aws_assume_role 1.0.3 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b96abdbd68bb0fe6f1b3788626af2ee45a860084fe1ffbc5a879e9e8281f4ddd
-  data.tar.gz: ebcb6d85ae85f878d8847bbbaefbcce04cdff8cbd2715fef45ddc27a356a0774
+  metadata.gz: 45395edecc7de74806f31e15c043864ba06a56639aed1e5a97e87b3281d5d93a
+  data.tar.gz: 62529589b7c650466430f65af9dea8c46bd73816404017613523be6d84f813d1
 SHA512:
-  metadata.gz: 532dba7afba0cb8e4c8212d3b4bfc72d515f06a179ebaa1f545743000b8aba39be16e74dd541f6d93c69f374ffff23c00167aae1a466c7876964e150a9542381
-  data.tar.gz: 9c6b2aa1cdb66b3c42f619e32a076e50880a9c7a76cbb5ea4f535d0bc600329a08db16d311a3bc3db5b8ca81603f98d4360527cc0362189df18821f56392d264
+  metadata.gz: 9e6b222522697af130f1e791c3118b5b158ceaf4c592a893b640785367a174fb6eac4a4712ebede3796dff293a4404d43bc2fdd6f60fd2ba0490f3bb2656ba74
+  data.tar.gz: 39c9195e410c8b9c37845572b60bce7820859e42a0563bc318c4221f141be39be34886eeaa8bc7b8770893230b1311a4e3776f9ede20a7f8dac440f0dbd4d272

data/CHANGELOG.md

@@ -1,5 +1,12 @@
+## 1.0.4
+* Ensure ~/.aws exists before saving configuration
+
+## 1.0.3
+* Fix setting environment variable throwing string frozen error (@timbirk)
+
 ## 1.0.2
 * Display credential prompts on stderr to allow shell eval to work (@timbirk)
+
 ## 1.0.1
 * Fix setting environment variable throwing string frozen error (@mrprimate)
 * Fix incompatibility with version 0.4 of dry-struct (@tomhaynes)

data/lib/aws_assume_role/store/shared_config_with_keyring.rb

@@ -225,9 +225,17 @@ class AwsAssumeRole::Store::SharedConfigWithKeyring < AwsAssumeRole::Vendored::A
 
     # Please run in a mutex
     def save_configuration
-        bytes_required = File.size(determine_config_path)
-        random_bytes = SecureRandom.random_bytes(bytes_required)
-        File.write(determine_config_path, random_bytes)
+        if File.exist? determine_config_path
+            bytes_required = File.size(determine_config_path)
+            # Overwrite the current .config file with random bytes to eliminate
+            # unencrypted credentials.
+            # This won't account for COW filesystems or SSD wear-levelling but
+            # is a best effort protection.
+            random_bytes = SecureRandom.random_bytes(bytes_required)
+            File.write(determine_config_path, random_bytes)
+        else
+            FileUtils.mkdir_p(Pathname.new(determine_config_path).dirname)
+        end
         configuration.save
     end
 end

data/lib/aws_assume_role/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AwsAssumeRole
-    VERSION = "1.0.3".freeze
+    VERSION = "1.0.4".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws_assume_role
 version: !ruby/object:Gem::Version
-  version: 1.0.3
+  version: 1.0.4
 platform: ruby
 authors:
 - Jon Topper