func()

in sdk/auth/credentials/provider/profile_credentials.go [40:129]
86 lines of code
33 McCabe index (conditional complexity)

func (p *ProfileProvider) Resolve() (auth.Credential, error) {
	path, ok := os.LookupEnv(ENVCredentialFile)
	if !ok {
		var err error
		path, err = checkDefaultPath()
		if err != nil {
			return nil, err
		}
		if path == "" {
			return nil, nil
		}
	} else if path == "" {
		return nil, errors.New("Environment variable '" + ENVCredentialFile + "' cannot be empty")
	}

	ini, err := ini.Load(path)
	if err != nil {
		return nil, errors.New("ERROR: Can not open file" + err.Error())
	}

	section, err := ini.GetSection(p.Profile)
	if err != nil {
		return nil, errors.New("ERROR: Can not load section" + err.Error())
	}

	value, err := section.GetKey("type")
	if err != nil {
		return nil, errors.New("ERROR: Can not find credential type" + err.Error())
	}

	switch value.String() {
	case "access_key":
		value1, err1 := section.GetKey("access_key_id")
		value2, err2 := section.GetKey("access_key_secret")
		if err1 != nil || err2 != nil {
			return nil, errors.New("ERROR: Failed to get value")
		}
		if value1.String() == "" || value2.String() == "" {
			return nil, errors.New("ERROR: Value can't be empty")
		}
		return credentials.NewAccessKeyCredential(value1.String(), value2.String()), nil
	case "ecs_ram_role":
		value1, err1 := section.GetKey("role_name")
		if err1 != nil {
			return nil, errors.New("ERROR: Failed to get value")
		}
		if value1.String() == "" {
			return nil, errors.New("ERROR: Value can't be empty")
		}
		return credentials.NewEcsRamRoleCredential(value1.String()), nil
	case "ram_role_arn":
		value1, err1 := section.GetKey("access_key_id")
		value2, err2 := section.GetKey("access_key_secret")
		value3, err3 := section.GetKey("role_arn")
		value4, err4 := section.GetKey("role_session_name")
		if err1 != nil || err2 != nil || err3 != nil || err4 != nil {
			return nil, errors.New("ERROR: Failed to get value")
		}
		if value1.String() == "" || value2.String() == "" || value3.String() == "" || value4.String() == "" {
			return nil, errors.New("ERROR: Value can't be empty")
		}
		return credentials.NewRamRoleArnCredential(value1.String(), value2.String(), value3.String(), value4.String(), 3600), nil
	case "rsa_key_pair":
		value1, err1 := section.GetKey("public_key_id")
		value2, err2 := section.GetKey("private_key_file")
		if err1 != nil || err2 != nil {
			return nil, errors.New("ERROR: Failed to get value")
		}
		if value1.String() == "" || value2.String() == "" {
			return nil, errors.New("ERROR: Value can't be empty")
		}
		file, err := os.Open(value2.String())
		if err != nil {
			return nil, errors.New("ERROR: Can not get private_key")
		}
		defer file.Close()
		var privateKey string
		scan := bufio.NewScanner(file)
		var data string
		for scan.Scan() {
			if strings.HasPrefix(scan.Text(), "----") {
				continue
			}
			data += scan.Text() + "\n"
		}
		return credentials.NewRsaKeyPairCredential(privateKey, value1.String(), 3600), nil
	default:
		return nil, errors.New("ERROR: Failed to get credential")
	}
}