aws_assume_role 1.1.0-universal-openbsd

data/lib/aws_assume_role/vendored/aws/shared_config.rb

@@ -0,0 +1,223 @@
+require_relative "includes"
+module AwsAssumeRole::Vendored::Aws
+    # @api private
+    class SharedConfig
+        include AwsAssumeRole::Logging
+        # @return [String]
+        attr_reader :credentials_path
+
+        # @return [String]
+        attr_reader :config_path
+
+        # @return [String]
+        attr_reader :profile_name
+
+        # Constructs a new SharedConfig provider object. This will load the shared
+        # credentials file, and optionally the shared configuration file, as ini
+        # files which support profiles.
+        #
+        # By default, the shared credential file (the default path for which is
+        # `~/.aws/credentials`) and the shared config file (the default path for
+        # which is `~/.aws/config`) are loaded. However, if you set the
+        # `ENV['AWS_SDK_CONFIG_OPT_OUT']` environment variable, only the shared
+        # credential file will be loaded.
+        #
+        # The default profile name is 'default'. You can specify the profile name
+        # with the `ENV['AWS_PROFILE']` environment variable or with the
+        # `:profile_name` option.
+        #
+        # @param [Hash] options
+        # @option options [String] :credentials_path Path to the shared credentials
+        #   file. Defaults to "#{Dir.home}/.aws/credentials".
+        # @option options [String] :config_path Path to the shared config file.
+        #   Defaults to "#{Dir.home}/.aws/config".
+        # @option options [String] :profile_name The credential/config profile name
+        #   to use. If not specified, will check `ENV['AWS_PROFILE']` before using
+        #   the fixed default value of 'default'.
+        # @option options [Boolean] :config_enabled If true, loads the shared config
+        #   file and enables new config values outside of the old shared credential
+        #   spec.
+        def initialize(options = {})
+            @profile_name = determine_profile(options)
+            @config_enabled = options[:config_enabled]
+            @credentials_path = options[:credentials_path] ||
+                                determine_credentials_path
+            @parsed_credentials = {}
+            load_credentials_file if loadable?(@credentials_path)
+            if @config_enabled
+                @config_path = options[:config_path] || determine_config_path
+                load_config_file if loadable?(@config_path)
+            end
+        end
+
+        # @api private
+        def fresh(options = {})
+            @profile_name = nil
+            @credentials_path = nil
+            @config_path = nil
+            @parsed_credentials = {}
+            @parsed_config = nil
+            @config_enabled = options[:config_enabled] ? true : false
+            @profile_name = determine_profile(options)
+            @credentials_path = options[:credentials_path] ||
+                                determine_credentials_path
+            load_credentials_file if loadable?(@credentials_path)
+            if @config_enabled
+                @config_path = options[:config_path] || determine_config_path
+                load_config_file if loadable?(@config_path)
+            end
+        end
+
+        # @return [Boolean] Returns `true` if a credential file
+        #   exists and has appropriate read permissions at {#path}.
+        # @note This method does not indicate if the file found at {#path}
+        #   will be parsable, only if it can be read.
+        def loadable?(path)
+            !path.nil? && File.exist?(path) && File.readable?(path)
+        end
+
+        # @return [Boolean] returns `true` if use of the shared config file is
+        #   enabled.
+        def config_enabled?
+            @config_enabled ? true : false
+        end
+
+        # Sources static credentials from shared credential/config files.
+        #
+        # @param [Hash] options
+        # @option options [String] :profile the name of the configuration file from
+        #   which credentials are being sourced.
+        # @return [Aws::Credentials] credentials sourced from configuration values,
+        #   or `nil` if no valid credentials were found.
+        def credentials(opts = {})
+            p = opts[:profile] || @profile_name
+            validate_profile_exists(p) if credentials_present?
+            if credentials = credentials_from_shared(p, opts)
+                credentials
+            elsif credentials = credentials_from_config(p, opts)
+                credentials
+            end
+        end
+
+        # Attempts to assume a role from shared config or shared credentials file.
+        # Will always attempt first to assume a role from the shared credentials
+        # file, if present.
+        def assume_role_credentials_from_config(opts = {})
+            logger.debug "Entered assume_role_credentials_from_config with #{opts}"
+            p = opts.delete(:profile) || @profile_name
+            credentials = assume_role_from_profile(@parsed_credentials, p, opts)
+            if @parsed_config
+                logger.debug "Parsed config loaded, testing"
+                credentials ||= assume_role_from_profile(@parsed_config, p, opts)
+            end
+            credentials
+        end
+
+        def region(opts = {})
+            p = opts[:profile] || @profile_name
+            if @config_enabled
+                if @parsed_credentials
+                    region = @parsed_credentials.fetch(p, {})["region"]
+                end
+                region ||= @parsed_config.fetch(p, {})["region"] if @parsed_config
+                region
+            end
+        end
+
+        private
+
+        def credentials_present?
+            (@parsed_credentials && !@parsed_credentials.empty?) ||
+                (@parsed_config && !@parsed_config.empty?)
+        end
+
+        def assume_role_from_profile(cfg, profile, opts)
+            if cfg && prof_cfg = cfg[profile]
+                opts[:source_profile] ||= prof_cfg["source_profile"]
+                if opts[:source_profile]
+                    opts[:credentials] = credentials(profile: opts[:source_profile])
+                    if opts[:credentials]
+                        opts[:role_session_name] ||= prof_cfg["role_session_name"]
+                        opts[:role_session_name] ||= "default_session"
+                        opts[:role_arn] ||= prof_cfg["role_arn"]
+                        opts[:external_id] ||= prof_cfg["external_id"]
+                        opts[:serial_number] ||= prof_cfg["mfa_serial"]
+                        opts[:profile] = opts.delete(:source_profile)
+                        AssumeRoleCredentials.new(opts)
+                    else
+                        raise ::Aws::Errors::NoSourceProfileError, "Profile #{profile} has a role_arn, and source_profile, but the"\
+                              " source_profile does not have credentials."
+                    end
+                elsif prof_cfg["role_arn"]
+                    raise ::Aws::Errors::NoSourceProfileError, "Profile #{profile} has a role_arn, but no source_profile."
+                end
+            end
+        end
+
+        def credentials_from_shared(profile, _opts)
+            if @parsed_credentials && prof_config = @parsed_credentials[profile]
+                credentials_from_profile(prof_config)
+            end
+        end
+
+        def credentials_from_config(profile, _opts)
+            if @parsed_config && prof_config = @parsed_config[profile]
+                credentials_from_profile(prof_config)
+            end
+        end
+
+        def credentials_from_profile(prof_config)
+            creds = Aws::Credentials.new(
+                prof_config["aws_access_key_id"],
+                prof_config["aws_secret_access_key"],
+                prof_config["aws_session_token"],
+            )
+            creds if credentials_complete(creds)
+        end
+
+        def credentials_complete(creds)
+            creds.set?
+        end
+
+        def load_credentials_file
+            @parsed_credentials = Aws::IniParser.ini_parse(
+                File.read(@credentials_path),
+            )
+        end
+
+        def load_config_file
+            @parsed_config = Aws::IniParser.ini_parse(File.read(@config_path))
+        end
+
+        def determine_credentials_path
+            default = default_shared_config_path("credentials")
+        end
+
+        def determine_config_path
+            default = default_shared_config_path("config")
+        end
+
+        def default_shared_config_path(file)
+            File.join(Dir.home, ".aws", file)
+        rescue ArgumentError
+            # Dir.home raises ArgumentError when ENV['home'] is not set
+            nil
+        end
+
+        def validate_profile_exists(profile)
+            unless (@parsed_credentials && @parsed_credentials[profile]) ||
+                   (@parsed_config && @parsed_config[profile])
+                msg = "Profile `#{profile}' not found in #{@credentials_path}"
+                msg << " or #{@config_path}" if @config_path
+                raise ::Aws::Errors::NoSuchProfileError, msg
+            end
+        end
+
+        def determine_profile(options)
+            ret = options[:profile_name]
+            ret ||= ENV["AWS_PROFILE"]
+            ret ||= "default"
+            ret
+        end
+    end
+end

data/lib/aws_assume_role/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module AwsAssumeRole
+    VERSION = "1.1.0".freeze
+end

metadata

@@ -0,0 +1,438 @@
+--- !ruby/object:Gem::Specification
+name: aws_assume_role
+version: !ruby/object:Gem::Version
+  version: 1.1.0
+platform: universal-openbsd
+authors:
+- Jon Topper
+- Jack Thomas
+- Naadir Jeewa
+- David King
+- Tim Bannister
+- Phil Potter
+- Tom Haynes
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-01-04 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
+- !ruby/object:Gem::Dependency
+  name: dry-configurable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.5'
+- !ruby/object:Gem::Dependency
+  name: dry-struct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: dry-types
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.12'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.12'
+- !ruby/object:Gem::Dependency
+  name: dry-validation
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+- !ruby/object:Gem::Dependency
+  name: gli
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.15'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.15'
+- !ruby/object:Gem::Dependency
+  name: highline
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: i18n
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+- !ruby/object:Gem::Dependency
+  name: inifile
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: launchy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.4'
+- !ruby/object:Gem::Dependency
+  name: keyring
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.4.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.4.1
+- !ruby/object:Gem::Dependency
+  name: pastel
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+- !ruby/object:Gem::Dependency
+  name: smartcard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.5.6
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.5.6
+- !ruby/object:Gem::Dependency
+  name: yubioath
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.1
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '0.50'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '0.50'
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.13'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+- !ruby/object:Gem::Dependency
+  name: gir_ffi-gnome_keyring
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.3
+description: Used to fetch multiple AWS Role Credential Keys using different Session
+  Keys and store them securely using Gnome Keyring or OSX keychain
+email:
+- jon@scalefactory.com
+- jack@scalefactory.com
+- naadir@scalefactory.com
+- tim@scalefactory.com
+executables:
+- aws-assume-role
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rubocop.yml"
+- ".ruby-version"
+- ".simplecov"
+- ".travis.yml"
+- CHANGELOG.md
+- Gemfile
+- LICENSE.md
+- README.md
+- Rakefile
+- aws_assume_role.gemspec
+- bin/aws-assume-role
+- i18n/en.yml
+- lib/aws_assume_role.rb
+- lib/aws_assume_role/cli.rb
+- lib/aws_assume_role/cli/actions/abstract_action.rb
+- lib/aws_assume_role/cli/actions/configure_profile.rb
+- lib/aws_assume_role/cli/actions/configure_role_assumption.rb
+- lib/aws_assume_role/cli/actions/console.rb
+- lib/aws_assume_role/cli/actions/delete_profile.rb
+- lib/aws_assume_role/cli/actions/includes.rb
+- lib/aws_assume_role/cli/actions/list_profiles.rb
+- lib/aws_assume_role/cli/actions/migrate_profile.rb
+- lib/aws_assume_role/cli/actions/reset_environment.rb
+- lib/aws_assume_role/cli/actions/run.rb
+- lib/aws_assume_role/cli/actions/set_environment.rb
+- lib/aws_assume_role/cli/actions/test.rb
+- lib/aws_assume_role/cli/commands/configure.rb
+- lib/aws_assume_role/cli/commands/console.rb
+- lib/aws_assume_role/cli/commands/delete.rb
+- lib/aws_assume_role/cli/commands/environment.rb
+- lib/aws_assume_role/cli/commands/list.rb
+- lib/aws_assume_role/cli/commands/migrate.rb
+- lib/aws_assume_role/cli/commands/run.rb
+- lib/aws_assume_role/cli/commands/test.rb
+- lib/aws_assume_role/cli/includes.rb
+- lib/aws_assume_role/configuration.rb
+- lib/aws_assume_role/core_ext/aws-sdk/credential_provider_chain.rb
+- lib/aws_assume_role/core_ext/aws-sdk/includes.rb
+- lib/aws_assume_role/credentials/factories.rb
+- lib/aws_assume_role/credentials/factories/abstract_factory.rb
+- lib/aws_assume_role/credentials/factories/assume_role.rb
+- lib/aws_assume_role/credentials/factories/default_chain_provider.rb
+- lib/aws_assume_role/credentials/factories/environment.rb
+- lib/aws_assume_role/credentials/factories/includes.rb
+- lib/aws_assume_role/credentials/factories/instance_profile.rb
+- lib/aws_assume_role/credentials/factories/repository.rb
+- lib/aws_assume_role/credentials/factories/shared.rb
+- lib/aws_assume_role/credentials/factories/static.rb
+- lib/aws_assume_role/credentials/includes.rb
+- lib/aws_assume_role/credentials/providers/assume_role_credentials.rb
+- lib/aws_assume_role/credentials/providers/includes.rb
+- lib/aws_assume_role/credentials/providers/mfa_session_credentials.rb
+- lib/aws_assume_role/credentials/providers/shared_keyring_credentials.rb
+- lib/aws_assume_role/includes.rb
+- lib/aws_assume_role/logging.rb
+- lib/aws_assume_role/profile_configuration.rb
+- lib/aws_assume_role/runner.rb
+- lib/aws_assume_role/store/includes.rb
+- lib/aws_assume_role/store/keyring.rb
+- lib/aws_assume_role/store/serialization.rb
+- lib/aws_assume_role/store/shared_config_with_keyring.rb
+- lib/aws_assume_role/types.rb
+- lib/aws_assume_role/ui.rb
+- lib/aws_assume_role/vendored/aws.rb
+- lib/aws_assume_role/vendored/aws/README.md
+- lib/aws_assume_role/vendored/aws/assume_role_credentials.rb
+- lib/aws_assume_role/vendored/aws/includes.rb
+- lib/aws_assume_role/vendored/aws/refreshing_credentials.rb
+- lib/aws_assume_role/vendored/aws/shared_config.rb
+- lib/aws_assume_role/version.rb
+homepage: https://github.com/scalefactory/aws-assume-role
+licenses:
+- Apache-2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.2
+signing_key: 
+specification_version: 4
+summary: Manage AWS STS credentials with MFA
+test_files: []