oauth2/google/internal/externalaccount
Sai Sunder 6242fa9171 google/internal: Add AWS Session Token to Metadata Requests
AWS released a new instance metadata service (IMDSv2). IMDSv2 brought a requirement that a session token header is now required on every call to metadata endpoint.
Modify the AWS credential retrieval flow to fetch the session token and send it along with the calls to metadata endpoints

Change-Id: I539912ab38f5e591658b29a1e7a99d2b828a1128
GitHub-Last-Rev: 29e1f4aad1
GitHub-Pull-Request: golang/oauth2#554
Reviewed-on: https://go-review.googlesource.com/c/oauth2/+/390794
Reviewed-by: Cody Oss <codyoss@google.com>
Trust: Cody Oss <codyoss@google.com>
Run-TryBot: Cody Oss <codyoss@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Leo Siracusa <leosiracusa@google.com>
Trust: Tyler Bui-Palsulich <tbp@google.com>
2022-03-09 15:54:54 +00:00
..
testdata google: base account credentials with file-sourcing 2021-01-12 20:04:29 +00:00
aws.go google/internal: Add AWS Session Token to Metadata Requests 2022-03-09 15:54:54 +00:00
aws_test.go google/internal: Add AWS Session Token to Metadata Requests 2022-03-09 15:54:54 +00:00
basecredentials.go google/internal: Add AWS Session Token to Metadata Requests 2022-03-09 15:54:54 +00:00
basecredentials_test.go google/externalaccount: add support for workforce pool credentials 2021-10-05 18:02:43 +00:00
clientauth.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
clientauth_test.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
err.go google: add utilities supporting upcoming oauth2 functionality 2020-11-09 20:14:03 +00:00
err_test.go google: add utilities supporting upcoming oauth2 functionality 2020-11-09 20:14:03 +00:00
filecredsource.go google: base account credentials with file-sourcing 2021-01-12 20:04:29 +00:00
filecredsource_test.go google: Use bytes.Buffer for go 1.9 compatability 2021-04-02 16:14:24 +00:00
impersonate.go google: add support for "impersonated_service_account" credential type. 2021-10-28 17:52:45 +00:00
impersonate_test.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
sts_exchange.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
sts_exchange_test.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
urlcredsource.go google/externalaccount: validate tokenURL and ServiceAccountImpersonationURL 2021-08-17 22:35:10 +00:00
urlcredsource_test.go google: check additional AWS variable 2021-06-22 16:52:04 +00:00