From: Matt Benjamin Date: Wed, 16 Sep 2020 11:20:51 +0000 (-0400) Subject: Merge pull request #35924 from pritha-srivastava/wip-rgw-sts-error-messages X-Git-Tag: v16.1.0~1084 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=6b31e3747be7c9831dd49f0fe81346bca7baac99;p=ceph.git Merge pull request #35924 from pritha-srivastava/wip-rgw-sts-error-messages rgw/sts: adding error log messages to STS code. --- 6b31e3747be7c9831dd49f0fe81346bca7baac99 diff --cc src/rgw/rgw_rest_sts.cc index 0f184b5c843c,90fff490c604..92a49bd508d3 --- a/src/rgw/rgw_rest_sts.cc +++ b/src/rgw/rgw_rest_sts.cc @@@ -339,11 -334,10 +342,12 @@@ WebTokenEngine::authenticate( const Dou if (t) { string role_session = s->info.args.get("RoleSessionName"); if (role_session.empty()) { + ldout(s->cct, 0) << "Role Session Name is empty " << dendl; return result_t::deny(-EACCES); } - auto apl = apl_factory->create_apl_web_identity(cct, s, role_session, *t); + string role_arn = s->info.args.get("RoleArn"); + string role_tenant = get_role_tenant(role_arn); + auto apl = apl_factory->create_apl_web_identity(cct, s, role_session, role_tenant, *t); return result_t::grant(std::move(apl)); } return result_t::deny(-EACCES);