Chris Lu 65f2f1488a iam: test that groups and roles claims reach request-time policy evaluation ...

Drives the full path: AssumeRoleWithWebIdentity embeds the claims in the
session JWT, AuthenticateJWT restores them, and AuthorizeAction evaluates
ForAnyValue:StringEquals on jwt:groups / jwt:roles per bucket. The mock
OIDC provider now carries token claims through and surfaces roles,
matching the real provider.

2026-07-08 01:53:37 -07:00

..

mock_provider_test.go

go fix

2026-02-20 18:42:00 -08:00

mock_provider.go

iam: test that groups and roles claims reach request-time policy evaluation

2026-07-08 01:53:37 -07:00

oidc_discovery_test.go

feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318)

2026-05-04 22:10:49 -07:00

oidc_provider_test.go

iam: add ECDSA support for OIDC token validation (#8166)

2026-01-29 20:03:43 -08:00

oidc_provider.go

iam: surface OIDC groups and roles into the STS session request context for resource-policy ABAC (#10263)

2026-07-08 01:52:39 -07:00

policy_claim_test.go

feat(iam): claim-based policy mode for AssumeRoleWithWebIdentity (Phase 3b) (#9322)

2026-05-05 12:21:55 -07:00

principal_tags_test.go

feat(iam): principal session tags from OIDC tokens (Phase 3a) (#9321)

2026-05-05 11:43:05 -07:00

thumbprint_test.go

feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320)

2026-05-05 11:26:08 -07:00