@digipair/skill-s3 0.136.3 → 0.136.5

package/dist/index.esm12.js

@@ -1,711 +1,58 @@
-import { aX as ProviderError, aY as IniSectionType, aZ as CONFIG_PREFIX_SEPARATOR, a5 as readFile, a_ as getConfigFilepath, a$ as parseIni, x as getProfileName, C as CredentialsProviderError, s as setCredentialFeature } from './index.esm3.js';
-import { g as getSSOTokenFilepath, a as getSSOTokenFromFile } from './getSSOTokenFromFile.esm.js';
-import { promises } from 'node:fs';
-import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
-import 'node:crypto';
-import 'node:path';
-import 'node:os';
+import fs from 'fs/promises';
+import { C as CredentialsProviderError, H as HttpRequest, b as parseRfc3339DateTime, d as sdkStreamMixin, N as NodeHttpHandler, s as setCredentialFeature } from './index.esm2.js';
+import 'buffer';
+import 'path';
+import 'os';
 import 'node:fs/promises';
+import 'stream';
+import 'crypto';
 import 'node:stream';
-import 'node:process';
-import 'buffer';
-import 'node:https';
-import 'node:zlib';
-
-function _assert_this_initialized(self) {
-    if (self === void 0) {
-        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-    return self;
-}
-function _class_call_check(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _define_property$3(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _get_prototype_of(o) {
-    _get_prototype_of = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
-        return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _get_prototype_of(o);
-}
-function _inherits(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-        throw new TypeError("Super expression must either be null or a function");
-    }
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-        constructor: {
-            value: subClass,
-            writable: true,
-            configurable: true
-        }
-    });
-    if (superClass) _set_prototype_of(subClass, superClass);
-}
-function _possible_constructor_return(self, call) {
-    if (call && (_type_of(call) === "object" || typeof call === "function")) {
-        return call;
-    }
-    return _assert_this_initialized(self);
-}
-function _set_prototype_of(o, p) {
-    _set_prototype_of = Object.setPrototypeOf || function setPrototypeOf(o, p) {
-        o.__proto__ = p;
-        return o;
-    };
-    return _set_prototype_of(o, p);
-}
-function _type_of(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _is_native_reflect_construct() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-    try {
-        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
-        return true;
-    } catch (e) {
-        return false;
-    }
-}
-function _create_super(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct();
-    return function _createSuperInternal() {
-        var Super = _get_prototype_of(Derived), result;
-        if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of(this).constructor;
-            result = Reflect.construct(Super, arguments, NewTarget);
-        } else {
-            result = Super.apply(this, arguments);
-        }
-        return _possible_constructor_return(this, result);
-    };
-}
-var TokenProviderError = /*#__PURE__*/ function(ProviderError) {
-    _inherits(TokenProviderError, ProviderError);
-    var _super = _create_super(TokenProviderError);
-    function TokenProviderError(message) {
-        var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : true;
-        _class_call_check(this, TokenProviderError);
-        var _this;
-        _this = _super.call(this, message, options);
-        _define_property$3(_assert_this_initialized(_this), "name", "TokenProviderError");
-        Object.setPrototypeOf(_assert_this_initialized(_this), TokenProviderError.prototype);
-        return _this;
-    }
-    return TokenProviderError;
-}(ProviderError);
+import 'http';
+import 'https';
+import 'process';
+import 'node:fs';
+import 'zlib';
 
-function _array_like_to_array(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_with_holes(arr) {
-    if (Array.isArray(arr)) return arr;
-}
-function _define_property$2(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _iterable_to_array_limit(arr, i) {
-    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
-    if (_i == null) return;
-    var _arr = [];
-    var _n = true;
-    var _d = false;
-    var _s, _e;
-    try {
-        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
-            _arr.push(_s.value);
-            if (i && _arr.length === i) break;
-        }
-    } catch (err) {
-        _d = true;
-        _e = err;
-    } finally{
-        try {
-            if (!_n && _i["return"] != null) _i["return"]();
-        } finally{
-            if (_d) throw _e;
-        }
-    }
-    return _arr;
-}
-function _non_iterable_rest() {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _object_spread$2(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property$2(target, key, source[key]);
-        });
-    }
-    return target;
-}
-function ownKeys$1(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        keys.push.apply(keys, symbols);
-    }
-    return keys;
-}
-function _object_spread_props$1(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys$1(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
-    }
-    return target;
-}
-function _sliced_to_array(arr, i) {
-    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
-}
-function _unsupported_iterable_to_array(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
-}
-var getSsoSessionData = function(data) {
-    return Object.entries(data).filter(function(param) {
-        var _param = _sliced_to_array(param, 1), key = _param[0];
-        return key.startsWith(IniSectionType.SSO_SESSION + CONFIG_PREFIX_SEPARATOR);
-    }).reduce(function(acc, param) {
-        var _param = _sliced_to_array(param, 2), key = _param[0], value = _param[1];
-        return _object_spread_props$1(_object_spread$2({}, acc), _define_property$2({}, key.substring(key.indexOf(CONFIG_PREFIX_SEPARATOR) + 1), value));
-    }, {});
-};
-
-function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
+var ECS_CONTAINER_HOST = "169.254.170.2";
+var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
+var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
+var checkUrl = function(url, logger) {
+    if (url.protocol === "https:") {
         return;
     }
-    if (info.done) {
-        resolve(value);
-    } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator$5(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _ts_generator$5(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
-var swallowError = function() {
-    return {};
-};
-var loadSsoSessionData = function() {
-    var _ref = _async_to_generator$5(function() {
-        var init, _init_configFilepath;
-        var _arguments = arguments;
-        return _ts_generator$5(this, function(_state) {
-            init = _arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {};
-            return [
-                2,
-                readFile((_init_configFilepath = init.configFilepath) !== null && _init_configFilepath !== void 0 ? _init_configFilepath : getConfigFilepath()).then(parseIni).then(getSsoSessionData).catch(swallowError)
-            ];
-        });
-    });
-    return function loadSsoSessionData() {
-        return _ref.apply(this, arguments);
-    };
-}();
-
-var isSsoProfile = function(arg) {
-    return arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
-};
-
-var EXPIRE_WINDOW_MS = 5 * 60 * 1000;
-var REFRESH_MESSAGE = "To refresh this SSO session run 'aws sso login' with the corresponding profile.";
-
-function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
+    if (url.hostname === ECS_CONTAINER_HOST || url.hostname === EKS_CONTAINER_HOST_IPv4 || url.hostname === EKS_CONTAINER_HOST_IPv6) {
         return;
     }
-    if (info.done) {
-        resolve(value);
-    } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator$4(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _ts_generator$4(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
+    if (url.hostname.includes("[")) {
+        if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
+            return;
         }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
-var getSsoOidcClient = function() {
-    var _ref = _async_to_generator$4(function(ssoRegion) {
-        var init, callerClientConfig, _init_clientConfig, SSOOIDCClient, coalesce, _init_clientConfig1, ssoOidcClient;
-        var _arguments = arguments;
-        return _ts_generator$4(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    init = _arguments.length > 1 && _arguments[1] !== void 0 ? _arguments[1] : {}, callerClientConfig = _arguments.length > 2 ? _arguments[2] : void 0;
-                    return [
-                        4,
-                        import('./index.esm13.js')
-                    ];
-                case 1:
-                    SSOOIDCClient = _state.sent().SSOOIDCClient;
-                    coalesce = function(prop) {
-                        var _init_clientConfig, _init_parentClientConfig;
-                        var _init_clientConfig_prop, _ref;
-                        return (_ref = (_init_clientConfig_prop = (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig[prop]) !== null && _init_clientConfig_prop !== void 0 ? _init_clientConfig_prop : (_init_parentClientConfig = init.parentClientConfig) === null || _init_parentClientConfig === void 0 ? void 0 : _init_parentClientConfig[prop]) !== null && _ref !== void 0 ? _ref : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig[prop];
-                    };
-                    ssoOidcClient = new SSOOIDCClient(Object.assign({}, (_init_clientConfig1 = init.clientConfig) !== null && _init_clientConfig1 !== void 0 ? _init_clientConfig1 : {}, {
-                        region: ssoRegion !== null && ssoRegion !== void 0 ? ssoRegion : (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig.region,
-                        logger: coalesce("logger"),
-                        userAgentAppId: coalesce("userAgentAppId")
-                    }));
-                    return [
-                        2,
-                        ssoOidcClient
-                    ];
-            }
-        });
-    });
-    return function getSsoOidcClient(ssoRegion) {
-        return _ref.apply(this, arguments);
-    };
-}();
-
-function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
-    }
-    if (info.done) {
-        resolve(value);
     } else {
-        Promise.resolve(value).then(_next, _throw);
-    }
-}
-function _async_to_generator$3(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _ts_generator$3(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
+        if (url.hostname === "localhost") {
+            return;
         }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
+        var ipComponents = url.hostname.split(".");
+        var inRange = function(component) {
+            var num = parseInt(component, 10);
+            return 0 <= num && num <= 255;
         };
+        if (ipComponents[0] === "127" && inRange(ipComponents[1]) && inRange(ipComponents[2]) && inRange(ipComponents[3]) && ipComponents.length === 4) {
+            return;
+        }
     }
-}
-var getNewSsoOidcToken = function() {
-    var _ref = _async_to_generator$3(function(ssoToken, ssoRegion) {
-        var init, callerClientConfig, CreateTokenCommand, ssoOidcClient;
-        var _arguments = arguments;
-        return _ts_generator$3(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    init = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : {}, callerClientConfig = _arguments.length > 3 ? _arguments[3] : void 0;
-                    return [
-                        4,
-                        import('./index.esm13.js')
-                    ];
-                case 1:
-                    CreateTokenCommand = _state.sent().CreateTokenCommand;
-                    return [
-                        4,
-                        getSsoOidcClient(ssoRegion, init, callerClientConfig)
-                    ];
-                case 2:
-                    ssoOidcClient = _state.sent();
-                    return [
-                        2,
-                        ssoOidcClient.send(new CreateTokenCommand({
-                            clientId: ssoToken.clientId,
-                            clientSecret: ssoToken.clientSecret,
-                            refreshToken: ssoToken.refreshToken,
-                            grantType: "refresh_token"
-                        }))
-                    ];
-            }
-        });
+    throw new CredentialsProviderError("URL not accepted. It must either be HTTPS or match one of the following:\n  - loopback CIDR 127.0.0.0/8 or [::1/128]\n  - ECS container host 169.254.170.2\n  - EKS container host 169.254.170.23 or [fd00:ec2::23]", {
+        logger: logger
     });
-    return function getNewSsoOidcToken(ssoToken, ssoRegion) {
-        return _ref.apply(this, arguments);
-    };
-}();
-
-var validateTokenExpiry = function(token) {
-    if (token.expiration && token.expiration.getTime() < Date.now()) {
-        throw new TokenProviderError("Token is expired. ".concat(REFRESH_MESSAGE), false);
-    }
-};
-
-var validateTokenKey = function(key, value) {
-    var forRefresh = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : false;
-    if (typeof value === "undefined") {
-        throw new TokenProviderError("Value not present for '".concat(key, "' in SSO Token").concat(forRefresh ? ". Cannot refresh" : "", ". ").concat(REFRESH_MESSAGE), false);
-    }
-};
-
-var writeFile = promises.writeFile;
-var writeSSOTokenToFile = function(id, ssoToken) {
-    var tokenFilepath = getSSOTokenFilepath(id);
-    var tokenString = JSON.stringify(ssoToken, null, 2);
-    return writeFile(tokenFilepath, tokenString);
 };
 
+function _array_like_to_array(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes(arr) {
+    if (Array.isArray(arr)) return arr;
+}
 function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -735,52 +82,43 @@ function _async_to_generator$2(fn) {
         });
     };
 }
-function _define_property$1(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _object_spread$1(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
+function _iterable_to_array_limit(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
         }
-        ownKeys.forEach(function(key) {
-            _define_property$1(target, key, source[key]);
-        });
     }
-    return target;
+    return _arr;
 }
-function ownKeys(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        keys.push.apply(keys, symbols);
-    }
-    return keys;
+function _non_iterable_rest() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread_props(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
-    }
-    return target;
+function _sliced_to_array(arr, i) {
+    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
+}
+function _unsupported_iterable_to_array(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
 }
 function _ts_generator$2(thisArg, body) {
     var f, y, t, g, _ = {
@@ -877,168 +215,73 @@ function _ts_generator$2(thisArg, body) {
         };
     }
 }
-var lastRefreshAttemptTime = new Date(0);
-var fromSso = function() {
-    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
-    return /*#__PURE__*/ _async_to_generator$2(function() {
-        var callerClientConfig, _init_logger, profiles, _init_profile, profileName, profile, ssoSessionName, ssoSessions, ssoSession, _i, _iter, ssoSessionRequiredKey, ssoRegion, ssoToken, accessToken, expiresAt, existingToken, newSsoOidcToken, newTokenExpiration;
-        var _arguments = arguments;
+function createGetRequest(url) {
+    return new HttpRequest({
+        protocol: url.protocol,
+        hostname: url.hostname,
+        port: Number(url.port),
+        path: url.pathname,
+        query: Array.from(url.searchParams.entries()).reduce(function(acc, param) {
+            var _param = _sliced_to_array(param, 2), k = _param[0], v = _param[1];
+            acc[k] = v;
+            return acc;
+        }, {}),
+        fragment: url.hash
+    });
+}
+function getCredentials(response, logger) {
+    return _getCredentials.apply(this, arguments);
+}
+function _getCredentials() {
+    _getCredentials = _async_to_generator$2(function(response, logger) {
+        var stream, str, parsed, parsedBody;
         return _ts_generator$2(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
-                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/token-providers - fromSso");
+                    stream = sdkStreamMixin(response.body);
                     return [
                         4,
-                        parseKnownFiles(init)
+                        stream.transformToString()
                     ];
                 case 1:
-                    profiles = _state.sent();
-                    profileName = getProfileName({
-                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
-                    });
-                    profile = profiles[profileName];
-                    if (!profile) {
-                        throw new TokenProviderError("Profile '".concat(profileName, "' could not be found in shared credentials file."), false);
-                    } else if (!profile["sso_session"]) {
-                        throw new TokenProviderError("Profile '".concat(profileName, "' is missing required property 'sso_session'."));
-                    }
-                    ssoSessionName = profile["sso_session"];
-                    return [
-                        4,
-                        loadSsoSessionData(init)
-                    ];
-                case 2:
-                    ssoSessions = _state.sent();
-                    ssoSession = ssoSessions[ssoSessionName];
-                    if (!ssoSession) {
-                        throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' could not be found in shared credentials file."), false);
-                    }
-                    for(_i = 0, _iter = [
-                        "sso_start_url",
-                        "sso_region"
-                    ]; _i < _iter.length; _i++){
-                        ssoSessionRequiredKey = _iter[_i];
-                        if (!ssoSession[ssoSessionRequiredKey]) {
-                            throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' is missing required property '").concat(ssoSessionRequiredKey, "'."), false);
+                    str = _state.sent();
+                    if (response.statusCode === 200) {
+                        parsed = JSON.parse(str);
+                        if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
+                            throw new CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: " + "{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", {
+                                logger: logger
+                            });
                         }
-                    }
-                    ssoSession["sso_start_url"];
-                    ssoRegion = ssoSession["sso_region"];
-                    _state.label = 3;
-                case 3:
-                    _state.trys.push([
-                        3,
-                        5,
-                        ,
-                        6
-                    ]);
-                    return [
-                        4,
-                        getSSOTokenFromFile(ssoSessionName)
-                    ];
-                case 4:
-                    ssoToken = _state.sent();
-                    return [
-                        3,
-                        6
-                    ];
-                case 5:
-                    _state.sent();
-                    throw new TokenProviderError("The SSO session token associated with profile=".concat(profileName, " was not found or is invalid. ").concat(REFRESH_MESSAGE), false);
-                case 6:
-                    validateTokenKey("accessToken", ssoToken.accessToken);
-                    validateTokenKey("expiresAt", ssoToken.expiresAt);
-                    accessToken = ssoToken.accessToken, expiresAt = ssoToken.expiresAt;
-                    existingToken = {
-                        token: accessToken,
-                        expiration: new Date(expiresAt)
-                    };
-                    if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
                         return [
                             2,
-                            existingToken
+                            {
+                                accessKeyId: parsed.AccessKeyId,
+                                secretAccessKey: parsed.SecretAccessKey,
+                                sessionToken: parsed.Token,
+                                expiration: parseRfc3339DateTime(parsed.Expiration)
+                            }
                         ];
                     }
-                    if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1000) {
-                        validateTokenExpiry(existingToken);
-                        return [
-                            2,
-                            existingToken
-                        ];
+                    if (response.statusCode >= 400 && response.statusCode < 500) {
+                        parsedBody = {};
+                        try {
+                            parsedBody = JSON.parse(str);
+                        } catch (e) {}
+                        throw Object.assign(new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
+                            logger: logger
+                        }), {
+                            Code: parsedBody.Code,
+                            Message: parsedBody.Message
+                        });
                     }
-                    validateTokenKey("clientId", ssoToken.clientId, true);
-                    validateTokenKey("clientSecret", ssoToken.clientSecret, true);
-                    validateTokenKey("refreshToken", ssoToken.refreshToken, true);
-                    _state.label = 7;
-                case 7:
-                    _state.trys.push([
-                        7,
-                        13,
-                        ,
-                        14
-                    ]);
-                    lastRefreshAttemptTime.setTime(Date.now());
-                    return [
-                        4,
-                        getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig)
-                    ];
-                case 8:
-                    newSsoOidcToken = _state.sent();
-                    validateTokenKey("accessToken", newSsoOidcToken.accessToken);
-                    validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
-                    newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
-                    _state.label = 9;
-                case 9:
-                    _state.trys.push([
-                        9,
-                        11,
-                        ,
-                        12
-                    ]);
-                    return [
-                        4,
-                        writeSSOTokenToFile(ssoSessionName, _object_spread_props(_object_spread$1({}, ssoToken), {
-                            accessToken: newSsoOidcToken.accessToken,
-                            expiresAt: newTokenExpiration.toISOString(),
-                            refreshToken: newSsoOidcToken.refreshToken
-                        }))
-                    ];
-                case 10:
-                    _state.sent();
-                    return [
-                        3,
-                        12
-                    ];
-                case 11:
-                    _state.sent();
-                    return [
-                        3,
-                        12
-                    ];
-                case 12:
-                    return [
-                        2,
-                        {
-                            token: newSsoOidcToken.accessToken,
-                            expiration: newTokenExpiration
-                        }
-                    ];
-                case 13:
-                    _state.sent();
-                    validateTokenExpiry(existingToken);
-                    return [
-                        2,
-                        existingToken
-                    ];
-                case 14:
-                    return [
-                        2
-                    ];
+                    throw new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
+                        logger: logger
+                    });
             }
         });
     });
-};
+    return _getCredentials.apply(this, arguments);
+}
 
 function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -1069,34 +312,6 @@ function _async_to_generator$1(fn) {
         });
     };
 }
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _object_spread(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property(target, key, source[key]);
-        });
-    }
-    return target;
-}
 function _ts_generator$1(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
@@ -1192,176 +407,69 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
-var resolveSSOCredentials = function() {
-    var _ref = _async_to_generator$1(function(param) {
-        var ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, token, refreshMessage, _token, e, accessToken, _ref, SSOClient, GetRoleCredentialsCommand, _clientConfig_logger, _ref1, _clientConfig_region, _clientConfig_userAgentAppId, _ref2, sso, ssoResp, e2, tmp, _ref3, accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId, credentials;
+var retryWrapper = function(toRetry, maxRetries, delayMs) {
+    return /*#__PURE__*/ _async_to_generator$1(function() {
+        var i;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    ssoStartUrl = param.ssoStartUrl, ssoSession = param.ssoSession, ssoAccountId = param.ssoAccountId, ssoRegion = param.ssoRegion, ssoRoleName = param.ssoRoleName, ssoClient = param.ssoClient, clientConfig = param.clientConfig, parentClientConfig = param.parentClientConfig, callerClientConfig = param.callerClientConfig, profile = param.profile, filepath = param.filepath, configFilepath = param.configFilepath, ignoreCache = param.ignoreCache, logger = param.logger;
-                    refreshMessage = "To refresh this SSO session run aws sso login with the corresponding profile.";
-                    if (!ssoSession) return [
-                        3,
-                        5
-                    ];
+                    i = 0;
                     _state.label = 1;
                 case 1:
-                    _state.trys.push([
-                        1,
+                    if (!(i < maxRetries)) return [
                         3,
+                        7
+                    ];
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
                         ,
-                        4
+                        6
                     ]);
                     return [
                         4,
-                        fromSso({
-                            profile: profile,
-                            filepath: filepath,
-                            configFilepath: configFilepath,
-                            ignoreCache: ignoreCache,
-                            clientConfig: clientConfig,
-                            parentClientConfig: parentClientConfig,
-                            logger: logger
-                        })({
-                            callerClientConfig: callerClientConfig
-                        })
+                        toRetry()
                     ];
-                case 2:
-                    _token = _state.sent();
-                    token = {
-                        accessToken: _token.token,
-                        expiresAt: new Date(_token.expiration).toISOString()
-                    };
+                case 3:
                     return [
-                        3,
-                        4
+                        2,
+                        _state.sent()
                     ];
-                case 3:
-                    e = _state.sent();
-                    throw new CredentialsProviderError(e.message, {
-                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-                        logger: logger
-                    });
                 case 4:
+                    _state.sent();
                     return [
-                        3,
-                        8
+                        4,
+                        new Promise(function(resolve) {
+                            return setTimeout(resolve, delayMs);
+                        })
                     ];
                 case 5:
-                    _state.trys.push([
-                        5,
-                        7,
-                        ,
-                        8
-                    ]);
+                    _state.sent();
                     return [
-                        4,
-                        getSSOTokenFromFile(ssoStartUrl)
+                        3,
+                        6
                     ];
                 case 6:
-                    token = _state.sent();
+                    ++i;
                     return [
                         3,
-                        8
+                        1
                     ];
                 case 7:
-                    _state.sent();
-                    throw new CredentialsProviderError("The SSO session associated with this profile is invalid. ".concat(refreshMessage), {
-                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-                        logger: logger
-                    });
-                case 8:
-                    if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
-                        throw new CredentialsProviderError("The SSO session associated with this profile has expired. ".concat(refreshMessage), {
-                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-                            logger: logger
-                        });
-                    }
-                    accessToken = token.accessToken;
-                    return [
-                        4,
-                        import('./loadSso.esm.js')
-                    ];
-                case 9:
-                    _ref = _state.sent(), SSOClient = _ref.SSOClient, GetRoleCredentialsCommand = _ref.GetRoleCredentialsCommand;
-                    sso = ssoClient || new SSOClient(Object.assign({}, clientConfig !== null && clientConfig !== void 0 ? clientConfig : {}, {
-                        logger: (_ref1 = (_clientConfig_logger = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.logger) !== null && _clientConfig_logger !== void 0 ? _clientConfig_logger : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.logger) !== null && _ref1 !== void 0 ? _ref1 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.logger,
-                        region: (_clientConfig_region = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.region) !== null && _clientConfig_region !== void 0 ? _clientConfig_region : ssoRegion,
-                        userAgentAppId: (_ref2 = (_clientConfig_userAgentAppId = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.userAgentAppId) !== null && _clientConfig_userAgentAppId !== void 0 ? _clientConfig_userAgentAppId : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.userAgentAppId) !== null && _ref2 !== void 0 ? _ref2 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.userAgentAppId
-                    }));
-                    _state.label = 10;
-                case 10:
-                    _state.trys.push([
-                        10,
-                        12,
-                        ,
-                        13
-                    ]);
                     return [
                         4,
-                        sso.send(new GetRoleCredentialsCommand({
-                            accountId: ssoAccountId,
-                            roleName: ssoRoleName,
-                            accessToken: accessToken
-                        }))
-                    ];
-                case 11:
-                    ssoResp = _state.sent();
-                    return [
-                        3,
-                        13
+                        toRetry()
                     ];
-                case 12:
-                    e2 = _state.sent();
-                    throw new CredentialsProviderError(e2, {
-                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-                        logger: logger
-                    });
-                case 13:
-                    tmp = ssoResp.roleCredentials, _ref3 = tmp === void 0 ? {} : tmp, accessKeyId = _ref3.accessKeyId, secretAccessKey = _ref3.secretAccessKey, sessionToken = _ref3.sessionToken, expiration = _ref3.expiration, credentialScope = _ref3.credentialScope, accountId = _ref3.accountId;
-                    if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
-                        throw new CredentialsProviderError("SSO returns an invalid temporary credential.", {
-                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-                            logger: logger
-                        });
-                    }
-                    credentials = _object_spread({
-                        accessKeyId: accessKeyId,
-                        secretAccessKey: secretAccessKey,
-                        sessionToken: sessionToken,
-                        expiration: new Date(expiration)
-                    }, credentialScope && {
-                        credentialScope: credentialScope
-                    }, accountId && {
-                        accountId: accountId
-                    });
-                    if (ssoSession) {
-                        setCredentialFeature(credentials, "CREDENTIALS_SSO", "s");
-                    } else {
-                        setCredentialFeature(credentials, "CREDENTIALS_SSO_LEGACY", "u");
-                    }
+                case 8:
                     return [
                         2,
-                        credentials
+                        _state.sent()
                     ];
             }
         });
     });
-    return function resolveSSOCredentials(_) {
-        return _ref.apply(this, arguments);
-    };
-}();
-
-var validateSsoProfile = function(profile, logger) {
-    var sso_start_url = profile.sso_start_url, sso_account_id = profile.sso_account_id, sso_region = profile.sso_region, sso_role_name = profile.sso_role_name;
-    if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
-        throw new CredentialsProviderError('Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", ' + '"sso_region", "sso_role_name", "sso_start_url". Got '.concat(Object.keys(profile).join(", "), "\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html"), {
-            tryNextLink: false,
-            logger: logger
-        });
-    }
-    return profile;
 };
 
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
@@ -1488,124 +596,109 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var fromSSO = function() {
-    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
-    return /*#__PURE__*/ _async_to_generator(function() {
-        var callerClientConfig, _init_logger, ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession, ssoClient, _init_profile, profileName, profiles, profile, ssoSessions, session, conflictMsg, _validateSsoProfile, sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session;
-        var _arguments = arguments;
+var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
+var DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
+var AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
+var AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
+var AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
+var fromHttp = function() {
+    var options = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    var _options_logger, _options_logger_constructor, _options_logger1, _options_logger2;
+    (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-http - fromHttp");
+    var host;
+    var _options_awsContainerCredentialsRelativeUri;
+    var relative = (_options_awsContainerCredentialsRelativeUri = options.awsContainerCredentialsRelativeUri) !== null && _options_awsContainerCredentialsRelativeUri !== void 0 ? _options_awsContainerCredentialsRelativeUri : process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
+    var _options_awsContainerCredentialsFullUri;
+    var full = (_options_awsContainerCredentialsFullUri = options.awsContainerCredentialsFullUri) !== null && _options_awsContainerCredentialsFullUri !== void 0 ? _options_awsContainerCredentialsFullUri : process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
+    var _options_awsContainerAuthorizationToken;
+    var token = (_options_awsContainerAuthorizationToken = options.awsContainerAuthorizationToken) !== null && _options_awsContainerAuthorizationToken !== void 0 ? _options_awsContainerAuthorizationToken : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
+    var _options_awsContainerAuthorizationTokenFile;
+    var tokenFile = (_options_awsContainerAuthorizationTokenFile = options.awsContainerAuthorizationTokenFile) !== null && _options_awsContainerAuthorizationTokenFile !== void 0 ? _options_awsContainerAuthorizationTokenFile : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
+    var warn = ((_options_logger1 = options.logger) === null || _options_logger1 === void 0 ? void 0 : (_options_logger_constructor = _options_logger1.constructor) === null || _options_logger_constructor === void 0 ? void 0 : _options_logger_constructor.name) === "NoOpLogger" || !((_options_logger2 = options.logger) === null || _options_logger2 === void 0 ? void 0 : _options_logger2.warn) ? console.warn : options.logger.warn.bind(options.logger);
+    if (relative && full) {
+        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
+        warn("awsContainerCredentialsFullUri will take precedence.");
+    }
+    if (token && tokenFile) {
+        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
+        warn("awsContainerAuthorizationToken will take precedence.");
+    }
+    if (full) {
+        host = full;
+    } else if (relative) {
+        host = "".concat(DEFAULT_LINK_LOCAL_HOST).concat(relative);
+    } else {
+        throw new CredentialsProviderError("No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.", {
+            logger: options.logger
+        });
+    }
+    var url = new URL(host);
+    checkUrl(url, options.logger);
+    var _options_timeout, _options_timeout1;
+    var requestHandler = NodeHttpHandler.create({
+        requestTimeout: (_options_timeout = options.timeout) !== null && _options_timeout !== void 0 ? _options_timeout : 1000,
+        connectionTimeout: (_options_timeout1 = options.timeout) !== null && _options_timeout1 !== void 0 ? _options_timeout1 : 1000
+    });
+    var _options_maxRetries, _options_timeout2;
+    return retryWrapper(/*#__PURE__*/ _async_to_generator(function() {
+        var request, _, result, e;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
-                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-sso - fromSSO");
-                    ssoStartUrl = init.ssoStartUrl, ssoAccountId = init.ssoAccountId, ssoRegion = init.ssoRegion, ssoRoleName = init.ssoRoleName, ssoSession = init.ssoSession;
-                    ssoClient = init.ssoClient;
-                    profileName = getProfileName({
-                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
-                    });
-                    if (!(!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession)) return [
+                    request = createGetRequest(url);
+                    if (!token) return [
                         3,
-                        4
+                        1
                     ];
+                    request.headers.Authorization = token;
                     return [
-                        4,
-                        parseKnownFiles(init)
+                        3,
+                        3
                     ];
                 case 1:
-                    profiles = _state.sent();
-                    profile = profiles[profileName];
-                    if (!profile) {
-                        throw new CredentialsProviderError("Profile ".concat(profileName, " was not found."), {
-                            logger: init.logger
-                        });
-                    }
-                    if (!isSsoProfile(profile)) {
-                        throw new CredentialsProviderError("Profile ".concat(profileName, " is not configured with SSO credentials."), {
-                            logger: init.logger
-                        });
-                    }
-                    if (!(profile === null || profile === void 0 ? void 0 : profile.sso_session)) return [
+                    if (!tokenFile) return [
                         3,
                         3
                     ];
+                    _ = request.headers;
                     return [
                         4,
-                        loadSsoSessionData(init)
+                        fs.readFile(tokenFile)
                     ];
                 case 2:
-                    ssoSessions = _state.sent();
-                    session = ssoSessions[profile.sso_session];
-                    conflictMsg = " configurations in profile ".concat(profileName, " and sso-session ").concat(profile.sso_session);
-                    if (ssoRegion && ssoRegion !== session.sso_region) {
-                        throw new CredentialsProviderError("Conflicting SSO region" + conflictMsg, {
-                            tryNextLink: false,
-                            logger: init.logger
-                        });
-                    }
-                    if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {
-                        throw new CredentialsProviderError("Conflicting SSO start_url" + conflictMsg, {
-                            tryNextLink: false,
-                            logger: init.logger
-                        });
-                    }
-                    profile.sso_region = session.sso_region;
-                    profile.sso_start_url = session.sso_start_url;
+                    _.Authorization = _state.sent().toString();
                     _state.label = 3;
                 case 3:
-                    _validateSsoProfile = validateSsoProfile(profile, init.logger), sso_start_url = _validateSsoProfile.sso_start_url, sso_account_id = _validateSsoProfile.sso_account_id, sso_region = _validateSsoProfile.sso_region, sso_role_name = _validateSsoProfile.sso_role_name, sso_session = _validateSsoProfile.sso_session;
+                    _state.trys.push([
+                        3,
+                        5,
+                        ,
+                        6
+                    ]);
+                    return [
+                        4,
+                        requestHandler.handle(request)
+                    ];
+                case 4:
+                    result = _state.sent();
                     return [
                         2,
-                        resolveSSOCredentials({
-                            ssoStartUrl: sso_start_url,
-                            ssoSession: sso_session,
-                            ssoAccountId: sso_account_id,
-                            ssoRegion: sso_region,
-                            ssoRoleName: sso_role_name,
-                            ssoClient: ssoClient,
-                            clientConfig: init.clientConfig,
-                            parentClientConfig: init.parentClientConfig,
-                            callerClientConfig: init.callerClientConfig,
-                            profile: profileName,
-                            filepath: init.filepath,
-                            configFilepath: init.configFilepath,
-                            ignoreCache: init.ignoreCache,
-                            logger: init.logger
+                        getCredentials(result.response).then(function(creds) {
+                            return setCredentialFeature(creds, "CREDENTIALS_HTTP", "z");
                         })
                     ];
-                case 4:
-                    if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {
-                        throw new CredentialsProviderError("Incomplete configuration. The fromSSO() argument hash must include " + '"ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"', {
-                            tryNextLink: false,
-                            logger: init.logger
-                        });
-                    } else {
-                        return [
-                            2,
-                            resolveSSOCredentials({
-                                ssoStartUrl: ssoStartUrl,
-                                ssoSession: ssoSession,
-                                ssoAccountId: ssoAccountId,
-                                ssoRegion: ssoRegion,
-                                ssoRoleName: ssoRoleName,
-                                ssoClient: ssoClient,
-                                clientConfig: init.clientConfig,
-                                parentClientConfig: init.parentClientConfig,
-                                callerClientConfig: init.callerClientConfig,
-                                profile: profileName,
-                                filepath: init.filepath,
-                                configFilepath: init.configFilepath,
-                                ignoreCache: init.ignoreCache,
-                                logger: init.logger
-                            })
-                        ];
-                    }
                 case 5:
+                    e = _state.sent();
+                    throw new CredentialsProviderError(String(e), {
+                        logger: options.logger
+                    });
+                case 6:
                     return [
                         2
                     ];
             }
         });
-    });
+    }), (_options_maxRetries = options.maxRetries) !== null && _options_maxRetries !== void 0 ? _options_maxRetries : 3, (_options_timeout2 = options.timeout) !== null && _options_timeout2 !== void 0 ? _options_timeout2 : 1000);
 };
 
-export { fromSSO, isSsoProfile, validateSsoProfile };
+export { fromHttp };