@cdklabs/cdk-ecs-codedeploy 0.0.443 → 0.0.445
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +3 -3
- package/lib/api-canary/index.js +1 -1
- package/lib/ecs-appspec/index.js +1 -1
- package/lib/ecs-deployment/index.js +1 -1
- package/lib/ecs-patterns/application-load-balanced-codedeployed-fargate-service.js +1 -1
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/auth/httpAuthSchemeProvider.js +9 -15
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/endpoint/bdd.js +2 -5
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/endpoint/endpointResolver.js +7 -11
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/index.js +196 -216
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/models/CodeDeployServiceException.js +4 -8
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/models/errors.js +221 -336
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/runtimeConfig.browser.js +22 -26
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/runtimeConfig.js +30 -34
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/runtimeConfig.native.js +4 -7
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/runtimeConfig.shared.js +20 -24
- package/node_modules/@aws-sdk/client-codedeploy/dist-cjs/schemas/schemas_0.js +714 -471
- package/node_modules/@aws-sdk/client-codedeploy/package.json +9 -9
- package/node_modules/@aws-sdk/core/dist-cjs/index.js +19 -2274
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/account-id-endpoint/index.js +2 -4
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.browser.js +297 -23
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js +327 -52
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.native.js +297 -23
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js +19 -21
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js +107 -109
- package/node_modules/@aws-sdk/core/dist-cjs/submodules/util/index.js +2 -4
- package/node_modules/@aws-sdk/core/dist-es/index.js +3 -3
- package/node_modules/@aws-sdk/core/dist-es/submodules/client/util-endpoints/lib/aws/partitions.js +276 -1
- package/node_modules/@aws-sdk/core/dist-types/index.d.ts +5 -5
- package/node_modules/@aws-sdk/core/dist-types/ts3.4/index.d.ts +5 -5
- package/node_modules/@aws-sdk/core/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-env/dist-cjs/index.js +4 -6
- package/node_modules/@aws-sdk/credential-provider-env/package.json +7 -7
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/checkUrl.js +3 -7
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttp.browser.js +12 -16
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/fromHttp.js +16 -21
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/requestHelpers.js +14 -18
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/fromHttp/retry-wrapper.js +1 -5
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/index.browser.js +2 -5
- package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/index.js +2 -7
- package/node_modules/@aws-sdk/credential-provider-http/package.json +9 -8
- package/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js +47 -41
- package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js +8 -4
- package/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js +14 -10
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +14 -14
- package/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js +31 -33
- package/node_modules/@aws-sdk/credential-provider-login/package.json +8 -8
- package/node_modules/@aws-sdk/credential-provider-node/dist-cjs/index.js +16 -18
- package/node_modules/@aws-sdk/credential-provider-node/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js +11 -13
- package/node_modules/@aws-sdk/credential-provider-process/package.json +7 -7
- package/node_modules/@aws-sdk/credential-provider-sso/dist-cjs/index.js +26 -25
- package/node_modules/@aws-sdk/credential-provider-sso/dist-cjs/loadSso-BGYXHf8s.js +3 -0
- package/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js +4 -1
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +12 -10
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/fromTokenFile.js +10 -14
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/fromWebToken.js +2 -6
- package/node_modules/@aws-sdk/credential-provider-web-identity/dist-cjs/index.js +3 -27
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +8 -8
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/index.js +0 -1
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/cognito-identity/index.js +82 -84
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js +158 -119
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js +80 -82
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js +80 -82
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js +99 -101
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/commands/CreateOAuth2TokenCommand.js +4 -1
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/endpoint/bdd.js +70 -35
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/endpoint/endpointResolver.js +1 -1
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/signin/models/enums.js +3 -0
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/endpoint/EndpointParameters.d.ts +1 -0
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/models/enums.d.ts +12 -0
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/signin/endpoint/EndpointParameters.d.ts +1 -0
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/signin/models/enums.d.ts +3 -0
- package/node_modules/@aws-sdk/nested-clients/package.json +11 -10
- package/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js +4 -6
- package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +9 -8
- package/node_modules/@aws-sdk/token-providers/dist-cjs/index.js +26 -28
- package/node_modules/@aws-sdk/token-providers/package.json +8 -8
- package/node_modules/@aws-sdk/types/dist-cjs/index.js +7 -8
- package/node_modules/@aws-sdk/types/package.json +5 -5
- package/node_modules/@aws-sdk/util-locate-window/dist-cjs/index.js +0 -2
- package/node_modules/@aws-sdk/util-locate-window/package.json +5 -5
- package/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js +2 -4
- package/node_modules/@aws-sdk/xml-builder/dist-cjs/xml-external/nodable_entities.js +4 -7
- package/node_modules/@aws-sdk/xml-builder/dist-cjs/xml-parser.browser.js +2 -5
- package/node_modules/@aws-sdk/xml-builder/dist-cjs/xml-parser.js +7 -10
- package/node_modules/@aws-sdk/xml-builder/package.json +5 -5
- package/node_modules/@nodable/entities/package.json +4 -1
- package/node_modules/@nodable/entities/src/EntityDecoder.js +104 -3
- package/node_modules/@nodable/entities/src/index.d.ts +77 -0
- package/node_modules/@nodable/entities/src/index.js +1 -1
- package/node_modules/@smithy/core/dist-cjs/index.js +13 -15
- package/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js +543 -398
- package/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.browser.js +2 -4
- package/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js +7 -9
- package/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.native.js +3 -5
- package/node_modules/@smithy/core/dist-cjs/submodules/client/index.js +23 -24
- package/node_modules/@smithy/core/dist-cjs/submodules/config/index.browser.js +10 -11
- package/node_modules/@smithy/core/dist-cjs/submodules/config/index.js +38 -39
- package/node_modules/@smithy/core/dist-cjs/submodules/config/index.native.js +10 -11
- package/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.browser.js +14 -17
- package/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js +20 -23
- package/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.browser.js +9 -11
- package/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js +11 -13
- package/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js +68 -61
- package/node_modules/@smithy/core/dist-cjs/submodules/retry/index.browser.js +26 -27
- package/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js +28 -29
- package/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js +5 -7
- package/node_modules/@smithy/core/dist-cjs/submodules/serde/index.browser.js +4 -6
- package/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js +23 -25
- package/node_modules/@smithy/core/dist-cjs/submodules/serde/index.native.js +4 -6
- package/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js +2 -4
- package/node_modules/@smithy/core/dist-es/legacy-root-exports/middleware-http-auth-scheme/httpAuthSchemeMiddleware.js +1 -1
- package/node_modules/@smithy/core/dist-es/legacy-root-exports/middleware-http-signing/httpSigningMiddleware.js +1 -1
- package/node_modules/@smithy/core/dist-es/submodules/cbor/SmithyRpcV2CborProtocol.js +1 -1
- package/node_modules/@smithy/core/dist-es/submodules/cbor/cbor-decode.js +326 -269
- package/node_modules/@smithy/core/dist-es/submodules/cbor/cbor-encode.js +192 -103
- package/node_modules/@smithy/core/dist-es/submodules/cbor/cbor.js +4 -2
- package/node_modules/@smithy/core/dist-es/submodules/client/smithy-client/get-value-from-text-node.js +1 -1
- package/node_modules/@smithy/core/dist-es/submodules/endpoints/middleware-endpoint/endpointMiddleware.js +1 -1
- package/node_modules/@smithy/core/dist-es/submodules/protocols/HttpProtocol.js +10 -2
- package/node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/retry-pre-sra-deprecated/StandardRetryStrategy.js +2 -2
- package/node_modules/@smithy/core/dist-es/submodules/retry/util-retry/DefaultRateLimiter.js +1 -1
- package/node_modules/@smithy/core/dist-types/submodules/cbor/cbor-decode.d.ts +4 -0
- package/node_modules/@smithy/core/dist-types/submodules/cbor/cbor-encode.d.ts +8 -4
- package/node_modules/@smithy/core/dist-types/submodules/protocols/HttpProtocol.d.ts +6 -0
- package/node_modules/@smithy/core/dist-types/submodules/schema/TypeRegistry.d.ts +1 -1
- package/node_modules/@smithy/core/package.json +18 -17
- package/node_modules/@smithy/credential-provider-imds/dist-cjs/index.js +23 -24
- package/node_modules/@smithy/credential-provider-imds/package.json +7 -7
- package/node_modules/@smithy/fetch-http-handler/dist-cjs/index.js +6 -8
- package/node_modules/@smithy/fetch-http-handler/package.json +10 -10
- package/node_modules/@smithy/node-http-handler/dist-cjs/index.js +11 -13
- package/node_modules/@smithy/node-http-handler/package.json +8 -8
- package/node_modules/@smithy/signature-v4/dist-cjs/index.js +27 -29
- package/node_modules/@smithy/signature-v4/package.json +7 -7
- package/node_modules/@smithy/types/dist-cjs/index.js +23 -18
- package/node_modules/@smithy/types/package.json +10 -10
- package/node_modules/anynum/LICENSE +21 -0
- package/node_modules/anynum/README.md +142 -0
- package/node_modules/anynum/anynum.js +135 -0
- package/node_modules/anynum/digitTable.js +116 -0
- package/node_modules/anynum/package.json +42 -0
- package/node_modules/path-expression-matcher/README.md +82 -7
- package/node_modules/path-expression-matcher/lib/pem.cjs +1 -1
- package/node_modules/path-expression-matcher/lib/pem.d.cts +83 -2
- package/node_modules/path-expression-matcher/lib/pem.min.js +1 -1
- package/node_modules/path-expression-matcher/lib/pem.min.js.map +1 -1
- package/node_modules/path-expression-matcher/package.json +3 -2
- package/node_modules/path-expression-matcher/src/ExpressionSet.js +18 -2
- package/node_modules/path-expression-matcher/src/Matcher.js +93 -3
- package/node_modules/path-expression-matcher/src/index.d.ts +67 -1
- package/node_modules/strnum/CHANGELOG.md +8 -0
- package/node_modules/strnum/README.md +9 -0
- package/node_modules/strnum/package.json +7 -3
- package/node_modules/strnum/strnum.js +9 -1
- package/package.json +2 -2
- package/node_modules/@aws-sdk/credential-provider-sso/dist-cjs/loadSso-BKDNrsal.js +0 -8
|
@@ -1,17 +1,17 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/credential-provider-login",
|
|
3
|
-
"version": "3.972.
|
|
3
|
+
"version": "3.972.54",
|
|
4
4
|
"description": "AWS credential provider that sources credentials from aws login cached tokens",
|
|
5
5
|
"main": "./dist-cjs/index.js",
|
|
6
6
|
"module": "./dist-es/index.js",
|
|
7
7
|
"scripts": {
|
|
8
8
|
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
|
|
9
|
-
"build:cjs": "node ../../scripts/compilation/inline
|
|
10
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
9
|
+
"build:cjs": "node ../../scripts/compilation/inline",
|
|
10
|
+
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
|
|
11
11
|
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
|
|
12
|
-
"build:types": "tsc -p tsconfig.types.json",
|
|
12
|
+
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
|
|
13
13
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
14
|
-
"clean": "premove dist-cjs dist-es dist-types
|
|
14
|
+
"clean": "premove dist-cjs dist-es dist-types",
|
|
15
15
|
"test": "yarn g:vitest run",
|
|
16
16
|
"test:watch": "yarn g:vitest watch"
|
|
17
17
|
},
|
|
@@ -28,9 +28,9 @@
|
|
|
28
28
|
},
|
|
29
29
|
"license": "Apache-2.0",
|
|
30
30
|
"dependencies": {
|
|
31
|
-
"@aws-sdk/core": "^3.974.
|
|
32
|
-
"@aws-sdk/nested-clients": "^3.997.
|
|
33
|
-
"@aws-sdk/types": "^3.973.
|
|
31
|
+
"@aws-sdk/core": "^3.974.22",
|
|
32
|
+
"@aws-sdk/nested-clients": "^3.997.22",
|
|
33
|
+
"@aws-sdk/types": "^3.973.13",
|
|
34
34
|
"@smithy/core": "^3.24.6",
|
|
35
35
|
"@smithy/types": "^4.14.3",
|
|
36
36
|
"tslib": "^2.6.2"
|
|
@@ -1,19 +1,17 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
var credentialProviderEnv = require('@aws-sdk/credential-provider-env');
|
|
4
|
-
var config = require('@smithy/core/config');
|
|
1
|
+
const { ENV_KEY, ENV_SECRET, fromEnv } = require("@aws-sdk/credential-provider-env");
|
|
2
|
+
const { chain, CredentialsProviderError, ENV_PROFILE } = require("@smithy/core/config");
|
|
5
3
|
|
|
6
4
|
const ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
|
|
7
5
|
const remoteProvider = async (init) => {
|
|
8
|
-
const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } =
|
|
6
|
+
const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } = require('@smithy/credential-provider-imds');
|
|
9
7
|
if (process.env[ENV_CMDS_RELATIVE_URI] || process.env[ENV_CMDS_FULL_URI]) {
|
|
10
8
|
init.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");
|
|
11
|
-
const { fromHttp } =
|
|
12
|
-
return
|
|
9
|
+
const { fromHttp } = require('@aws-sdk/credential-provider-http');
|
|
10
|
+
return chain(fromHttp(init), fromContainerMetadata(init));
|
|
13
11
|
}
|
|
14
12
|
if (process.env[ENV_IMDS_DISABLED] && process.env[ENV_IMDS_DISABLED] !== "false") {
|
|
15
13
|
return async () => {
|
|
16
|
-
throw new
|
|
14
|
+
throw new CredentialsProviderError("EC2 Instance Metadata Service access disabled", { logger: init.logger });
|
|
17
15
|
};
|
|
18
16
|
}
|
|
19
17
|
init.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromInstanceMetadata");
|
|
@@ -95,9 +93,9 @@ const internalCreateChain = (providers) => async (awsIdentityProperties) => {
|
|
|
95
93
|
let multipleCredentialSourceWarningEmitted = false;
|
|
96
94
|
const defaultProvider = (init = {}) => memoizeChain([
|
|
97
95
|
async () => {
|
|
98
|
-
const profile = init.profile ?? process.env[
|
|
96
|
+
const profile = init.profile ?? process.env[ENV_PROFILE];
|
|
99
97
|
if (profile) {
|
|
100
|
-
const envStaticCredentialsAreSet = process.env[
|
|
98
|
+
const envStaticCredentialsAreSet = process.env[ENV_KEY] && process.env[ENV_SECRET];
|
|
101
99
|
if (envStaticCredentialsAreSet) {
|
|
102
100
|
if (!multipleCredentialSourceWarningEmitted) {
|
|
103
101
|
const warnFn = init.logger?.warn && init.logger?.constructor?.name !== "NoOpLogger"
|
|
@@ -115,36 +113,36 @@ const defaultProvider = (init = {}) => memoizeChain([
|
|
|
115
113
|
multipleCredentialSourceWarningEmitted = true;
|
|
116
114
|
}
|
|
117
115
|
}
|
|
118
|
-
throw new
|
|
116
|
+
throw new CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.", {
|
|
119
117
|
logger: init.logger,
|
|
120
118
|
tryNextLink: true,
|
|
121
119
|
});
|
|
122
120
|
}
|
|
123
121
|
init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv");
|
|
124
|
-
return
|
|
122
|
+
return fromEnv(init)();
|
|
125
123
|
},
|
|
126
124
|
async (awsIdentityProperties) => {
|
|
127
125
|
init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");
|
|
128
126
|
const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
|
|
129
127
|
if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
|
|
130
|
-
throw new
|
|
128
|
+
throw new CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).", { logger: init.logger });
|
|
131
129
|
}
|
|
132
|
-
const { fromSSO } =
|
|
130
|
+
const { fromSSO } = require('@aws-sdk/credential-provider-sso');
|
|
133
131
|
return fromSSO(init)(awsIdentityProperties);
|
|
134
132
|
},
|
|
135
133
|
async (awsIdentityProperties) => {
|
|
136
134
|
init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");
|
|
137
|
-
const { fromIni } =
|
|
135
|
+
const { fromIni } = require('@aws-sdk/credential-provider-ini');
|
|
138
136
|
return fromIni(init)(awsIdentityProperties);
|
|
139
137
|
},
|
|
140
138
|
async (awsIdentityProperties) => {
|
|
141
139
|
init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");
|
|
142
|
-
const { fromProcess } =
|
|
140
|
+
const { fromProcess } = require('@aws-sdk/credential-provider-process');
|
|
143
141
|
return fromProcess(init)(awsIdentityProperties);
|
|
144
142
|
},
|
|
145
143
|
async (awsIdentityProperties) => {
|
|
146
144
|
init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");
|
|
147
|
-
const { fromTokenFile } =
|
|
145
|
+
const { fromTokenFile } = require('@aws-sdk/credential-provider-web-identity');
|
|
148
146
|
return fromTokenFile(init)(awsIdentityProperties);
|
|
149
147
|
},
|
|
150
148
|
async () => {
|
|
@@ -152,7 +150,7 @@ const defaultProvider = (init = {}) => memoizeChain([
|
|
|
152
150
|
return (await remoteProvider(init))();
|
|
153
151
|
},
|
|
154
152
|
async () => {
|
|
155
|
-
throw new
|
|
153
|
+
throw new CredentialsProviderError("Could not load credentials from any providers", {
|
|
156
154
|
tryNextLink: false,
|
|
157
155
|
logger: init.logger,
|
|
158
156
|
});
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/credential-provider-node",
|
|
3
|
-
"version": "3.972.
|
|
3
|
+
"version": "3.972.57",
|
|
4
4
|
"description": "AWS credential provider that sources credentials from a Node.JS environment. ",
|
|
5
5
|
"engines": {
|
|
6
6
|
"node": ">=20.0.0"
|
|
@@ -9,12 +9,12 @@
|
|
|
9
9
|
"module": "./dist-es/index.js",
|
|
10
10
|
"scripts": {
|
|
11
11
|
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
|
|
12
|
-
"build:cjs": "node ../../scripts/compilation/inline
|
|
13
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
12
|
+
"build:cjs": "node ../../scripts/compilation/inline",
|
|
13
|
+
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
|
|
14
14
|
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
|
|
15
|
-
"build:types": "tsc -p tsconfig.types.json",
|
|
15
|
+
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
|
|
16
16
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
17
|
-
"clean": "premove dist-cjs dist-es dist-types
|
|
17
|
+
"clean": "premove dist-cjs dist-es dist-types",
|
|
18
18
|
"test": "yarn g:vitest run --reporter verbose",
|
|
19
19
|
"test:watch": "yarn g:vitest watch",
|
|
20
20
|
"test:integration": "yarn g:vitest run -c vitest.config.integ.mts",
|
|
@@ -31,13 +31,13 @@
|
|
|
31
31
|
},
|
|
32
32
|
"license": "Apache-2.0",
|
|
33
33
|
"dependencies": {
|
|
34
|
-
"@aws-sdk/credential-provider-env": "^3.972.
|
|
35
|
-
"@aws-sdk/credential-provider-http": "^3.972.
|
|
36
|
-
"@aws-sdk/credential-provider-ini": "^3.972.
|
|
37
|
-
"@aws-sdk/credential-provider-process": "^3.972.
|
|
38
|
-
"@aws-sdk/credential-provider-sso": "^3.972.
|
|
39
|
-
"@aws-sdk/credential-provider-web-identity": "^3.972.
|
|
40
|
-
"@aws-sdk/types": "^3.973.
|
|
34
|
+
"@aws-sdk/credential-provider-env": "^3.972.48",
|
|
35
|
+
"@aws-sdk/credential-provider-http": "^3.972.50",
|
|
36
|
+
"@aws-sdk/credential-provider-ini": "^3.972.55",
|
|
37
|
+
"@aws-sdk/credential-provider-process": "^3.972.48",
|
|
38
|
+
"@aws-sdk/credential-provider-sso": "^3.972.54",
|
|
39
|
+
"@aws-sdk/credential-provider-web-identity": "^3.972.54",
|
|
40
|
+
"@aws-sdk/types": "^3.973.13",
|
|
41
41
|
"@smithy/core": "^3.24.6",
|
|
42
42
|
"@smithy/credential-provider-imds": "^4.3.7",
|
|
43
43
|
"@smithy/types": "^4.14.3",
|
|
@@ -1,9 +1,7 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
var node_util = require('node:util');
|
|
6
|
-
var client = require('@aws-sdk/core/client');
|
|
1
|
+
const { externalDataInterceptor, CredentialsProviderError, parseKnownFiles, getProfileName } = require("@smithy/core/config");
|
|
2
|
+
const { exec } = require("node:child_process");
|
|
3
|
+
const { promisify } = require("node:util");
|
|
4
|
+
const { setCredentialFeature } = require("@aws-sdk/core/client");
|
|
7
5
|
|
|
8
6
|
const getValidatedProcessCredentials = (profileName, data, profiles) => {
|
|
9
7
|
if (data.Version !== 1) {
|
|
@@ -31,7 +29,7 @@ const getValidatedProcessCredentials = (profileName, data, profiles) => {
|
|
|
31
29
|
...(data.CredentialScope && { credentialScope: data.CredentialScope }),
|
|
32
30
|
...(accountId && { accountId }),
|
|
33
31
|
};
|
|
34
|
-
|
|
32
|
+
setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
|
|
35
33
|
return credentials;
|
|
36
34
|
};
|
|
37
35
|
|
|
@@ -40,7 +38,7 @@ const resolveProcessCredentials = async (profileName, profiles, logger) => {
|
|
|
40
38
|
if (profiles[profileName]) {
|
|
41
39
|
const credentialProcess = profile["credential_process"];
|
|
42
40
|
if (credentialProcess !== undefined) {
|
|
43
|
-
const execPromise =
|
|
41
|
+
const execPromise = promisify(externalDataInterceptor?.getTokenRecord?.().exec ?? exec);
|
|
44
42
|
try {
|
|
45
43
|
const { stdout } = await execPromise(credentialProcess);
|
|
46
44
|
let data;
|
|
@@ -53,15 +51,15 @@ const resolveProcessCredentials = async (profileName, profiles, logger) => {
|
|
|
53
51
|
return getValidatedProcessCredentials(profileName, data, profiles);
|
|
54
52
|
}
|
|
55
53
|
catch (error) {
|
|
56
|
-
throw new
|
|
54
|
+
throw new CredentialsProviderError(error.message, { logger });
|
|
57
55
|
}
|
|
58
56
|
}
|
|
59
57
|
else {
|
|
60
|
-
throw new
|
|
58
|
+
throw new CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger });
|
|
61
59
|
}
|
|
62
60
|
}
|
|
63
61
|
else {
|
|
64
|
-
throw new
|
|
62
|
+
throw new CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {
|
|
65
63
|
logger,
|
|
66
64
|
});
|
|
67
65
|
}
|
|
@@ -69,8 +67,8 @@ const resolveProcessCredentials = async (profileName, profiles, logger) => {
|
|
|
69
67
|
|
|
70
68
|
const fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
71
69
|
init.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");
|
|
72
|
-
const profiles = await
|
|
73
|
-
return resolveProcessCredentials(
|
|
70
|
+
const profiles = await parseKnownFiles(init);
|
|
71
|
+
return resolveProcessCredentials(getProfileName({
|
|
74
72
|
profile: init.profile ?? callerClientConfig?.profile,
|
|
75
73
|
}), profiles, init.logger);
|
|
76
74
|
};
|
|
@@ -1,17 +1,17 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/credential-provider-process",
|
|
3
|
-
"version": "3.972.
|
|
3
|
+
"version": "3.972.48",
|
|
4
4
|
"description": "AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config",
|
|
5
5
|
"main": "./dist-cjs/index.js",
|
|
6
6
|
"module": "./dist-es/index.js",
|
|
7
7
|
"scripts": {
|
|
8
8
|
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
|
|
9
|
-
"build:cjs": "node ../../scripts/compilation/inline
|
|
10
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
9
|
+
"build:cjs": "node ../../scripts/compilation/inline",
|
|
10
|
+
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
|
|
11
11
|
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
|
|
12
|
-
"build:types": "tsc -p tsconfig.types.json",
|
|
12
|
+
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
|
|
13
13
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
14
|
-
"clean": "premove dist-cjs dist-es dist-types
|
|
14
|
+
"clean": "premove dist-cjs dist-es dist-types",
|
|
15
15
|
"test": "yarn g:vitest run",
|
|
16
16
|
"test:watch": "yarn g:vitest watch"
|
|
17
17
|
},
|
|
@@ -26,8 +26,8 @@
|
|
|
26
26
|
},
|
|
27
27
|
"license": "Apache-2.0",
|
|
28
28
|
"dependencies": {
|
|
29
|
-
"@aws-sdk/core": "^3.974.
|
|
30
|
-
"@aws-sdk/types": "^3.973.
|
|
29
|
+
"@aws-sdk/core": "^3.974.22",
|
|
30
|
+
"@aws-sdk/types": "^3.973.13",
|
|
31
31
|
"@smithy/core": "^3.24.6",
|
|
32
32
|
"@smithy/types": "^4.14.3",
|
|
33
33
|
"tslib": "^2.6.2"
|
|
@@ -1,8 +1,6 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
var client = require('@aws-sdk/core/client');
|
|
5
|
-
var tokenProviders = require('@aws-sdk/token-providers');
|
|
1
|
+
const { CredentialsProviderError, getSSOTokenFromFile, getProfileName, parseKnownFiles, loadSsoSessionData } = require("@smithy/core/config");
|
|
2
|
+
const { setCredentialFeature } = require("@aws-sdk/core/client");
|
|
3
|
+
const { fromSso } = require("@aws-sdk/token-providers");
|
|
6
4
|
|
|
7
5
|
const isSsoProfile = (arg) => arg &&
|
|
8
6
|
(typeof arg.sso_start_url === "string" ||
|
|
@@ -17,19 +15,22 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
|
|
|
17
15
|
const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
|
|
18
16
|
if (ssoSession) {
|
|
19
17
|
try {
|
|
20
|
-
const _token = await
|
|
18
|
+
const _token = await fromSso({
|
|
21
19
|
profile,
|
|
22
20
|
filepath,
|
|
23
21
|
configFilepath,
|
|
24
22
|
ignoreCache,
|
|
25
|
-
|
|
23
|
+
clientConfig,
|
|
24
|
+
parentClientConfig,
|
|
25
|
+
logger,
|
|
26
|
+
})({ callerClientConfig });
|
|
26
27
|
token = {
|
|
27
28
|
accessToken: _token.token,
|
|
28
29
|
expiresAt: new Date(_token.expiration).toISOString(),
|
|
29
30
|
};
|
|
30
31
|
}
|
|
31
32
|
catch (e) {
|
|
32
|
-
throw new
|
|
33
|
+
throw new CredentialsProviderError(e.message, {
|
|
33
34
|
tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
|
|
34
35
|
logger,
|
|
35
36
|
});
|
|
@@ -37,23 +38,23 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
|
|
|
37
38
|
}
|
|
38
39
|
else {
|
|
39
40
|
try {
|
|
40
|
-
token = await
|
|
41
|
+
token = await getSSOTokenFromFile(ssoStartUrl);
|
|
41
42
|
}
|
|
42
43
|
catch (e) {
|
|
43
|
-
throw new
|
|
44
|
+
throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {
|
|
44
45
|
tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
|
|
45
46
|
logger,
|
|
46
47
|
});
|
|
47
48
|
}
|
|
48
49
|
}
|
|
49
50
|
if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
|
|
50
|
-
throw new
|
|
51
|
+
throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {
|
|
51
52
|
tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
|
|
52
53
|
logger,
|
|
53
54
|
});
|
|
54
55
|
}
|
|
55
56
|
const { accessToken } = token;
|
|
56
|
-
const { SSOClient, GetRoleCredentialsCommand } =
|
|
57
|
+
const { SSOClient, GetRoleCredentialsCommand } = require('./loadSso-BGYXHf8s.js');
|
|
57
58
|
const sso = ssoClient ||
|
|
58
59
|
new SSOClient(Object.assign({}, clientConfig ?? {}, {
|
|
59
60
|
logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,
|
|
@@ -69,14 +70,14 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
|
|
|
69
70
|
}));
|
|
70
71
|
}
|
|
71
72
|
catch (e) {
|
|
72
|
-
throw new
|
|
73
|
+
throw new CredentialsProviderError(e, {
|
|
73
74
|
tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
|
|
74
75
|
logger,
|
|
75
76
|
});
|
|
76
77
|
}
|
|
77
78
|
const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;
|
|
78
79
|
if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
|
|
79
|
-
throw new
|
|
80
|
+
throw new CredentialsProviderError("SSO returns an invalid temporary credential.", {
|
|
80
81
|
tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
|
|
81
82
|
logger,
|
|
82
83
|
});
|
|
@@ -90,10 +91,10 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
|
|
|
90
91
|
...(accountId && { accountId }),
|
|
91
92
|
};
|
|
92
93
|
if (ssoSession) {
|
|
93
|
-
|
|
94
|
+
setCredentialFeature(credentials, "CREDENTIALS_SSO", "s");
|
|
94
95
|
}
|
|
95
96
|
else {
|
|
96
|
-
|
|
97
|
+
setCredentialFeature(credentials, "CREDENTIALS_SSO_LEGACY", "u");
|
|
97
98
|
}
|
|
98
99
|
return credentials;
|
|
99
100
|
};
|
|
@@ -101,7 +102,7 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
|
|
|
101
102
|
const validateSsoProfile = (profile, logger) => {
|
|
102
103
|
const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
|
|
103
104
|
if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
|
|
104
|
-
throw new
|
|
105
|
+
throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", ` +
|
|
105
106
|
`"sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });
|
|
106
107
|
}
|
|
107
108
|
return profile;
|
|
@@ -111,32 +112,32 @@ const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
|
111
112
|
init.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");
|
|
112
113
|
const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
|
|
113
114
|
const { ssoClient } = init;
|
|
114
|
-
const profileName =
|
|
115
|
+
const profileName = getProfileName({
|
|
115
116
|
profile: init.profile ?? callerClientConfig?.profile,
|
|
116
117
|
});
|
|
117
118
|
if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
|
|
118
|
-
const profiles = await
|
|
119
|
+
const profiles = await parseKnownFiles(init);
|
|
119
120
|
const profile = profiles[profileName];
|
|
120
121
|
if (!profile) {
|
|
121
|
-
throw new
|
|
122
|
+
throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });
|
|
122
123
|
}
|
|
123
124
|
if (!isSsoProfile(profile)) {
|
|
124
|
-
throw new
|
|
125
|
+
throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {
|
|
125
126
|
logger: init.logger,
|
|
126
127
|
});
|
|
127
128
|
}
|
|
128
129
|
if (profile?.sso_session) {
|
|
129
|
-
const ssoSessions = await
|
|
130
|
+
const ssoSessions = await loadSsoSessionData(init);
|
|
130
131
|
const session = ssoSessions[profile.sso_session];
|
|
131
132
|
const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;
|
|
132
133
|
if (ssoRegion && ssoRegion !== session.sso_region) {
|
|
133
|
-
throw new
|
|
134
|
+
throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {
|
|
134
135
|
tryNextLink: false,
|
|
135
136
|
logger: init.logger,
|
|
136
137
|
});
|
|
137
138
|
}
|
|
138
139
|
if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {
|
|
139
|
-
throw new
|
|
140
|
+
throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {
|
|
140
141
|
tryNextLink: false,
|
|
141
142
|
logger: init.logger,
|
|
142
143
|
});
|
|
@@ -163,7 +164,7 @@ const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
|
163
164
|
});
|
|
164
165
|
}
|
|
165
166
|
else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {
|
|
166
|
-
throw new
|
|
167
|
+
throw new CredentialsProviderError("Incomplete configuration. The fromSSO() argument hash must include " +
|
|
167
168
|
'"ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"', { tryNextLink: false, logger: init.logger });
|
|
168
169
|
}
|
|
169
170
|
else {
|
|
@@ -12,7 +12,10 @@ export const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccoun
|
|
|
12
12
|
filepath,
|
|
13
13
|
configFilepath,
|
|
14
14
|
ignoreCache,
|
|
15
|
-
|
|
15
|
+
clientConfig,
|
|
16
|
+
parentClientConfig,
|
|
17
|
+
logger,
|
|
18
|
+
})({ callerClientConfig });
|
|
16
19
|
token = {
|
|
17
20
|
accessToken: _token.token,
|
|
18
21
|
expiresAt: new Date(_token.expiration).toISOString(),
|
|
@@ -1,19 +1,21 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/credential-provider-sso",
|
|
3
|
-
"version": "3.972.
|
|
3
|
+
"version": "3.972.54",
|
|
4
4
|
"description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
|
|
5
5
|
"main": "./dist-cjs/index.js",
|
|
6
6
|
"module": "./dist-es/index.js",
|
|
7
7
|
"scripts": {
|
|
8
8
|
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
|
|
9
|
-
"build:cjs": "node ../../scripts/compilation/inline
|
|
10
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
9
|
+
"build:cjs": "node ../../scripts/compilation/inline",
|
|
10
|
+
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
|
|
11
11
|
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
|
|
12
|
-
"build:types": "tsc -p tsconfig.types.json",
|
|
12
|
+
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
|
|
13
13
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
14
|
-
"clean": "premove dist-cjs dist-es dist-types
|
|
14
|
+
"clean": "premove dist-cjs dist-es dist-types",
|
|
15
15
|
"test": "yarn g:vitest run",
|
|
16
|
-
"test:watch": "yarn g:vitest watch"
|
|
16
|
+
"test:watch": "yarn g:vitest watch",
|
|
17
|
+
"test:integration": "yarn g:vitest run -c vitest.config.integ.mts",
|
|
18
|
+
"test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
|
|
17
19
|
},
|
|
18
20
|
"keywords": [
|
|
19
21
|
"aws",
|
|
@@ -26,10 +28,10 @@
|
|
|
26
28
|
},
|
|
27
29
|
"license": "Apache-2.0",
|
|
28
30
|
"dependencies": {
|
|
29
|
-
"@aws-sdk/core": "^3.974.
|
|
30
|
-
"@aws-sdk/nested-clients": "^3.997.
|
|
31
|
-
"@aws-sdk/token-providers": "3.
|
|
32
|
-
"@aws-sdk/types": "^3.973.
|
|
31
|
+
"@aws-sdk/core": "^3.974.22",
|
|
32
|
+
"@aws-sdk/nested-clients": "^3.997.22",
|
|
33
|
+
"@aws-sdk/token-providers": "3.1071.0",
|
|
34
|
+
"@aws-sdk/types": "^3.973.13",
|
|
33
35
|
"@smithy/core": "^3.24.6",
|
|
34
36
|
"@smithy/types": "^4.14.3",
|
|
35
37
|
"tslib": "^2.6.2"
|
|
@@ -1,33 +1,29 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
const
|
|
5
|
-
const config_1 = require("@smithy/core/config");
|
|
6
|
-
const node_fs_1 = require("node:fs");
|
|
7
|
-
const fromWebToken_1 = require("./fromWebToken");
|
|
1
|
+
const { setCredentialFeature } = require("@aws-sdk/core/client");
|
|
2
|
+
const { CredentialsProviderError, externalDataInterceptor } = require("@smithy/core/config");
|
|
3
|
+
const { readFileSync } = require("node:fs");
|
|
4
|
+
const { fromWebToken } = require("./fromWebToken");
|
|
8
5
|
const ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE";
|
|
9
6
|
const ENV_ROLE_ARN = "AWS_ROLE_ARN";
|
|
10
7
|
const ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME";
|
|
11
|
-
|
|
8
|
+
exports.fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
|
|
12
9
|
init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
|
|
13
10
|
const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
|
|
14
11
|
const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];
|
|
15
12
|
const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];
|
|
16
13
|
if (!webIdentityTokenFile || !roleArn) {
|
|
17
|
-
throw new
|
|
14
|
+
throw new CredentialsProviderError("Web identity configuration not specified", {
|
|
18
15
|
logger: init.logger,
|
|
19
16
|
});
|
|
20
17
|
}
|
|
21
|
-
const credentials = await
|
|
18
|
+
const credentials = await fromWebToken({
|
|
22
19
|
...init,
|
|
23
|
-
webIdentityToken:
|
|
24
|
-
|
|
20
|
+
webIdentityToken: externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ??
|
|
21
|
+
readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
|
|
25
22
|
roleArn,
|
|
26
23
|
roleSessionName,
|
|
27
24
|
})(awsIdentityProperties);
|
|
28
25
|
if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
|
|
29
|
-
|
|
26
|
+
setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
|
|
30
27
|
}
|
|
31
28
|
return credentials;
|
|
32
29
|
};
|
|
33
|
-
exports.fromTokenFile = fromTokenFile;
|
|
@@ -1,12 +1,9 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.fromWebToken = void 0;
|
|
4
|
-
const fromWebToken = (init) => async (awsIdentityProperties) => {
|
|
1
|
+
exports.fromWebToken = (init) => async (awsIdentityProperties) => {
|
|
5
2
|
init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
|
|
6
3
|
const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
|
|
7
4
|
let { roleAssumerWithWebIdentity } = init;
|
|
8
5
|
if (!roleAssumerWithWebIdentity) {
|
|
9
|
-
const { getDefaultRoleAssumerWithWebIdentity } =
|
|
6
|
+
const { getDefaultRoleAssumerWithWebIdentity } = require("@aws-sdk/nested-clients/sts");
|
|
10
7
|
roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
|
|
11
8
|
...init.clientConfig,
|
|
12
9
|
credentialProviderLogger: init.logger,
|
|
@@ -26,4 +23,3 @@ const fromWebToken = (init) => async (awsIdentityProperties) => {
|
|
|
26
23
|
DurationSeconds: durationSeconds,
|
|
27
24
|
});
|
|
28
25
|
};
|
|
29
|
-
exports.fromWebToken = fromWebToken;
|
|
@@ -1,27 +1,3 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
var fromWebToken = require('./fromWebToken');
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
Object.prototype.hasOwnProperty.call(fromTokenFile, '__proto__') &&
|
|
9
|
-
!Object.prototype.hasOwnProperty.call(exports, '__proto__') &&
|
|
10
|
-
Object.defineProperty(exports, '__proto__', {
|
|
11
|
-
enumerable: true,
|
|
12
|
-
value: fromTokenFile['__proto__']
|
|
13
|
-
});
|
|
14
|
-
|
|
15
|
-
Object.keys(fromTokenFile).forEach(function (k) {
|
|
16
|
-
if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = fromTokenFile[k];
|
|
17
|
-
});
|
|
18
|
-
Object.prototype.hasOwnProperty.call(fromWebToken, '__proto__') &&
|
|
19
|
-
!Object.prototype.hasOwnProperty.call(exports, '__proto__') &&
|
|
20
|
-
Object.defineProperty(exports, '__proto__', {
|
|
21
|
-
enumerable: true,
|
|
22
|
-
value: fromWebToken['__proto__']
|
|
23
|
-
});
|
|
24
|
-
|
|
25
|
-
Object.keys(fromWebToken).forEach(function (k) {
|
|
26
|
-
if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = fromWebToken[k];
|
|
27
|
-
});
|
|
1
|
+
var __exportStar = (m, e) => { Object.assign(e, m); };
|
|
2
|
+
__exportStar(require("./fromTokenFile"), exports);
|
|
3
|
+
__exportStar(require("./fromWebToken"), exports);
|
|
@@ -1,17 +1,17 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/credential-provider-web-identity",
|
|
3
|
-
"version": "3.972.
|
|
3
|
+
"version": "3.972.54",
|
|
4
4
|
"description": "AWS credential provider that calls STS assumeRole for temporary AWS credentials",
|
|
5
5
|
"main": "./dist-cjs/index.js",
|
|
6
6
|
"module": "./dist-es/index.js",
|
|
7
7
|
"scripts": {
|
|
8
8
|
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
|
|
9
|
-
"build:cjs": "node ../../scripts/compilation/inline
|
|
10
|
-
"build:es": "tsc -p tsconfig.es.json",
|
|
9
|
+
"build:cjs": "node ../../scripts/compilation/inline",
|
|
10
|
+
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
|
|
11
11
|
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
|
|
12
|
-
"build:types": "tsc -p tsconfig.types.json",
|
|
12
|
+
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
|
|
13
13
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
14
|
-
"clean": "premove dist-cjs dist-es dist-types
|
|
14
|
+
"clean": "premove dist-cjs dist-es dist-types",
|
|
15
15
|
"test": "yarn g:vitest run",
|
|
16
16
|
"test:watch": "yarn g:vitest watch"
|
|
17
17
|
},
|
|
@@ -34,9 +34,9 @@
|
|
|
34
34
|
},
|
|
35
35
|
"license": "Apache-2.0",
|
|
36
36
|
"dependencies": {
|
|
37
|
-
"@aws-sdk/core": "^3.974.
|
|
38
|
-
"@aws-sdk/nested-clients": "^3.997.
|
|
39
|
-
"@aws-sdk/types": "^3.973.
|
|
37
|
+
"@aws-sdk/core": "^3.974.22",
|
|
38
|
+
"@aws-sdk/nested-clients": "^3.997.22",
|
|
39
|
+
"@aws-sdk/types": "^3.973.13",
|
|
40
40
|
"@smithy/core": "^3.24.6",
|
|
41
41
|
"@smithy/types": "^4.14.3",
|
|
42
42
|
"tslib": "^2.6.2"
|