Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support "trusted profile assume" with a go authenticator. #226

Open
sjhx opened this issue Aug 15, 2024 · 1 comment
Open

Support "trusted profile assume" with a go authenticator. #226

sjhx opened this issue Aug 15, 2024 · 1 comment

Comments

@sjhx
Copy link
Member

sjhx commented Aug 15, 2024

Is your feature request related to a problem? Please describe.
missing feature I believe at least in the go sdk

Describe the solution you'd like
Essentially do this:

curl -X POST "https://iam.cloud.ibm.com/identity/token"\
  --header "Content-Type: application/x-www-form-urlencoded"\
  --data-urlencode 'grant_type=urn:ibm:params:oauth:grant-type:assume'\
  --data-urlencode 'access_token=ACCESS-TOKEN'\
  --data-urlencode 'profile_id=ProfileId-123123123'

Describe alternatives you've considered
unable to see how to do this with the SDK publisjed

Additional context
I could not find a way with the provided SDK to assume a trusted profile.
I ended up writing an authenticator to wrap and IAMAuthenticator (containing service apikey) which generates a token for the trusted profile that the apikey is allowed to assume. I think this should be provided.

@padamstx
Copy link
Member

Looking into this... will consult with IAM team for more info.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants