noobaa-core
noobaa-core copied to clipboard
Support the wildcard principal (`"*"`) in STS role config
Explain the changes
- Currently, if a user sets the principal which can assume a role via STS as
"*"
, it always fails since it compares"*"
to the email of the requester. This PR checks whether the policy principle is"*"
and allows it
Testing Instructions:
- Create two NooBaa accounts - 'assumed' and 'assumer'
- Assign a role config to
assumed
that allows anyone ("principal": ["*"]
) to assume it - Try to assume it with the credentials of
assumer
- Test the received credentials
- [ ] Doc added/updated
- [ ] Tests added