maxmustermann/minio
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
minio/pkg/iam/validator
History
Harshavardhana 54ae364def Introduce STS client grants API and OPA policy integration (#6168) 
This PR introduces two new features

- AWS STS compatible STS API named AssumeRoleWithClientGrants

```
POST /?Action=AssumeRoleWithClientGrants&Token=<jwt>
```

This API endpoint returns temporary access credentials, access
tokens signature types supported by this API

  - RSA keys
  - ECDSA keys

Fetches the required public key from the JWKS endpoints, provides
them as rsa or ecdsa public keys.

- External policy engine support, in this case OPA policy engine

- Credentials are stored on disks
2018-10-09 14:00:01 -07:00
..
jwks.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00
jwks_test.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00
jwt.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00
jwt_test.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00
validators.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00
validators_test.go Introduce STS client grants API and OPA policy integration (#6168) 2018-10-09 14:00:01 -07:00