@aws-amplify/core 6.0.1-unstable.cfbde4c.0 → 6.0.1

package/dist/esm/clients/middleware/signing/signer/signatureV4/presignUrl.mjs

@@ -0,0 +1,44 @@
+import { ALGORITHM_QUERY_PARAM, SHA256_ALGORITHM_IDENTIFIER, CREDENTIAL_QUERY_PARAM, AMZ_DATE_QUERY_PARAM, SIGNED_HEADERS_QUERY_PARAM, HOST_HEADER, EXPIRES_QUERY_PARAM, TOKEN_QUERY_PARAM, SIGNATURE_QUERY_PARAM } from './constants.mjs';
+import { getSigningValues } from './utils/getSigningValues.mjs';
+import { getSignature } from './utils/getSignature.mjs';
+import { AmplifyUrl } from '../../../../../utils/amplifyUrl/index.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Given a `Presignable` object, returns a Signature Version 4 presigned `URL` object.
+ *
+ * @param presignable `Presignable` object containing at least a url to be presigned with authentication query params.
+ * @param presignUrlOptions `PresignUrlOptions` object containing values used to construct the signature.
+ * @returns A `URL` with authentication query params which can grant temporary access to AWS resources.
+ */
+const presignUrl = ({ body, method = 'GET', url }, { expiration, ...options }) => {
+    const signingValues = getSigningValues(options);
+    const { accessKeyId, credentialScope, longDate, sessionToken } = signingValues;
+    // create the request to sign
+    // @ts-ignore URL constructor accepts a URL object
+    const presignedUrl = new AmplifyUrl(url);
+    Object.entries({
+        [ALGORITHM_QUERY_PARAM]: SHA256_ALGORITHM_IDENTIFIER,
+        [CREDENTIAL_QUERY_PARAM]: `${accessKeyId}/${credentialScope}`,
+        [AMZ_DATE_QUERY_PARAM]: longDate,
+        [SIGNED_HEADERS_QUERY_PARAM]: HOST_HEADER,
+        ...(expiration && { [EXPIRES_QUERY_PARAM]: expiration.toString() }),
+        ...(sessionToken && { [TOKEN_QUERY_PARAM]: sessionToken }),
+    }).forEach(([key, value]) => {
+        presignedUrl.searchParams.append(key, value);
+    });
+    const requestToSign = {
+        body,
+        headers: { [HOST_HEADER]: url.host },
+        method,
+        url: presignedUrl,
+    };
+    // calculate and add the signature to the url
+    const signature = getSignature(requestToSign, signingValues);
+    presignedUrl.searchParams.append(SIGNATURE_QUERY_PARAM, signature);
+    return presignedUrl;
+};
+
+export { presignUrl };
+//# sourceMappingURL=presignUrl.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/presignUrl.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presignUrl.mjs","sources":["../../../../../../../src/clients/middleware/signing/signer/signatureV4/presignUrl.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { ALGORITHM_QUERY_PARAM, AMZ_DATE_QUERY_PARAM, CREDENTIAL_QUERY_PARAM, EXPIRES_QUERY_PARAM, HOST_HEADER, SHA256_ALGORITHM_IDENTIFIER, SIGNATURE_QUERY_PARAM, SIGNED_HEADERS_QUERY_PARAM, TOKEN_QUERY_PARAM, } from './constants';\nimport { getSigningValues } from './utils/getSigningValues';\nimport { getSignature } from './utils/getSignature';\nimport { AmplifyUrl } from '../../../../../utils/amplifyUrl';\n/**\n * Given a `Presignable` object, returns a Signature Version 4 presigned `URL` object.\n *\n * @param presignable `Presignable` object containing at least a url to be presigned with authentication query params.\n * @param presignUrlOptions `PresignUrlOptions` object containing values used to construct the signature.\n * @returns A `URL` with authentication query params which can grant temporary access to AWS resources.\n */\nexport const presignUrl = ({ body, method = 'GET', url }, { expiration, ...options }) => {\n    const signingValues = getSigningValues(options);\n    const { accessKeyId, credentialScope, longDate, sessionToken } = signingValues;\n    // create the request to sign\n    // @ts-ignore URL constructor accepts a URL object\n    const presignedUrl = new AmplifyUrl(url);\n    Object.entries({\n        [ALGORITHM_QUERY_PARAM]: SHA256_ALGORITHM_IDENTIFIER,\n        [CREDENTIAL_QUERY_PARAM]: `${accessKeyId}/${credentialScope}`,\n        [AMZ_DATE_QUERY_PARAM]: longDate,\n        [SIGNED_HEADERS_QUERY_PARAM]: HOST_HEADER,\n        ...(expiration && { [EXPIRES_QUERY_PARAM]: expiration.toString() }),\n        ...(sessionToken && { [TOKEN_QUERY_PARAM]: sessionToken }),\n    }).forEach(([key, value]) => {\n        presignedUrl.searchParams.append(key, value);\n    });\n    const requestToSign = {\n        body,\n        headers: { [HOST_HEADER]: url.host },\n        method,\n        url: presignedUrl,\n    };\n    // calculate and add the signature to the url\n    const signature = getSignature(requestToSign, signingValues);\n    presignedUrl.searchParams.append(SIGNATURE_QUERY_PARAM, signature);\n    return presignedUrl;\n};\n"],"names":[],"mappings":";;;;;AAAA;AACA;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,UAAU,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,KAAK;AACzF,IAAI,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACpD,IAAI,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;AACnF;AACA;AACA,IAAI,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7C,IAAI,MAAM,CAAC,OAAO,CAAC;AACnB,QAAQ,CAAC,qBAAqB,GAAG,2BAA2B;AAC5D,QAAQ,CAAC,sBAAsB,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AACrE,QAAQ,CAAC,oBAAoB,GAAG,QAAQ;AACxC,QAAQ,CAAC,0BAA0B,GAAG,WAAW;AACjD,QAAQ,IAAI,UAAU,IAAI,EAAE,CAAC,mBAAmB,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3E,QAAQ,IAAI,YAAY,IAAI,EAAE,CAAC,iBAAiB,GAAG,YAAY,EAAE,CAAC;AAClE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK;AACjC,QAAQ,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrD,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,aAAa,GAAG;AAC1B,QAAQ,IAAI;AACZ,QAAQ,OAAO,EAAE,EAAE,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE;AAC5C,QAAQ,MAAM;AACd,QAAQ,GAAG,EAAE,YAAY;AACzB,KAAK,CAAC;AACN;AACA,IAAI,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AACjE,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;AACvE,IAAI,OAAO,YAAY,CAAC;AACxB;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/signRequest.mjs

@@ -0,0 +1,36 @@
+import { getSignedHeaders } from './utils/getSignedHeaders.mjs';
+import { getSigningValues } from './utils/getSigningValues.mjs';
+import { HOST_HEADER, AMZ_DATE_HEADER, TOKEN_HEADER, AUTH_HEADER, SHA256_ALGORITHM_IDENTIFIER } from './constants.mjs';
+import { getSignature } from './utils/getSignature.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Given a `HttpRequest`, returns a Signature Version 4 signed `HttpRequest`.
+ *
+ * @param request `HttpRequest` to be signed.
+ * @param signRequestOptions `SignRequestOptions` object containing values used to construct the signature.
+ * @returns A `HttpRequest` with authentication headers which can grant temporary access to AWS resources.
+ */
+const signRequest = (request, options) => {
+    const signingValues = getSigningValues(options);
+    const { accessKeyId, credentialScope, longDate, sessionToken } = signingValues;
+    // create the request to sign
+    const headers = { ...request.headers };
+    headers[HOST_HEADER] = request.url.host;
+    headers[AMZ_DATE_HEADER] = longDate;
+    if (sessionToken) {
+        headers[TOKEN_HEADER] = sessionToken;
+    }
+    const requestToSign = { ...request, headers };
+    // calculate and add the signature to the request
+    const signature = getSignature(requestToSign, signingValues);
+    const credentialEntry = `Credential=${accessKeyId}/${credentialScope}`;
+    const signedHeadersEntry = `SignedHeaders=${getSignedHeaders(headers)}`;
+    const signatureEntry = `Signature=${signature}`;
+    headers[AUTH_HEADER] = `${SHA256_ALGORITHM_IDENTIFIER} ${credentialEntry}, ${signedHeadersEntry}, ${signatureEntry}`;
+    return requestToSign;
+};
+
+export { signRequest };
+//# sourceMappingURL=signRequest.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/signRequest.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signRequest.mjs","sources":["../../../../../../../src/clients/middleware/signing/signer/signatureV4/signRequest.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { getSignedHeaders } from './utils/getSignedHeaders';\nimport { getSigningValues } from './utils/getSigningValues';\nimport { AMZ_DATE_HEADER, AUTH_HEADER, HOST_HEADER, SHA256_ALGORITHM_IDENTIFIER, TOKEN_HEADER, } from './constants';\nimport { getSignature } from './utils/getSignature';\n/**\n * Given a `HttpRequest`, returns a Signature Version 4 signed `HttpRequest`.\n *\n * @param request `HttpRequest` to be signed.\n * @param signRequestOptions `SignRequestOptions` object containing values used to construct the signature.\n * @returns A `HttpRequest` with authentication headers which can grant temporary access to AWS resources.\n */\nexport const signRequest = (request, options) => {\n    const signingValues = getSigningValues(options);\n    const { accessKeyId, credentialScope, longDate, sessionToken } = signingValues;\n    // create the request to sign\n    const headers = { ...request.headers };\n    headers[HOST_HEADER] = request.url.host;\n    headers[AMZ_DATE_HEADER] = longDate;\n    if (sessionToken) {\n        headers[TOKEN_HEADER] = sessionToken;\n    }\n    const requestToSign = { ...request, headers };\n    // calculate and add the signature to the request\n    const signature = getSignature(requestToSign, signingValues);\n    const credentialEntry = `Credential=${accessKeyId}/${credentialScope}`;\n    const signedHeadersEntry = `SignedHeaders=${getSignedHeaders(headers)}`;\n    const signatureEntry = `Signature=${signature}`;\n    headers[AUTH_HEADER] = `${SHA256_ALGORITHM_IDENTIFIER} ${credentialEntry}, ${signedHeadersEntry}, ${signatureEntry}`;\n    return requestToSign;\n};\n"],"names":[],"mappings":";;;;;AAAA;AACA;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK;AACjD,IAAI,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACpD,IAAI,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;AACnF;AACA,IAAI,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAC3C,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5C,IAAI,OAAO,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;AACxC,IAAI,IAAI,YAAY,EAAE;AACtB,QAAQ,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAC7C,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAClD;AACA,IAAI,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AACjE,IAAI,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAC3E,IAAI,MAAM,kBAAkB,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC5E,IAAI,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AACpD,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,EAAE,kBAAkB,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AACzH,IAAI,OAAO,aAAa,CAAC;AACzB;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/types/index.mjs

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=index.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/types/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/esm/clients/middleware/signing/signer/signatureV4/types/signer.mjs

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=signer.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/types/signer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/dataHashHelpers.mjs

@@ -0,0 +1,36 @@
+import { Sha256 } from '@aws-crypto/sha256-js';
+import { toHex } from '@smithy/util-hex-encoding';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+// TODO: V6 update to different crypto dependency?
+/**
+ * Returns the hashed data a `Uint8Array`.
+ *
+ * @param key `SourceData` to be used as hashing key.
+ * @param data Hashable `SourceData`.
+ * @returns `Uint8Array` created from the data as input to a hash function.
+ */
+const getHashedData = (key, data) => {
+    const sha256 = new Sha256(key ?? undefined);
+    sha256.update(data);
+    // TODO: V6 flip to async digest
+    const hashedData = sha256.digestSync();
+    return hashedData;
+};
+/**
+ * Returns the hashed data as a hex string.
+ *
+ * @param key `SourceData` to be used as hashing key.
+ * @param data Hashable `SourceData`.
+ * @returns String using lowercase hexadecimal characters created from the data as input to a hash function.
+ *
+ * @internal
+ */
+const getHashedDataAsHex = (key, data) => {
+    const hashedData = getHashedData(key, data);
+    return toHex(hashedData);
+};
+
+export { getHashedData, getHashedDataAsHex };
+//# sourceMappingURL=dataHashHelpers.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/dataHashHelpers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataHashHelpers.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/dataHashHelpers.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n// TODO: V6 update to different crypto dependency?\nimport { Sha256 } from '@aws-crypto/sha256-js';\nimport { toHex } from '@smithy/util-hex-encoding';\n/**\n * Returns the hashed data a `Uint8Array`.\n *\n * @param key `SourceData` to be used as hashing key.\n * @param data Hashable `SourceData`.\n * @returns `Uint8Array` created from the data as input to a hash function.\n */\nexport const getHashedData = (key, data) => {\n    const sha256 = new Sha256(key ?? undefined);\n    sha256.update(data);\n    // TODO: V6 flip to async digest\n    const hashedData = sha256.digestSync();\n    return hashedData;\n};\n/**\n * Returns the hashed data as a hex string.\n *\n * @param key `SourceData` to be used as hashing key.\n * @param data Hashable `SourceData`.\n * @returns String using lowercase hexadecimal characters created from the data as input to a hash function.\n *\n * @internal\n */\nexport const getHashedDataAsHex = (key, data) => {\n    const hashedData = getHashedData(key, data);\n    return toHex(hashedData);\n};\n"],"names":[],"mappings":";;;AAAA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,aAAa,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK;AAC5C,IAAI,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;AAChD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxB;AACA,IAAI,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;AAC3C,IAAI,OAAO,UAAU,CAAC;AACtB,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,kBAAkB,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK;AACjD,IAAI,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChD,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;AAC7B;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalHeaders.mjs

@@ -0,0 +1,24 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns canonical headers.
+ *
+ * @param headers Headers from the request.
+ * @returns Request headers that will be signed, and their values, separated by newline characters. Header names must
+ * use lowercase characters, must appear in alphabetical order, and must be followed by a colon (:). For the values,
+ * trim any leading or trailing spaces, convert sequential spaces to a single space, and separate the values
+ * for a multi-value header using commas.
+ *
+ * @internal
+ */
+const getCanonicalHeaders = (headers) => Object.entries(headers)
+    .map(([key, value]) => ({
+    key: key.toLowerCase(),
+    value: value?.trim().replace(/\s+/g, ' ') ?? '',
+}))
+    .sort((a, b) => (a.key < b.key ? -1 : 1))
+    .map(entry => `${entry.key}:${entry.value}\n`)
+    .join('');
+
+export { getCanonicalHeaders };
+//# sourceMappingURL=getCanonicalHeaders.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalHeaders.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCanonicalHeaders.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getCanonicalHeaders.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns canonical headers.\n *\n * @param headers Headers from the request.\n * @returns Request headers that will be signed, and their values, separated by newline characters. Header names must\n * use lowercase characters, must appear in alphabetical order, and must be followed by a colon (:). For the values,\n * trim any leading or trailing spaces, convert sequential spaces to a single space, and separate the values\n * for a multi-value header using commas.\n *\n * @internal\n */\nexport const getCanonicalHeaders = (headers) => Object.entries(headers)\n    .map(([key, value]) => ({\n    key: key.toLowerCase(),\n    value: value?.trim().replace(/\\s+/g, ' ') ?? '',\n}))\n    .sort((a, b) => (a.key < b.key ? -1 : 1))\n    .map(entry => `${entry.key}:${entry.value}\\n`)\n    .join('');\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,mBAAmB,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;AACvE,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM;AAC5B,IAAI,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AAC1B,IAAI,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE;AACnD,CAAC,CAAC,CAAC;AACH,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClD,KAAK,IAAI,CAAC,EAAE;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalQueryString.mjs

@@ -0,0 +1,27 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a canonical query string.
+ *
+ * @param searchParams `searchParams` from the request url.
+ * @returns URL-encoded query string parameters, separated by ampersands (&). Percent-encode reserved characters,
+ * including the space character. Encode names and values separately. If there are empty parameters, append the equals
+ * sign to the parameter name before encoding. After encoding, sort the parameters alphabetically by key name. If there
+ * is no query string, use an empty string ("").
+ *
+ * @internal
+ */
+const getCanonicalQueryString = (searchParams) => Array.from(searchParams)
+    .sort(([keyA, valA], [keyB, valB]) => {
+    if (keyA === keyB) {
+        return valA < valB ? -1 : 1;
+    }
+    return keyA < keyB ? -1 : 1;
+})
+    .map(([key, val]) => `${escapeUri(key)}=${escapeUri(val)}`)
+    .join('&');
+const escapeUri = (uri) => encodeURIComponent(uri).replace(/[!'()*]/g, hexEncode);
+const hexEncode = (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`;
+
+export { getCanonicalQueryString };
+//# sourceMappingURL=getCanonicalQueryString.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalQueryString.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCanonicalQueryString.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getCanonicalQueryString.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns a canonical query string.\n *\n * @param searchParams `searchParams` from the request url.\n * @returns URL-encoded query string parameters, separated by ampersands (&). Percent-encode reserved characters,\n * including the space character. Encode names and values separately. If there are empty parameters, append the equals\n * sign to the parameter name before encoding. After encoding, sort the parameters alphabetically by key name. If there\n * is no query string, use an empty string (\"\").\n *\n * @internal\n */\nexport const getCanonicalQueryString = (searchParams) => Array.from(searchParams)\n    .sort(([keyA, valA], [keyB, valB]) => {\n    if (keyA === keyB) {\n        return valA < valB ? -1 : 1;\n    }\n    return keyA < keyB ? -1 : 1;\n})\n    .map(([key, val]) => `${escapeUri(key)}=${escapeUri(val)}`)\n    .join('&');\nconst escapeUri = (uri) => encodeURIComponent(uri).replace(/[!'()*]/g, hexEncode);\nconst hexEncode = (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`;\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,uBAAuB,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;AACjF,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK;AAC1C,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE;AACvB,QAAQ,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AACpC,KAAK;AACL,IAAI,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC,CAAC;AACF,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/D,KAAK,IAAI,CAAC,GAAG,EAAE;AACf,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAClF,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalRequest.mjs

@@ -0,0 +1,35 @@
+import { getCanonicalHeaders } from './getCanonicalHeaders.mjs';
+import { getCanonicalQueryString } from './getCanonicalQueryString.mjs';
+import { getCanonicalUri } from './getCanonicalUri.mjs';
+import { getHashedPayload } from './getHashedPayload.mjs';
+import { getSignedHeaders } from './getSignedHeaders.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a canonical request.
+ *
+ * @param request `HttpRequest` from which to create the canonical request from.
+ * @param uriEscapePath Whether to uri encode the path as part of canonical uri. It's used for S3 only where the
+ *   pathname is already uri encoded, and the signing process is not expected to uri encode it again. Defaults to true.
+ * @returns String created by by concatenating the following strings, separated by newline characters:
+ * - HTTPMethod
+ * - CanonicalUri
+ * - CanonicalQueryString
+ * - CanonicalHeaders
+ * - SignedHeaders
+ * - HashedPayload
+ *
+ * @internal
+ */
+const getCanonicalRequest = ({ body, headers, method, url }, uriEscapePath = true) => [
+    method,
+    getCanonicalUri(url.pathname, uriEscapePath),
+    getCanonicalQueryString(url.searchParams),
+    getCanonicalHeaders(headers),
+    getSignedHeaders(headers),
+    getHashedPayload(body),
+].join('\n');
+
+export { getCanonicalRequest };
+//# sourceMappingURL=getCanonicalRequest.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalRequest.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCanonicalRequest.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getCanonicalRequest.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { getCanonicalHeaders } from './getCanonicalHeaders';\nimport { getCanonicalQueryString } from './getCanonicalQueryString';\nimport { getCanonicalUri } from './getCanonicalUri';\nimport { getHashedPayload } from './getHashedPayload';\nimport { getSignedHeaders } from './getSignedHeaders';\n/**\n * Returns a canonical request.\n *\n * @param request `HttpRequest` from which to create the canonical request from.\n * @param uriEscapePath Whether to uri encode the path as part of canonical uri. It's used for S3 only where the\n *   pathname is already uri encoded, and the signing process is not expected to uri encode it again. Defaults to true.\n * @returns String created by by concatenating the following strings, separated by newline characters:\n * - HTTPMethod\n * - CanonicalUri\n * - CanonicalQueryString\n * - CanonicalHeaders\n * - SignedHeaders\n * - HashedPayload\n *\n * @internal\n */\nexport const getCanonicalRequest = ({ body, headers, method, url }, uriEscapePath = true) => [\n    method,\n    getCanonicalUri(url.pathname, uriEscapePath),\n    getCanonicalQueryString(url.searchParams),\n    getCanonicalHeaders(headers),\n    getSignedHeaders(headers),\n    getHashedPayload(body),\n].join('\\n');\n"],"names":[],"mappings":";;;;;;AAAA;AACA;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,mBAAmB,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,aAAa,GAAG,IAAI,KAAK;AAC7F,IAAI,MAAM;AACV,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC;AAChD,IAAI,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC;AAC7C,IAAI,mBAAmB,CAAC,OAAO,CAAC;AAChC,IAAI,gBAAgB,CAAC,OAAO,CAAC;AAC7B,IAAI,gBAAgB,CAAC,IAAI,CAAC;AAC1B,CAAC,CAAC,IAAI,CAAC,IAAI;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalUri.mjs

@@ -0,0 +1,21 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a canonical uri.
+ *
+ * @param pathname `pathname` from request url.
+ * @param uriEscapePath Whether to uri encode the path as part of canonical uri. It's used for S3 only where the
+ *   pathname is already uri encoded, and the signing process is not expected to uri encode it again. Defaults to true.
+ * @returns URI-encoded version of the absolute path component URL (everything between the host and the question mark
+ * character (?) that starts the query string parameters). If the absolute path is empty, a forward slash character (/).
+ *
+ * @internal
+ */
+const getCanonicalUri = (pathname, uriEscapePath = true) => pathname
+    ? uriEscapePath
+        ? encodeURIComponent(pathname).replace(/%2F/g, '/')
+        : pathname
+    : '/';
+
+export { getCanonicalUri };
+//# sourceMappingURL=getCanonicalUri.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCanonicalUri.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCanonicalUri.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getCanonicalUri.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns a canonical uri.\n *\n * @param pathname `pathname` from request url.\n * @param uriEscapePath Whether to uri encode the path as part of canonical uri. It's used for S3 only where the\n *   pathname is already uri encoded, and the signing process is not expected to uri encode it again. Defaults to true.\n * @returns URI-encoded version of the absolute path component URL (everything between the host and the question mark\n * character (?) that starts the query string parameters). If the absolute path is empty, a forward slash character (/).\n *\n * @internal\n */\nexport const getCanonicalUri = (pathname, uriEscapePath = true) => pathname\n    ? uriEscapePath\n        ? encodeURIComponent(pathname).replace(/%2F/g, '/')\n        : pathname\n    : '/';\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,eAAe,GAAG,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,KAAK,QAAQ;AAC3E,MAAM,aAAa;AACnB,UAAU,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;AAC3D,UAAU,QAAQ;AAClB,MAAM;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCredentialScope.mjs

@@ -0,0 +1,19 @@
+import { KEY_TYPE_IDENTIFIER } from '../constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns the credential scope which restricts the resulting signature to the specified region and service.
+ *
+ * @param date Current date in the format 'YYYYMMDD'.
+ * @param region AWS region in which the service resides.
+ * @param service Service to which the signed request is being sent.
+ *
+ * @returns  A string representing the credential scope with format 'YYYYMMDD/region/service/aws4_request'.
+ *
+ * @internal
+ */
+const getCredentialScope = (date, region, service) => `${date}/${region}/${service}/${KEY_TYPE_IDENTIFIER}`;
+
+export { getCredentialScope };
+//# sourceMappingURL=getCredentialScope.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getCredentialScope.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCredentialScope.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getCredentialScope.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { KEY_TYPE_IDENTIFIER } from '../constants';\n/**\n * Returns the credential scope which restricts the resulting signature to the specified region and service.\n *\n * @param date Current date in the format 'YYYYMMDD'.\n * @param region AWS region in which the service resides.\n * @param service Service to which the signed request is being sent.\n *\n * @returns  A string representing the credential scope with format 'YYYYMMDD/region/service/aws4_request'.\n *\n * @internal\n */\nexport const getCredentialScope = (date, region, service) => `${date}/${region}/${service}/${KEY_TYPE_IDENTIFIER}`;\n"],"names":[],"mappings":";;AAAA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,mBAAmB,CAAC;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getFormattedDates.mjs

@@ -0,0 +1,22 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns expected date strings to be used in signing.
+ *
+ * @param date JavaScript `Date` object.
+ * @returns `FormattedDates` object containing the following:
+ * - longDate: A date string in 'YYYYMMDDThhmmssZ' format
+ * - shortDate: A date string in 'YYYYMMDD' format
+ *
+ * @internal
+ */
+const getFormattedDates = (date) => {
+    const longDate = date.toISOString().replace(/[:\-]|\.\d{3}/g, '');
+    return {
+        longDate,
+        shortDate: longDate.slice(0, 8),
+    };
+};
+
+export { getFormattedDates };
+//# sourceMappingURL=getFormattedDates.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getFormattedDates.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFormattedDates.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getFormattedDates.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns expected date strings to be used in signing.\n *\n * @param date JavaScript `Date` object.\n * @returns `FormattedDates` object containing the following:\n * - longDate: A date string in 'YYYYMMDDThhmmssZ' format\n * - shortDate: A date string in 'YYYYMMDD' format\n *\n * @internal\n */\nexport const getFormattedDates = (date) => {\n    const longDate = date.toISOString().replace(/[:\\-]|\\.\\d{3}/g, '');\n    return {\n        longDate,\n        shortDate: longDate.slice(0, 8),\n    };\n};\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,iBAAiB,GAAG,CAAC,IAAI,KAAK;AAC3C,IAAI,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AACtE,IAAI,OAAO;AACX,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACvC,KAAK,CAAC;AACN;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getHashedPayload.mjs

@@ -0,0 +1,32 @@
+import { EMPTY_HASH, UNSIGNED_PAYLOAD } from '../constants.mjs';
+import { getHashedDataAsHex } from './dataHashHelpers.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns the hashed payload.
+ *
+ * @param body `body` (payload) from the request.
+ * @returns String created using the payload in the body of the HTTP request as input to a hash function. This string
+ * uses lowercase hexadecimal characters. If the payload is empty, return precalculated result of an empty hash.
+ *
+ * @internal
+ */
+const getHashedPayload = (body) => {
+    // return precalculated empty hash if body is undefined or null
+    if (body == null) {
+        return EMPTY_HASH;
+    }
+    if (isSourceData(body)) {
+        const hashedData = getHashedDataAsHex(null, body);
+        return hashedData;
+    }
+    // Defined body is not signable. Return unsigned payload which may or may not be accepted by the service.
+    return UNSIGNED_PAYLOAD;
+};
+const isSourceData = (body) => typeof body === 'string' || ArrayBuffer.isView(body) || isArrayBuffer(body);
+const isArrayBuffer = (arg) => (typeof ArrayBuffer === 'function' && arg instanceof ArrayBuffer) ||
+    Object.prototype.toString.call(arg) === '[object ArrayBuffer]';
+
+export { getHashedPayload };
+//# sourceMappingURL=getHashedPayload.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getHashedPayload.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getHashedPayload.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getHashedPayload.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { EMPTY_HASH, UNSIGNED_PAYLOAD } from '../constants';\nimport { getHashedDataAsHex } from './dataHashHelpers';\n/**\n * Returns the hashed payload.\n *\n * @param body `body` (payload) from the request.\n * @returns String created using the payload in the body of the HTTP request as input to a hash function. This string\n * uses lowercase hexadecimal characters. If the payload is empty, return precalculated result of an empty hash.\n *\n * @internal\n */\nexport const getHashedPayload = (body) => {\n    // return precalculated empty hash if body is undefined or null\n    if (body == null) {\n        return EMPTY_HASH;\n    }\n    if (isSourceData(body)) {\n        const hashedData = getHashedDataAsHex(null, body);\n        return hashedData;\n    }\n    // Defined body is not signable. Return unsigned payload which may or may not be accepted by the service.\n    return UNSIGNED_PAYLOAD;\n};\nconst isSourceData = (body) => typeof body === 'string' || ArrayBuffer.isView(body) || isArrayBuffer(body);\nconst isArrayBuffer = (arg) => (typeof ArrayBuffer === 'function' && arg instanceof ArrayBuffer) ||\n    Object.prototype.toString.call(arg) === '[object ArrayBuffer]';\n"],"names":[],"mappings":";;;AAAA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,gBAAgB,GAAG,CAAC,IAAI,KAAK;AAC1C;AACA,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;AACtB,QAAQ,OAAO,UAAU,CAAC;AAC1B,KAAK;AACL,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE;AAC5B,QAAQ,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1D,QAAQ,OAAO,UAAU,CAAC;AAC1B,KAAK;AACL;AACA,IAAI,OAAO,gBAAgB,CAAC;AAC5B,EAAE;AACF,MAAM,YAAY,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;AAC3G,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,WAAW,KAAK,UAAU,IAAI,GAAG,YAAY,WAAW;AAC/F,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSignature.mjs

@@ -0,0 +1,31 @@
+import { getHashedDataAsHex } from './dataHashHelpers.mjs';
+import { getCanonicalRequest } from './getCanonicalRequest.mjs';
+import { getSigningKey } from './getSigningKey.mjs';
+import { getStringToSign } from './getStringToSign.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Calculates and returns an AWS API Signature.
+ * https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html
+ *
+ * @param request `HttpRequest` to be signed.
+ * @param signRequestOptions `SignRequestOptions` object containing values used to construct the signature.
+ * @returns AWS API Signature to sign a request or url with.
+ *
+ * @internal
+ */
+const getSignature = (request, { credentialScope, longDate, secretAccessKey, shortDate, signingRegion, signingService, uriEscapePath, }) => {
+    // step 1: create a canonical request
+    const canonicalRequest = getCanonicalRequest(request, uriEscapePath);
+    // step 2: create a hash of the canonical request
+    const hashedRequest = getHashedDataAsHex(null, canonicalRequest);
+    // step 3: create a string to sign
+    const stringToSign = getStringToSign(longDate, credentialScope, hashedRequest);
+    // step 4: calculate the signature
+    const signature = getHashedDataAsHex(getSigningKey(secretAccessKey, shortDate, signingRegion, signingService), stringToSign);
+    return signature;
+};
+
+export { getSignature };
+//# sourceMappingURL=getSignature.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSignature.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSignature.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getSignature.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { getHashedDataAsHex } from './dataHashHelpers';\nimport { getCanonicalRequest } from './getCanonicalRequest';\nimport { getSigningKey } from './getSigningKey';\nimport { getStringToSign } from './getStringToSign';\n/**\n * Calculates and returns an AWS API Signature.\n * https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html\n *\n * @param request `HttpRequest` to be signed.\n * @param signRequestOptions `SignRequestOptions` object containing values used to construct the signature.\n * @returns AWS API Signature to sign a request or url with.\n *\n * @internal\n */\nexport const getSignature = (request, { credentialScope, longDate, secretAccessKey, shortDate, signingRegion, signingService, uriEscapePath, }) => {\n    // step 1: create a canonical request\n    const canonicalRequest = getCanonicalRequest(request, uriEscapePath);\n    // step 2: create a hash of the canonical request\n    const hashedRequest = getHashedDataAsHex(null, canonicalRequest);\n    // step 3: create a string to sign\n    const stringToSign = getStringToSign(longDate, credentialScope, hashedRequest);\n    // step 4: calculate the signature\n    const signature = getHashedDataAsHex(getSigningKey(secretAccessKey, shortDate, signingRegion, signingService), stringToSign);\n    return signature;\n};\n"],"names":[],"mappings":";;;;;AAAA;AACA;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,YAAY,GAAG,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,GAAG,KAAK;AACnJ;AACA,IAAI,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACzE;AACA,IAAI,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AACrE;AACA,IAAI,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AACnF;AACA,IAAI,MAAM,SAAS,GAAG,kBAAkB,CAAC,aAAa,CAAC,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,YAAY,CAAC,CAAC;AACjI,IAAI,OAAO,SAAS,CAAC;AACrB;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSignedHeaders.mjs

@@ -0,0 +1,18 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns signed headers.
+ *
+ * @param headers `headers` from the request.
+ * @returns List of headers included in canonical headers, separated by semicolons (;). This indicates which headers
+ * are part of the signing process. Header names must use lowercase characters and must appear in alphabetical order.
+ *
+ * @internal
+ */
+const getSignedHeaders = (headers) => Object.keys(headers)
+    .map(key => key.toLowerCase())
+    .sort()
+    .join(';');
+
+export { getSignedHeaders };
+//# sourceMappingURL=getSignedHeaders.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSignedHeaders.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSignedHeaders.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getSignedHeaders.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns signed headers.\n *\n * @param headers `headers` from the request.\n * @returns List of headers included in canonical headers, separated by semicolons (;). This indicates which headers\n * are part of the signing process. Header names must use lowercase characters and must appear in alphabetical order.\n *\n * @internal\n */\nexport const getSignedHeaders = (headers) => Object.keys(headers)\n    .map(key => key.toLowerCase())\n    .sort()\n    .join(';');\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,gBAAgB,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACjE,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;AAClC,KAAK,IAAI,EAAE;AACX,KAAK,IAAI,CAAC,GAAG;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSigningKey.mjs

@@ -0,0 +1,28 @@
+import { KEY_TYPE_IDENTIFIER, SIGNATURE_IDENTIFIER } from '../constants.mjs';
+import { getHashedData } from './dataHashHelpers.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a signing key to be used for signing requests.
+ *
+ * @param secretAccessKey AWS secret access key from credentials.
+ * @param date Current date in the format 'YYYYMMDD'.
+ * @param region AWS region in which the service resides.
+ * @param service Service to which the signed request is being sent.
+ *
+ * @returns `Uint8Array` calculated from its composite parts.
+ *
+ * @internal
+ */
+const getSigningKey = (secretAccessKey, date, region, service) => {
+    const key = `${SIGNATURE_IDENTIFIER}${secretAccessKey}`;
+    const dateKey = getHashedData(key, date);
+    const regionKey = getHashedData(dateKey, region);
+    const serviceKey = getHashedData(regionKey, service);
+    const signingKey = getHashedData(serviceKey, KEY_TYPE_IDENTIFIER);
+    return signingKey;
+};
+
+export { getSigningKey };
+//# sourceMappingURL=getSigningKey.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSigningKey.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSigningKey.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getSigningKey.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { KEY_TYPE_IDENTIFIER, SIGNATURE_IDENTIFIER } from '../constants';\nimport { getHashedData } from './dataHashHelpers';\n/**\n * Returns a signing key to be used for signing requests.\n *\n * @param secretAccessKey AWS secret access key from credentials.\n * @param date Current date in the format 'YYYYMMDD'.\n * @param region AWS region in which the service resides.\n * @param service Service to which the signed request is being sent.\n *\n * @returns `Uint8Array` calculated from its composite parts.\n *\n * @internal\n */\nexport const getSigningKey = (secretAccessKey, date, region, service) => {\n    const key = `${SIGNATURE_IDENTIFIER}${secretAccessKey}`;\n    const dateKey = getHashedData(key, date);\n    const regionKey = getHashedData(dateKey, region);\n    const serviceKey = getHashedData(regionKey, service);\n    const signingKey = getHashedData(serviceKey, KEY_TYPE_IDENTIFIER);\n    return signingKey;\n};\n"],"names":[],"mappings":";;;AAAA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,aAAa,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,KAAK;AACzE,IAAI,MAAM,GAAG,GAAG,CAAC,EAAE,oBAAoB,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5D,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7C,IAAI,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,IAAI,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACzD,IAAI,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AACtE,IAAI,OAAO,UAAU,CAAC;AACtB;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSigningValues.mjs

@@ -0,0 +1,35 @@
+import { getCredentialScope } from './getCredentialScope.mjs';
+import { getFormattedDates } from './getFormattedDates.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Extracts common values used for signing both requests and urls.
+ *
+ * @param options `SignRequestOptions` object containing values used to construct the signature.
+ * @returns Common `SigningValues` used for signing.
+ *
+ * @internal
+ */
+const getSigningValues = ({ credentials, signingDate = new Date(), signingRegion, signingService, uriEscapePath = true, }) => {
+    // get properties from credentials
+    const { accessKeyId, secretAccessKey, sessionToken } = credentials;
+    // get formatted dates for signing
+    const { longDate, shortDate } = getFormattedDates(signingDate);
+    // copy header and set signing properties
+    const credentialScope = getCredentialScope(shortDate, signingRegion, signingService);
+    return {
+        accessKeyId,
+        credentialScope,
+        longDate,
+        secretAccessKey,
+        sessionToken,
+        shortDate,
+        signingRegion,
+        signingService,
+        uriEscapePath,
+    };
+};
+
+export { getSigningValues };
+//# sourceMappingURL=getSigningValues.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getSigningValues.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSigningValues.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getSigningValues.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { getCredentialScope } from './getCredentialScope';\nimport { getFormattedDates } from './getFormattedDates';\n/**\n * Extracts common values used for signing both requests and urls.\n *\n * @param options `SignRequestOptions` object containing values used to construct the signature.\n * @returns Common `SigningValues` used for signing.\n *\n * @internal\n */\nexport const getSigningValues = ({ credentials, signingDate = new Date(), signingRegion, signingService, uriEscapePath = true, }) => {\n    // get properties from credentials\n    const { accessKeyId, secretAccessKey, sessionToken } = credentials;\n    // get formatted dates for signing\n    const { longDate, shortDate } = getFormattedDates(signingDate);\n    // copy header and set signing properties\n    const credentialScope = getCredentialScope(shortDate, signingRegion, signingService);\n    return {\n        accessKeyId,\n        credentialScope,\n        longDate,\n        secretAccessKey,\n        sessionToken,\n        shortDate,\n        signingRegion,\n        signingService,\n        uriEscapePath,\n    };\n};\n"],"names":[],"mappings":";;;AAAA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,gBAAgB,GAAG,CAAC,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,GAAG,IAAI,GAAG,KAAK;AACrI;AACA,IAAI,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC;AACvE;AACA,IAAI,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACnE;AACA,IAAI,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AACzF,IAAI,OAAO;AACX,QAAQ,WAAW;AACnB,QAAQ,eAAe;AACvB,QAAQ,QAAQ;AAChB,QAAQ,eAAe;AACvB,QAAQ,YAAY;AACpB,QAAQ,SAAS;AACjB,QAAQ,aAAa;AACrB,QAAQ,cAAc;AACtB,QAAQ,aAAa;AACrB,KAAK,CAAC;AACN;;;;"}

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getStringToSign.mjs

@@ -0,0 +1,23 @@
+import { SHA256_ALGORITHM_IDENTIFIER } from '../constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a string to be signed.
+ *
+ * @param date Current date in the format 'YYYYMMDDThhmmssZ'.
+ * @param credentialScope String representing the credential scope with format 'YYYYMMDD/region/service/aws4_request'.
+ * @param hashedRequest Hashed canonical request.
+ *
+ * @returns A string created by by concatenating the following strings, separated by newline characters:
+ * - Algorithm
+ * - RequestDateTime
+ * - CredentialScope
+ * - HashedCanonicalRequest
+ *
+ * @internal
+ */
+const getStringToSign = (date, credentialScope, hashedRequest) => [SHA256_ALGORITHM_IDENTIFIER, date, credentialScope, hashedRequest].join('\n');
+
+export { getStringToSign };
+//# sourceMappingURL=getStringToSign.mjs.map

package/dist/esm/clients/middleware/signing/signer/signatureV4/utils/getStringToSign.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getStringToSign.mjs","sources":["../../../../../../../../src/clients/middleware/signing/signer/signatureV4/utils/getStringToSign.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { SHA256_ALGORITHM_IDENTIFIER } from '../constants';\n/**\n * Returns a string to be signed.\n *\n * @param date Current date in the format 'YYYYMMDDThhmmssZ'.\n * @param credentialScope String representing the credential scope with format 'YYYYMMDD/region/service/aws4_request'.\n * @param hashedRequest Hashed canonical request.\n *\n * @returns A string created by by concatenating the following strings, separated by newline characters:\n * - Algorithm\n * - RequestDateTime\n * - CredentialScope\n * - HashedCanonicalRequest\n *\n * @internal\n */\nexport const getStringToSign = (date, credentialScope, hashedRequest) => [SHA256_ALGORITHM_IDENTIFIER, date, credentialScope, hashedRequest].join('\\n');\n"],"names":[],"mappings":";;AAAA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,eAAe,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,KAAK,CAAC,2BAA2B,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI;;;;"}

package/dist/esm/clients/middleware/signing/utils/extendedEncodeURIComponent.mjs

@@ -0,0 +1,20 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Wraps encodeURIComponent to encode additional characters to fully adhere to RFC 3986.
+ * @see https://github.com/aws/aws-sdk-js-v3/blob/86b432c464150069678b25ff88d57c2ca26e75a2/packages/smithy-client/src/extended-encode-uri-component.ts#L7
+ *
+ * @param uri URI string to encode
+ * @returns RFC 3986 encoded string
+ *
+ * @internal
+ */
+const extendedEncodeURIComponent = (uri) => {
+    // Match characters normally not encoded by `encodeURIComponent`
+    const extendedCharacters = /[!'()*]/g;
+    return encodeURIComponent(uri).replace(extendedCharacters, hexEncode);
+};
+const hexEncode = (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`;
+
+export { extendedEncodeURIComponent };
+//# sourceMappingURL=extendedEncodeURIComponent.mjs.map

package/dist/esm/clients/middleware/signing/utils/extendedEncodeURIComponent.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"extendedEncodeURIComponent.mjs","sources":["../../../../../../src/clients/middleware/signing/utils/extendedEncodeURIComponent.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Wraps encodeURIComponent to encode additional characters to fully adhere to RFC 3986.\n * @see https://github.com/aws/aws-sdk-js-v3/blob/86b432c464150069678b25ff88d57c2ca26e75a2/packages/smithy-client/src/extended-encode-uri-component.ts#L7\n *\n * @param uri URI string to encode\n * @returns RFC 3986 encoded string\n *\n * @internal\n */\nexport const extendedEncodeURIComponent = (uri) => {\n    // Match characters normally not encoded by `encodeURIComponent`\n    const extendedCharacters = /[!'()*]/g;\n    return encodeURIComponent(uri).replace(extendedCharacters, hexEncode);\n};\nconst hexEncode = (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`;\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,0BAA0B,GAAG,CAAC,GAAG,KAAK;AACnD;AACA,IAAI,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAC1C,IAAI,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;AAC1E,EAAE;AACF,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;;;;"}

package/dist/esm/clients/middleware/signing/utils/getSkewCorrectedDate.mjs

@@ -0,0 +1,15 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Returns a `Date` that is corrected for clock skew.
+ *
+ * @param systemClockOffset The offset of the system clock in milliseconds.
+ *
+ * @returns `Date` representing the current time adjusted by the system clock offset.
+ *
+ * @internal
+ */
+const getSkewCorrectedDate = (systemClockOffset) => new Date(Date.now() + systemClockOffset);
+
+export { getSkewCorrectedDate };
+//# sourceMappingURL=getSkewCorrectedDate.mjs.map

package/dist/esm/clients/middleware/signing/utils/getSkewCorrectedDate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSkewCorrectedDate.mjs","sources":["../../../../../../src/clients/middleware/signing/utils/getSkewCorrectedDate.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Returns a `Date` that is corrected for clock skew.\n *\n * @param systemClockOffset The offset of the system clock in milliseconds.\n *\n * @returns `Date` representing the current time adjusted by the system clock offset.\n *\n * @internal\n */\nexport const getSkewCorrectedDate = (systemClockOffset) => new Date(Date.now() + systemClockOffset);\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,oBAAoB,GAAG,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;;;;"}