mirror of
https://github.com/Luzifer/cloudkeys-go.git
synced 2024-11-15 01:12:44 +00:00
9c6e3c89a5
* fix js scoping issue * add external libraries (they were offline too often) * new compiled scripts and css * new fixes in the binary * vendor update * change js source * remove needless variable * removed more needless variables
67 lines
2.1 KiB
Go
67 lines
2.1 KiB
Go
package rdsutils
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/aws/aws-sdk-go/aws/credentials"
|
|
"github.com/aws/aws-sdk-go/aws/signer/v4"
|
|
)
|
|
|
|
// BuildAuthToken will return an authorization token used as the password for a DB
|
|
// connection.
|
|
//
|
|
// * endpoint - Endpoint consists of the port needed to connect to the DB. <host>:<port>
|
|
// * region - Region is the location of where the DB is
|
|
// * dbUser - User account within the database to sign in with
|
|
// * creds - Credentials to be signed with
|
|
//
|
|
// The following example shows how to use BuildAuthToken to create an authentication
|
|
// token for connecting to a MySQL database in RDS.
|
|
//
|
|
// authToken, err := BuildAuthToken(dbEndpoint, awsRegion, dbUser, awsCreds)
|
|
//
|
|
// // Create the MySQL DNS string for the DB connection
|
|
// // user:password@protocol(endpoint)/dbname?<params>
|
|
// connectStr = fmt.Sprintf("%s:%s@tcp(%s)/%s?allowCleartextPasswords=true&tls=rds",
|
|
// dbUser, authToken, dbEndpoint, dbName,
|
|
// )
|
|
//
|
|
// // Use db to perform SQL operations on database
|
|
// db, err := sql.Open("mysql", connectStr)
|
|
//
|
|
// See http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html
|
|
// for more information on using IAM database authentication with RDS.
|
|
func BuildAuthToken(endpoint, region, dbUser string, creds *credentials.Credentials) (string, error) {
|
|
// the scheme is arbitrary and is only needed because validation of the URL requires one.
|
|
if !(strings.HasPrefix(endpoint, "http://") || strings.HasPrefix(endpoint, "https://")) {
|
|
endpoint = "https://" + endpoint
|
|
}
|
|
|
|
req, err := http.NewRequest("GET", endpoint, nil)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
values := req.URL.Query()
|
|
values.Set("Action", "connect")
|
|
values.Set("DBUser", dbUser)
|
|
req.URL.RawQuery = values.Encode()
|
|
|
|
signer := v4.Signer{
|
|
Credentials: creds,
|
|
}
|
|
_, err = signer.Presign(req, nil, "rds-db", region, 15*time.Minute, time.Now())
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
url := req.URL.String()
|
|
if strings.HasPrefix(url, "http://") {
|
|
url = url[len("http://"):]
|
|
} else if strings.HasPrefix(url, "https://") {
|
|
url = url[len("https://"):]
|
|
}
|
|
|
|
return url, nil
|
|
}
|