) Move away from allowing custom policies, all policies in STS come from OPA otherwise they fail.	2018-10-15 12:44:03 -07:00
Harshavardhana	54ae364def	Introduce STS client grants API and OPA policy integration (#6168 ) This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks	2018-10-09 14:00:01 -07:00

Author

SHA1

Message

Date

Harshavardhana

7e879a45d5

Add policy claim support for JWT (#6660 )

This way temporary credentials can use canned
policies on the server without configuring OPA.

2018-10-29 11:08:59 -07:00

Harshavardhana

23b166b318

Remove applying custom policies with STS access keys (#6626 )

Move away from allowing custom policies, all policies in
STS come from OPA otherwise they fail.

2018-10-15 12:44:03 -07:00

Harshavardhana

54ae364def

Introduce STS client grants API and OPA policy integration (#6168 )

This PR introduces two new features

- AWS STS compatible STS API named AssumeRoleWithClientGrants

```
POST /?Action=AssumeRoleWithClientGrants&Token=<jwt>
```

This API endpoint returns temporary access credentials, access
tokens signature types supported by this API

  - RSA keys
  - ECDSA keys

Fetches the required public key from the JWKS endpoints, provides
them as rsa or ecdsa public keys.

- External policy engine support, in this case OPA policy engine

- Credentials are stored on disks

2018-10-09 14:00:01 -07:00

3 commits