Nike-Inc / gimme-aws-creds

A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials
Apache License 2.0
919 stars 262 forks source link

Disable `ctap-keyring-device` on Windows with Python3.10+ #465

Closed epierce closed 3 months ago

epierce commented 3 months ago

Description

All of the released versions of ctap-keyring-device require winRT on Windows, which does not support Python 3.10+ Support for the replacement library (winSDK) was added to ctap-keyring-device in 2022, but it still hasn't been released and the project appears to be abandoned. We will likely need to fork the project to release a new version, but that's a longer-term project. My first priority is making it possible to install the latest version of gimme-aws-creds on Windows with a Python version newer than 3.9.

The obvious downside of not having access to the ctap-keyring-device library is that WebAuthn support will not be available in Windows with Python 3.10+, but all other factors will be available. This change only affects Windows running Python 3.10+ - all other platforms/Python versions retain WebAuthn functionality.

Related Issue

435

430

337

320

Motivation and Context

Downgrading Python to use gimme-aws-creds isn't a valid option for Windows users. Binaries for the latest version of Python 3.9 are no longer available for Windows anyway. This makes it possible to use the latest version without support WebAuthn factors

How Has This Been Tested?

Tested on Windows 11 with Python 3.9, 3.12 and 3.13 WebAuthn support tested an working on

Types of changes

Checklist: