seaweedfs

mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-09-08 23:50:43 +02:00

Files

T

Chris Lu 23d424248d sts: session duration no longer clamped to the web identity token exp (#11048 )

* sts: session duration no longer clamped to the web identity token exp

The assumed-role session lifetime is governed by DurationSeconds and the
configured tokenDuration/maxSessionLength, matching AWS. Clamping to the
already-verified token's exp made short-lived id_tokens (GitLab issues
~2-minute ones) yield unusable sessions regardless of configuration.

Claude-Session: https://claude.ai/code/session_01XH7iM88ZqWMEvsLB8tkWPQ

* sts: cover session duration against short-lived web identity tokens

The mock OIDC provider now carries the token exp through to the identity
like the real provider, so the integration test would catch the clamp.

Claude-Session: https://claude.ai/code/session_01XH7iM88ZqWMEvsLB8tkWPQ

2026-08-31 10:22:06 -07:00

integration

sts: session duration no longer clamped to the web identity token exp (#11048 )

2026-08-31 10:22:06 -07:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003 )

2026-01-12 10:45:24 -08:00

oidc

sts: session duration no longer clamped to the web identity token exp (#11048 )

2026-08-31 10:22:06 -07:00

policy

Fixes from the review of the admin bucket policy UI (#10907 )