New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

基于阿里云sts token的方式初始化client #128

Open

dazenggezaici opened this issue Dec 17, 2024 · 0 comments

dazenggezaici commented Dec 17, 2024

目前使用阿里云SAE作为后端服务器，我们不希望将AKSK配置在环境变量中。

SAE支持使用RRSA OIDC扮演Role，扮演后可以使用https://api.aliyun.com/api/Sts/2015-04-01/AssumeRoleWithOIDC这个接口可以获取到临时AccessKeyId、AccessKeySecret、SecurityToken，这个Role有nacos权限的，想通过这个临时的AK、SK、Token初始化nacos的client，这样全程使用自动生成的临时AK来调用服务，可以更大程度的保证AK不泄露。

阿里云官网SDK使用STS Token的配置说明：https://help.aliyun.com/zh/sdk/developer-reference/v2-manage-node-js-access-credentials#61e3df504bhpg

感谢支持！

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment