Latest version of the repo causes "Access_token could not be retrieved" client_id & client secret.

[yvanfm91]

Hello folks!

I have a headache with this problem and I am not able to solve it.... I would like to have your support =)

Well, I consider that is important to mention that 3 month ago, this tool was working in my old laptop, and now I'm trying to install it in another one, but it's impossible to start working with the tool due an error. So...

Previously, if I remember It was working with repo version 1.8.1 or 1.9.0 and python-3.9 and everybody was happy.

Now, with another laptop but the same brand, model, system, and tools... It's not working. I've tried with python-3.8, 3.9, 3.11.... and the latest version of this repo, but still in the same.

The error is:

$ onelogin-aws-assume-role

OneLogin AWS Assume Role Tool

Traceback (most recent call last):
  File "C:\Users\ivan.fernandez\AppData\Local\Programs\Python\Python39\Scripts\onelogin-aws-assume-role-script.py", line 33, in <module>
    sys.exit(load_entry_point('onelogin-aws-assume-role==1.10.1', 'console_scripts', 'onelogin-aws-assume-role')())
  File "C:\Users\ivan.fernandez\AppData\Local\Programs\Python\Python39\lib\site-packages\onelogin_aws_assume_role-1.10.1-py3.9.egg\aws_assume_role\aws_assume_role.py", line 544, in main
  File "C:\Users\ivan.fernandez\AppData\Local\Programs\Python\Python39\lib\site-packages\onelogin_aws_assume_role-1.10.1-py3.9.egg\aws_assume_role\aws_assume_role.py", line 223, in get_client
Exception: Invalid client_id and client_secret. Access_token could not be retrieved

It seems it's related with the file "onelogin.sdk.properties", is in the right location but I don't no why I get that kind of error. I have searched a lot in google, stackoverflow, but nothing solve my problem or gave me an idea of how to solve it.

Could someone please help me? I beg you =(

EXTRA: I use python in a user (or profile) mode, not in a system level, downloaded from the original Python Website.

OS: Windows 10
P.S.: If you need more info, let me know.

[lvsovoy]

Upon investigation I found out that actually the underlying issue lies in HTTPS requests complaining about SSL sertificate.
self signed certificate in certificate chain (_ssl.c:1002)
I found out that installing pip-system-certs fixes it

[yvanfm91]

Hi! Thank you very much for your response! We handled the problem when we replaced our proxy. We installed a newer version os NVM and npm packages for AWS-CDK. I really appreciate your response. Best regards! El El mar, 16 may 2023 a las 11:23, lvsovoy ***@***.***> escribió:

Upon investigation I found out that actually the underlying issue lies in HTTPS requests complaining about SSL sertificate. self signed certificate in certificate chain (_ssl.c:1002) I found out that installing pip-system-certs fixes it — Reply to this email directly, view it on GitHub <#84 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ATM4XBOPEJFWY45PIHWEOTDXGNBSBANCNFSM6AAAAAAULM7OUM> . You are receiving this because you authored the thread.Message ID: ***@***.***>

-- Iván Fernández Márquez Técnico Superior en Administración de Sistemas Informáticos y Redes ________________________________________________ Antes de imprimir este mensaje, asegúrese de que es necesario. Proteger el medio ambiente está en nuestras manos. Before printing this message, make sure it's necessary. Protecting the environment is in our hands.

[keidarcy]

Hi, I found a workaround. If you need extra CA certificate, you can add your certificate file path to REQUESTS_CA_BUNDLE environment variable before onelogin client request and remove it before aws client request.