Commit 60617d0b by Erik Sundell

stackdriver: wip - add logic for retrieving token from gce metadata server in the auth provider

parent 77e4c424
......@@ -55,24 +55,24 @@ func ApplyRoute(ctx context.Context, req *http.Request, proxyPath string, route
}
}
// if route.JwtTokenAuth != nil && len(ds.SecureJsonData["privateKey"]) != 0 {
// if token, err := tokenProvider.getJwtAccessToken(ctx, data); err != nil {
// logger.Error("Failed to get access token", "error", err)
// } else {
// req.Header.Add("Authorization", fmt.Sprintf("Bearer %s", token))
// }
// }
if ds.Type == "stackdriver" {
defaultCredentials, err := google.FindDefaultCredentials(ctx, route.JwtTokenAuth.Scopes...)
gceAutoAuthentication := ds.JsonData.Get("gceAutomaticAuthentication").MustBool()
if route.JwtTokenAuth != nil && !gceAutoAuthentication {
if token, err := tokenProvider.getJwtAccessToken(ctx, data); err != nil {
logger.Error("Failed to get access token", "error", err)
} else {
req.Header.Add("Authorization", fmt.Sprintf("Bearer %s", token))
}
}
if gceAutoAuthentication {
tokenSrc, err := google.DefaultTokenSource(ctx, route.JwtTokenAuth.Scopes...)
if err != nil {
logger.Error("Failed to get default credentials", "error", err)
} else {
token, err := defaultCredentials.TokenSource.Token()
token, err := tokenSrc.Token()
if err != nil {
logger.Error("Failed to get default access token", "error", err)
} else {
ds.JsonData.Set("defaultProject", defaultCredentials.ProjectID)
req.Header.Add("Authorization", fmt.Sprintf("Bearer %s", token.AccessToken))
}
}
......
......@@ -521,8 +521,9 @@ func replaceWithMetricPart(metaPartName string, metricType string) []byte {
func getProjectName(ctx context.Context, dsInfo *models.DataSource, route *plugins.AppPluginRoute) (string, error) {
var projectName string
gceAutoAuthentication := dsInfo.JsonData.Get("gceAutoAuthentication").MustBool()
if gceAutoAuthentication {
gceAutomaticAuthentication := dsInfo.JsonData.Get("gceAutomaticAuthentication").MustBool()
logger.Info("gceAutomaticAuthentication", "gceAutomaticAuthentication", gceAutomaticAuthentication)
if gceAutomaticAuthentication {
defaultCredentials, err := google.FindDefaultCredentials(ctx, route.JwtTokenAuth.Scopes...)
if err != nil {
return "", err
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment