@aws-sdk/middleware-ssec 3.533.0 → 3.537.0

package/dist-cjs/index.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var src_exports = {};
 __export(src_exports, {
   getSsecPlugin: () => getSsecPlugin,
+  isValidBase64EncodedSSECustomerKey: () => isValidBase64EncodedSSECustomerKey,
   ssecMiddleware: () => ssecMiddleware,
   ssecMiddlewareOptions: () => ssecMiddlewareOptions
 });
@@ -43,8 +44,7 @@ function ssecMiddleware(options) {
       if (value) {
         let valueForHash;
         if (typeof value === "string") {
-          const isBase64Encoded = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
-          if (isBase64Encoded) {
+          if (isValidBase64EncodedSSECustomerKey(value, options)) {
             valueForHash = options.base64Decoder(value);
           } else {
             valueForHash = options.utf8Decoder(value);
@@ -77,11 +77,24 @@ var getSsecPlugin = /* @__PURE__ */ __name((config) => ({
     clientStack.add(ssecMiddleware(config), ssecMiddlewareOptions);
   }
 }), "getSsecPlugin");
+function isValidBase64EncodedSSECustomerKey(str, options) {
+  const base64Regex = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+  if (!base64Regex.test(str))
+    return false;
+  try {
+    const decodedBytes = options.base64Decoder(str);
+    return decodedBytes.length === 32;
+  } catch {
+    return false;
+  }
+}
+__name(isValidBase64EncodedSSECustomerKey, "isValidBase64EncodedSSECustomerKey");
 // Annotate the CommonJS export names for ESM import in node:
 
 0 && (module.exports = {
   ssecMiddleware,
   ssecMiddlewareOptions,
-  getSsecPlugin
+  getSsecPlugin,
+  isValidBase64EncodedSSECustomerKey
 });
 

package/dist-es/index.js

@@ -16,8 +16,7 @@ export function ssecMiddleware(options) {
             if (value) {
                 let valueForHash;
                 if (typeof value === "string") {
-                    const isBase64Encoded = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
-                    if (isBase64Encoded) {
+                    if (isValidBase64EncodedSSECustomerKey(value, options)) {
                         valueForHash = options.base64Decoder(value);
                     }
                     else {
@@ -53,3 +52,15 @@ export const getSsecPlugin = (config) => ({
         clientStack.add(ssecMiddleware(config), ssecMiddlewareOptions);
     },
 });
+export function isValidBase64EncodedSSECustomerKey(str, options) {
+    const base64Regex = /^(?:[A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+    if (!base64Regex.test(str))
+        return false;
+    try {
+        const decodedBytes = options.base64Decoder(str);
+        return decodedBytes.length === 32;
+    }
+    catch {
+        return false;
+    }
+}

package/dist-types/index.d.ts

@@ -8,4 +8,5 @@ interface PreviouslyResolved {
 export declare function ssecMiddleware(options: PreviouslyResolved): InitializeMiddleware<any, any>;
 export declare const ssecMiddlewareOptions: InitializeHandlerOptions;
 export declare const getSsecPlugin: (config: PreviouslyResolved) => Pluggable<any, any>;
+export declare function isValidBase64EncodedSSECustomerKey(str: string, options: PreviouslyResolved): boolean;
 export {};

package/dist-types/ts3.4/index.d.ts

@@ -20,4 +20,8 @@ export declare const ssecMiddlewareOptions: InitializeHandlerOptions;
 export declare const getSsecPlugin: (
   config: PreviouslyResolved
 ) => Pluggable<any, any>;
+export declare function isValidBase64EncodedSSECustomerKey(
+  str: string,
+  options: PreviouslyResolved
+): boolean;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/middleware-ssec",
-  "version": "3.533.0",
+  "version": "3.537.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline middleware-ssec",
@@ -21,9 +21,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/types": "3.533.0",
-    "@smithy/types": "^2.11.0",
-    "tslib": "^2.5.0"
+    "@aws-sdk/types": "3.535.0",
+    "@smithy/types": "^2.12.0",
+    "tslib": "^2.6.2"
   },
   "engines": {
     "node": ">=14.0.0"