vault

type AssumeRoleProvider struct {
	StsClient       *sts.STS
	RoleARN         string
	RoleSessionName string
	ExternalID      string
	Duration        time.Duration
	ExpiryWindow    time.Duration
	Mfa
	credentials.Expiry
}

type CachedSessionProvider struct {
	SessionKey      SessionKey
	CredentialsFunc func() (*sts.Credentials, error)
	Keyring         *SessionKeyring
	ExpiryWindow    time.Duration
	credentials.Expiry
}

type Config struct {
	// ProfileName specifies the name of the profile config
	ProfileName string

	// SourceProfile is the profile where credentials come from
	SourceProfileName string

	// SourceProfile is the profile where credentials come from
	SourceProfile *Config

	// ChainedFromProfile is the profile that used this profile as it's source profile
	ChainedFromProfile *Config

	// Region is the AWS region
	Region string

	// Mfa config
	MfaSerial       string
	MfaToken        string
	MfaPromptMethod string

	// AssumeRole config
	RoleARN         string
	RoleSessionName string
	ExternalID      string

	// GetSessionTokenDuration specifies the wanted duration for credentials generated with AssumeRole
	AssumeRoleDuration time.Duration

	// NonChainedGetSessionTokenDuration specifies the wanted duration for credentials generated with GetSessionToken
	NonChainedGetSessionTokenDuration time.Duration

	// ChainedGetSessionTokenDuration specifies the wanted duration for credentials generated with GetSessionToken when chaining
	ChainedGetSessionTokenDuration time.Duration

	// GetFederationTokenDuration specifies the wanted duration for credentials generated with GetFederationToken
	GetFederationTokenDuration time.Duration

	// SSOStartURL specifies the URL for the AWS SSO user portal.
	SSOStartURL string

	// SSORegion specifies the region for the AWS SSO user portal.
	SSORegion string

	// SSOAccountID specifies the AWS account ID for the profile.
	SSOAccountID string

	// SSORoleName specifies the AWS SSO Role name to target.
	SSORoleName string
}

type ConfigFile struct {
	Path string
	// contains filtered or unexported fields
}

type ConfigLoader struct {
	BaseConfig    Config
	File          *ConfigFile
	ActiveProfile string
	// contains filtered or unexported fields
}

type CredentialKeyring struct {
	Keyring keyring.Keyring
}

type FederationTokenProvider struct {
	StsClient    *sts.STS
	Name         string
	Duration     time.Duration
	ExpiryWindow time.Duration
	credentials.Expiry
}

type KeyringProvider struct {
	Keyring         *CredentialKeyring
	CredentialsName string
}

type Mfa struct {
	MfaToken        string
	MfaPromptMethod string
	MfaSerial       string
}

type ProfileSection struct {
	Name            string `ini:"-"`
	MfaSerial       string `ini:"mfa_serial,omitempty"`
	RoleARN         string `ini:"role_arn,omitempty"`
	ExternalID      string `ini:"external_id,omitempty"`
	Region          string `ini:"region,omitempty"`
	RoleSessionName string `ini:"role_session_name,omitempty"`
	DurationSeconds uint   `ini:"duration_seconds,omitempty"`
	SourceProfile   string `ini:"source_profile,omitempty"`
	ParentProfile   string `ini:"parent_profile,omitempty"` // deprecated
	IncludeProfile  string `ini:"include_profile,omitempty"`
	SSOStartURL     string `ini:"sso_start_url,omitempty"`
	SSORegion       string `ini:"sso_region,omitempty"`
	SSOAccountID    string `ini:"sso_account_id,omitempty"`
	SSORoleName     string `ini:"sso_role_name,omitempty"`
}

type SSORoleCredentialsProvider struct {
	OIDCClient   *ssooidc.SSOOIDC
	StartURL     string
	SSOClient    *sso.SSO
	AccountID    string
	RoleName     string
	ExpiryWindow time.Duration
	credentials.Expiry
}

type SessionKey struct {
	Type        string
	ProfileName string
	MfaSerial   string
}

type SessionKeyring struct {
	Keyring keyring.Keyring
	// contains filtered or unexported fields
}

type SessionMetadata struct {
	SessionKey
	Expiration time.Time
}

type SessionTokenProvider struct {
	StsClient    *sts.STS
	Duration     time.Duration
	ExpiryWindow time.Duration
	Mfa
	credentials.Expiry
}