Chris Lu 249c29a470 fix(iam): resolve STS policy bypass for admin sessions ...

- Fixed IsActionAllowed in iam_manager.go to correctly identify and validate internal STS tokens, ensuring session policies are enforced.
- Refactored VerifyActionPermission in auth_credentials.go to properly handle session tokens and avoid legacy authorization short-circuits.
- Added debug logging for better tracing of policy evaluation and session validation.

2026-02-14 21:41:15 -08:00

..

advanced_policy_test.go

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

cached_role_store_generic.go

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

iam_integration_test.go

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

iam_manager_trust.go

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

iam_manager.go

fix(iam): resolve STS policy bypass for admin sessions

2026-02-14 21:41:15 -08:00

role_store_test.go

fix: comprehensive go vet error fixes and add CI enforcement (#7861)

2025-12-23 14:48:50 -08:00

role_store.go

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00