From 4cfcfafcacc343825598f245bf20997fb5ca3ab8 Mon Sep 17 00:00:00 2001
From: David Kocher <dkocher@iterate.ch>
Date: Fri, 11 Aug 2023 15:37:22 +0200
Subject: [PATCH 1/2] Add connection profile to authenticate to S3 with Azure
 AD.

---
 ...(Azure AD) OpenID Connect.cyberduckprofile | 55 +++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile

diff --git a/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile b/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile
new file mode 100644
index 0000000..7f903fe
--- /dev/null
+++ b/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile	
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2002-2023 iterate GmbH. All rights reserved.
+  ~ https://cyberduck.io/
+  ~
+  ~ This program is free software; you can redistribute it and/or modify
+  ~ it under the terms of the GNU General Public License as published by
+  ~ the Free Software Foundation, either version 3 of the License, or
+  ~ (at your option) any later version.
+  ~
+  ~ This program is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  ~ GNU General Public License for more details.
+  -->
+
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>Protocol</key>
+        <string>s3</string>
+        <key>Vendor</key>
+        <string>aws-s3-sts-azure-activedirectory-oidc</string>
+        <key>Description</key>
+        <string>AWS S3+STS &amp; Azure Active Directory (Azure AD)</string>
+        <key>Default Nickname</key>
+        <string>AWS S3+STS + Azure AD OIDC</string>
+        <key>OAuth Authorization Url</key>
+        <string>https://login.microsoftonline.com/common/oauth2/v2.0/authorize</string>
+        <key>OAuth Token Url</key>
+        <string>https://login.microsoftonline.com/common/oauth2/v2.0/token</string>
+        <key>OAuth Client ID</key>
+        <string>f40bc18f-cd02-4212-b7f1-15243e4e2ad3</string>
+        <key>OAuth Client Secret</key>
+        <string/>
+        <key>OAuth Redirect Url</key>
+        <string>${oauth.handler.scheme}://oauth</string>
+        <key>Scopes</key>
+        <array>
+            <string>openid</string>
+            <string>offline_access</string>
+        </array>
+        <key>Password Configurable</key>
+        <false/>
+        <key>Username Configurable</key>
+        <false/>
+        <key>Username Placeholder</key>
+        <string>Username</string>
+        <key>Properties</key>
+        <array>
+            <!-- Require Role ARN input from user -->
+            <string>s3.assumerole.rolearn=</string>
+        </array>
+    </dict>
+</plist>

From 0c7d202f56cfbbbd1b22fa166e66c1e4a4dc3e7d Mon Sep 17 00:00:00 2001
From: David Kocher <dkocher@iterate.ch>
Date: Fri, 11 Aug 2023 23:10:21 +0200
Subject: [PATCH 2/2] Add connection profile to authenticate to S3 with Google
 OpenID Connect.

---
 ...(Azure AD) OpenID Connect.cyberduckprofile |  2 +
 ...S & Google OpenID Connect.cyberduckprofile | 56 +++++++++++++++++++
 2 files changed, 58 insertions(+)
 create mode 100644 AWS S3+STS & Google OpenID Connect.cyberduckprofile

diff --git a/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile b/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile
index 7f903fe..7b992b1 100644
--- a/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile	
+++ b/AWS S3+STS & Azure Active Directory (Azure AD) OpenID Connect.cyberduckprofile	
@@ -40,6 +40,8 @@
             <string>openid</string>
             <string>offline_access</string>
         </array>
+        <key>Authorization</key>
+        <string>AuthorizationCode</string>
         <key>Password Configurable</key>
         <false/>
         <key>Username Configurable</key>
diff --git a/AWS S3+STS & Google OpenID Connect.cyberduckprofile b/AWS S3+STS & Google OpenID Connect.cyberduckprofile
new file mode 100644
index 0000000..ab1900d
--- /dev/null
+++ b/AWS S3+STS & Google OpenID Connect.cyberduckprofile	
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2002-2023 iterate GmbH. All rights reserved.
+  ~ https://cyberduck.io/
+  ~
+  ~ This program is free software; you can redistribute it and/or modify
+  ~ it under the terms of the GNU General Public License as published by
+  ~ the Free Software Foundation, either version 3 of the License, or
+  ~ (at your option) any later version.
+  ~
+  ~ This program is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  ~ GNU General Public License for more details.
+  -->
+
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>Protocol</key>
+        <string>s3</string>
+        <key>Vendor</key>
+        <string>aws-s3-sts-google-oidc</string>
+        <key>Description</key>
+        <string>AWS S3+STS &amp; Google OpenID Connect</string>
+        <key>Default Nickname</key>
+        <string>AWS S3+STS &amp; Google</string>
+        <key>OAuth Authorization Url</key>
+        <string>https://accounts.google.com/o/oauth2/auth</string>
+        <key>OAuth Token Url</key>
+        <string>https://accounts.google.com/o/oauth2/token</string>
+        <key>OAuth Client ID</key>
+        <string>996125414232-s922bvdt21nceeh5dq1gb6av8plpj7hr.apps.googleusercontent.com</string>
+        <key>OAuth Client Secret</key>
+        <string/>
+        <key>OAuth Redirect Url</key>
+        <string>${oauth.application.identifier}:oauth</string>
+        <key>Scopes</key>
+        <array>
+            <string>openid</string>
+        </array>
+        <key>Authorization</key>
+        <string>AuthorizationCode</string>
+        <key>Password Configurable</key>
+        <false/>
+        <key>Username Configurable</key>
+        <false/>
+        <key>Username Placeholder</key>
+        <string>Username</string>
+        <key>Properties</key>
+        <array>
+            <!-- Require Role ARN input from user-->
+            <string>s3.assumerole.rolearn=</string>
+        </array>
+    </dict>
+</plist>