@gugananuvem/aws-local-simulator 1.0.10 → 1.0.12

package/src/services/sts/index.js

@@ -0,0 +1,37 @@
+const STSServer = require('./server');
+const logger = require('../../utils/logger');
+
+class STSService {
+  constructor(config) {
+    this.config = config;
+    this.name = 'sts';
+    this.port = config.ports.sts || 9326;
+    this.server = null;
+    this.isRunning = false;
+  }
+
+  async initialize() {
+    this.server = new STSServer(this.port, this.config);
+    await this.server.initialize();
+  }
+
+  async start() {
+    if (this.isRunning) return;
+    await this.server.start();
+    this.isRunning = true;
+  }
+
+  async stop() {
+    if (!this.isRunning) return;
+    await this.server.stop();
+    this.isRunning = false;
+  }
+
+  async reset() {}
+
+  getStatus() {
+    return { running: this.isRunning, port: this.port, endpoint: `http://localhost:${this.port}` };
+  }
+}
+
+module.exports = STSService;

package/src/services/sts/server.js

@@ -0,0 +1,142 @@
+const express = require('express');
+const crypto = require('crypto');
+const STSSimulator = require('./simulator');
+const logger = require('../../utils/logger');
+
+class STSServer {
+  constructor(port, config) {
+    this.port = port;
+    this.config = config;
+    this.app = express();
+    this.simulator = new STSSimulator(config);
+    this.server = null;
+    this.setupMiddlewares();
+  }
+
+  setupMiddlewares() {
+    this.app.use(express.raw({ type: '*/*', limit: '10mb' }));
+    this.app.use((req, res, next) => {
+      if (req.body && Buffer.isBuffer(req.body)) {
+        const str = req.body.toString('utf8');
+        const ct = req.headers['content-type'] || '';
+        if (ct.includes('application/x-www-form-urlencoded')) {
+          req.body = Object.fromEntries(new URLSearchParams(str));
+        } else {
+          try { req.body = JSON.parse(str); } catch (e) { req.body = {}; }
+        }
+      } else { req.body = req.body || {}; }
+      next();
+    });
+  }
+
+  async initialize() {
+    await this.simulator.initialize();
+    this.setupRoutes();
+    logger.debug('STS Server inicializado');
+  }
+
+  setupRoutes() {
+    this.app.post('/', (req, res) => {
+      // STS uses query protocol: Action in body or query string
+      const action = req.query.Action || req.body.Action ||
+        (req.headers['x-amz-target'] && req.headers['x-amz-target'].split('.')[1]);
+
+      logger.debug(`STS action: ${action}`);
+
+      try {
+        const result = this.handleAction(action, req.body);
+        const xml = this.generateXmlResponse(action, result);
+        res.set('Content-Type', 'text/xml');
+        res.send(xml);
+      } catch (err) {
+        logger.error('STS Error:', err.message);
+        res.status(400).send(this.simulator.generateErrorResponse('InvalidAction', err.message));
+      }
+    });
+  }
+
+  handleAction(action, params) {
+    switch (action) {
+      case 'AssumeRole': return this.simulator.assumeRole(params);
+      case 'GetCallerIdentity': return this.simulator.getCallerIdentity(params);
+      case 'GetSessionToken': return this.simulator.getSessionToken(params);
+      case 'AssumeRoleWithWebIdentity': return this.simulator.assumeRoleWithWebIdentity(params);
+      case 'AssumeRoleWithSAML': return this.simulator.assumeRoleWithSAML(params);
+      default: throw new Error(`Unsupported STS action: ${action}`);
+    }
+  }
+
+  generateXmlResponse(action, result) {
+    const requestId = crypto.randomUUID();
+    switch (action) {
+      case 'AssumeRole':
+      case 'AssumeRoleWithWebIdentity':
+      case 'AssumeRoleWithSAML':
+        return `<?xml version="1.0" encoding="UTF-8"?>
+<${action}Response xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+  <${action}Result>
+    <Credentials>
+      <AccessKeyId>${result.Credentials.AccessKeyId}</AccessKeyId>
+      <SecretAccessKey>${result.Credentials.SecretAccessKey}</SecretAccessKey>
+      <SessionToken>${result.Credentials.SessionToken}</SessionToken>
+      <Expiration>${result.Credentials.Expiration}</Expiration>
+    </Credentials>
+    <AssumedRoleUser>
+      <AssumedRoleId>${result.AssumedRoleUser.AssumedRoleId}</AssumedRoleId>
+      <Arn>${result.AssumedRoleUser.Arn}</Arn>
+    </AssumedRoleUser>
+  </${action}Result>
+  <ResponseMetadata><RequestId>${requestId}</RequestId></ResponseMetadata>
+</${action}Response>`;
+
+      case 'GetCallerIdentity':
+        return `<?xml version="1.0" encoding="UTF-8"?>
+<GetCallerIdentityResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+  <GetCallerIdentityResult>
+    <UserId>${result.UserId}</UserId>
+    <Account>${result.Account}</Account>
+    <Arn>${result.Arn}</Arn>
+  </GetCallerIdentityResult>
+  <ResponseMetadata><RequestId>${requestId}</RequestId></ResponseMetadata>
+</GetCallerIdentityResponse>`;
+
+      case 'GetSessionToken':
+        return `<?xml version="1.0" encoding="UTF-8"?>
+<GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+  <GetSessionTokenResult>
+    <Credentials>
+      <AccessKeyId>${result.Credentials.AccessKeyId}</AccessKeyId>
+      <SecretAccessKey>${result.Credentials.SecretAccessKey}</SecretAccessKey>
+      <SessionToken>${result.Credentials.SessionToken}</SessionToken>
+      <Expiration>${result.Credentials.Expiration}</Expiration>
+    </Credentials>
+  </GetSessionTokenResult>
+  <ResponseMetadata><RequestId>${requestId}</RequestId></ResponseMetadata>
+</GetSessionTokenResponse>`;
+
+      default: return '';
+    }
+  }
+
+  start() {
+    return new Promise((resolve) => {
+      this.server = this.app.listen(this.port, () => {
+        logger.info(`🔑 STS rodando em http://localhost:${this.port}`);
+        resolve();
+      });
+    });
+  }
+
+  stop() {
+    return new Promise((resolve) => {
+      if (this.server) this.server.close(() => resolve());
+      else resolve();
+    });
+  }
+
+  getStatus() {
+    return { running: !!this.server, port: this.port, endpoint: `http://localhost:${this.port}` };
+  }
+}
+
+module.exports = STSServer;

package/src/services/sts/simulator.js

@@ -0,0 +1,69 @@
+const crypto = require('crypto');
+const logger = require('../../utils/logger');
+
+class STSSimulator {
+  constructor(config) {
+    this.config = config;
+    this.assumedRoles = new Map();
+  }
+
+  async initialize() {
+    logger.debug('Inicializando STS Simulator...');
+  }
+
+  assumeRole(params = {}) {
+    const { RoleArn, RoleSessionName, DurationSeconds = 3600 } = params;
+    if (!RoleArn) throw new Error('RoleArn is required');
+    if (!RoleSessionName) throw new Error('RoleSessionName is required');
+
+    const accessKeyId = `ASIA${crypto.randomBytes(8).toString('hex').toUpperCase()}`;
+    const secretKey = crypto.randomBytes(20).toString('hex');
+    const sessionToken = crypto.randomBytes(64).toString('base64');
+    const expiration = new Date(Date.now() + DurationSeconds * 1000).toISOString();
+    const assumedRoleId = `AROA${crypto.randomBytes(8).toString('hex').toUpperCase()}:${RoleSessionName}`;
+
+    return {
+      Credentials: { AccessKeyId: accessKeyId, SecretAccessKey: secretKey, SessionToken: sessionToken, Expiration: expiration },
+      AssumedRoleUser: { AssumedRoleId: assumedRoleId, Arn: `${RoleArn}/${RoleSessionName}` },
+      PackedPolicySize: null
+    };
+  }
+
+  getCallerIdentity(params = {}) {
+    return {
+      UserId: 'AKIAIOSFODNN7EXAMPLE',
+      Account: '123456789012',
+      Arn: 'arn:aws:iam::123456789012:user/local-simulator'
+    };
+  }
+
+  getSessionToken(params = {}) {
+    const { DurationSeconds = 3600 } = params;
+    return {
+      Credentials: {
+        AccessKeyId: `ASIA${crypto.randomBytes(8).toString('hex').toUpperCase()}`,
+        SecretAccessKey: crypto.randomBytes(20).toString('hex'),
+        SessionToken: crypto.randomBytes(64).toString('base64'),
+        Expiration: new Date(Date.now() + DurationSeconds * 1000).toISOString()
+      }
+    };
+  }
+
+  assumeRoleWithWebIdentity(params = {}) {
+    return this.assumeRole({ ...params, RoleSessionName: params.RoleSessionName || 'web-identity-session' });
+  }
+
+  assumeRoleWithSAML(params = {}) {
+    return this.assumeRole({ ...params, RoleSessionName: params.RoleSessionName || 'saml-session' });
+  }
+
+  generateErrorResponse(code, message) {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<ErrorResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+  <Error><Code>${code}</Code><Message>${message}</Message></Error>
+  <RequestId>${crypto.randomUUID()}</RequestId>
+</ErrorResponse>`;
+  }
+}
+
+module.exports = STSSimulator;

package/src/template/aws-config-template.js

@@ -1,88 +1,88 @@
-/**
- * AWS SDK v3 Configuration for Local Development
- * Gerado pelo AWS Local Simulator
- */
-
-const { DynamoDBClient } = require('@aws-sdk/client-dynamodb');
-const { DynamoDBDocumentClient } = require('@aws-sdk/lib-dynamodb');
-const { S3Client } = require('@aws-sdk/client-s3');
-const { SQSClient } = require('@aws-sdk/client-sqs');
-const { SNSClient } = require('@aws-sdk/client-sns');
-const { EventBridgeClient } = require('@aws-sdk/client-eventbridge');
-
-// Configurações de ambiente
-const isLocal = process.env.IS_LOCAL === 'true' || process.env.NODE_ENV === 'development';
-
-// Endpoints locais (configuráveis via variáveis de ambiente)
-const endpoints = {
-  dynamodb: process.env.DYNAMODB_ENDPOINT || 'http://localhost:8000',
-  s3: process.env.S3_ENDPOINT || 'http://localhost:4566',
-  sqs: process.env.SQS_ENDPOINT || 'http://localhost:9324',
-  sns: process.env.SNS_ENDPOINT || 'http://localhost:9911',
-  eventbridge: process.env.EVENTBRIDGE_ENDPOINT || 'http://localhost:4010'
-};
-
-// Credenciais locais
-const localCredentials = {
-  accessKeyId: process.env.AWS_ACCESS_KEY_ID || 'local',
-  secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || 'local'
-};
-
-const baseConfig = {
-  region: process.env.AWS_REGION || 'us-east-1',
-  credentials: isLocal ? localCredentials : undefined
-};
-
-// DynamoDB Client
-const dynamoDBClient = new DynamoDBClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.dynamodb : undefined
-});
-
-const dynamoDB = DynamoDBDocumentClient.from(dynamoDBClient);
-
-// S3 Client
-const s3 = new S3Client({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.s3 : undefined,
-  forcePathStyle: isLocal
-});
-
-// SQS Client
-const sqs = new SQSClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.sqs : undefined
-});
-
-// SNS Client
-const sns = new SNSClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.sns : undefined
-});
-
-// EventBridge Client
-const eventbridge = new EventBridgeClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.eventbridge : undefined
-});
-
-module.exports = {
-  // Clients
-  dynamoDB,
-  dynamoDBClient,
-  s3,
-  sqs,
-  sns,
-  eventbridge,
-  
-  // Utilitários
-  isLocal,
-  endpoints,
-  
-  // Configuração
-  config: {
-    region: baseConfig.region,
-    isLocal,
-    endpoints
-  }
+/**
+ * AWS SDK v3 Configuration for Local Development
+ * Gerado pelo AWS Local Simulator
+ */
+
+const { DynamoDBClient } = require('@aws-sdk/client-dynamodb');
+const { DynamoDBDocumentClient } = require('@aws-sdk/lib-dynamodb');
+const { S3Client } = require('@aws-sdk/client-s3');
+const { SQSClient } = require('@aws-sdk/client-sqs');
+const { SNSClient } = require('@aws-sdk/client-sns');
+const { EventBridgeClient } = require('@aws-sdk/client-eventbridge');
+
+// Configurações de ambiente
+const isLocal = process.env.IS_LOCAL === 'true' || process.env.NODE_ENV === 'development';
+
+// Endpoints locais (configuráveis via variáveis de ambiente)
+const endpoints = {
+  dynamodb: process.env.DYNAMODB_ENDPOINT || 'http://localhost:8000',
+  s3: process.env.S3_ENDPOINT || 'http://localhost:4566',
+  sqs: process.env.SQS_ENDPOINT || 'http://localhost:9324',
+  sns: process.env.SNS_ENDPOINT || 'http://localhost:9911',
+  eventbridge: process.env.EVENTBRIDGE_ENDPOINT || 'http://localhost:4010'
+};
+
+// Credenciais locais
+const localCredentials = {
+  accessKeyId: process.env.AWS_ACCESS_KEY_ID || 'local',
+  secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || 'local'
+};
+
+const baseConfig = {
+  region: process.env.AWS_REGION || 'us-east-1',
+  credentials: isLocal ? localCredentials : undefined
+};
+
+// DynamoDB Client
+const dynamoDBClient = new DynamoDBClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.dynamodb : undefined
+});
+
+const dynamoDB = DynamoDBDocumentClient.from(dynamoDBClient);
+
+// S3 Client
+const s3 = new S3Client({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.s3 : undefined,
+  forcePathStyle: isLocal
+});
+
+// SQS Client
+const sqs = new SQSClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.sqs : undefined
+});
+
+// SNS Client
+const sns = new SNSClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.sns : undefined
+});
+
+// EventBridge Client
+const eventbridge = new EventBridgeClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.eventbridge : undefined
+});
+
+module.exports = {
+  // Clients
+  dynamoDB,
+  dynamoDBClient,
+  s3,
+  sqs,
+  sns,
+  eventbridge,
+  
+  // Utilitários
+  isLocal,
+  endpoints,
+  
+  // Configuração
+  config: {
+    region: baseConfig.region,
+    isLocal,
+    endpoints
+  }
 };

package/src/template/aws-config-template.mjs

@@ -1,91 +1,91 @@
-/**
- * AWS SDK v3 Configuration for Local Development (ES Module)
- * Gerado pelo AWS Local Simulator
- */
-
-import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
-import { DynamoDBDocumentClient } from '@aws-sdk/lib-dynamodb';
-import { S3Client } from '@aws-sdk/client-s3';
-import { SQSClient } from '@aws-sdk/client-sqs';
-import { SNSClient } from '@aws-sdk/client-sns';
-import { EventBridgeClient } from '@aws-sdk/client-eventbridge';
-
-// Configurações de ambiente
-const isLocal = process.env.IS_LOCAL === 'true' || process.env.NODE_ENV === 'development';
-
-// Endpoints locais
-const endpoints = {
-  dynamodb: process.env.DYNAMODB_ENDPOINT || 'http://localhost:8000',
-  s3: process.env.S3_ENDPOINT || 'http://localhost:4566',
-  sqs: process.env.SQS_ENDPOINT || 'http://localhost:9324',
-  sns: process.env.SNS_ENDPOINT || 'http://localhost:9911',
-  eventbridge: process.env.EVENTBRIDGE_ENDPOINT || 'http://localhost:4010'
-};
-
-// Credenciais locais
-const localCredentials = {
-  accessKeyId: process.env.AWS_ACCESS_KEY_ID || 'local',
-  secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || 'local'
-};
-
-const baseConfig = {
-  region: process.env.AWS_REGION || 'us-east-1',
-  credentials: isLocal ? localCredentials : undefined
-};
-
-// DynamoDB Client
-const dynamoDBClient = new DynamoDBClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.dynamodb : undefined
-});
-
-const dynamoDB = DynamoDBDocumentClient.from(dynamoDBClient);
-
-// S3 Client
-const s3 = new S3Client({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.s3 : undefined,
-  forcePathStyle: isLocal
-});
-
-// SQS Client
-const sqs = new SQSClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.sqs : undefined
-});
-
-// SNS Client
-const sns = new SNSClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.sns : undefined
-});
-
-// EventBridge Client
-const eventbridge = new EventBridgeClient({
-  ...baseConfig,
-  endpoint: isLocal ? endpoints.eventbridge : undefined
-});
-
-export {
-  dynamoDB,
-  dynamoDBClient,
-  s3,
-  sqs,
-  sns,
-  eventbridge,
-  isLocal,
-  endpoints,
-  baseConfig as config
-};
-
-export default {
-  dynamoDB,
-  dynamoDBClient,
-  s3,
-  sqs,
-  sns,
-  eventbridge,
-  isLocal,
-  endpoints,
-  config: baseConfig
+/**
+ * AWS SDK v3 Configuration for Local Development (ES Module)
+ * Gerado pelo AWS Local Simulator
+ */
+
+import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
+import { DynamoDBDocumentClient } from '@aws-sdk/lib-dynamodb';
+import { S3Client } from '@aws-sdk/client-s3';
+import { SQSClient } from '@aws-sdk/client-sqs';
+import { SNSClient } from '@aws-sdk/client-sns';
+import { EventBridgeClient } from '@aws-sdk/client-eventbridge';
+
+// Configurações de ambiente
+const isLocal = process.env.IS_LOCAL === 'true' || process.env.NODE_ENV === 'development';
+
+// Endpoints locais
+const endpoints = {
+  dynamodb: process.env.DYNAMODB_ENDPOINT || 'http://localhost:8000',
+  s3: process.env.S3_ENDPOINT || 'http://localhost:4566',
+  sqs: process.env.SQS_ENDPOINT || 'http://localhost:9324',
+  sns: process.env.SNS_ENDPOINT || 'http://localhost:9911',
+  eventbridge: process.env.EVENTBRIDGE_ENDPOINT || 'http://localhost:4010'
+};
+
+// Credenciais locais
+const localCredentials = {
+  accessKeyId: process.env.AWS_ACCESS_KEY_ID || 'local',
+  secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || 'local'
+};
+
+const baseConfig = {
+  region: process.env.AWS_REGION || 'us-east-1',
+  credentials: isLocal ? localCredentials : undefined
+};
+
+// DynamoDB Client
+const dynamoDBClient = new DynamoDBClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.dynamodb : undefined
+});
+
+const dynamoDB = DynamoDBDocumentClient.from(dynamoDBClient);
+
+// S3 Client
+const s3 = new S3Client({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.s3 : undefined,
+  forcePathStyle: isLocal
+});
+
+// SQS Client
+const sqs = new SQSClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.sqs : undefined
+});
+
+// SNS Client
+const sns = new SNSClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.sns : undefined
+});
+
+// EventBridge Client
+const eventbridge = new EventBridgeClient({
+  ...baseConfig,
+  endpoint: isLocal ? endpoints.eventbridge : undefined
+});
+
+export {
+  dynamoDB,
+  dynamoDBClient,
+  s3,
+  sqs,
+  sns,
+  eventbridge,
+  isLocal,
+  endpoints,
+  baseConfig as config
+};
+
+export default {
+  dynamoDB,
+  dynamoDBClient,
+  s3,
+  sqs,
+  sns,
+  eventbridge,
+  isLocal,
+  endpoints,
+  config: baseConfig
 };