@digipair/skill-s3 0.136.3 → 0.136.5

package/dist/index.esm18.js

@@ -0,0 +1,1265 @@
+import { g as getSSOTokenFilepath, a as getSSOTokenFromFile } from './getSSOTokenFromFile.esm.js';
+import { T as TokenProviderError, l as loadSsoSessionData } from './loadSsoSessionData.esm.js';
+import { promises } from 'fs';
+import { g as getProfileName, C as CredentialsProviderError, s as setCredentialFeature } from './index.esm2.js';
+import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
+import 'fs/promises';
+import 'crypto';
+import 'path';
+import 'buffer';
+import 'os';
+import 'node:fs/promises';
+import 'stream';
+import 'node:stream';
+import 'http';
+import 'https';
+import 'process';
+import 'node:fs';
+import 'zlib';
+
+var isSsoProfile = function(arg) {
+    return arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
+};
+
+var EXPIRE_WINDOW_MS = 5 * 60 * 1000;
+var REFRESH_MESSAGE = "To refresh this SSO session run 'aws sso login' with the corresponding profile.";
+
+function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$4(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$4(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var getSsoOidcClient = function() {
+    var _ref = _async_to_generator$4(function(ssoRegion) {
+        var init, callerClientConfig, _init_clientConfig, SSOOIDCClient, coalesce, _init_clientConfig1, ssoOidcClient;
+        var _arguments = arguments;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    init = _arguments.length > 1 && _arguments[1] !== void 0 ? _arguments[1] : {}, callerClientConfig = _arguments.length > 2 ? _arguments[2] : void 0;
+                    return [
+                        4,
+                        import('./index.esm11.js')
+                    ];
+                case 1:
+                    SSOOIDCClient = _state.sent().SSOOIDCClient;
+                    coalesce = function(prop) {
+                        var _init_clientConfig, _init_parentClientConfig;
+                        var _init_clientConfig_prop, _ref;
+                        return (_ref = (_init_clientConfig_prop = (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig[prop]) !== null && _init_clientConfig_prop !== void 0 ? _init_clientConfig_prop : (_init_parentClientConfig = init.parentClientConfig) === null || _init_parentClientConfig === void 0 ? void 0 : _init_parentClientConfig[prop]) !== null && _ref !== void 0 ? _ref : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig[prop];
+                    };
+                    ssoOidcClient = new SSOOIDCClient(Object.assign({}, (_init_clientConfig1 = init.clientConfig) !== null && _init_clientConfig1 !== void 0 ? _init_clientConfig1 : {}, {
+                        region: ssoRegion !== null && ssoRegion !== void 0 ? ssoRegion : (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig.region,
+                        logger: coalesce("logger"),
+                        userAgentAppId: coalesce("userAgentAppId")
+                    }));
+                    return [
+                        2,
+                        ssoOidcClient
+                    ];
+            }
+        });
+    });
+    return function getSsoOidcClient(ssoRegion) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$3(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$3(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var getNewSsoOidcToken = function() {
+    var _ref = _async_to_generator$3(function(ssoToken, ssoRegion) {
+        var init, callerClientConfig, CreateTokenCommand, ssoOidcClient;
+        var _arguments = arguments;
+        return _ts_generator$3(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    init = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : {}, callerClientConfig = _arguments.length > 3 ? _arguments[3] : void 0;
+                    return [
+                        4,
+                        import('./index.esm11.js')
+                    ];
+                case 1:
+                    CreateTokenCommand = _state.sent().CreateTokenCommand;
+                    return [
+                        4,
+                        getSsoOidcClient(ssoRegion, init, callerClientConfig)
+                    ];
+                case 2:
+                    ssoOidcClient = _state.sent();
+                    return [
+                        2,
+                        ssoOidcClient.send(new CreateTokenCommand({
+                            clientId: ssoToken.clientId,
+                            clientSecret: ssoToken.clientSecret,
+                            refreshToken: ssoToken.refreshToken,
+                            grantType: "refresh_token"
+                        }))
+                    ];
+            }
+        });
+    });
+    return function getNewSsoOidcToken(ssoToken, ssoRegion) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+var validateTokenExpiry = function(token) {
+    if (token.expiration && token.expiration.getTime() < Date.now()) {
+        throw new TokenProviderError("Token is expired. ".concat(REFRESH_MESSAGE), false);
+    }
+};
+
+var validateTokenKey = function(key, value) {
+    var forRefresh = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : false;
+    if (typeof value === "undefined") {
+        throw new TokenProviderError("Value not present for '".concat(key, "' in SSO Token").concat(forRefresh ? ". Cannot refresh" : "", ". ").concat(REFRESH_MESSAGE), false);
+    }
+};
+
+var writeFile = promises.writeFile;
+var writeSSOTokenToFile = function(id, ssoToken) {
+    var tokenFilepath = getSSOTokenFilepath(id);
+    var tokenString = JSON.stringify(ssoToken, null, 2);
+    return writeFile(tokenFilepath, tokenString);
+};
+
+function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$2(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$1(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$1(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$1(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _ts_generator$2(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var lastRefreshAttemptTime = new Date(0);
+var fromSso = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return /*#__PURE__*/ _async_to_generator$2(function() {
+        var callerClientConfig, _init_logger, profiles, _init_profile, profileName, profile, ssoSessionName, ssoSessions, ssoSession, _i, _iter, ssoSessionRequiredKey, ssoRegion, ssoToken, accessToken, expiresAt, existingToken, newSsoOidcToken, newTokenExpiration;
+        var _arguments = arguments;
+        return _ts_generator$2(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/token-providers - fromSso");
+                    return [
+                        4,
+                        parseKnownFiles(init)
+                    ];
+                case 1:
+                    profiles = _state.sent();
+                    profileName = getProfileName({
+                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    profile = profiles[profileName];
+                    if (!profile) {
+                        throw new TokenProviderError("Profile '".concat(profileName, "' could not be found in shared credentials file."), false);
+                    } else if (!profile["sso_session"]) {
+                        throw new TokenProviderError("Profile '".concat(profileName, "' is missing required property 'sso_session'."));
+                    }
+                    ssoSessionName = profile["sso_session"];
+                    return [
+                        4,
+                        loadSsoSessionData(init)
+                    ];
+                case 2:
+                    ssoSessions = _state.sent();
+                    ssoSession = ssoSessions[ssoSessionName];
+                    if (!ssoSession) {
+                        throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' could not be found in shared credentials file."), false);
+                    }
+                    for(_i = 0, _iter = [
+                        "sso_start_url",
+                        "sso_region"
+                    ]; _i < _iter.length; _i++){
+                        ssoSessionRequiredKey = _iter[_i];
+                        if (!ssoSession[ssoSessionRequiredKey]) {
+                            throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' is missing required property '").concat(ssoSessionRequiredKey, "'."), false);
+                        }
+                    }
+                    ssoSession["sso_start_url"];
+                    ssoRegion = ssoSession["sso_region"];
+                    _state.label = 3;
+                case 3:
+                    _state.trys.push([
+                        3,
+                        5,
+                        ,
+                        6
+                    ]);
+                    return [
+                        4,
+                        getSSOTokenFromFile(ssoSessionName)
+                    ];
+                case 4:
+                    ssoToken = _state.sent();
+                    return [
+                        3,
+                        6
+                    ];
+                case 5:
+                    _state.sent();
+                    throw new TokenProviderError("The SSO session token associated with profile=".concat(profileName, " was not found or is invalid. ").concat(REFRESH_MESSAGE), false);
+                case 6:
+                    validateTokenKey("accessToken", ssoToken.accessToken);
+                    validateTokenKey("expiresAt", ssoToken.expiresAt);
+                    accessToken = ssoToken.accessToken, expiresAt = ssoToken.expiresAt;
+                    existingToken = {
+                        token: accessToken,
+                        expiration: new Date(expiresAt)
+                    };
+                    if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
+                        return [
+                            2,
+                            existingToken
+                        ];
+                    }
+                    if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1000) {
+                        validateTokenExpiry(existingToken);
+                        return [
+                            2,
+                            existingToken
+                        ];
+                    }
+                    validateTokenKey("clientId", ssoToken.clientId, true);
+                    validateTokenKey("clientSecret", ssoToken.clientSecret, true);
+                    validateTokenKey("refreshToken", ssoToken.refreshToken, true);
+                    _state.label = 7;
+                case 7:
+                    _state.trys.push([
+                        7,
+                        13,
+                        ,
+                        14
+                    ]);
+                    lastRefreshAttemptTime.setTime(Date.now());
+                    return [
+                        4,
+                        getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig)
+                    ];
+                case 8:
+                    newSsoOidcToken = _state.sent();
+                    validateTokenKey("accessToken", newSsoOidcToken.accessToken);
+                    validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
+                    newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+                    _state.label = 9;
+                case 9:
+                    _state.trys.push([
+                        9,
+                        11,
+                        ,
+                        12
+                    ]);
+                    return [
+                        4,
+                        writeSSOTokenToFile(ssoSessionName, _object_spread_props(_object_spread$1({}, ssoToken), {
+                            accessToken: newSsoOidcToken.accessToken,
+                            expiresAt: newTokenExpiration.toISOString(),
+                            refreshToken: newSsoOidcToken.refreshToken
+                        }))
+                    ];
+                case 10:
+                    _state.sent();
+                    return [
+                        3,
+                        12
+                    ];
+                case 11:
+                    _state.sent();
+                    return [
+                        3,
+                        12
+                    ];
+                case 12:
+                    return [
+                        2,
+                        {
+                            token: newSsoOidcToken.accessToken,
+                            expiration: newTokenExpiration
+                        }
+                    ];
+                case 13:
+                    _state.sent();
+                    validateTokenExpiry(existingToken);
+                    return [
+                        2,
+                        existingToken
+                    ];
+                case 14:
+                    return [
+                        2
+                    ];
+            }
+        });
+    });
+};
+
+function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$1(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function _ts_generator$1(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
+var resolveSSOCredentials = function() {
+    var _ref = _async_to_generator$1(function(param) {
+        var ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, token, refreshMessage, _token, e, accessToken, _ref, SSOClient, GetRoleCredentialsCommand, _clientConfig_logger, _ref1, _clientConfig_region, _clientConfig_userAgentAppId, _ref2, sso, ssoResp, e2, tmp, _ref3, accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId, credentials;
+        return _ts_generator$1(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    ssoStartUrl = param.ssoStartUrl, ssoSession = param.ssoSession, ssoAccountId = param.ssoAccountId, ssoRegion = param.ssoRegion, ssoRoleName = param.ssoRoleName, ssoClient = param.ssoClient, clientConfig = param.clientConfig, parentClientConfig = param.parentClientConfig, callerClientConfig = param.callerClientConfig, profile = param.profile, filepath = param.filepath, configFilepath = param.configFilepath, ignoreCache = param.ignoreCache, logger = param.logger;
+                    refreshMessage = "To refresh this SSO session run aws sso login with the corresponding profile.";
+                    if (!ssoSession) return [
+                        3,
+                        5
+                    ];
+                    _state.label = 1;
+                case 1:
+                    _state.trys.push([
+                        1,
+                        3,
+                        ,
+                        4
+                    ]);
+                    return [
+                        4,
+                        fromSso({
+                            profile: profile,
+                            filepath: filepath,
+                            configFilepath: configFilepath,
+                            ignoreCache: ignoreCache
+                        })()
+                    ];
+                case 2:
+                    _token = _state.sent();
+                    token = {
+                        accessToken: _token.token,
+                        expiresAt: new Date(_token.expiration).toISOString()
+                    };
+                    return [
+                        3,
+                        4
+                    ];
+                case 3:
+                    e = _state.sent();
+                    throw new CredentialsProviderError(e.message, {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
+                case 4:
+                    return [
+                        3,
+                        8
+                    ];
+                case 5:
+                    _state.trys.push([
+                        5,
+                        7,
+                        ,
+                        8
+                    ]);
+                    return [
+                        4,
+                        getSSOTokenFromFile(ssoStartUrl)
+                    ];
+                case 6:
+                    token = _state.sent();
+                    return [
+                        3,
+                        8
+                    ];
+                case 7:
+                    _state.sent();
+                    throw new CredentialsProviderError("The SSO session associated with this profile is invalid. ".concat(refreshMessage), {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
+                case 8:
+                    if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
+                        throw new CredentialsProviderError("The SSO session associated with this profile has expired. ".concat(refreshMessage), {
+                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                            logger: logger
+                        });
+                    }
+                    accessToken = token.accessToken;
+                    return [
+                        4,
+                        import('./loadSso.esm2.js')
+                    ];
+                case 9:
+                    _ref = _state.sent(), SSOClient = _ref.SSOClient, GetRoleCredentialsCommand = _ref.GetRoleCredentialsCommand;
+                    sso = ssoClient || new SSOClient(Object.assign({}, clientConfig !== null && clientConfig !== void 0 ? clientConfig : {}, {
+                        logger: (_ref1 = (_clientConfig_logger = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.logger) !== null && _clientConfig_logger !== void 0 ? _clientConfig_logger : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.logger) !== null && _ref1 !== void 0 ? _ref1 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.logger,
+                        region: (_clientConfig_region = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.region) !== null && _clientConfig_region !== void 0 ? _clientConfig_region : ssoRegion,
+                        userAgentAppId: (_ref2 = (_clientConfig_userAgentAppId = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.userAgentAppId) !== null && _clientConfig_userAgentAppId !== void 0 ? _clientConfig_userAgentAppId : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.userAgentAppId) !== null && _ref2 !== void 0 ? _ref2 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.userAgentAppId
+                    }));
+                    _state.label = 10;
+                case 10:
+                    _state.trys.push([
+                        10,
+                        12,
+                        ,
+                        13
+                    ]);
+                    return [
+                        4,
+                        sso.send(new GetRoleCredentialsCommand({
+                            accountId: ssoAccountId,
+                            roleName: ssoRoleName,
+                            accessToken: accessToken
+                        }))
+                    ];
+                case 11:
+                    ssoResp = _state.sent();
+                    return [
+                        3,
+                        13
+                    ];
+                case 12:
+                    e2 = _state.sent();
+                    throw new CredentialsProviderError(e2, {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
+                case 13:
+                    tmp = ssoResp.roleCredentials, _ref3 = tmp === void 0 ? {} : tmp, accessKeyId = _ref3.accessKeyId, secretAccessKey = _ref3.secretAccessKey, sessionToken = _ref3.sessionToken, expiration = _ref3.expiration, credentialScope = _ref3.credentialScope, accountId = _ref3.accountId;
+                    if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
+                        throw new CredentialsProviderError("SSO returns an invalid temporary credential.", {
+                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                            logger: logger
+                        });
+                    }
+                    credentials = _object_spread({
+                        accessKeyId: accessKeyId,
+                        secretAccessKey: secretAccessKey,
+                        sessionToken: sessionToken,
+                        expiration: new Date(expiration)
+                    }, credentialScope && {
+                        credentialScope: credentialScope
+                    }, accountId && {
+                        accountId: accountId
+                    });
+                    if (ssoSession) {
+                        setCredentialFeature(credentials, "CREDENTIALS_SSO", "s");
+                    } else {
+                        setCredentialFeature(credentials, "CREDENTIALS_SSO_LEGACY", "u");
+                    }
+                    return [
+                        2,
+                        credentials
+                    ];
+            }
+        });
+    });
+    return function resolveSSOCredentials(_) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+var validateSsoProfile = function(profile, logger) {
+    var sso_start_url = profile.sso_start_url, sso_account_id = profile.sso_account_id, sso_region = profile.sso_region, sso_role_name = profile.sso_role_name;
+    if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
+        throw new CredentialsProviderError('Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", ' + '"sso_region", "sso_role_name", "sso_start_url". Got '.concat(Object.keys(profile).join(", "), "\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html"), {
+            tryNextLink: false,
+            logger: logger
+        });
+    }
+    return profile;
+};
+
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var fromSSO = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return /*#__PURE__*/ _async_to_generator(function() {
+        var callerClientConfig, _init_logger, ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession, ssoClient, _init_profile, profileName, profiles, profile, ssoSessions, session, conflictMsg, _validateSsoProfile, sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session;
+        var _arguments = arguments;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-sso - fromSSO");
+                    ssoStartUrl = init.ssoStartUrl, ssoAccountId = init.ssoAccountId, ssoRegion = init.ssoRegion, ssoRoleName = init.ssoRoleName, ssoSession = init.ssoSession;
+                    ssoClient = init.ssoClient;
+                    profileName = getProfileName({
+                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    if (!(!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession)) return [
+                        3,
+                        4
+                    ];
+                    return [
+                        4,
+                        parseKnownFiles(init)
+                    ];
+                case 1:
+                    profiles = _state.sent();
+                    profile = profiles[profileName];
+                    if (!profile) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " was not found."), {
+                            logger: init.logger
+                        });
+                    }
+                    if (!isSsoProfile(profile)) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " is not configured with SSO credentials."), {
+                            logger: init.logger
+                        });
+                    }
+                    if (!(profile === null || profile === void 0 ? void 0 : profile.sso_session)) return [
+                        3,
+                        3
+                    ];
+                    return [
+                        4,
+                        loadSsoSessionData(init)
+                    ];
+                case 2:
+                    ssoSessions = _state.sent();
+                    session = ssoSessions[profile.sso_session];
+                    conflictMsg = " configurations in profile ".concat(profileName, " and sso-session ").concat(profile.sso_session);
+                    if (ssoRegion && ssoRegion !== session.sso_region) {
+                        throw new CredentialsProviderError("Conflicting SSO region" + conflictMsg, {
+                            tryNextLink: false,
+                            logger: init.logger
+                        });
+                    }
+                    if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {
+                        throw new CredentialsProviderError("Conflicting SSO start_url" + conflictMsg, {
+                            tryNextLink: false,
+                            logger: init.logger
+                        });
+                    }
+                    profile.sso_region = session.sso_region;
+                    profile.sso_start_url = session.sso_start_url;
+                    _state.label = 3;
+                case 3:
+                    _validateSsoProfile = validateSsoProfile(profile, init.logger), sso_start_url = _validateSsoProfile.sso_start_url, sso_account_id = _validateSsoProfile.sso_account_id, sso_region = _validateSsoProfile.sso_region, sso_role_name = _validateSsoProfile.sso_role_name, sso_session = _validateSsoProfile.sso_session;
+                    return [
+                        2,
+                        resolveSSOCredentials({
+                            ssoStartUrl: sso_start_url,
+                            ssoSession: sso_session,
+                            ssoAccountId: sso_account_id,
+                            ssoRegion: sso_region,
+                            ssoRoleName: sso_role_name,
+                            ssoClient: ssoClient,
+                            clientConfig: init.clientConfig,
+                            parentClientConfig: init.parentClientConfig,
+                            callerClientConfig: init.callerClientConfig,
+                            profile: profileName,
+                            filepath: init.filepath,
+                            configFilepath: init.configFilepath,
+                            ignoreCache: init.ignoreCache,
+                            logger: init.logger
+                        })
+                    ];
+                case 4:
+                    if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {
+                        throw new CredentialsProviderError("Incomplete configuration. The fromSSO() argument hash must include " + '"ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"', {
+                            tryNextLink: false,
+                            logger: init.logger
+                        });
+                    } else {
+                        return [
+                            2,
+                            resolveSSOCredentials({
+                                ssoStartUrl: ssoStartUrl,
+                                ssoSession: ssoSession,
+                                ssoAccountId: ssoAccountId,
+                                ssoRegion: ssoRegion,
+                                ssoRoleName: ssoRoleName,
+                                ssoClient: ssoClient,
+                                clientConfig: init.clientConfig,
+                                parentClientConfig: init.parentClientConfig,
+                                callerClientConfig: init.callerClientConfig,
+                                profile: profileName,
+                                filepath: init.filepath,
+                                configFilepath: init.configFilepath,
+                                ignoreCache: init.ignoreCache,
+                                logger: init.logger
+                            })
+                        ];
+                    }
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    });
+};
+
+export { fromSSO, isSsoProfile, validateSsoProfile };