Skip to content

fix: granted TooManyRequests exception#912

Merged
meyerjrr merged 1 commit intofwdcloudsec:mainfrom
silvaalbert:fix/too-many-requests-exception
Mar 21, 2026
Merged

fix: granted TooManyRequests exception#912
meyerjrr merged 1 commit intofwdcloudsec:mainfrom
silvaalbert:fix/too-many-requests-exception

Conversation

@silvaalbert
Copy link
Copy Markdown
Contributor

Fixed #811

When running granted in a large org (above 600 accounts), granted sso populate and/or granted sso generate' results in a TooManyRequests` exception.

This PR updates the current number of retries from 15 to 50, which addresses the problem.

@meyerjrr meyerjrr merged commit 5e655aa into fwdcloudsec:main Mar 21, 2026
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Apr 2, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [common-fate/granted](https://github.com/common-fate/granted) | minor | `v0.38.0` → `v0.39.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>common-fate/granted (common-fate/granted)</summary>

### [`v0.39.0`](https://github.com/fwdcloudsec/granted/releases/tag/v0.39.0)

[Compare Source](fwdcloudsec/granted@v0.38.0...v0.39.0)

Granted v0.39.0 is the first release published under the [fwdcloudsec](https://github.com/fwdcloudsec) organization. This release includes new features, bug fixes, and updates to the release infrastructure.

#### Release Infrastructure Changes

Starting with v0.39.0, Granted releases are published to new infrastructure under the `granted.dev` domain:

- **Binary downloads** are now hosted at [releases.granted.dev](https://releases.granted.dev)
- **Linux APT repository** has moved to `apt.releases.granted.dev` — see the [installation docs](https://docs.granted.dev/getting-started) for updated setup instructions
- **Homebrew** (`brew install fwdcloudsec/granted/granted`) now builds from source via the [fwdcloudsec/homebrew-granted](https://github.com/fwdcloudsec/homebrew-granted) tap. Prebuilt macOS binaries are not currently available — if you need them, please [open a discussion](https://github.com/fwdcloudsec/granted/discussions)
- **GPG signing key** has been updated ([fwdcloudsec/granted-docs#4](fwdcloudsec/granted-docs#4)). The APT repository signing key has been updated too — see the installation docs for the new key

Previous releases remain available at `releases.commonfate.io`.

#### Features

- **OAuth Authorization Code + PKCE flow for SSO login** — adds a more secure SSO authentication method ([#&#8203;923](fwdcloudsec/granted#923)) by [@&#8203;dgilmanuni](https://github.com/dgilmanuni)
- **Hierarchical RoleSessionName resolution** — role session names are now resolved hierarchically when assuming roles ([#&#8203;884](fwdcloudsec/granted#884)) by [@&#8203;FredPerr](https://github.com/FredPerr)
- **`GRANTED_BROWSER_PROFILE` env var** — override the browser profile used for console sessions via an environment variable ([#&#8203;914](fwdcloudsec/granted#914)) by [@&#8203;billyjbryant](https://github.com/billyjbryant)
- **Zen browser support** — native support for the Zen browser ([#&#8203;930](fwdcloudsec/granted#930)) by [@&#8203;meyerjrr](https://github.com/meyerjrr)

#### Bug Fixes

- Fix `--mfa-token` flag being ignored in credential process mode ([#&#8203;908](fwdcloudsec/granted#908)) by [@&#8203;dafujii](https://github.com/dafujii)
- Fix AWS profile being set incorrectly when role chaining ([#&#8203;841](fwdcloudsec/granted#841)) by [@&#8203;raine-tingley](https://github.com/raine-tingley)
- Fix Nix install path detection for fish and tcsh shell aliases ([#&#8203;921](fwdcloudsec/granted#921)) by [@&#8203;pyrex41](https://github.com/pyrex41)
- Fix SSO browser stdout noise ([#&#8203;916](fwdcloudsec/granted#916)) by [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim)
- Fix `TooManyRequests` exception handling ([#&#8203;912](fwdcloudsec/granted#912)) by [@&#8203;silvaalbert](https://github.com/silvaalbert)
- Fix AWS config directory permissions ([#&#8203;843](fwdcloudsec/granted#843)) by [@&#8203;jescarri](https://github.com/jescarri)
- Fix `ExportCredentialSuffix` nil handling ([#&#8203;915](fwdcloudsec/granted#915)) by [@&#8203;supergibbs](https://github.com/supergibbs)
- Fix help message for `browser set` command ([#&#8203;909](fwdcloudsec/granted#909)) by [@&#8203;LZong-tw](https://github.com/LZong-tw)
- Fix `--ref` flag when adding git profile registries ([#&#8203;864](fwdcloudsec/granted#864)) by [@&#8203;chrnorm](https://github.com/chrnorm)

#### Console Service Map

Added support for: AWS Control Tower, CloudFront, ElastiCache, SQS, Cognito, and Global Accelerator ([#&#8203;871](fwdcloudsec/granted#871), [#&#8203;877](fwdcloudsec/granted#877), [#&#8203;893](fwdcloudsec/granted#893))

#### Housekeeping

- Upgraded to Go 1.25 and renamed module to `github.com/fwdcloudsec/granted` ([#&#8203;913](fwdcloudsec/granted#913))
- Removed legacy Common Fate integrations and plugins ([#&#8203;855](fwdcloudsec/granted#855), [#&#8203;861](fwdcloudsec/granted#861))
- Cleaned up registry package ([#&#8203;805](fwdcloudsec/granted#805)) by [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev)
- Dependency updates ([#&#8203;922](fwdcloudsec/granted#922)) by [@&#8203;ericofusco](https://github.com/ericofusco)

#### New Contributors

- [@&#8203;jescarri](https://github.com/jescarri), [@&#8203;raine-tingley](https://github.com/raine-tingley), [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev), [@&#8203;FredPerr](https://github.com/FredPerr), [@&#8203;mikegray](https://github.com/mikegray), [@&#8203;LZong-tw](https://github.com/LZong-tw), [@&#8203;dafujii](https://github.com/dafujii), [@&#8203;supergibbs](https://github.com/supergibbs), [@&#8203;ericofusco](https://github.com/ericofusco), [@&#8203;pyrex41](https://github.com/pyrex41), [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim), [@&#8203;silvaalbert](https://github.com/silvaalbert), [@&#8203;billyjbryant](https://github.com/billyjbryant), [@&#8203;dgilmanuni](https://github.com/dgilmanuni)

Thank you to everyone who contributed to this release!

**Full Changelog**: <fwdcloudsec/granted@v0.38.0...v0.39.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlJlbm92YXRlIEJvdCIsImF1dG9tYXRpb246Ym90LWF1dGhvcmVkIiwiZGVwZW5kZW5jeS10eXBlOjptaW5vciJdfQ==-->
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Apr 16, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [common-fate/granted](https://github.com/common-fate/granted) | minor | `v0.38.0` → `v0.39.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>common-fate/granted (common-fate/granted)</summary>

### [`v0.39.0`](https://github.com/fwdcloudsec/granted/releases/tag/v0.39.0)

[Compare Source](fwdcloudsec/granted@v0.38.0...v0.39.0)

Granted v0.39.0 is the first release published under the [fwdcloudsec](https://github.com/fwdcloudsec) organization. This release includes new features, bug fixes, and updates to the release infrastructure.

#### Release Infrastructure Changes

Starting with v0.39.0, Granted releases are published to new infrastructure under the `granted.dev` domain:

- **Binary downloads** are now hosted at [releases.granted.dev](https://releases.granted.dev)
- **Linux APT repository** has moved to `apt.releases.granted.dev` — see the [installation docs](https://docs.granted.dev/getting-started) for updated setup instructions
- **Homebrew** (`brew install fwdcloudsec/granted/granted`) now builds from source via the [fwdcloudsec/homebrew-granted](https://github.com/fwdcloudsec/homebrew-granted) tap. Prebuilt macOS binaries are not currently available — if you need them, please [open a discussion](https://github.com/fwdcloudsec/granted/discussions)
- **GPG signing key** has been updated ([fwdcloudsec/granted-docs#4](fwdcloudsec/granted-docs#4)). The APT repository signing key has been updated too — see the installation docs for the new key

Previous releases remain available at `releases.commonfate.io`.

#### Features

- **OAuth Authorization Code + PKCE flow for SSO login** — adds a more secure SSO authentication method ([#&#8203;923](fwdcloudsec/granted#923)) by [@&#8203;dgilmanuni](https://github.com/dgilmanuni)
- **Hierarchical RoleSessionName resolution** — role session names are now resolved hierarchically when assuming roles ([#&#8203;884](fwdcloudsec/granted#884)) by [@&#8203;FredPerr](https://github.com/FredPerr)
- **`GRANTED_BROWSER_PROFILE` env var** — override the browser profile used for console sessions via an environment variable ([#&#8203;914](fwdcloudsec/granted#914)) by [@&#8203;billyjbryant](https://github.com/billyjbryant)
- **Zen browser support** — native support for the Zen browser ([#&#8203;930](fwdcloudsec/granted#930)) by [@&#8203;meyerjrr](https://github.com/meyerjrr)

#### Bug Fixes

- Fix `--mfa-token` flag being ignored in credential process mode ([#&#8203;908](fwdcloudsec/granted#908)) by [@&#8203;dafujii](https://github.com/dafujii)
- Fix AWS profile being set incorrectly when role chaining ([#&#8203;841](fwdcloudsec/granted#841)) by [@&#8203;raine-tingley](https://github.com/raine-tingley)
- Fix Nix install path detection for fish and tcsh shell aliases ([#&#8203;921](fwdcloudsec/granted#921)) by [@&#8203;pyrex41](https://github.com/pyrex41)
- Fix SSO browser stdout noise ([#&#8203;916](fwdcloudsec/granted#916)) by [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim)
- Fix `TooManyRequests` exception handling ([#&#8203;912](fwdcloudsec/granted#912)) by [@&#8203;silvaalbert](https://github.com/silvaalbert)
- Fix AWS config directory permissions ([#&#8203;843](fwdcloudsec/granted#843)) by [@&#8203;jescarri](https://github.com/jescarri)
- Fix `ExportCredentialSuffix` nil handling ([#&#8203;915](fwdcloudsec/granted#915)) by [@&#8203;supergibbs](https://github.com/supergibbs)
- Fix help message for `browser set` command ([#&#8203;909](fwdcloudsec/granted#909)) by [@&#8203;LZong-tw](https://github.com/LZong-tw)
- Fix `--ref` flag when adding git profile registries ([#&#8203;864](fwdcloudsec/granted#864)) by [@&#8203;chrnorm](https://github.com/chrnorm)

#### Console Service Map

Added support for: AWS Control Tower, CloudFront, ElastiCache, SQS, Cognito, and Global Accelerator ([#&#8203;871](fwdcloudsec/granted#871), [#&#8203;877](fwdcloudsec/granted#877), [#&#8203;893](fwdcloudsec/granted#893))

#### Housekeeping

- Upgraded to Go 1.25 and renamed module to `github.com/fwdcloudsec/granted` ([#&#8203;913](fwdcloudsec/granted#913))
- Removed legacy Common Fate integrations and plugins ([#&#8203;855](fwdcloudsec/granted#855), [#&#8203;861](fwdcloudsec/granted#861))
- Cleaned up registry package ([#&#8203;805](fwdcloudsec/granted#805)) by [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev)
- Dependency updates ([#&#8203;922](fwdcloudsec/granted#922)) by [@&#8203;ericofusco](https://github.com/ericofusco)

#### New Contributors

- [@&#8203;jescarri](https://github.com/jescarri), [@&#8203;raine-tingley](https://github.com/raine-tingley), [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev), [@&#8203;FredPerr](https://github.com/FredPerr), [@&#8203;mikegray](https://github.com/mikegray), [@&#8203;LZong-tw](https://github.com/LZong-tw), [@&#8203;dafujii](https://github.com/dafujii), [@&#8203;supergibbs](https://github.com/supergibbs), [@&#8203;ericofusco](https://github.com/ericofusco), [@&#8203;pyrex41](https://github.com/pyrex41), [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim), [@&#8203;silvaalbert](https://github.com/silvaalbert), [@&#8203;billyjbryant](https://github.com/billyjbryant), [@&#8203;dgilmanuni](https://github.com/dgilmanuni)

Thank you to everyone who contributed to this release!

**Full Changelog**: <fwdcloudsec/granted@v0.38.0...v0.39.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuOCIsInVwZGF0ZWRJblZlciI6IjQzLjExMC44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6bWlub3IiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

granted sso populate command gets a TooManyRequestsException when hitting ListAccountRoles endpoint

2 participants