Contents

require "thread"

module AwsAssumeRole::Vendored::Aws
    # Base class used credential classes that can be refreshed. This
    # provides basic refresh logic in a thread-safe manor. Classes mixing in
    # this module are expected to implement a #refresh method that populates
    # the following instance variables:
    #
    # * `@access_key_id`
    # * `@secret_access_key`
    # * `@session_token`
    # * `@expiration`
    #
    # @api private
    module RefreshingCredentials
        def initialize(_options = {})
            @mutex = Mutex.new
            refresh
      end

        # @return [Credentials]
        def credentials
            refresh_if_near_expiration
            @credentials
        end

        # @return [Time,nil]
        def expiration
            refresh_if_near_expiration
            @expiration
        end

        # Refresh credentials.
        # @return [void]
        def refresh!
            @mutex.synchronize { refresh }
        end

        private

        # Refreshes instance metadata credentials if they are within
        # 5 minutes of expiration.
        def refresh_if_near_expiration
            if near_expiration?
                @mutex.synchronize do
                    refresh if near_expiration?
                end
            end
        end

        def near_expiration?
            if @expiration
                # are we within 5 minutes of expiration?
                (Time.now.to_i + 5 * 60) > @expiration.to_i
            else
                true
            end
        end
      end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
aws_assume_role-0.1.1	lib/aws_assume_role/vendored/aws/refreshing_credentials.rb
aws_assume_role-0.1.0	lib/aws_assume_role/vendored/aws/refreshing_credentials.rb