}

	mapClaims := claims.Map()
	expiry, err := auth.ExpToInt64(mapClaims["exp"])
	if err != nil {
		return fmt.Errorf("Expiry claim was not found: %v: %w", mapClaims, err)
	}

	cred := auth.Credentials{
		AccessKey:    stsCred.AccessKey,
		SecretKey:    stsCred.SecretKey,
		Expiration:   time.Unix(expiry, 0).UTC(),
		SessionToken: stsCred.SessionToken,

			return
		}
	}
	defer gr.Close()

	objInfo := gr.ObjInfo

	if !proxy.Proxy { // apply lifecycle rules only for local requests
		// Automatically remove the object/version if an expiry lifecycle rule can be applied
		if lc, err := globalLifecycleSys.Get(bucket); err == nil {
			rcfg, err := globalBucketObjectLockSys.Get(bucket)
			if err != nil {
				writeErrorResponse(ctx, w, toAPIError(ctx, err), r.URL)

				Help:      "Number of object version expiry missed due to busy system",
				Type:      counterMetric,
			},
		}
		expMissedFreeVersions := MetricV2{
			Description: MetricDescription{
				Namespace: nodeMetricNamespace,
				Subsystem: ilmSubsystem,
				Name:      expiryMissedFreeVersions,
				Help:      "Number of free versions expiry missed due to busy system",
				Type:      counterMetric,

		Client:      s.TestSuiteCommon.client,
		STSEndpoint: s.endPoint,
		GetWebIDTokenExpiry: func() (*cr.WebIdentityToken, error) {
			return &cr.WebIdentityToken{
				Token:  token,
				Expiry: 900,
			}, nil
		},
	}

	// Create policy - with name as one of the groups in OpenID the user is
	// a member of.
	policy := "projecta"
	policyTmpl := `{
 "Version": "2012-10-17",

pkg syscall (openbsd-386), type FdSet struct, Bits [32]uint32
pkg syscall (openbsd-386), type Kevent_t struct, Data int64
pkg syscall (openbsd-386), type Mclpool struct, Grown int32
pkg syscall (openbsd-386), type RtMetrics struct, Expire int64
pkg syscall (openbsd-386), type RtMetrics struct, Pad uint32
pkg syscall (openbsd-386), type Stat_t struct, Ino uint64
pkg syscall (openbsd-386), type Statfs_t struct, F_ctime uint64