Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-28869

Add a new API to refresh AWS tokens in the batch handler

    XMLWordPrintable

    Details

    • Tags:
    • Impact type:
      API change
    • Upgrade notes:
      Hide

      The new API BatchHandler.refreshToken(batchId) can be used to get new credentials. This is particularly interesting for big uploads to prevent hitting token timeout errors.

      It is implemented for S3DirectBatchHandler.

      Show
      The new API BatchHandler.refreshToken(batchId) can be used to get new credentials. This is particularly interesting for big uploads to prevent hitting token timeout errors. It is implemented for S3DirectBatchHandler .
    • Sprint:
      nxDrive 11.1.32, nxDrive 11.1.33, nxDrive 11.1.34
    • Story Points:
      8

      Description

      For the full context, see TL-336.

      We need a way to refresh AWS tokens of a S3 batch handler by calling assumeRole again. The current code is there:

      AssumeRoleRequest request = new AssumeRoleRequest().withRoleArn(roleArn)
                                                   .withPolicy(policy)
                                                   .withRoleSessionName(batchId);

      The new API could be called via SERVER_URL/batchId/refresh and return

      {
     "awsSecretAccessKey": "...",
     "awsSecretKeyId": "...",
     "awsSessionToken": "...",
     "batchId": "...",
     "expiration": long
}

        Attachments

          Issue Links

          is related to

          New Feature - A new feature of the product, which has yet to be developed. NXPY-163 Add the capability to refresh tokens in third-party batch handlers

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NXP-29131 Refresh AWS credentials when expired during an S3 upload

          • Major - Major loss of function.
          • Resolved
          Is referenced in

          [Captain Hook] PR for master: #4294 PR for master: #4294

          [Captain Hook] PR for master: #4597 PR for master: #4597

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 week, 2 days, 6 hours
                  1w 2d 6h