Function TestSts

pkg/credentials/iam_aws_test.go:331–369

(t *testing.T)

}

func TestSts(t *testing.T) {
	server := initStsTestServer("2014-12-16T01:51:37Z")
	defer server.Close()
	p := &IAM{
		Endpoint: server.URL,
	}

	f, err := os.CreateTemp(t.TempDir(), "minio-go")
	if err != nil {
		t.Errorf("Unexpected failure %s", err)
	}
	defer os.Remove(f.Name())
	f.Write([]byte("token"))
	f.Close()

	t.Setenv("AWS_WEB_IDENTITY_TOKEN_FILE", f.Name())
	t.Setenv("AWS_ROLE_ARN", "arn:aws:sts::123456789012:assumed-role/FederatedWebIdentityRole/app1")
	creds, err := p.RetrieveWithCredContext(defaultCredContext)
	os.Unsetenv("AWS_WEB_IDENTITY_TOKEN_FILE")
	os.Unsetenv("AWS_ROLE_ARN")
	if err != nil {
		t.Errorf("Unexpected failure %s", err)
	}
	if creds.AccessKeyID != "accessKey" {
		t.Errorf("Expected \"accessKey\", got %s", creds.AccessKeyID)
	}

	if creds.SecretAccessKey != "secret" {
		t.Errorf("Expected \"secret\", got %s", creds.SecretAccessKey)
	}

	if creds.SessionToken != "token" {
		t.Errorf("Expected \"token\", got %s", creds.SessionToken)
	}

	if !p.IsExpired() {
		t.Error("Expected creds to be expired.")
	}
}

func TestStsCn(t *testing.T) {
	server := initStsTestServer("2014-12-16T01:51:37Z")