muffin_man 2.4.11 → 2.4.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 33f0611029142ad77dfc45fd3554b68b0579c9ab5aa9aec1764e9e21a208ded2
-  data.tar.gz: 378875142894a576c71e69628786f473eb83a14f2abc94bc147eceaf0c836a81
+  metadata.gz: 3ce653dae1f306ad75e6faaf2fc8cc6757eb86e9fc7b1c679883d501a611cb52
+  data.tar.gz: b557ef7d1ce5a636eea20c3f4ef8d7d3db8865148d90189515530d7623633481
 SHA512:
-  metadata.gz: ad19739230189a856576ad94d39d41e2c058f97f962f3f718f8d634f2976cbc2b7361ad2648d68ee487f8106f626eaeb977b8adcba3a5d9657a53d59429af6c8
-  data.tar.gz: 17da668a051fe58d4415b76b4f2b89164ed0e9a23b634ecea84195ec249ba59081e53b85a98d041475a28f4788bad558ac5902db48033c71d558b36309c4b8f2
+  metadata.gz: fc46a5838cafcd55a676d767f50a6dc82e710b5ba7710f3b93bc7a1959a557e546a2bcb82234aa6b0a891d25934bab94cf063ee720ba0aebaebf48d681e11793
+  data.tar.gz: 1805031ebbacabced9e6074871ed558f5f6cf6f49c5db6d0125d9fc1284ef5dd27467cd520343f574ebaf4b05ba62e105649a7b0fe6774b3a124caff64a16d71

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+# 2.4.13
+
+- Remove AWS STS Signature in requests [#97](https://github.com/patterninc/muffin_man/pull/97)
+
+# 2.4.12
+
+- [#95](https://github.com/patterninc/muffin_man/pull/95)
+- [#94](https://github.com/patterninc/muffin_man/pull/94)
+- [#93](https://github.com/patterninc/muffin_man/pull/93)
+- [#92](https://github.com/patterninc/muffin_man/pull/92)
+
 # 2.4.11
 
 - Application Management API v2023-11-30 [#88](https://github.com/patterninc/muffin_man/pull/88)

data/README.md

@@ -66,10 +66,7 @@ credentials = {
   refresh_token: LWA_REFRESH_TOKEN,
   client_id: CLIENT_ID,
   client_secret: CLIENT_SECRET,
-  aws_access_key_id: AWS_ACCESS_KEY_ID,
-  aws_secret_access_key: AWS_SECRET_ACCESS_KEY,
   region: REGION, # This can be one of ['na', 'eu', 'fe'] and defaults to 'na'
-  sts_iam_role_arn: STS_IAM_ROLE_ARN, # Optional
   access_token_cache_key: SELLING_PARTNER_ID, # Optional if you want access token caching
 }
 client = MuffinMan::Solicitations::V1.new(credentials)
@@ -115,9 +112,6 @@ To retrieve the refresh token from an LWA Website authorization workflow, you ca
 credentials = {
   client_id: CLIENT_ID,
   client_secret: CLIENT_SECRET,
-  aws_access_key_id: AWS_ACCESS_KEY_ID,
-  aws_secret_access_key: AWS_SECRET_ACCESS_KEY,
-  sts_iam_role_arn: STS_IAM_ROLE_ARN, # Optional
   scope: 'sellingpartnerapi::migration' # Grantless scope for MWS migration
 }
 client = MuffinMan::Authorization::V1.new(credentials)
@@ -136,7 +130,7 @@ access_token = MuffinMan::Lwa::AuthHelper.get_access_token(scope, client_id, cli
 ### Rotating application client secret
 To rotate client secret for application
 ```ruby
-MuffinMan::ApplicationManagement::V20231130.rotate_application_client_secret(access_token)
+MuffinMan::ApplicationManagement::V20231130.rotate_application_client_secret(client_id,client_secret)
 ```
 
 ### Debugging

data/lib/muffin_man/application_management/v20231130.rb

@@ -3,10 +3,15 @@
 module MuffinMan
   module ApplicationManagement
     class V20231130
-      def self.rotate_application_client_secret(access_token)
+      def self.rotate_application_client_secret(client_id, client_secret)
+        access_token = MuffinMan::Lwa::AuthHelper.get_access_token("sellingpartnerapi::client_credential:rotation",
+                                                                   client_id, client_secret)
         Typhoeus.post(
           "https://sellingpartnerapi-na.amazon.com/applications/2023-11-30/clientSecret",
-          headers: { "x-amz-access-token" => access_token }
+          headers: {
+            "x-amz-access-token" => access_token,
+            "Content-Type" => "application/json;charset=UTF-8"
+          }
         )
       end
     end

data/lib/muffin_man/sp_api_client.rb

@@ -6,8 +6,7 @@ require "securerandom"
 
 module MuffinMan
   class SpApiClient
-    attr_reader :refresh_token, :client_id, :client_secret, :aws_access_key_id,
-                :aws_secret_access_key, :sts_iam_role_arn, :sandbox, :config,
+    attr_reader :refresh_token, :client_id, :client_secret, :sandbox, :config,
                 :region, :request_type, :local_var_path, :query_params,
                 :request_body, :scope, :access_token_cache_key, :credentials,
                 :pii_data_elements
@@ -26,9 +25,6 @@ module MuffinMan
       @refresh_token = credentials[:refresh_token]
       @client_id = credentials[:client_id]
       @client_secret = credentials[:client_secret]
-      @aws_access_key_id = credentials[:aws_access_key_id]
-      @aws_secret_access_key = credentials[:aws_secret_access_key]
-      @sts_iam_role_arn = credentials[:sts_iam_role_arn]
       @region = credentials[:region] || "na"
       @scope = credentials[:scope]
       @access_token_cache_key = credentials[:access_token_cache_key]
@@ -135,43 +131,17 @@ module MuffinMan
       JSON.parse(response.body)
     end
 
-    def request_sts_token
-      client = Aws::STS::Client.new(
-        region: derive_aws_region,
-        credentials: Aws::Credentials.new(aws_access_key_id, aws_secret_access_key),
-        http_wire_trace: ENV.fetch("AWS_DEBUG", nil) == "true" || false
-      )
-      client.assume_role(role_arn: sts_iam_role_arn, role_session_name: SecureRandom.uuid)
-    end
-
-    def signed_request
-      request_config = {
-        service: SERVICE_NAME,
-        region: derive_aws_region,
-        endpoint: sp_api_host
-      }
-      if sts_iam_role_arn.nil?
-        request_config[:access_key_id] = aws_access_key_id
-        request_config[:secret_access_key] = aws_secret_access_key
-      else
-        request_config[:credentials_provider] = request_sts_token
-      end
-      signer = Aws::Sigv4::Signer.new(request_config)
-      signer.sign_request(http_method: request_type, url: request.url, body: request_body&.to_json)
-    end
-
     def headers
       if requires_rdt_token_for_pii?
         access_token = retrieve_rdt_access_token || retrieve_lwa_access_token
       else
         access_token = scope ? retrieve_grantless_access_token : retrieve_lwa_access_token
       end
-      headers = {
+      {
         "x-amz-access-token" => access_token,
         "user-agent" => "MuffinMan/#{VERSION} (Language=Ruby)",
         "content-type" => "application/json"
       }
-      signed_request.headers.merge(headers)
     end
 
     def requires_rdt_token_for_pii?

data/lib/muffin_man/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MuffinMan
-  VERSION = "2.4.11"
+  VERSION = "2.4.13"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: muffin_man
 version: !ruby/object:Gem::Version
-  version: 2.4.11
+  version: 2.4.13
 platform: ruby
 authors:
 - Gavin
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-01-24 00:00:00.000000000 Z
+date: 2025-03-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -226,7 +226,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: Amazon Selling Partner API client