Skip to content

Commit

Permalink
feat(IamAssumeAuthenticator): add new authentication type for iam ass…
Browse files Browse the repository at this point in the history 
…ume (#287)

This commit introduces the new IamAssumeAuthenticator which will fetch an IAM access token using the IAM getToken operation's "assume" grant type. The resulting access token allows the application to assume the identity of a trusted profile, similar to the "sudo" feature of Linux.

Signed-off-by: Dustin Popp <dustinpopp@ibm.com>
  • Loading branch information
@dpopp07
dpopp07 authored Oct 15, 2024
1 parent 64d9172 commit addebfc
Show file tree
Hide file tree
Showing 27 changed files with 1,502 additions and 237 deletions.
134 changes: 119 additions & 15 deletions .secrets.baseline
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"files": "package-lock.json|^.secrets.baseline$",
"lines": null
},
"generated_at": "2024-08-29T14:54:57Z",
"generated_at": "2024-10-10T20:59:14Z",
"plugins_used": [
{
"name": "AWSKeyDetector"
Expand Down Expand Up @@ -70,23 +70,55 @@
"hashed_secret": "91dfd9ddb4198affc5c194cd8ce6d338fde470e2",
"is_secret": false,
"is_verified": false,
"line_number": 74,
"line_number": 75,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "4f51cde3ac0a5504afa4bc06859b098366592c19",
"is_secret": false,
"is_verified": false,
"line_number": 236,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "e87559ed7decb62d0733ae251ae58d42a55291d8",
"is_secret": false,
"is_verified": false,
"line_number": 238,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "12f4a68ed3d0863e56497c9cdb1e2e4e91d5cb68",
"is_secret": false,
"is_verified": false,
"line_number": 302,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "c837b75d7cd93ef9c2243ca28d6e5156259fd253",
"is_secret": false,
"is_verified": false,
"line_number": 306,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "98635b2eaa2379f28cd6d72a38299f286b81b459",
"is_secret": false,
"is_verified": false,
"line_number": 433,
"line_number": 558,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "47fcf185ee7e15fe05cae31fbe9e4ebe4a06a40d",
"is_secret": false,
"is_verified": false,
"line_number": 543,
"line_number": 668,
"type": "Secret Keyword",
"verified_result": null
}
Expand All @@ -96,7 +128,7 @@
"hashed_secret": "bc2f74c22f98f7b6ffbc2f67453dbfa99bce9a32",
"is_secret": false,
"is_verified": false,
"line_number": 207,
"line_number": 214,
"type": "Secret Keyword",
"verified_result": null
}
Expand All @@ -106,7 +138,7 @@
"hashed_secret": "32e8612d8ca77c7ea8374aa7918db8e5df9252ed",
"is_secret": false,
"is_verified": false,
"line_number": 62,
"line_number": 63,
"type": "Secret Keyword",
"verified_result": null
}
Expand All @@ -116,7 +148,7 @@
"hashed_secret": "fdee05598fdd57ff8e9ae29e92c25a04f2c52fa6",
"is_secret": false,
"is_verified": false,
"line_number": 39,
"line_number": 41,
"type": "Secret Keyword",
"verified_result": null
}
Expand Down Expand Up @@ -159,28 +191,30 @@
"verified_result": null
}
],
"auth/authenticators/iam-request-based-authenticator.ts": [
"auth/authenticators/iam-request-based-authenticator-immutable.ts": [
{
"hashed_secret": "f84f793e0af9ade37c8b927bc5091e98f35bf821",
"is_secret": false,
"is_verified": false,
"line_number": 78,
"line_number": 81,
"type": "Secret Keyword",
"verified_result": null
},
}
],
"auth/authenticators/iam-request-based-authenticator.ts": [
{
"hashed_secret": "45c43fe97e3a06ab078b0eeff6fbe622cc417a25",
"is_secret": false,
"is_verified": false,
"line_number": 89,
"line_number": 34,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "99833a8b234b57b886a9aef1dba187fdd7ceece8",
"is_secret": false,
"is_verified": false,
"line_number": 91,
"line_number": 36,
"type": "Secret Keyword",
"verified_result": null
}
Expand Down Expand Up @@ -239,6 +273,32 @@
"verified_result": null
}
],
"auth/token-managers/iam-assume-token-manager.ts": [
{
"hashed_secret": "2ac283c95478b7355a84b60cd52c1722de2cbc3a",
"is_secret": false,
"is_verified": false,
"line_number": 111,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "faed0c503983c5ab06e19630096d39ebfafef86a",
"is_secret": false,
"is_verified": false,
"line_number": 115,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "45c43fe97e3a06ab078b0eeff6fbe622cc417a25",
"is_secret": false,
"is_verified": false,
"line_number": 168,
"type": "Secret Keyword",
"verified_result": null
}
],
"auth/token-managers/iam-request-based-token-manager.ts": [
{
"hashed_secret": "f84f793e0af9ade37c8b927bc5091e98f35bf821",
Expand Down Expand Up @@ -314,7 +374,7 @@
"hashed_secret": "6947818ac409551f11fbaa78f0ea6391960aa5b8",
"is_secret": false,
"is_verified": false,
"line_number": 50,
"line_number": 51,
"type": "Secret Keyword",
"verified_result": null
}
Expand All @@ -334,7 +394,7 @@
"hashed_secret": "45c43fe97e3a06ab078b0eeff6fbe622cc417a25",
"is_secret": false,
"is_verified": false,
"line_number": 266,
"line_number": 286,
"type": "Secret Keyword",
"verified_result": null
}
Expand Down Expand Up @@ -455,6 +515,50 @@
"verified_result": null
}
],
"test/unit/iam-assume-authenticator.test.js": [
{
"hashed_secret": "9cea46b39bd44a1ef9f3e71bfe9e45c24d3300f6",
"is_secret": false,
"is_verified": false,
"line_number": 33,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "5c5a15a8b0b3e154d77746945e563ba40100681b",
"is_secret": false,
"is_verified": false,
"line_number": 37,
"type": "Secret Keyword",
"verified_result": null
}
],
"test/unit/iam-assume-token-manager.test.js": [
{
"hashed_secret": "a0da30f332dd7b7a26d1c0b4da5437fcd90bf49b",
"is_secret": false,
"is_verified": false,
"line_number": 33,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "9cea46b39bd44a1ef9f3e71bfe9e45c24d3300f6",
"is_secret": false,
"is_verified": false,
"line_number": 150,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "43ed4c2d8375dfc89e3dc8c917f404b9481d355b",
"is_secret": false,
"is_verified": false,
"line_number": 404,
"type": "Secret Keyword",
"verified_result": null
}
],
"test/unit/iam-authenticator.test.js": [
{
"hashed_secret": "257368587362aab7f1180b4a5fe550ec26053e05",
Expand Down Expand Up @@ -582,7 +686,7 @@
}
]
},
"version": "0.13.1+ibm.62.dss",
"version": "0.13.1+ibm.56.dss",
"word_list": {
"file": null,
"hash": null
Expand Down
Loading

0 comments on commit addebfc

Please sign in to comment.