aws_assume_role 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +7 -0
- data/lib/aws_assume_role/store/shared_config_with_keyring.rb +11 -3
- data/lib/aws_assume_role/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 45395edecc7de74806f31e15c043864ba06a56639aed1e5a97e87b3281d5d93a
|
4
|
+
data.tar.gz: 62529589b7c650466430f65af9dea8c46bd73816404017613523be6d84f813d1
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 9e6b222522697af130f1e791c3118b5b158ceaf4c592a893b640785367a174fb6eac4a4712ebede3796dff293a4404d43bc2fdd6f60fd2ba0490f3bb2656ba74
|
7
|
+
data.tar.gz: 39c9195e410c8b9c37845572b60bce7820859e42a0563bc318c4221f141be39be34886eeaa8bc7b8770893230b1311a4e3776f9ede20a7f8dac440f0dbd4d272
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,12 @@
|
|
1
|
+
## 1.0.4
|
2
|
+
* Ensure ~/.aws exists before saving configuration
|
3
|
+
|
4
|
+
## 1.0.3
|
5
|
+
* Fix setting environment variable throwing string frozen error (@timbirk)
|
6
|
+
|
1
7
|
## 1.0.2
|
2
8
|
* Display credential prompts on stderr to allow shell eval to work (@timbirk)
|
9
|
+
|
3
10
|
## 1.0.1
|
4
11
|
* Fix setting environment variable throwing string frozen error (@mrprimate)
|
5
12
|
* Fix incompatibility with version 0.4 of dry-struct (@tomhaynes)
|
@@ -225,9 +225,17 @@ class AwsAssumeRole::Store::SharedConfigWithKeyring < AwsAssumeRole::Vendored::A
|
|
225
225
|
|
226
226
|
# Please run in a mutex
|
227
227
|
def save_configuration
|
228
|
-
|
229
|
-
|
230
|
-
|
228
|
+
if File.exist? determine_config_path
|
229
|
+
bytes_required = File.size(determine_config_path)
|
230
|
+
# Overwrite the current .config file with random bytes to eliminate
|
231
|
+
# unencrypted credentials.
|
232
|
+
# This won't account for COW filesystems or SSD wear-levelling but
|
233
|
+
# is a best effort protection.
|
234
|
+
random_bytes = SecureRandom.random_bytes(bytes_required)
|
235
|
+
File.write(determine_config_path, random_bytes)
|
236
|
+
else
|
237
|
+
FileUtils.mkdir_p(Pathname.new(determine_config_path).dirname)
|
238
|
+
end
|
231
239
|
configuration.save
|
232
240
|
end
|
233
241
|
end
|