bind out log-in provider (#798)

Co-authored-by: Dengke Tang <dengket@amazon.com>

Author: sbiscigl

crt/aws-c-auth

@@ -494,6 +494,44 @@ namespace Aws
                 Io::TlsConnectionOptions TlsConnectionOptions;
             };
 
+            /**
+             * Configuration options for the STS Web Identity credentials provider
+             */
+            struct AWS_CRT_CPP_API CredentialsProviderLoginConfig
+            {
+                CredentialsProviderLoginConfig();
+
+                /**
+                 * The arn associated with the AWS login session.
+                 */
+                String LoginSession;
+
+                /**
+                 * Overrides the login cache directory. by default the cache directory
+                 * is located at `~/.aws/login/cache`.
+                 */
+                String LoginCacheOverride;
+
+                /**
+                 * The region associated with the AWS Login call
+                 */
+                String LoginRegion;
+
+                /**
+                 * Connection bootstrap to use to create the http connection required to
+                 * query credentials from the STS provider
+                 *
+                 * Note: If null, then the default ClientBootstrap is used
+                 * (see Aws::Crt::ApiHandle::GetOrCreateStaticDefaultClientBootstrap)
+                 */
+                Io::ClientBootstrap *Bootstrap;
+
+                /**
+                 * TLS configuration for secure socket connections.
+                 */
+                Io::TlsConnectionOptions TlsConnectionOptions;
+            };
+
             /**
              * Simple credentials provider implementation that wraps one of the internal C-based implementations.
              *
@@ -625,6 +663,13 @@ namespace Aws
                     const CredentialsProviderSTSWebIdentityConfig &config,
                     Allocator *allocator = ApiAllocator());
 
+                /**
+                 * Creates a AWS Login based credentials provider
+                 */
+                static std::shared_ptr<ICredentialsProvider> CreateCredentialsProviderLogin(
+                    const CredentialsProviderLoginConfig &config,
+                    Allocator *allocator = ApiAllocator());
+
               private:
                 static void s_onCredentialsResolved(aws_credentials *credentials, int error_code, void *user_data);
 

crt/aws-c-cal

@@ -514,6 +514,34 @@ namespace Aws
                 return s_CreateWrappedProvider(
                     aws_credentials_provider_new_sts_web_identity(allocator, &raw_config), allocator);
             }
+
+            CredentialsProviderLoginConfig::CredentialsProviderLoginConfig() : Bootstrap(nullptr) {}
+
+            std::shared_ptr<ICredentialsProvider> CredentialsProvider::CreateCredentialsProviderLogin(
+                const CredentialsProviderLoginConfig &config,
+                Allocator *allocator)
+            {
+                struct aws_credentials_provider_login_options raw_config;
+                AWS_ZERO_STRUCT(raw_config);
+
+                raw_config.login_session = aws_byte_cursor_from_c_str(config.LoginSession.c_str());
+                raw_config.login_cache_directory_override =
+                    aws_byte_cursor_from_c_str(config.LoginCacheOverride.c_str());
+                raw_config.login_region = aws_byte_cursor_from_c_str(config.LoginRegion.c_str());
+
+                raw_config.bootstrap =
+                    (config.Bootstrap != nullptr)
+                        ? config.Bootstrap->GetUnderlyingHandle()
+                        : ApiHandle::GetOrCreateStaticDefaultClientBootstrap()->GetUnderlyingHandle();
+
+                const auto connectionOptions = config.TlsConnectionOptions.GetUnderlyingHandle();
+                if (connectionOptions != nullptr)
+                {
+                    raw_config.tls_ctx = connectionOptions->ctx;
+                }
+
+                return s_CreateWrappedProvider(aws_credentials_provider_new_login(allocator, &raw_config), allocator);
+            }
         } // namespace Auth
     } // namespace Crt
 } // namespace Aws