From 6f00040411f64f9db1f833dc8a371a38bd70f958 Mon Sep 17 00:00:00 2001 From: Ravind Kumar Date: Tue, 23 Jan 2024 10:17:11 -0500 Subject: [PATCH] Update common-minio-oidc.rst jwt:PreferredUsername -> jwt:preferred_username --- source/includes/common/common-minio-oidc.rst | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/source/includes/common/common-minio-oidc.rst b/source/includes/common/common-minio-oidc.rst index d8efd12e..e318895b 100644 --- a/source/includes/common/common-minio-oidc.rst +++ b/source/includes/common/common-minio-oidc.rst @@ -81,7 +81,7 @@ Each variable corresponds to a claim returned as part of the authenticated user' See the `OpenID Connect Core 1.0 `__ document for more information on these scopes. Your OIDC provider of choice may have more specific documentation. -For example, the following policy uses variables to substitute the authenticated user's ``PreferredUsername`` as part of the ``Resource`` field such that the user can only access those prefixes which match their username: +For example, the following policy uses variables to substitute the authenticated user's ``preferred_username`` as part of the ``Resource`` field such that the user can only access those prefixes which match their username: .. code-block:: json @@ -92,7 +92,7 @@ For example, the following policy uses variables to substitute the authenticated "Action": ["s3:ListBucket"], "Effect": "Allow", "Resource": ["arn:aws:s3:::mybucket"], - "Condition": {"StringLike": {"s3:prefix": ["${jwt:PreferredUsername}/*"]}} + "Condition": {"StringLike": {"s3:prefix": ["${jwt:preferred_username}/*"]}} }, { "Action": [ @@ -100,12 +100,12 @@ For example, the following policy uses variables to substitute the authenticated "s3:PutObject" ], "Effect": "Allow", - "Resource": ["arn:aws:s3:::mybucket/${jwt:PreferredUsername}/*"] + "Resource": ["arn:aws:s3:::mybucket/${jwt:preferred_username}/*"] } ] } -MinIO replaces the ``${jwt:PreferredUsername}`` variable in the ``Resource`` field with the value of the ``PreferredUsername`` in the JWT token. +MinIO replaces the ``${jwt:preferred_username}`` variable in the ``Resource`` field with the value of the ``preferred_username`` in the JWT token. MinIO then evaluates the policy and grants or revokes access to the requested API and resource. .. end-minio-oidc-policy-variables