@jjrawlins/cdk-iam-policy-builder-helper 0.0.11 → 0.0.13

package/node_modules/@smithy/signature-v4/dist-types/SignatureV4.d.ts

@@ -1,61 +1,9 @@
-import { AwsCredentialIdentity, ChecksumConstructor, EventSigner, EventSigningArguments, FormattedEvent, HashConstructor, HttpRequest, MessageSigner, Provider, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+import { EventSigner, EventSigningArguments, FormattedEvent, HttpRequest, MessageSigner, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+import { SignatureV4Base, SignatureV4CryptoInit, SignatureV4Init } from "./SignatureV4Base";
 /**
  * @public
  */
-export interface SignatureV4Init {
-    /**
-     * The service signing name.
-     */
-    service: string;
-    /**
-     * The region name or a function that returns a promise that will be
-     * resolved with the region name.
-     */
-    region: string | Provider<string>;
-    /**
-     * The credentials with which the request should be signed or a function
-     * that returns a promise that will be resolved with credentials.
-     */
-    credentials: AwsCredentialIdentity | Provider<AwsCredentialIdentity>;
-    /**
-     * A constructor function for a hash object that will calculate SHA-256 HMAC
-     * checksums.
-     */
-    sha256: ChecksumConstructor | HashConstructor;
-    /**
-     * Whether to uri-escape the request URI path as part of computing the
-     * canonical request string. This is required for every AWS service, except
-     * Amazon S3, as of late 2017.
-     *
-     * @default [true]
-     */
-    uriEscapePath?: boolean;
-    /**
-     * Whether to calculate a checksum of the request body and include it as
-     * either a request header (when signing) or as a query string parameter
-     * (when presigning). This is required for AWS Glacier and Amazon S3 and optional for
-     * every other AWS service as of late 2017.
-     *
-     * @default [true]
-     */
-    applyChecksum?: boolean;
-}
-/**
- * @public
- */
-export interface SignatureV4CryptoInit {
-    sha256: ChecksumConstructor | HashConstructor;
-}
-/**
- * @public
- */
-export declare class SignatureV4 implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
-    private readonly service;
-    private readonly regionProvider;
-    private readonly credentialProvider;
-    private readonly sha256;
-    private readonly uriEscapePath;
-    private readonly applyChecksum;
+export declare class SignatureV4 extends SignatureV4Base implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
     private readonly headerFormatter;
     constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
     presign(originalRequest: HttpRequest, options?: RequestPresigningArguments): Promise<HttpRequest>;
@@ -67,10 +15,6 @@ export declare class SignatureV4 implements RequestPresigner, RequestSigner, Str
     signMessage(signableMessage: SignableMessage, { signingDate, signingRegion, signingService }: SigningArguments): Promise<SignedMessage>;
     private signString;
     private signRequest;
-    private createCanonicalRequest;
-    private createStringToSign;
-    private getCanonicalPath;
     private getSignature;
     private getSigningKey;
-    private validateResolvedCredentials;
 }

package/node_modules/@smithy/signature-v4/dist-types/SignatureV4Base.d.ts

@@ -0,0 +1,69 @@
+import { AwsCredentialIdentity, ChecksumConstructor, DateInput, HashConstructor, HeaderBag, HttpRequest, Provider } from "@smithy/types";
+/**
+ * @public
+ */
+export interface SignatureV4Init {
+    /**
+     * The service signing name.
+     */
+    service: string;
+    /**
+     * The region name or a function that returns a promise that will be
+     * resolved with the region name.
+     */
+    region: string | Provider<string>;
+    /**
+     * The credentials with which the request should be signed or a function
+     * that returns a promise that will be resolved with credentials.
+     */
+    credentials: AwsCredentialIdentity | Provider<AwsCredentialIdentity>;
+    /**
+     * A constructor function for a hash object that will calculate SHA-256 HMAC
+     * checksums.
+     */
+    sha256?: ChecksumConstructor | HashConstructor;
+    /**
+     * Whether to uri-escape the request URI path as part of computing the
+     * canonical request string. This is required for every AWS service, except
+     * Amazon S3, as of late 2017.
+     *
+     * @default [true]
+     */
+    uriEscapePath?: boolean;
+    /**
+     * Whether to calculate a checksum of the request body and include it as
+     * either a request header (when signing) or as a query string parameter
+     * (when presigning). This is required for AWS Glacier and Amazon S3 and optional for
+     * every other AWS service as of late 2017.
+     *
+     * @default [true]
+     */
+    applyChecksum?: boolean;
+}
+/**
+ * @public
+ */
+export interface SignatureV4CryptoInit {
+    sha256: ChecksumConstructor | HashConstructor;
+}
+/**
+ * @internal
+ */
+export declare abstract class SignatureV4Base {
+    protected readonly service: string;
+    protected readonly regionProvider: Provider<string>;
+    protected readonly credentialProvider: Provider<AwsCredentialIdentity>;
+    protected readonly sha256: ChecksumConstructor | HashConstructor;
+    private readonly uriEscapePath;
+    protected readonly applyChecksum: boolean;
+    protected constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
+    protected createCanonicalRequest(request: HttpRequest, canonicalHeaders: HeaderBag, payloadHash: string): string;
+    protected createStringToSign(longDate: string, credentialScope: string, canonicalRequest: string, algorithmIdentifier: string): Promise<string>;
+    private getCanonicalPath;
+    protected validateResolvedCredentials(credentials: unknown): void;
+    protected formatDate(now: DateInput): {
+        longDate: string;
+        shortDate: string;
+    };
+    protected getCanonicalHeaderList(headers: object): string;
+}

package/node_modules/@smithy/signature-v4/dist-types/index.d.ts

@@ -1,7 +1,11 @@
 export * from "./SignatureV4";
+export * from "./constants";
 export { getCanonicalHeaders } from "./getCanonicalHeaders";
 export { getCanonicalQuery } from "./getCanonicalQuery";
 export { getPayloadHash } from "./getPayloadHash";
 export { moveHeadersToQuery } from "./moveHeadersToQuery";
 export { prepareRequest } from "./prepareRequest";
 export * from "./credentialDerivation";
+export { SignatureV4Init, SignatureV4CryptoInit, SignatureV4Base } from "./SignatureV4Base";
+export { hasHeader } from "./headerUtil";
+export * from "./signature-v4a-container";

package/node_modules/@smithy/signature-v4/dist-types/signature-v4a-container.d.ts

@@ -0,0 +1,24 @@
+import type { RequestSigner } from "@smithy/types";
+/**
+ * @public
+ */
+export type OptionalSigV4aSigner = {
+    /**
+     * This constructor is not typed so as not to require a type import
+     * from the signature-v4a package.
+     *
+     * The true type is SignatureV4a from @smithy/signature-v4a.
+     */
+    new (options: any): RequestSigner;
+};
+/**
+ * @public
+ *
+ * \@smithy/signature-v4a will install the constructor in this
+ * container if it's installed.
+ *
+ * This avoids a runtime-require being interpreted statically by bundlers.
+ */
+export declare const signatureV4aContainer: {
+    SignatureV4a: null | OptionalSigV4aSigner;
+};

package/node_modules/@smithy/signature-v4/dist-types/ts3.4/SignatureV4.d.ts

@@ -1,61 +1,9 @@
-import { AwsCredentialIdentity, ChecksumConstructor, EventSigner, EventSigningArguments, FormattedEvent, HashConstructor, HttpRequest, MessageSigner, Provider, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+import { EventSigner, EventSigningArguments, FormattedEvent, HttpRequest, MessageSigner, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+import { SignatureV4Base, SignatureV4CryptoInit, SignatureV4Init } from "./SignatureV4Base";
 /**
  * @public
  */
-export interface SignatureV4Init {
-    /**
-     * The service signing name.
-     */
-    service: string;
-    /**
-     * The region name or a function that returns a promise that will be
-     * resolved with the region name.
-     */
-    region: string | Provider<string>;
-    /**
-     * The credentials with which the request should be signed or a function
-     * that returns a promise that will be resolved with credentials.
-     */
-    credentials: AwsCredentialIdentity | Provider<AwsCredentialIdentity>;
-    /**
-     * A constructor function for a hash object that will calculate SHA-256 HMAC
-     * checksums.
-     */
-    sha256: ChecksumConstructor | HashConstructor;
-    /**
-     * Whether to uri-escape the request URI path as part of computing the
-     * canonical request string. This is required for every AWS service, except
-     * Amazon S3, as of late 2017.
-     *
-     * @default [true]
-     */
-    uriEscapePath?: boolean;
-    /**
-     * Whether to calculate a checksum of the request body and include it as
-     * either a request header (when signing) or as a query string parameter
-     * (when presigning). This is required for AWS Glacier and Amazon S3 and optional for
-     * every other AWS service as of late 2017.
-     *
-     * @default [true]
-     */
-    applyChecksum?: boolean;
-}
-/**
- * @public
- */
-export interface SignatureV4CryptoInit {
-    sha256: ChecksumConstructor | HashConstructor;
-}
-/**
- * @public
- */
-export declare class SignatureV4 implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
-    private readonly service;
-    private readonly regionProvider;
-    private readonly credentialProvider;
-    private readonly sha256;
-    private readonly uriEscapePath;
-    private readonly applyChecksum;
+export declare class SignatureV4 extends SignatureV4Base implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
     private readonly headerFormatter;
     constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
     presign(originalRequest: HttpRequest, options?: RequestPresigningArguments): Promise<HttpRequest>;
@@ -67,10 +15,6 @@ export declare class SignatureV4 implements RequestPresigner, RequestSigner, Str
     signMessage(signableMessage: SignableMessage, { signingDate, signingRegion, signingService }: SigningArguments): Promise<SignedMessage>;
     private signString;
     private signRequest;
-    private createCanonicalRequest;
-    private createStringToSign;
-    private getCanonicalPath;
     private getSignature;
     private getSigningKey;
-    private validateResolvedCredentials;
 }

package/node_modules/@smithy/signature-v4/dist-types/ts3.4/SignatureV4Base.d.ts

@@ -0,0 +1,69 @@
+import { AwsCredentialIdentity, ChecksumConstructor, DateInput, HashConstructor, HeaderBag, HttpRequest, Provider } from "@smithy/types";
+/**
+ * @public
+ */
+export interface SignatureV4Init {
+    /**
+     * The service signing name.
+     */
+    service: string;
+    /**
+     * The region name or a function that returns a promise that will be
+     * resolved with the region name.
+     */
+    region: string | Provider<string>;
+    /**
+     * The credentials with which the request should be signed or a function
+     * that returns a promise that will be resolved with credentials.
+     */
+    credentials: AwsCredentialIdentity | Provider<AwsCredentialIdentity>;
+    /**
+     * A constructor function for a hash object that will calculate SHA-256 HMAC
+     * checksums.
+     */
+    sha256?: ChecksumConstructor | HashConstructor;
+    /**
+     * Whether to uri-escape the request URI path as part of computing the
+     * canonical request string. This is required for every AWS service, except
+     * Amazon S3, as of late 2017.
+     *
+     * @default [true]
+     */
+    uriEscapePath?: boolean;
+    /**
+     * Whether to calculate a checksum of the request body and include it as
+     * either a request header (when signing) or as a query string parameter
+     * (when presigning). This is required for AWS Glacier and Amazon S3 and optional for
+     * every other AWS service as of late 2017.
+     *
+     * @default [true]
+     */
+    applyChecksum?: boolean;
+}
+/**
+ * @public
+ */
+export interface SignatureV4CryptoInit {
+    sha256: ChecksumConstructor | HashConstructor;
+}
+/**
+ * @internal
+ */
+export declare abstract class SignatureV4Base {
+    protected readonly service: string;
+    protected readonly regionProvider: Provider<string>;
+    protected readonly credentialProvider: Provider<AwsCredentialIdentity>;
+    protected readonly sha256: ChecksumConstructor | HashConstructor;
+    private readonly uriEscapePath;
+    protected readonly applyChecksum: boolean;
+    protected constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
+    protected createCanonicalRequest(request: HttpRequest, canonicalHeaders: HeaderBag, payloadHash: string): string;
+    protected createStringToSign(longDate: string, credentialScope: string, canonicalRequest: string, algorithmIdentifier: string): Promise<string>;
+    private getCanonicalPath;
+    protected validateResolvedCredentials(credentials: unknown): void;
+    protected formatDate(now: DateInput): {
+        longDate: string;
+        shortDate: string;
+    };
+    protected getCanonicalHeaderList(headers: object): string;
+}

package/node_modules/@smithy/signature-v4/dist-types/ts3.4/index.d.ts

@@ -1,7 +1,11 @@
 export * from "./SignatureV4";
+export * from "./constants";
 export { getCanonicalHeaders } from "./getCanonicalHeaders";
 export { getCanonicalQuery } from "./getCanonicalQuery";
 export { getPayloadHash } from "./getPayloadHash";
 export { moveHeadersToQuery } from "./moveHeadersToQuery";
 export { prepareRequest } from "./prepareRequest";
 export * from "./credentialDerivation";
+export { SignatureV4Init, SignatureV4CryptoInit, SignatureV4Base } from "./SignatureV4Base";
+export { hasHeader } from "./headerUtil";
+export * from "./signature-v4a-container";

package/node_modules/@smithy/signature-v4/dist-types/ts3.4/signature-v4a-container.d.ts

@@ -0,0 +1,24 @@
+import { RequestSigner } from "@smithy/types";
+/**
+ * @public
+ */
+export type OptionalSigV4aSigner = {
+    /**
+     * This constructor is not typed so as not to require a type import
+     * from the signature-v4a package.
+     *
+     * The true type is SignatureV4a from @smithy/signature-v4a.
+     */
+    new (options: any): RequestSigner;
+};
+/**
+ * @public
+ *
+ * \@smithy/signature-v4a will install the constructor in this
+ * container if it's installed.
+ *
+ * This avoids a runtime-require being interpreted statically by bundlers.
+ */
+export declare const signatureV4aContainer: {
+    SignatureV4a: null | OptionalSigV4aSigner;
+};

package/node_modules/@smithy/signature-v4/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/signature-v4",
-  "version": "5.0.1",
+  "version": "5.1.3",
   "description": "A standalone implementation of the AWS Signature V4 request signing algorithm",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -14,7 +14,7 @@
     "stage-release": "rimraf ./.release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
     "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo || exit 0",
     "lint": "eslint -c ../../.eslintrc.js \"src/**/*.ts\"",
-    "format": "prettier --config ../../prettier.config.js --ignore-path ../.prettierignore --write \"**/*.{ts,md,json}\"",
+    "format": "prettier --config ../../prettier.config.js --ignore-path ../../.prettierignore --write \"**/*.{ts,md,json}\"",
     "extract:docs": "api-extractor run --local",
     "test": "yarn g:vitest run",
     "test:watch": "yarn g:vitest watch"
@@ -26,10 +26,10 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@smithy/is-array-buffer": "^4.0.0",
-    "@smithy/protocol-http": "^5.0.1",
-    "@smithy/types": "^4.1.0",
+    "@smithy/protocol-http": "^5.1.3",
+    "@smithy/types": "^4.3.2",
     "@smithy/util-hex-encoding": "^4.0.0",
-    "@smithy/util-middleware": "^4.0.1",
+    "@smithy/util-middleware": "^4.0.5",
     "@smithy/util-uri-escape": "^4.0.0",
     "@smithy/util-utf8": "^4.0.0",
     "tslib": "^2.6.2"
@@ -54,10 +54,10 @@
   "files": [
     "dist-*/**"
   ],
-  "homepage": "https://github.com/awslabs/smithy-typescript/tree/main/packages/signature-v4",
+  "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/signature-v4",
   "repository": {
     "type": "git",
-    "url": "https://github.com/awslabs/smithy-typescript.git",
+    "url": "https://github.com/smithy-lang/smithy-typescript.git",
     "directory": "packages/signature-v4"
   },
   "typedoc": {