{"action":"created","issue":{"url":"https://api.github.com/repos/venth/aws-adfs/issues/17","repository_url":"https://api.github.com/repos/venth/aws-adfs","labels_url":"https://api.github.com/repos/venth/aws-adfs/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/venth/aws-adfs/issues/17/comments","events_url":"https://api.github.com/repos/venth/aws-adfs/issues/17/events","html_url":"https://github.com/venth/aws-adfs/issues/17","id":191489415,"number":17,"title":"Add an option to change the STS token duration","user":{"login":"n-my","id":4321410,"avatar_url":"https://avatars.githubusercontent.com/u/4321410?v=3","gravatar_id":"","url":"https://api.github.com/users/n-my","html_url":"https://github.com/n-my","followers_url":"https://api.github.com/users/n-my/followers","following_url":"https://api.github.com/users/n-my/following{/other_user}","gists_url":"https://api.github.com/users/n-my/gists{/gist_id}","starred_url":"https://api.github.com/users/n-my/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/n-my/subscriptions","organizations_url":"https://api.github.com/users/n-my/orgs","repos_url":"https://api.github.com/users/n-my/repos","events_url":"https://api.github.com/users/n-my/events{/privacy}","received_events_url":"https://api.github.com/users/n-my/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-11-24T10:52:33Z","updated_at":"2016-11-27T12:50:01Z","closed_at":null,"body":"Now that we can specify an AWS console session duration using SAML 2.0 (see [here](https://aws.amazon.com/blogs/security/enable-your-federated-users-to-work-in-the-aws-management-console-for-up-to-12-hours/)) it would be nice to have an option to set the STS token duration in aws-adfs.\r\n\r\nThe idea is that if I can have a 12h session I don't want to re-log every hour because the STS token duration being hardcoded to 3600 seconds.\r\n\r\nWhat do you think ?"},"comment":{"url":"https://api.github.com/repos/venth/aws-adfs/issues/comments/263120499","html_url":"https://github.com/venth/aws-adfs/issues/17#issuecomment-263120499","issue_url":"https://api.github.com/repos/venth/aws-adfs/issues/17","id":263120499,"user":{"login":"venth","id":3862264,"avatar_url":"https://avatars.githubusercontent.com/u/3862264?v=3","gravatar_id":"","url":"https://api.github.com/users/venth","html_url":"https://github.com/venth","followers_url":"https://api.github.com/users/venth/followers","following_url":"https://api.github.com/users/venth/following{/other_user}","gists_url":"https://api.github.com/users/venth/gists{/gist_id}","starred_url":"https://api.github.com/users/venth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/venth/subscriptions","organizations_url":"https://api.github.com/users/venth/orgs","repos_url":"https://api.github.com/users/venth/repos","events_url":"https://api.github.com/users/venth/events{/privacy}","received_events_url":"https://api.github.com/users/venth/received_events","type":"User","site_admin":false},"created_at":"2016-11-27T12:50:01Z","updated_at":"2016-11-27T12:50:01Z","body":"I've removed DurationSeconds limit counting that SessionDuration attribute in saml response will be honored. Unfortunately, it looks that sts API ignores this attribute and sticks to one hour limit. Providing explicit longer DurationSeconds results in validation error.\r\n\r\nI've created feature branch: `feature/STS-token-duration` so you may browse implementation by yourself. Short info for hacking: \r\n* create virtual environment\r\n* pip install --editable ./\r\n* use aws-adfs --verbose login ...\r\n\r\nIf you have any suggestions for extending session time I'm open ;)"}}
{"actor":{"display_login":"venth"}}