aliyun-openapi-cpp-sdk/core/src/StsAssumeRoleCredentialsProvider.cc

/*
 * Copyright 1999-2019 Alibaba Cloud All rights reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <alibabacloud/core/StsAssumeRoleCredentialsProvider.h>
#include <iomanip>
#include <sstream>

namespace AlibabaCloud {

StsAssumeRoleCredentialsProvider::StsAssumeRoleCredentialsProvider(
    const Credentials &credentials, const ClientConfiguration &configuration,
    const std::string &roleArn, const std::string &roleSessionName,
    const std::string &policy, int durationSeconds)
    : CredentialsProvider(), StsClient(credentials, configuration),
      roleArn_(roleArn), roleSessionName_(roleSessionName), policy_(policy),
      durationSeconds_(durationSeconds), cachedMutex_(),
      cachedCredentials_("", ""), expiry_() {}

StsAssumeRoleCredentialsProvider::~StsAssumeRoleCredentialsProvider() {}

Credentials StsAssumeRoleCredentialsProvider::getCredentials() {
  loadCredentials();
  std::lock_guard<std::mutex> locker(cachedMutex_);
  return cachedCredentials_;
}

bool StsAssumeRoleCredentialsProvider::checkExpiry() const {
  auto now = std::chrono::system_clock::now();
  auto diff =
      std::chrono::duration_cast<std::chrono::seconds>(now - expiry_).count();

  return (diff > 0 - 60);
}

void StsAssumeRoleCredentialsProvider::loadCredentials() {
  if (checkExpiry()) {
    std::lock_guard<std::mutex> locker(cachedMutex_);
    if (checkExpiry()) {
      Sts::Model::AssumeRoleRequest request;
      request.setRoleArn(roleArn_);
      request.setRoleSessionName(roleSessionName_);
      request.setPolicy(policy_);
      request.setDurationSeconds(durationSeconds_);

      auto assumeRoleOutcome = assumeRole(request);
      if (assumeRoleOutcome.isSuccess()) {
        const auto stsCredentials = assumeRoleOutcome.result().credentials();
        cachedCredentials_ = Credentials(stsCredentials.accessKeyId,
                                         stsCredentials.accessKeySecret,
                                         stsCredentials.securityToken);

        std::tm tm = {};
#if defined(__GNUG__) && __GNUC__ < 5
        strptime(stsCredentials.expiration.c_str(), "%Y-%m-%dT%H:%M:%SZ", &tm);
#else
        std::stringstream ss(stsCredentials.expiration);
        ss >> std::get_time(&tm, "%Y-%m-%dT%H:%M:%SZ");
#endif
        expiry_ = std::chrono::system_clock::from_time_t(std::mktime(&tm));
      }
    }
  }
}

} // namespace AlibabaCloud