This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks
Showing the changes to cmd/api-errors.go (1 of 76 files). Show all
Unified · Split
| @@ -192,6 +192,7 @@ const ( · 191 unmodified lines | |||
| 192 | ErrAdminConfigNoQuorum | 192 | ErrAdminConfigNoQuorum |
| 193 | ErrAdminConfigTooLarge | 193 | ErrAdminConfigTooLarge |
| 194 | ErrAdminConfigBadJSON | 194 | ErrAdminConfigBadJSON |
| 195 | ErrAdminConfigDuplicateKeys | ||
| 195 | ErrAdminCredentialsMismatch | 196 | ErrAdminCredentialsMismatch |
| 196 | ErrInsecureClientRequest | 197 | ErrInsecureClientRequest |
| 197 | ErrObjectTampered | 198 | ErrObjectTampered |
| @@ -881,11 +882,16 @@ var errorCodeResponse = map[APIErrorCode]APIError{ · 683 unmodified lines | |||
| 881 | ErrAdminConfigTooLarge: { | 882 | ErrAdminConfigTooLarge: { |
| 882 | Code: "XMinioAdminConfigTooLarge", | 883 | Code: "XMinioAdminConfigTooLarge", |
| 883 | Description: fmt.Sprintf("Configuration data provided exceeds the allowed maximum of %d bytes", | 884 | Description: fmt.Sprintf("Configuration data provided exceeds the allowed maximum of %d bytes", |
| 884 | maxConfigJSONSize), | 885 | maxEConfigJSONSize), |
| 885 | HTTPStatusCode: http.StatusBadRequest, | 886 | HTTPStatusCode: http.StatusBadRequest, |
| 886 | }, | 887 | }, |
| 887 | ErrAdminConfigBadJSON: { | 888 | ErrAdminConfigBadJSON: { |
| 888 | Code: "XMinioAdminConfigBadJSON", | 889 | Code: "XMinioAdminConfigBadJSON", |
| 890 | Description: "JSON configuration provided is of incorrect format", | ||
| 891 | HTTPStatusCode: http.StatusBadRequest, | ||
| 892 | }, | ||
| 893 | ErrAdminConfigDuplicateKeys: { | ||
| 894 | Code: "XMinioAdminConfigDuplicateKeys", | ||
| 889 | Description: "JSON configuration provided has objects with duplicate keys", | 895 | Description: "JSON configuration provided has objects with duplicate keys", |
| 890 | HTTPStatusCode: http.StatusBadRequest, | 896 | HTTPStatusCode: http.StatusBadRequest, |
| 891 | }, | 897 | }, |