11package main
22
33import (
4- "bytes "
4+ "context "
55 "encoding/json"
66 "fmt"
77 "io/ioutil"
88 "log"
99 "net/http"
1010 "net/url"
11- "os"
12- "os/exec"
1311
12+ "github.com/aws/aws-sdk-go-v2/aws"
13+ "github.com/aws/aws-sdk-go-v2/aws/external"
1414 "github.com/docopt/docopt-go"
15- "github.com/mattn/go-shellwords"
16- "github.com/mbrtargeting/aws-cli-oidc/internal"
1715 "github.com/pkg/browser"
18- "gopkg.in/ini.v1"
1916)
2017
2118func main () {
@@ -24,7 +21,7 @@ func main() {
2421 usage := `aws-sign-in.
2522
2623Usage:
27- aws-sign-in [<profile>]
24+ aws-sign-in
2825 aws-sign-in -h | --help
2926
3027Options:
@@ -36,25 +33,20 @@ Options:
3633 }
3734
3835 var conf struct {
39- Profile string `docopt:"<profile>"`
4036 }
4137 if err := arguments .Bind (& conf ); err != nil {
4238 log .Fatalf ("%v\n " , err )
4339 }
4440
45- profileName := conf .Profile
46- if profileName == "" {
47- profileName = os .Getenv ("AWS_PROFILE" )
48- if profileName == "" {
49- profileName = "default"
50- }
41+ cfg , err := external .LoadDefaultAWSConfig ()
42+ if err != nil {
43+ fmt .Printf ("unable to load SDK config: %v\n " , err )
5144 }
45+ cfg .Region = "eu-central-1"
5246
53- configPath , credentialsPath := getAWSConfigPaths ()
54-
55- creds , err := runCredentialProcess (configPath , credentialsPath , profileName )
47+ creds , err := cfg .Credentials .Retrieve (context .Background ())
5648 if err != nil {
57- log .Fatalf ("Error running the credential process : %v\n " , err )
49+ log .Fatalf ("Error retrieving credentials : %v\n " , err )
5850 }
5951
6052 signinToken , err := getSignInToken (creds )
@@ -70,94 +62,7 @@ Options:
7062 fmt .Printf ("If the browser didn't open, please visit the following url to sign in to the AWS console: %v\n " , loginURL )
7163}
7264
73- func getAWSConfigPaths () (string , string ) {
74- var credentialsPath string
75- var configPath string
76-
77- awsConfigFile := os .Getenv ("AWS_CONFIG_FILE" )
78- if awsConfigFile != "" {
79- configPath = awsConfigFile
80- }
81-
82- awsCredentialsFile := os .Getenv ("AWS_SHARED_CREDENTIALS_FILE" )
83- if awsCredentialsFile != "" {
84- credentialsPath = awsCredentialsFile
85- }
86-
87- home , err := os .UserHomeDir ()
88- if err == nil {
89- // only overwrite the paths if the respective env var was not set
90- if configPath == "" {
91- configPath = home + "/.aws/config"
92- }
93- if credentialsPath == "" {
94- credentialsPath = home + "/.aws/credentials"
95- }
96- }
97-
98- return configPath , credentialsPath
99- }
100-
101- func tryRunCredentialProcess (credentialProcess string ) (* internal.AWSCredentialsJSON , error ) {
102- words , err := shellwords .Parse (credentialProcess )
103- if err != nil || len (words ) == 0 {
104- return nil , fmt .Errorf ("invalid credential_process entry" )
105- }
106- cmd := exec .Command (words [0 ], words [1 :]... )
107- var out bytes.Buffer
108- cmd .Stdout = & out
109- if err := cmd .Run (); err != nil {
110- return nil , fmt .Errorf ("failed to run the credential process: %v" , err )
111- }
112-
113- var creds internal.AWSCredentialsJSON
114- err = json .Unmarshal (out .Bytes (), & creds )
115- if err != nil {
116- return nil , fmt .Errorf ("error parsing credential process output: %v" , err )
117- }
118-
119- return & creds , nil
120- }
121-
122- func findCredentialProcess (path string , profile string ) (string , error ) {
123- cfg , err := ini .Load (path )
124- if err != nil {
125- return "" , fmt .Errorf ("failed to read file: %v" , err )
126- }
127-
128- section , err := cfg .GetSection (profile )
129- if err != nil {
130- return "" , fmt .Errorf ("failed to read section: %v" , err )
131- }
132-
133- key , err := section .GetKey ("credential_process" )
134- if err != nil {
135- return "" , fmt .Errorf ("failed to find credential_process entry: %v" , err )
136- }
137-
138- return key .String (), nil
139- }
140-
141- func runCredentialProcess (configPath string , credentialsPath string , profile string ) (* internal.AWSCredentialsJSON , error ) {
142- credentialProcess , err := findCredentialProcess (credentialsPath , profile )
143- if err == nil {
144- return tryRunCredentialProcess (credentialProcess )
145- }
146-
147- // yes, the ~/.aws/config has a different naming scheme for profile names (must be prefixed with "profile")
148- configProfileName := profile
149- if profile != "default" {
150- configProfileName = fmt .Sprintf ("profile %s" , profile )
151- }
152- credentialProcess , err = findCredentialProcess (configPath , configProfileName )
153- if err == nil {
154- return tryRunCredentialProcess (credentialProcess )
155- }
156-
157- return nil , fmt .Errorf ("not able to find a valid credential_process" )
158- }
159-
160- func getSignInToken (creds * internal.AWSCredentialsJSON ) (string , error ) {
65+ func getSignInToken (creds aws.Credentials ) (string , error ) {
16166 reqJSON := fmt .Sprintf (`{"sessionId":"%s","sessionKey":"%s","sessionToken":"%s"}` ,
16267 creds .AccessKeyID ,
16368 creds .SecretAccessKey ,
0 commit comments