apache / apache/opendal-reqsign

feat[security]: Don't use environment configurations unless explicitly enabled

Open
#514 2 comments 1 reaction 0 assignees View on GitHub
Dominant language
Rust
Stars
169
Forks
75
Avg merge
1d 21h
Merged PRs (30d)
16

Description

Currently some services, such as Azure-Storage, have no option to disable the use of workload identities.
This is a security risk as any binary that includes reqsign can access, without further configurations, files, the host machine has access to. For server applications this is problematic.
Instead, we should opt to a secure default, that is, users must specify credentials explicitly. Environment Credentials must be opt-in for security reasons alone, just like they are in all Cloud SDKs.

I think we should start by adding options to disable environment configuration first (Just like S3 which already has it), and switch to secure defaults in the next major release.

Contributor guide

Open the contributing guide

Research direction

Start by comparing the existing S3 option for disabling environment configuration with the Azure-Storage and workload-identity paths described in the issue. Identify which services need an explicit opt-in and define completion as equivalent disable options being available, while keeping the secure-default change for the next major release.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, rust
Domain
cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.