Chris LuandGitHub bc1d458fe6 fix(iam): reject empty issuer in ComputeParentUser (#9326) ...

Without iss, the same `sub` from two different IDPs would collapse to
the same parent_user hash. Short-circuit to empty when either input
is missing so callers see "no identity" instead of a colliding hash.

Addresses coderabbit review on PR #9318.

2026-05-05 13:01:33 -07:00

..

integration

feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320)

2026-05-05 11:26:08 -07:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

oidc

feat(iam): claim-based policy mode for AssumeRoleWithWebIdentity (Phase 3b) (#9322)

2026-05-05 12:21:55 -07:00

policy

feat(iam): principal session tags from OIDC tokens (Phase 3a) (#9321)

2026-05-05 11:43:05 -07:00

providers

feat(iam): claim-based policy mode for AssumeRoleWithWebIdentity (Phase 3b) (#9322)

2026-05-05 12:21:55 -07:00

sts

fix(iam): reject empty issuer in ComputeParentUser (#9326)

2026-05-05 13:01:33 -07:00

util

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

utils

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

constants.go

Fix special characters in admin-generated secret keys (#7994)

2026-01-09 11:55:17 -08:00

helpers.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

redact_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

redact.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

responses_test.go

s3/iam: reuse one request id per request (#8538)

2026-03-06 15:22:39 -08:00

responses.go

feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320)

2026-05-05 11:26:08 -07:00

validation_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

validation.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00