Chris Lu 18ae84e1ec fix(iam): reject empty issuer in ComputeParentUser ...

Without iss, the same `sub` from two different IDPs would collapse to
the same parent_user hash. Short-circuit to empty when either input
is missing so callers see "no identity" instead of a colliding hash.

Addresses coderabbit review on PR #9318.

2026-05-04 22:14:01 -07:00

..

integration

fix(iam): leave omitted DurationSeconds nil so STS default applies

2026-05-04 22:06:19 -07:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

oidc

fix(iam): require non-empty issuer in OIDC discovery doc

2026-05-04 22:06:19 -07:00

policy

fix(iam): substitute dynamic jwt:/saml:/oidc: claim variables in policies (#9217)

2026-04-24 13:08:24 -07:00

providers

feat(iam): STS web-identity AWS-fidelity polish

2026-05-04 22:06:19 -07:00

sts

fix(iam): reject empty issuer in ComputeParentUser

2026-05-04 22:14:01 -07:00

util

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

utils

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

constants.go

Fix special characters in admin-generated secret keys (#7994)

2026-01-09 11:55:17 -08:00

helpers.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

redact_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

redact.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

responses_test.go

s3/iam: reuse one request id per request (#8538)

2026-03-06 15:22:39 -08:00

responses.go

feat(iam): implement group inline policy actions (#8992)

2026-04-08 15:57:04 -07:00

validation_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

validation.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00