Authentication & Authorization | Tigris Object Storage Documentation mentions time-limited session tokens, which is a thing I am interested in utilizing.
What are the APIs to create and manage session tokens?
I think I can emulate something similar with access keys, IAM policies, and a cleanup job, but if it’s already a feature, I’ll just use that.
Hi @AstraLuma
This authentication mechanism is not exposed as an API. Our web dashboard utilizes this method of authentication.
We have a feature in our backlog that provides ephemeral access keys. Session token is an STS API method. Can you elaborate your use-case little more?
I have a system that manages buckets and hands out bucket tokens to other systems.
Having ephemeral tokens is an important part of the security model. Having fly handle the ephemerality would be good, but like I said, I can implement it myself.
I’d be happy to discuss in more detail privately.