tech.io.auth — techascent/tech.io 2.5

Authentication layer designed to work with hashicorp vault's aws credentialling system. Given a function that takes no arguments but can produce a credential map, we want to store the latest version of the map but also be prepared for the current credentials to time out thus necessitating a new auth request. In order to do this, providers need to throw exceptions of the type: (ex-info "Doesn't matter" {:exception-action :request-credentials} This layer will then catch such exceptions and attempt threadsafe reauthentication.

auth-provider clj

(auth-provider cred-fn
               {:keys [re-request-time-ms src-provider]
                :or {re-request-time-ms (* 20 60 1000)
                     src-provider (cache/forwarding-provider
                                    :url-parts->provider
                                    io-prot/url-parts->provider)}})

You need to call com.stuartsierra.component/start on this to enable the credential request system.

get-credentials clj

(get-credentials re-request-ms src-cred-fn credential-atom)

get-vault-aws-creds clj

(get-vault-aws-creds vault-path options)

vault-aws-auth-provider clj

(vault-aws-auth-provider vault-path options)