fix: token type retrieved in WebIdentity provider (#1446)

minio · Sep 28, 2024 · adca8ad · adca8ad
1 parent d31ff33
commit adca8ad
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/minio/credentials/providers.py b/minio/credentials/providers.py
@@ -656,7 +656,7 @@ def retrieve(self) -> Credentials:
 
  if self._is_web_identity():
  query_params["Action"] = "AssumeRoleWithWebIdentity"
- query_params["WebIdentityToken"] = jwt.get("access_token", "")
+ query_params["WebIdentityToken"] = jwt.get("id_token", "")
  if self._role_arn:
  query_params["RoleArn"] = self._role_arn
  query_params["RoleSessionName"] = (
@@ -666,7 +666,7 @@ def retrieve(self) -> Credentials:
  )
  else:
  query_params["Action"] = "AssumeRoleWithClientGrants"
- query_params["Token"] = jwt.get("access_token", "")
+ query_params["Token"] = jwt.get("id_token", "")
 
  url = self._sts_endpoint + "?" + urlencode(query_params)
  res = _urlopen(self._http_client, "POST", url)