Gsts Versions Save

Obtain and store AWS STS credentials to interact with Amazon services by authenticating via G Suite SAML.

v5.0.4

4 months ago

Changelog

  • Bump dependencies.
  • Fix engines.node version constraint on package.json.

v5.0.3

4 months ago

Changelog

  • Bump dependencies.

v5.0.2

9 months ago

Changelog

Improvements

  • Fix issue preventing interactive (headful) mode from being triggered when the Account Chooser dialog was being presented on Google authentication systems.

v5.0.1

9 months ago

Changelog

Improvements

  • Fix issues with using multiple AWS profiles.

Notable Updates

v5.0.0

1 year ago

This version introduces a major shift of gsts to a credential_process provider - so much, in fact, that its internal structure has been completely adapted to behave like one by default.

As part of this refactor, there are a number of breaking changes too.

Breaking Changes

  • gsts is now a credential_process provider and should not called manually anymore.

    The ~/.aws/config should similar to the below:

    [default]
    credential_process = gsts --idp-id=12345 --sp-id=67890
    
  • Credentials are no longer stored under ~/.aws/config but instead under gsts own cache directory (~/Library/Caches/gsts on macOS, %LOCALAPPDATA%\gsts\Cache on Windows and ~/.cache/gsts on Linux) .

  • All command line parameters are now overridable by corresponding environment variables with the GSTS_ prefix.

  • Remove --google-* aliases.

  • Remove support for node < 18.

  • Daemon support has been removed in favor of the credential_process setup.

  • Playwright-specific parameters (--engine-executable-path, --engine) have had --playwright added to them to make it more explicit on what they achieve (--playwright-engine-executable-path and --playwright-engine).

New Features

  • Add support for cacheless operation mode with --no-credentials-cache.
  • Add support for processing the following AWS CLI variables:
    • AWS_REGION
    • AWS_DEFAULT_REGION
    • AWS_PROFILE
  • Add support for configuring gsts under ~/.aws/config (or any other directory configured via $AWS_CONFIG_FILE).
  • Add support for setting the playwright engine channel via --playwright-engine-channel.
  • Store SAML assertion in cache for further automation power.

Improvements

  • Migrated to AWS SDK v3.
  • Fix headless hang when Google forces interactive login mode.
  • Logging has been reworked to make gsts a lot less verbose and respect non-TTY sessions more accurately.
  • Set permissions for credentials file for read-write to the owner only (600).

Notable Updates

v4.1.0

1 year ago

Changelog

  • Add support for Okta
  • Sort by ARN when interactively prompting so that accounts are grouped together when multiple roles exist

v4.0.1

2 years ago

Changelog

  • Fix authentication request redirect getting stuck after successful logins

v4.0.0

2 years ago

Changelog

  • Add support for macOS Monterey

v3.0.7

2 years ago

Changelog

  • Improve error logging messages

v3.0.6

2 years ago

Changelog

  • Prevent hanging logins to non-default regions
  • Add release workflow to update homebrew formula