Crt profile credentials provider #3721
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,200 @@ | ||
| /** | ||
| * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. | ||
| * SPDX-License-Identifier: Apache-2.0. | ||
| */ | ||
|
|
||
| #include <aws/core/Aws.h> | ||
| #include <aws/core/auth/AWSCredentialsProviderChain.h> | ||
| #include <aws/core/platform/Environment.h> | ||
| #include <aws/core/utils/FileSystemUtils.h> | ||
| #include <aws/testing/AwsTestHelpers.h> | ||
| #include <aws/testing/platform/PlatformTesting.h> | ||
| #include <gtest/gtest.h> | ||
|
|
||
| using namespace Aws; | ||
| using namespace Aws::Auth; | ||
| using namespace Aws::Environment; | ||
| using namespace Aws::Utils; | ||
|
|
||
| /** | ||
| * Integration tests for DefaultAWSCredentialsProviderChain | ||
| * These tests use real credentials from the environment (e.g., via ada) | ||
| */ | ||
| class DefaultCredentialsProviderChainIntegrationTest : public testing::Test | ||
| { | ||
| protected: | ||
| DefaultCredentialsProviderChainIntegrationTest() | ||
| { | ||
| m_options.loggingOptions.logLevel = Aws::Utils::Logging::LogLevel::Debug; | ||
|
Contributor
There was a problem hiding this comment. we really aught to make this a official construct, i write this code at least times a week. not here for this PR, but something we should about. might help people use the SDK correctly better |
||
| InitAPI(m_options); | ||
| } | ||
|
|
||
| ~DefaultCredentialsProviderChainIntegrationTest() | ||
| { | ||
| ShutdownAPI(m_options); | ||
| } | ||
|
|
||
| SDKOptions m_options; | ||
| }; | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainResolvesCredentialsFromEnvironment) | ||
| { | ||
| // This test assumes AWS credentials are set via environment (e.g., ada) | ||
| DefaultAWSCredentialsProviderChain chain; | ||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| // Should get valid credentials from environment | ||
| EXPECT_FALSE(creds.IsEmpty()); | ||
| EXPECT_FALSE(creds.GetAWSAccessKeyId().empty()); | ||
| EXPECT_FALSE(creds.GetAWSSecretKey().empty()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainCachesCredentials) | ||
| { | ||
| DefaultAWSCredentialsProviderChain chain; | ||
|
|
||
| // First call | ||
| auto creds1 = chain.GetAWSCredentials(); | ||
| EXPECT_FALSE(creds1.IsEmpty()); | ||
|
|
||
| // Second call should return same cached credentials | ||
| auto creds2 = chain.GetAWSCredentials(); | ||
| EXPECT_FALSE(creds2.IsEmpty()); | ||
| EXPECT_EQ(creds1.GetAWSAccessKeyId(), creds2.GetAWSAccessKeyId()); | ||
| EXPECT_EQ(creds1.GetAWSSecretKey(), creds2.GetAWSSecretKey()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainWithCustomProfile) | ||
| { | ||
| // Create temporary credentials file with custom profile | ||
| TempFile credsFile{std::ios_base::out | std::ios_base::trunc}; | ||
| credsFile << "[custom-test-profile]\n"; | ||
| credsFile << "aws_access_key_id = AKIAIOSFODNN7EXAMPLE\n"; | ||
| credsFile << "aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\n"; | ||
| credsFile.close(); | ||
|
|
||
| // Create temporary config file | ||
| TempFile configFile{std::ios_base::out | std::ios_base::trunc}; | ||
| configFile << "[profile custom-test-profile]\n"; | ||
| configFile << "region = us-west-2\n"; | ||
| configFile.close(); | ||
|
|
||
| const EnvironmentRAII environmentRAII{{ | ||
| {"AWS_SHARED_CREDENTIALS_FILE", credsFile.GetFileName()}, | ||
| {"AWS_CONFIG_FILE", configFile.GetFileName()}, | ||
| {"AWS_ACCESS_KEY_ID", ""}, | ||
| {"AWS_SECRET_ACCESS_KEY", ""}, | ||
| }}; | ||
|
|
||
| Aws::Config::ReloadCachedConfigFile(); | ||
|
|
||
| Client::ClientConfiguration::CredentialProviderConfiguration config; | ||
| config.profile = "custom-test-profile"; | ||
| DefaultAWSCredentialsProviderChain chain(config); | ||
|
|
||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| EXPECT_STREQ("AKIAIOSFODNN7EXAMPLE", creds.GetAWSAccessKeyId().c_str()); | ||
| EXPECT_STREQ("wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY", creds.GetAWSSecretKey().c_str()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainWithProcessCredentials) | ||
| { | ||
| // Create temporary config file with credential_process | ||
| TempFile configFile{std::ios_base::out | std::ios_base::trunc}; | ||
| configFile << "[default]\n"; | ||
| configFile << "credential_process = echo '{\"Version\": 1, \"AccessKeyId\": \"AKIAPROCESSEXAMPLE\", \"SecretAccessKey\": \"ProcessSecretKeyExample\"}'\n"; | ||
| configFile.close(); | ||
|
|
||
| // Create empty credentials file to override ~/.aws/credentials | ||
| TempFile credsFile{std::ios_base::out | std::ios_base::trunc}; | ||
| credsFile << "[default]\n"; | ||
| credsFile.close(); | ||
|
|
||
| const EnvironmentRAII environmentRAII{{ | ||
| {"AWS_CONFIG_FILE", configFile.GetFileName()}, | ||
| {"AWS_SHARED_CREDENTIALS_FILE", credsFile.GetFileName()}, | ||
| {"AWS_ACCESS_KEY_ID", ""}, | ||
| {"AWS_SECRET_ACCESS_KEY", ""}, | ||
| {"AWS_SESSION_TOKEN", ""}, | ||
| {"AWS_EC2_METADATA_DISABLED", "true"}, | ||
| }}; | ||
|
|
||
| Aws::Config::ReloadCachedConfigFile(); | ||
|
|
||
| DefaultAWSCredentialsProviderChain chain; | ||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| EXPECT_STREQ("AKIAPROCESSEXAMPLE", creds.GetAWSAccessKeyId().c_str()); | ||
| EXPECT_STREQ("ProcessSecretKeyExample", creds.GetAWSSecretKey().c_str()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainPrecedenceEnvironmentOverProfile) | ||
| { | ||
| // Create temporary credentials file | ||
| TempFile credsFile{std::ios_base::out | std::ios_base::trunc}; | ||
| credsFile << "[default]\n"; | ||
| credsFile << "aws_access_key_id = AKIAPROFILEEXAMPLE\n"; | ||
| credsFile << "aws_secret_access_key = ProfileSecretKeyExample\n"; | ||
| credsFile.close(); | ||
|
|
||
| const EnvironmentRAII environmentRAII{{ | ||
| {"AWS_SHARED_CREDENTIALS_FILE", credsFile.GetFileName()}, | ||
| {"AWS_ACCESS_KEY_ID", "AKIAENVEXAMPLE"}, | ||
| {"AWS_SECRET_ACCESS_KEY", "EnvSecretKeyExample"}, | ||
| }}; | ||
|
|
||
| Aws::Config::ReloadCachedConfigFile(); | ||
|
|
||
| DefaultAWSCredentialsProviderChain chain; | ||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| // Environment should take precedence | ||
| EXPECT_STREQ("AKIAENVEXAMPLE", creds.GetAWSAccessKeyId().c_str()); | ||
| EXPECT_STREQ("EnvSecretKeyExample", creds.GetAWSSecretKey().c_str()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainHandlesSessionToken) | ||
| { | ||
| // Create temporary credentials file with session token | ||
| TempFile credsFile{std::ios_base::out | std::ios_base::trunc}; | ||
| credsFile << "[default]\n"; | ||
| credsFile << "aws_access_key_id = ASIATEMPORARYEXAMPLE\n"; | ||
| credsFile << "aws_secret_access_key = TempSecretKeyExample\n"; | ||
| credsFile << "aws_session_token = TempSessionTokenExample123\n"; | ||
| credsFile.close(); | ||
|
|
||
| const EnvironmentRAII environmentRAII{{ | ||
| {"AWS_SHARED_CREDENTIALS_FILE", credsFile.GetFileName()}, | ||
| {"AWS_ACCESS_KEY_ID", ""}, | ||
| {"AWS_SECRET_ACCESS_KEY", ""}, | ||
| {"AWS_EC2_METADATA_DISABLED", "true"}, | ||
| }}; | ||
|
|
||
| Aws::Config::ReloadCachedConfigFile(); | ||
|
|
||
| DefaultAWSCredentialsProviderChain chain; | ||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| EXPECT_STREQ("ASIATEMPORARYEXAMPLE", creds.GetAWSAccessKeyId().c_str()); | ||
| EXPECT_STREQ("TempSecretKeyExample", creds.GetAWSSecretKey().c_str()); | ||
| EXPECT_STREQ("TempSessionTokenExample123", creds.GetSessionToken().c_str()); | ||
| } | ||
|
|
||
| TEST_F(DefaultCredentialsProviderChainIntegrationTest, ChainReturnsEmptyWhenNoCredentialsAvailable) | ||
| { | ||
| const EnvironmentRAII environmentRAII{{ | ||
| {"AWS_ACCESS_KEY_ID", ""}, | ||
| {"AWS_SECRET_ACCESS_KEY", ""}, | ||
| {"AWS_SHARED_CREDENTIALS_FILE", "/nonexistent/credentials"}, | ||
| {"AWS_CONFIG_FILE", "/nonexistent/config"}, | ||
| {"AWS_EC2_METADATA_DISABLED", "true"}, | ||
| }}; | ||
|
|
||
| Aws::Config::ReloadCachedConfigFile(); | ||
|
|
||
| DefaultAWSCredentialsProviderChain chain; | ||
| auto creds = chain.GetAWSCredentials(); | ||
|
|
||
| EXPECT_TRUE(creds.IsEmpty()); | ||
| } | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: no actual change in file so lets from it from the PR
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
alright