resolve RefreshableCredentials.token issue
See original GitHub issuewe currently disable the token property because it needs to be an async call. See: https://github.com/aio-libs/aiobotocore/blob/master/aiobotocore/credentials.py#L259
This is called in places like SigV4Auth._modify_request_before_signing which is called by SigV4Auth.add_auth. I haven’t check upstream who calls this yet
Issue Analytics
- State:
- Created 2 years ago
- Comments:8
Top Results From Across the Web
RefreshableCredentials Class fetches credentials too eagerly
This causes the botocore calls to consistently refresh the token which ends up in a failing request. There is actually a similar issue...
Read more >How to refresh the boto3 credetials when python script is ...
client('s3') again its throwing exception. What am I doing wrong? Or how can I resolve it? Below is the code snippet try: s3...
Read more >Refreshing AWS credentials in Python - Owen Rumney
NET AWS SDK to solve an issue with the way my current organisation has configured SingleSignOn (SSO) and temporary credentials.
Read more >Credentials — Boto3 Docs 1.26.35 documentation - AWS
ACCESS_KEY , SECRET_KEY , and SESSION_TOKEN are variables that contain your access key, secret key, and optional session token. Note that the examples...
Read more >Troubleshoot AWS STS security token expired errors when ...
How can I troubleshoot the AWS STS error “the security token included in the request is expired” when using the AWS CLI to...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

wow didn’t expect so much time dedicated to this, hehe, awesome. I ran into this because we’re migrating to opensearch which apparently requires SigV4Auth, just created some aiohttp helpers for that, maybe will make some time to make a module for that. I’d post it on a gist but then someone will snarf it before I create a module 😉
Ok from what I can see. The only place
SigV4Authis instantiated is in theAUTH_TYPE_MAPSdict inauth.py, and the only place it’s values are accessed would be insigners.py, which we’ve supplied the credentials asget_frozen_credentials()so callingself.credentials.tokenshould be safe as it should be an instance ofReadOnlyCredentials.In theory if calling
get_frozen_credentialson one of the credential providers doesn’t return aReadOnlyCredentialsobject then it would cause issues. Don’t suppose you can send me some info on how to recreate it.