@aws-sdk/credential-provider-web-identity 3.36.0 → 3.41.0

package/CHANGELOG.md

@@ -3,6 +3,41 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.41.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.40.1...v3.41.0) (2021-11-11)
+
+
+### Bug Fixes
+
+* **credential-provider-web-identity:** exclude node.js code from browser bundle ([#3005](https://github.com/aws/aws-sdk-js-v3/issues/3005)) ([7ba033a](https://github.com/aws/aws-sdk-js-v3/commit/7ba033a37058c6697edb004180dc046a2298e9aa))
+
+
+
+
+
+# [3.40.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.39.0...v3.40.0) (2021-11-05)
+
+**Note:** Version bump only for package @aws-sdk/credential-provider-web-identity
+
+
+
+
+
+# [3.38.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.37.0...v3.38.0) (2021-10-22)
+
+**Note:** Version bump only for package @aws-sdk/credential-provider-web-identity
+
+
+
+
+
+# [3.37.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.36.1...v3.37.0) (2021-10-15)
+
+**Note:** Version bump only for package @aws-sdk/credential-provider-web-identity
+
+
+
+
+
 # [3.36.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.35.0...v3.36.0) (2021-10-08)
 
 

package/dist-types/ts3.4/fromTokenFile.d.ts

@@ -1,12 +1,8 @@
 import { CredentialProvider } from "@aws-sdk/types";
 import { FromWebTokenInit } from "./fromWebToken";
 export interface FromTokenFileInit extends Partial<Pick<FromWebTokenInit, Exclude<keyof FromWebTokenInit, "webIdentityToken">>> {
-    /**
-     * File location of where the `OIDC` token is stored.
-     */
+    
     webIdentityTokenFile?: string;
 }
-/**
- * Represents OIDC credentials from a file on disk.
- */
+
 export declare const fromTokenFile: (init?: FromTokenFileInit) => CredentialProvider;

package/dist-types/ts3.4/fromWebToken.d.ts

@@ -1,125 +1,29 @@
 import { CredentialProvider, Credentials } from "@aws-sdk/types";
 export interface AssumeRoleWithWebIdentityParams {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the role that the caller is assuming.</p>
-     */
+    
     RoleArn: string;
-    /**
-     * <p>An identifier for the assumed role session. Typically, you pass the name or identifier
-     *          that is associated with the user who is using your application. That way, the temporary
-     *          security credentials that your application will use are associated with that user. This
-     *          session name is included as part of the ARN and assumed role ID in the
-     *             <code>AssumedRoleUser</code> response element.</p>
-     *          <p>The regex used to validate this parameter is a string of characters
-     *     consisting of upper- and lower-case alphanumeric characters with no spaces. You can
-     *     also include underscores or any of the following characters: =,.@-</p>
-     */
+    
     RoleSessionName: string;
-    /**
-     * <p>The OAuth 2.0 access token or OpenID Connect ID token that is provided by the identity
-     *          provider. Your application must get this token by authenticating the user who is using your
-     *          application with a web identity provider before the application makes an
-     *             <code>AssumeRoleWithWebIdentity</code> call. </p>
-     */
+    
     WebIdentityToken: string;
-    /**
-     * <p>The fully qualified host component of the domain name of the identity provider.</p>
-     *          <p>Specify this value only for OAuth 2.0 access tokens. Currently
-     *             <code>www.amazon.com</code> and <code>graph.facebook.com</code> are the only supported
-     *          identity providers for OAuth 2.0 access tokens. Do not include URL schemes and port
-     *          numbers.</p>
-     *          <p>Do not specify this value for OpenID Connect ID tokens.</p>
-     */
+    
     ProviderId?: string;
-    /**
-     * <p>The Amazon Resource Names (ARNs) of the IAM managed policies that you want to use as
-     *          managed session policies. The policies must exist in the same account as the role.</p>
-     *          <p>This parameter is optional. You can provide up to 10 managed policy ARNs. However, the
-     *          plain text that you use for both inline and managed session policies can't exceed 2,048
-     *          characters. For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs) and AWS
-     *             Service Namespaces</a> in the AWS General Reference.</p>
-     *          <note>
-     *             <p>An AWS conversion compresses the passed session policies and session tags into a
-     *             packed binary format that has a separate limit. Your request can fail for this limit
-     *             even if your plain text meets the other requirements. The <code>PackedPolicySize</code>
-     *             response element indicates by percentage how close the policies and tags for your
-     *             request are to the upper size limit.
-     *             </p>
-     *          </note>
-     *
-     *          <p>Passing policies to this operation returns new
-     *          temporary credentials. The resulting session's permissions are the intersection of the
-     *          role's identity-based policy and the session policies. You can use the role's temporary
-     *          credentials in subsequent AWS API calls to access resources in the account that owns
-     *          the role. You cannot use session policies to grant more permissions than those allowed
-     *          by the identity-based policy of the role that is being assumed. For more information, see
-     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
-     *             Policies</a> in the <i>IAM User Guide</i>.</p>
-     */
+    
     PolicyArns?: {
         arn?: string;
     }[];
-    /**
-     * <p>An IAM policy in JSON format that you want to use as an inline session policy.</p>
-     *          <p>This parameter is optional. Passing policies to this operation returns new
-     *          temporary credentials. The resulting session's permissions are the intersection of the
-     *          role's identity-based policy and the session policies. You can use the role's temporary
-     *          credentials in subsequent AWS API calls to access resources in the account that owns
-     *          the role. You cannot use session policies to grant more permissions than those allowed
-     *          by the identity-based policy of the role that is being assumed. For more information, see
-     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
-     *             Policies</a> in the <i>IAM User Guide</i>.</p>
-     *          <p>The plain text that you use for both inline and managed session policies can't exceed
-     *          2,048 characters. The JSON policy characters can be any ASCII character from the space
-     *          character to the end of the valid character list (\u0020 through \u00FF). It can also
-     *          include the tab (\u0009), linefeed (\u000A), and carriage return (\u000D)
-     *          characters.</p>
-     *          <note>
-     *             <p>An AWS conversion compresses the passed session policies and session tags into a
-     *             packed binary format that has a separate limit. Your request can fail for this limit
-     *             even if your plain text meets the other requirements. The <code>PackedPolicySize</code>
-     *             response element indicates by percentage how close the policies and tags for your
-     *             request are to the upper size limit.
-     *             </p>
-     *          </note>
-     */
+    
     Policy?: string;
-    /**
-     * <p>The duration, in seconds, of the role session. The value can range from 900 seconds (15
-     *          minutes) up to the maximum session duration setting for the role. This setting can have a
-     *          value from 1 hour to 12 hours. If you specify a value higher than this setting, the
-     *          operation fails. For example, if you specify a session duration of 12 hours, but your
-     *          administrator set the maximum session duration to 6 hours, your operation fails. To learn
-     *          how to view the maximum value for your role, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session">View the
-     *             Maximum Session Duration Setting for a Role</a> in the
-     *             <i>IAM User Guide</i>.</p>
-     *          <p>By default, the value is set to <code>3600</code> seconds. </p>
-     *          <note>
-     *             <p>The <code>DurationSeconds</code> parameter is separate from the duration of a console
-     *             session that you might request using the returned credentials. The request to the
-     *             federation endpoint for a console sign-in token takes a <code>SessionDuration</code>
-     *             parameter that specifies the maximum length of the console session. For more
-     *             information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html">Creating a URL
-     *                that Enables Federated Users to Access the AWS Management Console</a> in the
-     *                <i>IAM User Guide</i>.</p>
-     *          </note>
-     */
+    
     DurationSeconds?: number;
 }
 declare type LowerCaseKey<T> = {
     [K in keyof T as `${Uncapitalize<string & K>}`]: T[K];
 };
 export interface FromWebTokenInit extends Pick<LowerCaseKey<AssumeRoleWithWebIdentityParams>, Exclude<keyof LowerCaseKey<AssumeRoleWithWebIdentityParams>, "roleSessionName">> {
-    /**
-     * The IAM session name used to distinguish sessions.
-     */
+    
     roleSessionName?: string;
-    /**
-     * A function that assumes a role with web identity and returns a promise fulfilled with
-     * credentials for the assumed role.
-     *
-     * @param params input parameter of sts:AssumeRoleWithWebIdentity API.
-     */
+    
     roleAssumerWithWebIdentity?: (params: AssumeRoleWithWebIdentityParams) => Promise<Credentials>;
 }
 export declare const fromWebToken: (init: FromWebTokenInit) => CredentialProvider;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-web-identity",
-  "version": "3.36.0",
+  "version": "3.41.0",
   "description": "AWS credential provider that calls STS assumeRole for temporary AWS credentials",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -12,6 +12,14 @@
     "downlevel-dts": "downlevel-dts dist-types dist-types/ts3.4",
     "test": "jest"
   },
+  "browser": {
+    "./dist-es/fromTokenFile": false,
+    "./dist-cjs/fromTokenFile": false
+  },
+  "react-native": {
+    "./dist-es/fromTokenFile": false,
+    "./dist-cjs/fromTokenFile": false
+  },
   "keywords": [
     "aws",
     "credentials"
@@ -22,8 +30,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/property-provider": "3.36.0",
-    "@aws-sdk/types": "3.36.0",
+    "@aws-sdk/property-provider": "3.40.0",
+    "@aws-sdk/types": "3.40.0",
     "tslib": "^2.3.0"
   },
   "devDependencies": {