Skip to content

feat: add support for IAM profiles and credentials management #572

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 61 commits into from
Closed

feat: add support for IAM profiles and credentials management #572

wants to merge 61 commits into from

Conversation

liramon1
Copy link
Contributor

@liramon1 liramon1 commented Jun 17, 2025 •
edited
Loading

Problem

The authentication logic currently lacks support for managing IAM profiles and credentials.

Solution

This feature is split into multiple PRs (in order):

  1. feat(runtimes): add handlers for IAM and STS credentials management #599
  2. refactor: sync types with IAM authentication changes #626
  3. feat: add types for shared credentials file watcher #640
  4. feat: encrypt profile endpoints #650

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

yuxianrz and others added 12 commits June 9, 2025 15:51
@yuxianrz
refactor(runtimes): modify CredentialsProvider Interface
120cfa2
@liramon1
feat(runtimes): add STS credential types to identity management
1153438
@yuxianrz
fix(runtimes): fix credentialsType
54e0469
@liramon1
fix(runtimes): fix iamSessions
3ddab3c
@liramon1
fix(runtimes): remove error throwing from credentials provider
027a29b
@liramon1
feat(runtimes): add IAM credentials profile
024cdd6
@liramon1
feat(runtimes): add onGetIamCredential endpoint to identity server
e778b84
@liramon1
Merge branch 'feature/flare-iam' of github.com:aws/language-server-ru…
511d4b5 
…ntimes into feature/flare-iam
@yuxianrz
feat(runtimes): add in IamLogout Logic and handlers
3e4b901
@liramon1
Merge remote-tracking branch 'origin' into feature/flare-iam
daaddc4
@yuxianrz
fix(runtimes): delete iam profile when logout
c645ef8
@yuxianrz
Merge branch 'feature/flare-iam' of github.com:aws/language-server-ru…
3077881 
…ntimes into feature/flare-iam
@liramon1 liramon1 requested a review from a team as a code owner June 17, 2025 19:10
liramon1 and others added 15 commits June 17, 2025 17:27
@liramon1
fix(runtimes): fix IAM credentials encryption
ed32392
@yuxianrz
fix(runtimes): fix circular dependency
d6ef1c5
@yuxianrz @liramon1
refactor(runtimes): split SsoTokenChangedKind and CredentialsChangedKind
a8121c5
@liramon1
Merge branch 'feature/flare-iam' of github.com:liramon1/language-serv…
a560f9f 
…er-runtimes into feature/flare-iam
@liramon1
Merge remote-tracking branch 'origin' into feature/flare-iam
9cf51be
@yuxianrz
feat: add sts credentials support
287d202
@liramon1
feat: replace profile deletion with iam invalidation
90c6b3d
@liramon1
refactor: rename loginOnInvalidToken and add STS error codes
f8b21f0
@liramon1
refactor: rename GetIamCredentialOptions fields
1541461
@liramon1
refactor: remove assumeRole option
bee0605
@liramon1
chore: revert package json
8c6a636
@yuxianrz
feat(runtimes): enable sts invalidation
6213337
@yuxianrz
feat(runtimes): enable sts autorefresh
6e2c22a
@liramon1
Merge remote-tracking branch 'origin' into feature/flare-iam
fb6972c
@liramon1
refactor: revert unnecessary changes
99d4a83
@liramon1 liramon1 force-pushed the feature/flare-iam branch from 3317d42 to de57f17 Compare July 9, 2025 16:52
liramon1 added 23 commits July 10, 2025 14:08
@liramon1
refactor: split IamCredentialProfile into multiple profiles
a63c53b
@liramon1
refactor: split IamCredentialProfile into multiple profiles
fbfb2d6
@liramon1
chore: revert comment
56fc78a
@liramon1
feat: add mfaCode to getIamCredentialParams
939241b
@liramon1
refactor: prefix IAM-related profiles with 'Iam'
e69aa7c
@liramon1
refactor: prefix IAM-related profiles with 'Iam'
52b509b
@liramon1
chore: revert comment change
13974a3
@liramon1
Merge branch 'iam-management' into feature/flare-iam
986d9da
@liramon1
refactor: move encryption into separate function and split credential id
d38dbb7
@liramon1
Merge branch 'iam-management' into feature/flare-iam
88bd95a
@liramon1
feat: add external_id field to profile
0ef95ac
@liramon1
feat: optionalize permission validation in GetIamCredentialOptions
5fb131f
@liramon1
refactor: move MFA code retrieval into separate request
e6e0220
@liramon1
fix: add parameters to mfa request
f308b88
@liramon1
fix: naming changes
2713539
@liramon1
fix: incorporate PR feedback
5eb1ac3
@liramon1
fix: change IamCredential fields
38ab93b
@liramon1
Merge remote-tracking branch 'aws/main' into feature/flare-iam
1f47bf1
@liramon1
fix: add error message for failed caller identity
b1a13df
@liramon1
refactor: undo changes to Auth
30e3c7f
@liramon1
Merge remote-tracking branch 'origin' into feature/flare-iam
dd4fd2e
@liramon1
fix: add mfaSerial to MfaCode output
c851573
@liramon1
feat: add credential override
c44382f
@liramon1 liramon1 mentioned this pull request Jul 28, 2025
Merged
@liramon1 liramon1 changed the title feat: add support for IAM/STS credentials management feat: add support for IAM profiles and credentials management Jul 28, 2025
awschristou pushed a commit that referenced this pull request Jul 29, 2025
@liramon1
refactor: sync types with IAM authentication changes (#626)
844b206 
## Problem
The IAM type changes are behind the changes in
aws/language-servers#1869 and
aws/language-servers#1846. As a result, the
language-servers PRs are unable to compile.

## Solution
This is part of #572.

- Rename validatePermissions to permissionSets and make it accept a list
of permissions instead of validating only 1 set of permissions
- Wrap credentials from getIamCredentialResult into an intermediate
object
- Add credentials override and additional error codes to
getIamCredentials
- Add mfaSerial to GetMfaSerialResult and optionalize it in
GetMfaSerialParams

<!---
    REMINDER:
    - Read CONTRIBUTING.md first.
    - Add test coverage for your changes.
    - Link to related issues/commits.
    - Testing: how did you test your changes?
    - Screenshots if applicable
-->

## License

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
@liramon1 liramon1 closed this Jul 29, 2025
@liramon1 liramon1 mentioned this pull request Aug 4, 2025
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@liramon1 liramon1

@yuxianrz yuxianrz

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@liramon1 @yuxianrz