3 Commits

Author	SHA1	Message	Date
Harshavardhana	7e879a45d5	Add policy claim support for JWT (#6660) ... This way temporary credentials can use canned policies on the server without configuring OPA.	2018-10-29 11:08:59 -07:00
Harshavardhana	23b166b318	Remove applying custom policies with STS access keys (#6626) ... Move away from allowing custom policies, all policies in STS come from OPA otherwise they fail.	2018-10-15 12:44:03 -07:00
Harshavardhana	54ae364def	Introduce STS client grants API and OPA policy integration (#6168) ... This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks	2018-10-09 14:00:01 -07:00