[DRIVERS-2493] Ensure Auth Environment Variables are Always Dynamic Created: 02/Nov/22 Updated: 08/Nov/22 |
|
| Status: | Implementing |
| Project: | Drivers |
| Component/s: | None |
| Fix Version/s: | None |
| Type: | Task | Priority: | Unknown |
| Reporter: | Steve Silvester | Assignee: | Steve Silvester |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||||||||||||||||||||||||||||||
| Driver Changes: | Needed | ||||||||||||||||||||||||||||||||||||||||||||||||
| Downstream Changes Summary: |
Summary of required changes
Additional background Please see https://github.com/mongodb/specifications/commit/875446db44aade414011731840831f38a6c668dffor the specification change. Please see https://github.com/mongodb/mongo-python-driver/commit/ff94b0e3094f6bf08645ff0a491ec9b51f504b53 for a reference implementation in Python. Integration test Drivers are expected to add integration tests as described in the specification change |
||||||||||||||||||||||||||||||||||||||||||||||||
| Driver Compliance: |
|
||||||||||||||||||||||||||||||||||||||||||||||||
| Description |
SummaryWhat is the problem or use case, what are we trying to achieve? Drivers should ensure that credentials read from environment variables are never cached or stored, and instead are read as appropriate from the system. For programming languages that do not support dynamically changing environment variables, no change is necessary. MotivationWho is the affected end user? See |
| Comments |
| Comment by Githook User [ 08/Nov/22 ] |
|
Author: {'name': 'Steven Silvester', 'email': 'steven.silvester@ieee.org', 'username': 'blink1073'}Message: DRIVERS-2493 Ensure Auth Environment Variables are Always Dynamic (#1337) |
| Comment by Steve Silvester [ 02/Nov/22 ] |
|
In both cases the SDKS are using dynamic calls to fetch the credentials, and are not caching them. |
| Comment by Jeffrey Yemin [ 02/Nov/22 ] |
|
Do the C# and Python AWS SDKs abide by this behavior? Do they assume that the env vars can change at any time? |
| Comment by Steve Silvester [ 02/Nov/22 ] |
|
That's fair, both Python and C# support dynamic environment variables. I'll add a note that this only applies to languages that support it. |
| Comment by Jeffrey Yemin [ 02/Nov/22 ] |
|
I find this odd. I thought that environment variables were essentially constants. Java, for example, has a System.getenv method but no System.setenv. And IIRC the Java AWS SDK treats environment variables as constants. |