Add AWS http request signer

source/common/common/logger.h

@@ -22,6 +22,7 @@ namespace Logger {
 // clang-format off
 #define ALL_LOGGER_IDS(FUNCTION) \
   FUNCTION(admin)                \
+  FUNCTION(aws)                  \
   FUNCTION(assert)               \
   FUNCTION(backtrace)            \
   FUNCTION(client)               \

source/extensions/filters/http/common/aws/BUILD

@@ -0,0 +1,47 @@
+licenses(["notice"])  # Apache 2
+
+load(
+    "//bazel:envoy_build_system.bzl",
+    "envoy_cc_library",
+    "envoy_package",
+)
+
+envoy_package()
+
+envoy_cc_library(
+    name = "signer_lib",
+    hdrs = ["signer.h"],
+    deps = [
+        "//include/envoy/http:message_interface",
+    ],
+)
+
+envoy_cc_library(
+    name = "signer_impl_lib",
+    srcs = ["signer_impl.cc"],
+    hdrs = ["signer_impl.h"],
+    external_deps = ["ssl"],
+    deps = [
+        ":credentials_provider_lib",
+        ":region_provider_lib",
+        ":signer_lib",
+        "//source/common/buffer:buffer_lib",
+        "//source/common/common:assert_lib",
+        "//source/common/common:hex_lib",
+        "//source/common/common:logger_lib",
+        "//source/common/common:stack_array",
+        "//source/common/common:utility_lib",
+        "//source/common/http:headers_lib",
+    ],
+)
+
+envoy_cc_library(
+    name = "credentials_provider_lib",
+    hdrs = ["credentials_provider.h"],
+    external_deps = ["abseil_optional"],
+)
+
+envoy_cc_library(
+    name = "region_provider_lib",
+    hdrs = ["region_provider.h"],
+)

source/extensions/filters/http/common/aws/credentials_provider.h

@@ -0,0 +1,66 @@
+#pragma once
+
+#include <string>
+
+#include "envoy/common/pure.h"
+
+#include "absl/types/optional.h"
+
+namespace Envoy {
+namespace Extensions {
+namespace HttpFilters {
+namespace Common {
+namespace Aws {
+
+class Credentials {
+public:
+  Credentials() = default;
+
+  ~Credentials() = default;
+
+  Credentials(const std::string& access_key_id, const std::string& secret_access_key)
+      : access_key_id_(access_key_id), secret_access_key_(secret_access_key) {}
+
+  Credentials(const std::string& access_key_id, const std::string& secret_access_key,
+              const std::string& session_token)
+      : access_key_id_(access_key_id), secret_access_key_(secret_access_key),
+        session_token_(session_token) {}
+
+  void setAccessKeyId(const std::string& access_key_id) {
+    access_key_id_ = absl::optional<std::string>(access_key_id);
+  }
+
+  const absl::optional<std::string>& accessKeyId() const { return access_key_id_; }
+
+  void setSecretAccessKey(const std::string& secret_key) {
+    secret_access_key_ = absl::optional<std::string>(secret_key);
+  }
+
+  const absl::optional<std::string>& secretAccessKey() const { return secret_access_key_; }
+
+  void setSessionToken(const std::string& session_token) {
+    session_token_ = absl::optional<std::string>(session_token);
+  }
+
+  const absl::optional<std::string>& sessionToken() const { return session_token_; }
+
+private:
+  absl::optional<std::string> access_key_id_;
+  absl::optional<std::string> secret_access_key_;
+  absl::optional<std::string> session_token_;
+};
+
+class CredentialsProvider {
+public:
+  virtual ~CredentialsProvider() = default;
+
+  virtual Credentials getCredentials() PURE;
+};
+
+typedef std::shared_ptr<CredentialsProvider> CredentialsProviderSharedPtr;
+
+} // namespace Aws
+} // namespace Common
+} // namespace HttpFilters
+} // namespace Extensions
+} // namespace Envoy

source/extensions/filters/http/common/aws/region_provider.h

@@ -0,0 +1,26 @@
+#pragma once
+
+#include "envoy/common/pure.h"
+
+#include "absl/types/optional.h"
+
+namespace Envoy {
+namespace Extensions {
+namespace HttpFilters {
+namespace Common {
+namespace Aws {
+
+class RegionProvider {
+public:
+  virtual ~RegionProvider() = default;
+
+  virtual absl::optional<std::string> getRegion() PURE;
+};
+
+typedef std::shared_ptr<RegionProvider> RegionProviderSharedPtr;
+
+} // namespace Aws
+} // namespace Common
+} // namespace HttpFilters
+} // namespace Extensions
+} // namespace Envoy

source/extensions/filters/http/common/aws/signer.h

@@ -0,0 +1,29 @@
+#pragma once
+
+#include "envoy/common/pure.h"
+#include "envoy/http/message.h"
+
+namespace Envoy {
+namespace Extensions {
+namespace HttpFilters {
+namespace Common {
+namespace Aws {
+
+class Signer {
+public:
+  virtual ~Signer() = default;
+
+  /**
+   * Sign an AWS request.
+   * @param message an
+   */
+  virtual void sign(Http::Message& message) const PURE;
+};
+
+typedef std::shared_ptr<Signer> SignerSharedPtr;
+
+} // namespace Aws
+} // namespace Common
+} // namespace HttpFilters
+} // namespace Extensions
+} // namespace Envoy