This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks
Showing the changes to cmd/api-errors.go (1 of 76 files). Show all
Unified · Split
| @@ -192,6 +192,7 @@ const ( · 191 unmodified lines | ||
| 192 | 192 | ErrAdminConfigNoQuorum |
| 193 | 193 | ErrAdminConfigTooLarge |
| 194 | 194 | ErrAdminConfigBadJSON |
| 195 | + ErrAdminConfigDuplicateKeys | |
| 195 | 196 | ErrAdminCredentialsMismatch |
| 196 | 197 | ErrInsecureClientRequest |
| 197 | 198 | ErrObjectTampered |
| @@ -881,11 +882,16 @@ var errorCodeResponse = map[APIErrorCode]APIError{ · 683 unmodified lines | ||
| 881 | 882 | ErrAdminConfigTooLarge: { |
| 882 | 883 | Code: "XMinioAdminConfigTooLarge", |
| 883 | 884 | Description: fmt.Sprintf("Configuration data provided exceeds the allowed maximum of %d bytes", |
| 884 | − maxConfigJSONSize), | |
| 885 | + maxEConfigJSONSize), | |
| 885 | 886 | HTTPStatusCode: http.StatusBadRequest, |
| 886 | 887 | }, |
| 887 | 888 | ErrAdminConfigBadJSON: { |
| 888 | 889 | Code: "XMinioAdminConfigBadJSON", |
| 890 | + Description: "JSON configuration provided is of incorrect format", | |
| 891 | + HTTPStatusCode: http.StatusBadRequest, | |
| 892 | + }, | |
| 893 | + ErrAdminConfigDuplicateKeys: { | |
| 894 | + Code: "XMinioAdminConfigDuplicateKeys", | |
| 889 | 895 | Description: "JSON configuration provided has objects with duplicate keys", |
| 890 | 896 | HTTPStatusCode: http.StatusBadRequest, |
| 891 | 897 | }, |