ben.carrasco/jambonz-feature-server
1
0
Fork 0
mirror of https://github.com/jambonz/jambonz-feature-server.git synced 2025-12-20 16:50:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixed iamrole from sessionToken to securityToken (#988)

Browse Source 
* fixed iamrole from sessionToken to securityToken

* wip

* support get aws credential from instance profile
This commit is contained in:
Hoan Luu Huu
2024-11-30 09:58:42 +07:00
committed by GitHub
parent 070671a3fb
commit e96c35d571
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
lib/tasks/stt-task.js
View File

@@ -219,7 +219,8 @@ class SttTask extends Task {
roleArn roleArn
}); });
this.logger.debug({roleArn}, `(roleArn) got aws access token ${servedFromCache ? 'from cache' : ''}`); this.logger.debug({roleArn}, `(roleArn) got aws access token ${servedFromCache ? 'from cache' : ''}`);
credentials = {...credentials, accessKeyId, secretAccessKey, sessionToken}; // from role ARN, we will get SessionToken, but feature server use it as securityToken.
credentials = {...credentials, accessKeyId, secretAccessKey, securityToken: sessionToken};
} }
else if (vendor === 'verbio' && credentials.client_id && credentials.client_secret) { else if (vendor === 'verbio' && credentials.client_id && credentials.client_secret) {
const {access_token, servedFromCache} = await getVerbioAccessToken(credentials); const {access_token, servedFromCache} = await getVerbioAccessToken(credentials);
@@ -229,9 +230,13 @@ class SttTask extends Task {
} }
else if (vendor == 'aws' && !JAMBONES_AWS_TRANSCRIBE_USE_GRPC) { else if (vendor == 'aws' && !JAMBONES_AWS_TRANSCRIBE_USE_GRPC) {
/* get AWS access token */ /* get AWS access token */
const {accessKeyId, secretAccessKey, securityToken, region } = credentials; const {speech_credential_sid, accessKeyId, secretAccessKey, securityToken, region } = credentials;
if (!securityToken) { if (!securityToken) {
const { servedFromCache, ...newCredentials} = await getAwsAuthToken({accessKeyId, secretAccessKey, region}); const { servedFromCache, ...newCredentials} = await getAwsAuthToken({
speech_credential_sid,
accessKeyId,
secretAccessKey,
region});
this.logger.debug({newCredentials}, `got aws security token ${servedFromCache ? 'from cache' : ''}`); this.logger.debug({newCredentials}, `got aws security token ${servedFromCache ? 'from cache' : ''}`);
credentials = {...newCredentials, region}; credentials = {...newCredentials, region};
} }