question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Support temporary credentials and X-Amz-Security-Token

See original GitHub issue

Hi,

I’m trying to use minio on windows servers. I’ve downloaded .NET SDK and found that there is no support of temporary credentials. I use client grants endpoint to retrieve temporary credentials with my signed JWT token from Identity Server 3 (supports OAuth2 and OIDC). But when I’m trying to pass temp accessKey and secretKey into MinioClient class and get some file or information about bucket there are an error message from minio server:

MinioException: Minio API responded with message=The security token included in the request is invalid

I can’t use X-Amz-Security-Token query string and value of my session token because AWS signature is not valid for such request.

Do you have any planes or dates when you implement (or not?) this feature in upcoming release? What can I use right now for such case?

Thanks

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Comments:5 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
poornascommented, Feb 8, 2019

@antonchaika, the credentials need to fetched from STS as in this example(https://docs.aws.amazon.com/AmazonS3/latest/dev/AuthUsingTempSessionTokenDotNet.html) . The S3Config to connect to minio server can be seen in minio docs here

1reaction
harshavardhanacommented, Feb 7, 2019

@poornas this requires you to implement credentials handling like minio-go

Read more comments on GitHub >

github_iconTop Results From Across the Web

Using temporary credentials with AWS resources
You can use temporary security credentials to make programmatic requests for AWS resources using the AWS CLI or AWS API (using the AWS...
Read more >
How secret is the session token in AWS temporary security ...
The docs on how to use temporary credentials say that "AWS uses the session token to validate the temporary security credentials," but can ......
Read more >
get_session_token - Boto3 1.28.31 documentation
The temporary security credentials created by GetSessionToken can be used to make API calls to any Amazon Web Services service with the following...
Read more >
Using AWS Security Token Service in Your .NET Application
The AWS Security Token Service ( STS ) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity ......
Read more >
Security Token Service (STS)
The MinIO Security Token Service (STS) APIs allow applications to generate temporary credentials for accessing the MinIO deployment. The STS API is required ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found