mirror of
https://gitee.com/milvus-io/milvus.git
synced 2026-01-07 19:31:51 +08:00
67 lines
2.0 KiB
C++
67 lines
2.0 KiB
C++
// Copyright (C) 2019-2020 Zilliz. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance
|
|
// with the License. You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software distributed under the License
|
|
// is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
|
|
// or implied. See the License for the specific language governing permissions and limitations under the License
|
|
|
|
/**
|
|
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
* SPDX-License-Identifier: Apache-2.0.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <aws/core/Core_EXPORTS.h>
|
|
#include <aws/core/utils/DateTime.h>
|
|
#include <aws/core/utils/memory/stl/AWSString.h>
|
|
#include <aws/core/internal/AWSHttpResourceClient.h>
|
|
#include <aws/core/auth/AWSCredentialsProvider.h>
|
|
#include <memory>
|
|
#include "AliyunSTSClient.h"
|
|
|
|
namespace Aws {
|
|
namespace Auth {
|
|
/**
|
|
* To support retrieving credentials of STS AssumeRole with web identity.
|
|
* Note that STS accepts request with protocol of queryxml. Calling GetAWSCredentials() will trigger (if expired)
|
|
* a query request using AWSHttpResourceClient under the hood.
|
|
*/
|
|
class AWS_CORE_API AliyunSTSAssumeRoleWebIdentityCredentialsProvider
|
|
: public AWSCredentialsProvider {
|
|
public:
|
|
AliyunSTSAssumeRoleWebIdentityCredentialsProvider();
|
|
|
|
/**
|
|
* Retrieves the credentials if found, otherwise returns empty credential set.
|
|
*/
|
|
AWSCredentials
|
|
GetAWSCredentials() override;
|
|
|
|
protected:
|
|
void
|
|
Reload() override;
|
|
|
|
private:
|
|
void
|
|
RefreshIfExpired();
|
|
Aws::String
|
|
CalculateQueryString() const;
|
|
|
|
Aws::UniquePtr<Aws::Internal::AliyunSTSCredentialsClient> m_client;
|
|
Aws::Auth::AWSCredentials m_credentials;
|
|
Aws::String m_roleArn;
|
|
Aws::String m_tokenFile;
|
|
Aws::String m_sessionName;
|
|
Aws::String m_token;
|
|
bool m_initialized;
|
|
bool
|
|
ExpiresSoon() const;
|
|
};
|
|
} // namespace Auth
|
|
} // namespace Aws
|