seaweedfs

mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-09-13 18:10:49 +02:00

Files

T

Chris Lu 5fc2fefb4a Fix STS credential validation by providing default configuration

When no STS configuration is provided in the IAM config file, the STS
service was not being initialized, causing temporary credentials from
AssumeRole to be rejected with "InvalidAccessKeyId" errors.

This commit adds a DefaultSTSConfig() function that provides sensible
defaults (1h token duration, 12h max session, secure random signing key)
and updates the IAM manager to use these defaults when no explicit STS
configuration is provided.

Changes:
- Add DefaultSTSConfig() with secure random signing key generation
- Update IAM manager to use default config when config.STS is nil
- Add tests verifying initialization with and without explicit config

Fixes #8312

2026-02-12 13:36:33 -08:00

advanced_policy_test.go

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003 )

2026-01-12 10:45:24 -08:00

cached_role_store_generic.go

S3 API: Advanced IAM System (#7160 )

2025-08-30 11:15:48 -07:00

iam_integration_test.go

Fix IAM OIDC role mapping and OIDC claims in trust policy (#8104 )

2026-01-23 21:35:26 -08:00

iam_manager_sts_test.go

Fix STS credential validation by providing default configuration