Introduce STS client grants API and OPA policy integration (#6168)

Browse Source

This PR introduces two new features

- AWS STS compatible STS API named AssumeRoleWithClientGrants

```
POST /?Action=AssumeRoleWithClientGrants&Token=<jwt>
```

This API endpoint returns temporary access credentials, access
tokens signature types supported by this API

  - RSA keys
  - ECDSA keys

Fetches the required public key from the JWKS endpoints, provides
them as rsa or ecdsa public keys.

- External policy engine support, in this case OPA policy engine

- Credentials are stored on disks

...

This commit is contained in:

Harshavardhana

2018-10-09 14:00:01 -07:00

committed by kannappanr

parent 16a100b597

commit 54ae364def

76 changed files with 7249 additions and 713 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

pkg/iam/policy/policy_test.go

+1032

File diff suppressed because it is too large Load Diff