muffin_man 2.4.12 → 2.4.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1dec8e35106feca73923e8526c0b4275f1af04218c5c1216046d6874890e7529
-  data.tar.gz: ff82271a7ceea873c6e4bc35db1352bef6ef853d88cb006040e9e5af284e1a91
+  metadata.gz: 3ce653dae1f306ad75e6faaf2fc8cc6757eb86e9fc7b1c679883d501a611cb52
+  data.tar.gz: b557ef7d1ce5a636eea20c3f4ef8d7d3db8865148d90189515530d7623633481
 SHA512:
-  metadata.gz: 2ac49e7b36f757656a5c6e198a5fc9ed0f49b18a5d350b5fd8539b08dddfe84e1a888880e31758a068f220dcdc46d410d9fc274d5da0bf0f0815d6c219908e9d
-  data.tar.gz: '0956d5f62002e873b3ebb4eb6e0b3732c868e157e1ff3a05958c79bf513df4f7d8612b378521ca25ef4f0749017515f81244490ede7bf7bbaabf1080b56f4559'
+  metadata.gz: fc46a5838cafcd55a676d767f50a6dc82e710b5ba7710f3b93bc7a1959a557e546a2bcb82234aa6b0a891d25934bab94cf063ee720ba0aebaebf48d681e11793
+  data.tar.gz: 1805031ebbacabced9e6074871ed558f5f6cf6f49c5db6d0125d9fc1284ef5dd27467cd520343f574ebaf4b05ba62e105649a7b0fe6774b3a124caff64a16d71

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+# 2.4.13
+
+- Remove AWS STS Signature in requests [#97](https://github.com/patterninc/muffin_man/pull/97)
+
 # 2.4.12
 
 - [#95](https://github.com/patterninc/muffin_man/pull/95)

data/README.md

@@ -66,10 +66,7 @@ credentials = {
   refresh_token: LWA_REFRESH_TOKEN,
   client_id: CLIENT_ID,
   client_secret: CLIENT_SECRET,
-  aws_access_key_id: AWS_ACCESS_KEY_ID,
-  aws_secret_access_key: AWS_SECRET_ACCESS_KEY,
   region: REGION, # This can be one of ['na', 'eu', 'fe'] and defaults to 'na'
-  sts_iam_role_arn: STS_IAM_ROLE_ARN, # Optional
   access_token_cache_key: SELLING_PARTNER_ID, # Optional if you want access token caching
 }
 client = MuffinMan::Solicitations::V1.new(credentials)
@@ -115,9 +112,6 @@ To retrieve the refresh token from an LWA Website authorization workflow, you ca
 credentials = {
   client_id: CLIENT_ID,
   client_secret: CLIENT_SECRET,
-  aws_access_key_id: AWS_ACCESS_KEY_ID,
-  aws_secret_access_key: AWS_SECRET_ACCESS_KEY,
-  sts_iam_role_arn: STS_IAM_ROLE_ARN, # Optional
   scope: 'sellingpartnerapi::migration' # Grantless scope for MWS migration
 }
 client = MuffinMan::Authorization::V1.new(credentials)

data/lib/muffin_man/sp_api_client.rb

@@ -6,8 +6,7 @@ require "securerandom"
 
 module MuffinMan
   class SpApiClient
-    attr_reader :refresh_token, :client_id, :client_secret, :aws_access_key_id,
-                :aws_secret_access_key, :sts_iam_role_arn, :sandbox, :config,
+    attr_reader :refresh_token, :client_id, :client_secret, :sandbox, :config,
                 :region, :request_type, :local_var_path, :query_params,
                 :request_body, :scope, :access_token_cache_key, :credentials,
                 :pii_data_elements
@@ -26,9 +25,6 @@ module MuffinMan
       @refresh_token = credentials[:refresh_token]
       @client_id = credentials[:client_id]
       @client_secret = credentials[:client_secret]
-      @aws_access_key_id = credentials[:aws_access_key_id]
-      @aws_secret_access_key = credentials[:aws_secret_access_key]
-      @sts_iam_role_arn = credentials[:sts_iam_role_arn]
       @region = credentials[:region] || "na"
       @scope = credentials[:scope]
       @access_token_cache_key = credentials[:access_token_cache_key]
@@ -135,43 +131,17 @@ module MuffinMan
       JSON.parse(response.body)
     end
 
-    def request_sts_token
-      client = Aws::STS::Client.new(
-        region: derive_aws_region,
-        credentials: Aws::Credentials.new(aws_access_key_id, aws_secret_access_key),
-        http_wire_trace: ENV.fetch("AWS_DEBUG", nil) == "true" || false
-      )
-      client.assume_role(role_arn: sts_iam_role_arn, role_session_name: SecureRandom.uuid)
-    end
-
-    def signed_request
-      request_config = {
-        service: SERVICE_NAME,
-        region: derive_aws_region,
-        endpoint: sp_api_host
-      }
-      if sts_iam_role_arn.nil?
-        request_config[:access_key_id] = aws_access_key_id
-        request_config[:secret_access_key] = aws_secret_access_key
-      else
-        request_config[:credentials_provider] = request_sts_token
-      end
-      signer = Aws::Sigv4::Signer.new(request_config)
-      signer.sign_request(http_method: request_type, url: request.url, body: request_body&.to_json)
-    end
-
     def headers
       if requires_rdt_token_for_pii?
         access_token = retrieve_rdt_access_token || retrieve_lwa_access_token
       else
         access_token = scope ? retrieve_grantless_access_token : retrieve_lwa_access_token
       end
-      headers = {
+      {
         "x-amz-access-token" => access_token,
         "user-agent" => "MuffinMan/#{VERSION} (Language=Ruby)",
         "content-type" => "application/json"
       }
-      signed_request.headers.merge(headers)
     end
 
     def requires_rdt_token_for_pii?

data/lib/muffin_man/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MuffinMan
-  VERSION = "2.4.12"
+  VERSION = "2.4.13"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: muffin_man
 version: !ruby/object:Gem::Version
-  version: 2.4.12
+  version: 2.4.13
 platform: ruby
 authors:
 - Gavin
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-02-11 00:00:00.000000000 Z
+date: 2025-03-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -226,7 +226,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: Amazon Selling Partner API client