Support any principal ("*") in STS role policies

Neon-White · Neon-White · commit 8a1d91dd26de · 2024-09-10T14:56:37.000+02:00
Signed-off-by: Ben &lt;belimele@redhat.com&gt;
diff --git a/src/endpoint/sts/sts_rest.js b/src/endpoint/sts/sts_rest.js
@@ -215,7 +215,7 @@ function _is_statements_fit(statements, method, cur_account_email) {
         // who can do that action
         for (const principal of statement.principal) {
             dbg.log0('assume_role_policy: principal fit?', principal.unwrap().toString(), cur_account_email);
-            if (principal.unwrap() === cur_account_email) {
+            if ((principal.unwrap() === cur_account_email) || (principal.unwrap() === '*')) {
                 principal_fit = true;
             }
         }

Original file line number	Diff line number	Diff line change
`@@ -215,7 +215,7 @@ function _is_statements_fit(statements, method, cur_account_email) {`
`215`	`215`	`// who can do that action`
`216`	`216`	`for (const principal of statement.principal) {`
`217`	`217`	`dbg.log0('assume_role_policy: principal fit?', principal.unwrap().toString(), cur_account_email);`
`218`		`- if (principal.unwrap() === cur_account_email) {`
	`218`	`+ if ((principal.unwrap() === cur_account_email) \|\| (principal.unwrap() === '*')) {`
`219`	`219`	`principal_fit = true;`
`220`	`220`	`}`
`221`	`221`	`}`