@aws-sdk/signature-v4-multi-region 3.996.25 → 3.996.26

package/dist-cjs/index.js

@@ -1,12 +1,47 @@
 'use strict';
 
-var middlewareSdkS3 = require('@aws-sdk/middleware-sdk-s3');
 var signatureV4 = require('@smithy/signature-v4');
 
 const signatureV4CrtContainer = {
     CrtSignerV4: null,
 };
 
+const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+const SESSION_TOKEN_HEADER = SESSION_TOKEN_QUERY_PARAM.toLowerCase();
+class SignatureV4SignWithCredentials extends signatureV4.SignatureV4 {
+    async signWithCredentials(requestToSign, credentials, options) {
+        const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+        requestToSign.headers[SESSION_TOKEN_HEADER] = credentials.sessionToken;
+        const privateAccess = this;
+        setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+        return privateAccess.signRequest(requestToSign, options ?? {});
+    }
+    async presignWithCredentials(requestToSign, credentials, options) {
+        const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+        delete requestToSign.headers[SESSION_TOKEN_HEADER];
+        requestToSign.headers[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+        requestToSign.query = requestToSign.query ?? {};
+        requestToSign.query[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+        const privateAccess = this;
+        setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+        return this.presign(requestToSign, options);
+    }
+}
+function getCredentialsWithoutSessionToken(credentials) {
+    return {
+        accessKeyId: credentials.accessKeyId,
+        secretAccessKey: credentials.secretAccessKey,
+        expiration: credentials.expiration,
+    };
+}
+function setSingleOverride(privateAccess, credentialsWithoutSessionToken) {
+    const currentCredentialProvider = privateAccess.credentialProvider;
+    privateAccess.credentialProvider = () => {
+        privateAccess.credentialProvider = currentCredentialProvider;
+        return Promise.resolve(credentialsWithoutSessionToken);
+    };
+}
+
 class SignatureV4MultiRegion {
     sigv4aSigner;
     sigv4Signer;
@@ -21,7 +56,7 @@ class SignatureV4MultiRegion {
         return "none";
     }
     constructor(options) {
-        this.sigv4Signer = new middlewareSdkS3.SignatureV4S3Express(options);
+        this.sigv4Signer = new SignatureV4SignWithCredentials(options);
         this.signerOptions = options;
     }
     async sign(requestToSign, options = {}) {
@@ -118,4 +153,5 @@ class SignatureV4MultiRegion {
 }
 
 exports.SignatureV4MultiRegion = SignatureV4MultiRegion;
+exports.SignatureV4SignWithCredentials = SignatureV4SignWithCredentials;
 exports.signatureV4CrtContainer = signatureV4CrtContainer;

package/dist-es/SignatureV4MultiRegion.js

@@ -1,6 +1,6 @@
-import { SignatureV4S3Express } from "@aws-sdk/middleware-sdk-s3";
 import { signatureV4aContainer } from "@smithy/signature-v4";
 import { signatureV4CrtContainer } from "./signature-v4-crt-container";
+import { SignatureV4SignWithCredentials } from "./SignatureV4SignWithCredentials";
 export class SignatureV4MultiRegion {
     sigv4aSigner;
     sigv4Signer;
@@ -15,7 +15,7 @@ export class SignatureV4MultiRegion {
         return "none";
     }
     constructor(options) {
-        this.sigv4Signer = new SignatureV4S3Express(options);
+        this.sigv4Signer = new SignatureV4SignWithCredentials(options);
         this.signerOptions = options;
     }
     async sign(requestToSign, options = {}) {

package/dist-es/SignatureV4SignWithCredentials.js

@@ -0,0 +1,36 @@
+import { SignatureV4 } from "@smithy/signature-v4";
+export const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+export const SESSION_TOKEN_HEADER = SESSION_TOKEN_QUERY_PARAM.toLowerCase();
+export class SignatureV4SignWithCredentials extends SignatureV4 {
+    async signWithCredentials(requestToSign, credentials, options) {
+        const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+        requestToSign.headers[SESSION_TOKEN_HEADER] = credentials.sessionToken;
+        const privateAccess = this;
+        setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+        return privateAccess.signRequest(requestToSign, options ?? {});
+    }
+    async presignWithCredentials(requestToSign, credentials, options) {
+        const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+        delete requestToSign.headers[SESSION_TOKEN_HEADER];
+        requestToSign.headers[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+        requestToSign.query = requestToSign.query ?? {};
+        requestToSign.query[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+        const privateAccess = this;
+        setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+        return this.presign(requestToSign, options);
+    }
+}
+function getCredentialsWithoutSessionToken(credentials) {
+    return {
+        accessKeyId: credentials.accessKeyId,
+        secretAccessKey: credentials.secretAccessKey,
+        expiration: credentials.expiration,
+    };
+}
+function setSingleOverride(privateAccess, credentialsWithoutSessionToken) {
+    const currentCredentialProvider = privateAccess.credentialProvider;
+    privateAccess.credentialProvider = () => {
+        privateAccess.credentialProvider = currentCredentialProvider;
+        return Promise.resolve(credentialsWithoutSessionToken);
+    };
+}

package/dist-es/index.js

@@ -1,2 +1,3 @@
-export * from "./SignatureV4MultiRegion";
-export * from "./signature-v4-crt-container";
+export { SignatureV4MultiRegion } from "./SignatureV4MultiRegion";
+export { signatureV4CrtContainer } from "./signature-v4-crt-container";
+export { SignatureV4SignWithCredentials } from "./SignatureV4SignWithCredentials";

package/dist-types/SignatureV4MultiRegion.d.ts

@@ -7,7 +7,7 @@ export type SignatureV4MultiRegionInit = SignatureV4Init & SignatureV4CryptoInit
     runtime?: string;
 };
 /**
- * A SigV4-compatible signer for S3 service. In order to support SigV4a algorithm according to the operation input
+ * A SigV4-compatible signer for Sigv4a. In order to support SigV4a algorithm according to the operation input
  * dynamically, the signer wraps native module SigV4a signer and JS SigV4 signer. It signs the request with SigV4a
  * algorithm if the request needs to be signed with `*` region. Otherwise, it signs the request with normal SigV4
  * signer.

package/dist-types/SignatureV4SignWithCredentials.d.ts

@@ -0,0 +1,20 @@
+import type { AwsCredentialIdentity } from "@aws-sdk/types";
+import { SignatureV4 } from "@smithy/signature-v4";
+import type { HttpRequest as IHttpRequest, RequestPresigningArguments, RequestSigningArguments } from "@smithy/types";
+/**
+ * @internal
+ */
+export declare const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+/**
+ * @internal
+ */
+export declare const SESSION_TOKEN_HEADER: string;
+/**
+ * A SignatureV4 signer that supports signing/presigning with alternate credentials.
+ * Used for S3 Express session-based auth.
+ * @internal
+ */
+export declare class SignatureV4SignWithCredentials extends SignatureV4 {
+    signWithCredentials(requestToSign: IHttpRequest, credentials: AwsCredentialIdentity, options?: RequestSigningArguments): Promise<IHttpRequest>;
+    presignWithCredentials(requestToSign: IHttpRequest, credentials: AwsCredentialIdentity, options?: RequestPresigningArguments): Promise<IHttpRequest>;
+}

package/dist-types/index.d.ts

@@ -1,5 +1,3 @@
-/**
- * @internal
- */
-export * from "./SignatureV4MultiRegion";
-export * from "./signature-v4-crt-container";
+export { type SignatureV4MultiRegionInit, SignatureV4MultiRegion } from "./SignatureV4MultiRegion";
+export { type OptionalCrtSignerV4, signatureV4CrtContainer } from "./signature-v4-crt-container";
+export { SignatureV4SignWithCredentials } from "./SignatureV4SignWithCredentials";

package/dist-types/ts3.4/SignatureV4SignWithCredentials.d.ts

@@ -0,0 +1,21 @@
+import { AwsCredentialIdentity } from "@aws-sdk/types";
+import { SignatureV4 } from "@smithy/signature-v4";
+import {
+  HttpRequest as IHttpRequest,
+  RequestPresigningArguments,
+  RequestSigningArguments,
+} from "@smithy/types";
+export declare const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+export declare const SESSION_TOKEN_HEADER: string;
+export declare class SignatureV4SignWithCredentials extends SignatureV4 {
+  signWithCredentials(
+    requestToSign: IHttpRequest,
+    credentials: AwsCredentialIdentity,
+    options?: RequestSigningArguments
+  ): Promise<IHttpRequest>;
+  presignWithCredentials(
+    requestToSign: IHttpRequest,
+    credentials: AwsCredentialIdentity,
+    options?: RequestPresigningArguments
+  ): Promise<IHttpRequest>;
+}

package/dist-types/ts3.4/index.d.ts

@@ -1,2 +1,9 @@
-export * from "./SignatureV4MultiRegion";
-export * from "./signature-v4-crt-container";
+export {
+  SignatureV4MultiRegionInit,
+  SignatureV4MultiRegion,
+} from "./SignatureV4MultiRegion";
+export {
+  OptionalCrtSignerV4,
+  signatureV4CrtContainer,
+} from "./signature-v4-crt-container";
+export { SignatureV4SignWithCredentials } from "./SignatureV4SignWithCredentials";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/signature-v4-multi-region",
-  "version": "3.996.25",
+  "version": "3.996.26",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
     "build:cjs": "node ../../scripts/compilation/inline signature-v4-multi-region",
@@ -25,10 +25,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/middleware-sdk-s3": "^3.972.37",
     "@aws-sdk/types": "^3.973.8",
-    "@smithy/protocol-http": "^5.3.14",
-    "@smithy/signature-v4": "^5.3.14",
+    "@smithy/core": "^3.24.1",
+    "@smithy/signature-v4": "^5.4.1",
     "@smithy/types": "^4.14.1",
     "tslib": "^2.6.2"
   },