tencentcloud-sdk-common 3.0.995 → 3.0.996

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5c27634a70c2749967500eb213da4f38d74d797c
-  data.tar.gz: d9e02b9662abfef7ba3ce48a1ef8d55f6068f519
+  metadata.gz: 6b8c1ce4efb874bd66b131389321bf139731e96d
+  data.tar.gz: 4d933f12882ede9156daf8b49c53c36c3be568bc
 SHA512:
-  metadata.gz: e214674dc00679f68c8f1ca6534727af45a96fe492ba17eb398d0b114875244ed1beeb846bdda8c4e4e2293987928a64e1b37ddc34027994a90ccc25c7df86d0
-  data.tar.gz: d6fbede1f923168aa0531ef978634814efbfa71dd3fa8b3af63fa501f48f8f9a2279adffe395b5e6bf0eb6a1ab7f76fb0704222720a4667f5092aa102bbe63a3
+  metadata.gz: 3102a81eb411bd413dcdacd9accfcdabb5bef46e5d0d4912f0ce049342c052222cf3cbf5652fe350247587e5a8d892a2e20c24b47f11ac08e19778b5010cdda1
+  data.tar.gz: 4231f024d96e524ccd32cbba4c1a29cc101f306419646f81ed0b6d80502465faecb5d084771fe840e432e5d408f314835513e29ad08e08379062c3af1f9fffcf

data/lib/VERSION

@@ -1 +1 @@
-3.0.995
+3.0.996

data/lib/tencentcloud-sdk-common/client.rb

@@ -13,8 +13,6 @@ module TencentCloud
       include Log
 
       def initialize(credential, region, api_version, api_endpoint, sdk_version, profile = nil)
-        raise TencentCloudSDKException.new('InvalidCredential', 'Credential is None or invalid') unless credential
-
         @credential = credential
         @region = region
         @api_version = api_version
@@ -85,7 +83,6 @@ module TencentCloud
         req.header['X-TC-Version'] = @api_version
         req.header['X-TC-Region'] = @region
         req.header['X-TC-Language'] = @profile.language
-        req.header['X-TC-Token'] = @credential.token if @credential.token
         req.header['X-TC-Content-SHA256'] = 'UNSIGNED-PAYLOAD' if @profile.unsigned_payload
         req.header['X-TC-TraceId'] = SecureRandom.uuid
         if req.method == 'GET'
@@ -128,9 +125,15 @@ module TencentCloud
         payload = 'UNSIGNED-PAYLOAD' if @profile.unsigned_payload
         hashed_payload = Digest::SHA256.hexdigest(payload)
 
-        authorization = Sign.sign_v3(content_type, endpoint, @profile.http_profile.req_method, req.uri,
-                                     canonical_querystring, hashed_payload, req.header['X-TC-Timestamp'],
-                                     @credential.secret_id, @credential.secret_key)
+        if @credential.nil?
+          authorization = "SKIP"
+        else
+          secret_id, secret_key, token = @credential.credential
+          authorization = Sign.sign_v3(content_type, endpoint, @profile.http_profile.req_method, req.uri,
+                                       canonical_querystring, hashed_payload, req.header['X-TC-Timestamp'],
+                                       secret_id, secret_key)
+          req.header['X-TC-Token'] = token if token
+        end
         req.header['Authorization'] = authorization
       end
     end

data/lib/tencentcloud-sdk-common/credential.rb

@@ -24,6 +24,10 @@ module TencentCloud
         @secret_key = secret_key
         @token = token
       end
+
+      def credential
+        [@secret_id, @secret_key, @token]
+      end
     end
   end
 end

data/lib/tencentcloud-sdk-common/oidc_credential.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+require 'time'
+
+module TencentCloud
+  module Common
+    class OIDCCredential
+      SES_NAME = 'tencentcloud-ruby-sdk-'
+      SES_DUR = 7200
+      API_VERSION = '2018-08-13'
+      API_ENDPOINT = 'sts.tencentcloudapi.com'
+      API_ACTION = 'AssumeRoleWithWebIdentity'
+      SDK_VERSION = 'CLB_' + File.read(File.expand_path('../VERSION', __dir__)).strip
+
+      attr_accessor :secret_id, :secret_key, :token
+
+      def initialize
+        @expire_t = 0
+        initialize_args
+      end
+
+      def credential
+        refresh
+        [@secret_id, @secret_key, @token]
+      end
+
+      def initialize_args
+        @region = ENV['TKE_REGION']
+        @provider_id = ENV['TKE_PROVIDER_ID']
+        token_file = ENV['TKE_WEB_IDENTITY_TOKEN_FILE']
+        @role_arn = ENV['TKE_ROLE_ARN']
+        @ses_name = SES_NAME + (Time.now.to_r * 1_000).to_i.to_s
+        @ses_dur = SES_DUR
+
+        if @region.nil? || @provider_id.nil? || token_file.nil? || @role_arn.nil? || @ses_name.nil? || @ses_dur.nil?
+          raise TencentCloudSDKException.new('InvalidCredential', 'env TKE_REGION, TKE_PROVIDER_ID, TKE_WEB_IDENTITY_TOKEN_FILE, TKE_ROLE_ARN not exist')
+        end
+
+        @token = File.read(token_file).strip
+      end
+
+      def refresh
+        if @expire_t - Time.now.to_i > SES_DUR / 10
+          return
+        end
+
+        initialize_args
+
+        client = AbstractClient.new(nil, @region, API_VERSION, API_ENDPOINT, SDK_VERSION, nil)
+
+        req = {
+          'ProviderId': @provider_id,
+          'WebIdentityToken': @token,
+          'RoleArn': @role_arn,
+          'RoleSessionName': @ses_name,
+          'DurationSeconds': @ses_dur,
+        }
+        response = JSON.parse(client.send_request(API_ACTION, req))
+        if response['Response'].key?('Error')
+          code = response['Response']['Error']['Code']
+          message = response['Response']['Error']['Message']
+          reqid = response['Response']['RequestId']
+          raise TencentCloud::Common::TencentCloudSDKException.new(code, message, reqid)
+        end
+
+        @secret_id = response['Response']['Credentials']['TmpSecretId']
+        @secret_key = response['Response']['Credentials']['TmpSecretKey']
+        @token = response['Response']['Credentials']['Token']
+        @expire_t = response['Response']['ExpiredTime']
+      end
+    end
+  end
+end

data/lib/tencentcloud-sdk-common.rb

@@ -9,6 +9,7 @@ require_relative 'tencentcloud-sdk-common/models'
 require_relative 'tencentcloud-sdk-common/sign'
 require_relative 'tencentcloud-sdk-common/http/request'
 require_relative 'tencentcloud-sdk-common/client'
+require_relative 'tencentcloud-sdk-common/oidc_credential'
 
 module TencentCloud
   # sdk common module

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tencentcloud-sdk-common
 version: !ruby/object:Gem::Version
-  version: 3.0.995
+  version: 3.0.996
 platform: ruby
 authors:
 - Tencent Cloud
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-02-10 00:00:00.000000000 Z
+date: 2025-02-11 00:00:00.000000000 Z
 dependencies: []
 description: Tencent Cloud Ruby SDK is the official software development kit, which
   allows Ruby developers to write software that makes use of Tencent Cloud service.
@@ -26,6 +26,7 @@ files:
 - lib/tencentcloud-sdk-common/log.rb
 - lib/tencentcloud-sdk-common/exception.rb
 - lib/tencentcloud-sdk-common/credential.rb
+- lib/tencentcloud-sdk-common/oidc_credential.rb
 - lib/tencentcloud-sdk-common/models.rb
 - lib/tencentcloud-sdk-common/client.rb
 - lib/VERSION