@mavogel/awscdk-rootmail 0.0.114 → 0.0.115

package/node_modules/@aws-sdk/client-ses/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-ses",
   "description": "AWS SDK for JavaScript Ses Client for Node.js, Browser and React Native",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-ses",
@@ -20,10 +20,10 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.623.0",
-    "@aws-sdk/client-sts": "3.623.0",
-    "@aws-sdk/core": "3.623.0",
-    "@aws-sdk/credential-provider-node": "3.623.0",
+    "@aws-sdk/client-sso-oidc": "3.624.0",
+    "@aws-sdk/client-sts": "3.624.0",
+    "@aws-sdk/core": "3.624.0",
+    "@aws-sdk/credential-provider-node": "3.624.0",
     "@aws-sdk/middleware-host-header": "3.620.0",
     "@aws-sdk/middleware-logger": "3.609.0",
     "@aws-sdk/middleware-recursion-detection": "3.620.0",

package/node_modules/@aws-sdk/client-ssm/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-ssm",
   "description": "AWS SDK for JavaScript Ssm Client for Node.js, Browser and React Native",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-ssm",
@@ -20,10 +20,10 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.623.0",
-    "@aws-sdk/client-sts": "3.623.0",
-    "@aws-sdk/core": "3.623.0",
-    "@aws-sdk/credential-provider-node": "3.623.0",
+    "@aws-sdk/client-sso-oidc": "3.624.0",
+    "@aws-sdk/client-sts": "3.624.0",
+    "@aws-sdk/core": "3.624.0",
+    "@aws-sdk/credential-provider-node": "3.624.0",
     "@aws-sdk/middleware-host-header": "3.620.0",
     "@aws-sdk/middleware-logger": "3.609.0",
     "@aws-sdk/middleware-recursion-detection": "3.620.0",

package/node_modules/@aws-sdk/client-sso/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso",
   "description": "AWS SDK for JavaScript Sso Client for Node.js, Browser and React Native",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sso",
@@ -20,7 +20,7 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/core": "3.623.0",
+    "@aws-sdk/core": "3.624.0",
     "@aws-sdk/middleware-host-header": "3.620.0",
     "@aws-sdk/middleware-logger": "3.609.0",
     "@aws-sdk/middleware-recursion-detection": "3.620.0",

package/node_modules/@aws-sdk/client-sso-oidc/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso-oidc",
   "description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sso-oidc",
@@ -20,8 +20,8 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/core": "3.623.0",
-    "@aws-sdk/credential-provider-node": "3.623.0",
+    "@aws-sdk/core": "3.624.0",
+    "@aws-sdk/credential-provider-node": "3.624.0",
     "@aws-sdk/middleware-host-header": "3.620.0",
     "@aws-sdk/middleware-logger": "3.609.0",
     "@aws-sdk/middleware-recursion-detection": "3.620.0",
@@ -85,7 +85,7 @@
   },
   "license": "Apache-2.0",
   "peerDependencies": {
-    "@aws-sdk/client-sts": "^3.623.0"
+    "@aws-sdk/client-sts": "^3.624.0"
   },
   "browser": {
     "./dist-es/runtimeConfig": "./dist-es/runtimeConfig.browser"

package/node_modules/@aws-sdk/client-sts/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sts",
   "description": "AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sts",
@@ -22,9 +22,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.623.0",
-    "@aws-sdk/core": "3.623.0",
-    "@aws-sdk/credential-provider-node": "3.623.0",
+    "@aws-sdk/client-sso-oidc": "3.624.0",
+    "@aws-sdk/core": "3.624.0",
+    "@aws-sdk/credential-provider-node": "3.624.0",
     "@aws-sdk/middleware-host-header": "3.620.0",
     "@aws-sdk/middleware-logger": "3.609.0",
     "@aws-sdk/middleware-recursion-detection": "3.620.0",

package/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js

@@ -25,7 +25,8 @@ __export(httpAuthSchemes_exports, {
   AwsSdkSigV4ASigner: () => AwsSdkSigV4ASigner,
   AwsSdkSigV4Signer: () => AwsSdkSigV4Signer,
   resolveAWSSDKSigV4Config: () => resolveAWSSDKSigV4Config,
-  resolveAwsSdkSigV4Config: () => resolveAwsSdkSigV4Config
+  resolveAwsSdkSigV4Config: () => resolveAwsSdkSigV4Config,
+  validateSigningProperties: () => validateSigningProperties
 });
 module.exports = __toCommonJS(httpAuthSchemes_exports);
 
@@ -87,10 +88,21 @@ var validateSigningProperties = /* @__PURE__ */ __name(async (signingProperties)
 }, "validateSigningProperties");
 var _AwsSdkSigV4Signer = class _AwsSdkSigV4Signer {
   async sign(httpRequest, identity, signingProperties) {
+    var _a;
     if (!import_protocol_http2.HttpRequest.isInstance(httpRequest)) {
       throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
     }
-    const { config, signer, signingRegion, signingName } = await validateSigningProperties(signingProperties);
+    const validatedProps = await validateSigningProperties(signingProperties);
+    const { config, signer } = validatedProps;
+    let { signingRegion, signingName } = validatedProps;
+    const handlerExecutionContext = signingProperties.context;
+    if (((_a = handlerExecutionContext == null ? void 0 : handlerExecutionContext.authSchemes) == null ? void 0 : _a.length) ?? 0 > 1) {
+      const [first, second] = handlerExecutionContext.authSchemes;
+      if ((first == null ? void 0 : first.name) === "sigv4a" && (second == null ? void 0 : second.name) === "sigv4") {
+        signingRegion = (second == null ? void 0 : second.signingRegion) ?? signingRegion;
+        signingName = (second == null ? void 0 : second.signingName) ?? signingName;
+      }
+    }
     const signedRequest = await signer.sign(httpRequest, {
       signingDate: getSkewCorrectedDate(config.systemClockOffset),
       signingRegion,
@@ -249,5 +261,6 @@ var resolveAWSSDKSigV4Config = resolveAwsSdkSigV4Config;
   AwsSdkSigV4ASigner,
   AwsSdkSigV4Signer,
   resolveAWSSDKSigV4Config,
-  resolveAwsSdkSigV4Config
+  resolveAwsSdkSigV4Config,
+  validateSigningProperties
 });

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js

@@ -28,7 +28,17 @@ export class AwsSdkSigV4Signer {
         if (!HttpRequest.isInstance(httpRequest)) {
             throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");
         }
-        const { config, signer, signingRegion, signingName } = await validateSigningProperties(signingProperties);
+        const validatedProps = await validateSigningProperties(signingProperties);
+        const { config, signer } = validatedProps;
+        let { signingRegion, signingName } = validatedProps;
+        const handlerExecutionContext = signingProperties.context;
+        if (handlerExecutionContext?.authSchemes?.length ?? 0 > 1) {
+            const [first, second] = handlerExecutionContext.authSchemes;
+            if (first?.name === "sigv4a" && second?.name === "sigv4") {
+                signingRegion = second?.signingRegion ?? signingRegion;
+                signingName = second?.signingName ?? signingName;
+            }
+        }
         const signedRequest = await signer.sign(httpRequest, {
             signingDate: getSkewCorrectedDate(config.systemClockOffset),
             signingRegion: signingRegion,

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/index.js

@@ -1,3 +1,3 @@
-export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties } from "./AwsSdkSigV4Signer";
 export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,3 +1,3 @@
-export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties } from "./AwsSdkSigV4Signer";
 export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -1,3 +1,7 @@
-export { AwsSdkSigV4Signer, AWSSDKSigV4Signer } from "./AwsSdkSigV4Signer";
+export {
+  AwsSdkSigV4Signer,
+  AWSSDKSigV4Signer,
+  validateSigningProperties,
+} from "./AwsSdkSigV4Signer";
 export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export * from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "description": "Core functions & classes shared by multiple AWS SDK clients",
   "scripts": {
     "build": "yarn lint && concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -27,7 +27,7 @@
     "@aws-sdk/credential-provider-env": "3.620.1",
     "@aws-sdk/credential-provider-http": "3.622.0",
     "@aws-sdk/credential-provider-process": "3.620.1",
-    "@aws-sdk/credential-provider-sso": "3.623.0",
+    "@aws-sdk/credential-provider-sso": "3.624.0",
     "@aws-sdk/credential-provider-web-identity": "3.621.0",
     "@aws-sdk/types": "3.609.0",
     "@smithy/credential-provider-imds": "^3.2.0",
@@ -45,7 +45,7 @@
     "typescript": "~4.9.5"
   },
   "peerDependencies": {
-    "@aws-sdk/client-sts": "^3.623.0"
+    "@aws-sdk/client-sts": "^3.624.0"
   },
   "types": "./dist-types/index.d.ts",
   "engines": {

package/node_modules/@aws-sdk/credential-provider-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-node",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "description": "AWS credential provider that sources credentials from a Node.JS environment. ",
   "engines": {
     "node": ">=16.0.0"
@@ -30,9 +30,9 @@
   "dependencies": {
     "@aws-sdk/credential-provider-env": "3.620.1",
     "@aws-sdk/credential-provider-http": "3.622.0",
-    "@aws-sdk/credential-provider-ini": "3.623.0",
+    "@aws-sdk/credential-provider-ini": "3.624.0",
     "@aws-sdk/credential-provider-process": "3.620.1",
-    "@aws-sdk/credential-provider-sso": "3.623.0",
+    "@aws-sdk/credential-provider-sso": "3.624.0",
     "@aws-sdk/credential-provider-web-identity": "3.621.0",
     "@aws-sdk/types": "3.609.0",
     "@smithy/credential-provider-imds": "^3.2.0",

package/node_modules/@aws-sdk/credential-provider-sso/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-sso",
-  "version": "3.623.0",
+  "version": "3.624.0",
   "description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -24,7 +24,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/client-sso": "3.623.0",
+    "@aws-sdk/client-sso": "3.624.0",
     "@aws-sdk/token-providers": "3.614.0",
     "@aws-sdk/types": "3.609.0",
     "@smithy/property-provider": "^3.1.3",

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/index.js

@@ -31,6 +31,7 @@ __export(src_exports, {
   getCheckContentLengthHeaderPlugin: () => getCheckContentLengthHeaderPlugin,
   getRegionRedirectMiddlewarePlugin: () => getRegionRedirectMiddlewarePlugin,
   getS3ExpiresMiddlewarePlugin: () => getS3ExpiresMiddlewarePlugin,
+  getS3ExpressHttpSigningPlugin: () => getS3ExpressHttpSigningPlugin,
   getS3ExpressPlugin: () => getS3ExpressPlugin,
   getThrow200ExceptionsPlugin: () => getThrow200ExceptionsPlugin,
   getValidateBucketNamePlugin: () => getValidateBucketNamePlugin,
@@ -41,6 +42,8 @@ __export(src_exports, {
   resolveS3Config: () => resolveS3Config,
   s3ExpiresMiddleware: () => s3ExpiresMiddleware,
   s3ExpiresMiddlewareOptions: () => s3ExpiresMiddlewareOptions,
+  s3ExpressHttpSigningMiddleware: () => s3ExpressHttpSigningMiddleware,
+  s3ExpressHttpSigningMiddlewareOptions: () => s3ExpressHttpSigningMiddlewareOptions,
   s3ExpressMiddleware: () => s3ExpressMiddleware,
   s3ExpressMiddlewareOptions: () => s3ExpressMiddlewareOptions,
   throw200ExceptionsMiddleware: () => throw200ExceptionsMiddleware,
@@ -89,20 +92,34 @@ var regionRedirectEndpointMiddleware = /* @__PURE__ */ __name((config) => {
   return (next, context) => async (args) => {
     const originalRegion = await config.region();
     const regionProviderRef = config.region;
+    let unlock = /* @__PURE__ */ __name(() => {
+    }, "unlock");
     if (context.__s3RegionRedirect) {
-      config.region = async () => {
-        config.region = regionProviderRef;
-        return context.__s3RegionRedirect;
-      };
+      Object.defineProperty(config, "region", {
+        writable: false,
+        value: async () => {
+          return context.__s3RegionRedirect;
+        }
+      });
+      unlock = /* @__PURE__ */ __name(() => Object.defineProperty(config, "region", {
+        writable: true,
+        value: regionProviderRef
+      }), "unlock");
     }
-    const result = await next(args);
-    if (context.__s3RegionRedirect) {
-      const region = await config.region();
-      if (originalRegion !== region) {
-        throw new Error("Region was not restored following S3 region redirect.");
+    try {
+      const result = await next(args);
+      if (context.__s3RegionRedirect) {
+        unlock();
+        const region = await config.region();
+        if (originalRegion !== region) {
+          throw new Error("Region was not restored following S3 region redirect.");
+        }
       }
+      return result;
+    } catch (e) {
+      unlock();
+      throw e;
     }
-    return result;
   };
 }, "regionRedirectEndpointMiddleware");
 var regionRedirectEndpointMiddlewareOptions = {
@@ -416,6 +433,68 @@ var getS3ExpressPlugin = /* @__PURE__ */ __name((options) => ({
   }
 }), "getS3ExpressPlugin");
 
+// src/s3-express/functions/s3ExpressHttpSigningMiddleware.ts
+var import_core = require("@smithy/core");
+
+var import_util_middleware = require("@smithy/util-middleware");
+
+// src/s3-express/functions/signS3Express.ts
+var signS3Express = /* @__PURE__ */ __name(async (s3ExpressIdentity, signingOptions, request, sigV4MultiRegionSigner) => {
+  const signedRequest = await sigV4MultiRegionSigner.signWithCredentials(request, s3ExpressIdentity, {});
+  if (signedRequest.headers["X-Amz-Security-Token"] || signedRequest.headers["x-amz-security-token"]) {
+    throw new Error("X-Amz-Security-Token must not be set for s3-express requests.");
+  }
+  return signedRequest;
+}, "signS3Express");
+
+// src/s3-express/functions/s3ExpressHttpSigningMiddleware.ts
+var defaultErrorHandler = /* @__PURE__ */ __name((signingProperties) => (error) => {
+  throw error;
+}, "defaultErrorHandler");
+var defaultSuccessHandler = /* @__PURE__ */ __name((httpResponse, signingProperties) => {
+}, "defaultSuccessHandler");
+var s3ExpressHttpSigningMiddlewareOptions = import_core.httpSigningMiddlewareOptions;
+var s3ExpressHttpSigningMiddleware = /* @__PURE__ */ __name((config) => (next, context) => async (args) => {
+  if (!import_protocol_http.HttpRequest.isInstance(args.request)) {
+    return next(args);
+  }
+  const smithyContext = (0, import_util_middleware.getSmithyContext)(context);
+  const scheme = smithyContext.selectedHttpAuthScheme;
+  if (!scheme) {
+    throw new Error(`No HttpAuthScheme was selected: unable to sign request`);
+  }
+  const {
+    httpAuthOption: { signingProperties = {} },
+    identity,
+    signer
+  } = scheme;
+  let request;
+  if (context.s3ExpressIdentity) {
+    request = await signS3Express(
+      context.s3ExpressIdentity,
+      signingProperties,
+      args.request,
+      await config.signer()
+    );
+  } else {
+    request = await signer.sign(args.request, identity, signingProperties);
+  }
+  const output = await next({
+    ...args,
+    request
+  }).catch((signer.errorHandler || defaultErrorHandler)(signingProperties));
+  (signer.successHandler || defaultSuccessHandler)(output.response, signingProperties);
+  return output;
+}, "s3ExpressHttpSigningMiddleware");
+var getS3ExpressHttpSigningPlugin = /* @__PURE__ */ __name((config) => ({
+  applyToStack: (clientStack) => {
+    clientStack.addRelativeTo(
+      s3ExpressHttpSigningMiddleware(config),
+      import_core.httpSigningMiddlewareOptions
+    );
+  }
+}), "getS3ExpressHttpSigningPlugin");
+
 // src/s3Configuration.ts
 var resolveS3Config = /* @__PURE__ */ __name((input, {
   session
@@ -589,6 +668,9 @@ var getValidateBucketNamePlugin = /* @__PURE__ */ __name((options) => ({
   getS3ExpressPlugin,
   s3ExpressMiddleware,
   s3ExpressMiddlewareOptions,
+  getS3ExpressHttpSigningPlugin,
+  s3ExpressHttpSigningMiddleware,
+  s3ExpressHttpSigningMiddlewareOptions,
   resolveS3Config,
   throw200ExceptionsMiddleware,
   throw200ExceptionsMiddlewareOptions,

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/region-redirect-endpoint-middleware.js

@@ -2,20 +2,34 @@ export const regionRedirectEndpointMiddleware = (config) => {
     return (next, context) => async (args) => {
         const originalRegion = await config.region();
         const regionProviderRef = config.region;
+        let unlock = () => { };
         if (context.__s3RegionRedirect) {
-            config.region = async () => {
-                config.region = regionProviderRef;
-                return context.__s3RegionRedirect;
-            };
+            Object.defineProperty(config, "region", {
+                writable: false,
+                value: async () => {
+                    return context.__s3RegionRedirect;
+                },
+            });
+            unlock = () => Object.defineProperty(config, "region", {
+                writable: true,
+                value: regionProviderRef,
+            });
         }
-        const result = await next(args);
-        if (context.__s3RegionRedirect) {
-            const region = await config.region();
-            if (originalRegion !== region) {
-                throw new Error("Region was not restored following S3 region redirect.");
+        try {
+            const result = await next(args);
+            if (context.__s3RegionRedirect) {
+                unlock();
+                const region = await config.region();
+                if (originalRegion !== region) {
+                    throw new Error("Region was not restored following S3 region redirect.");
+                }
             }
+            return result;
+        }
+        catch (e) {
+            unlock();
+            throw e;
         }
-        return result;
     };
 };
 export const regionRedirectEndpointMiddlewareOptions = {

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/s3-express/functions/s3ExpressHttpSigningMiddleware.js

@@ -0,0 +1,39 @@
+import { httpSigningMiddlewareOptions } from "@smithy/core";
+import { HttpRequest } from "@smithy/protocol-http";
+import { SMITHY_CONTEXT_KEY, } from "@smithy/types";
+import { getSmithyContext } from "@smithy/util-middleware";
+import { signS3Express } from "./signS3Express";
+const defaultErrorHandler = (signingProperties) => (error) => {
+    throw error;
+};
+const defaultSuccessHandler = (httpResponse, signingProperties) => { };
+export const s3ExpressHttpSigningMiddlewareOptions = httpSigningMiddlewareOptions;
+export const s3ExpressHttpSigningMiddleware = (config) => (next, context) => async (args) => {
+    if (!HttpRequest.isInstance(args.request)) {
+        return next(args);
+    }
+    const smithyContext = getSmithyContext(context);
+    const scheme = smithyContext.selectedHttpAuthScheme;
+    if (!scheme) {
+        throw new Error(`No HttpAuthScheme was selected: unable to sign request`);
+    }
+    const { httpAuthOption: { signingProperties = {} }, identity, signer, } = scheme;
+    let request;
+    if (context.s3ExpressIdentity) {
+        request = await signS3Express(context.s3ExpressIdentity, signingProperties, args.request, await config.signer());
+    }
+    else {
+        request = await signer.sign(args.request, identity, signingProperties);
+    }
+    const output = await next({
+        ...args,
+        request,
+    }).catch((signer.errorHandler || defaultErrorHandler)(signingProperties));
+    (signer.successHandler || defaultSuccessHandler)(output.response, signingProperties);
+    return output;
+};
+export const getS3ExpressHttpSigningPlugin = (config) => ({
+    applyToStack: (clientStack) => {
+        clientStack.addRelativeTo(s3ExpressHttpSigningMiddleware(config), httpSigningMiddlewareOptions);
+    },
+});

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/s3-express/functions/signS3Express.js

@@ -0,0 +1,7 @@
+export const signS3Express = async (s3ExpressIdentity, signingOptions, request, sigV4MultiRegionSigner) => {
+    const signedRequest = await sigV4MultiRegionSigner.signWithCredentials(request, s3ExpressIdentity, {});
+    if (signedRequest.headers["X-Amz-Security-Token"] || signedRequest.headers["x-amz-security-token"]) {
+        throw new Error("X-Amz-Security-Token must not be set for s3-express requests.");
+    }
+    return signedRequest;
+};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-es/s3-express/index.js

@@ -4,3 +4,4 @@ export { S3ExpressIdentityProviderImpl } from "./classes/S3ExpressIdentityProvid
 export { SignatureV4S3Express } from "./classes/SignatureV4S3Express";
 export { NODE_DISABLE_S3_EXPRESS_SESSION_AUTH_OPTIONS } from "./constants";
 export { getS3ExpressPlugin, s3ExpressMiddleware, s3ExpressMiddlewareOptions } from "./functions/s3ExpressMiddleware";
+export { getS3ExpressHttpSigningPlugin, s3ExpressHttpSigningMiddleware, s3ExpressHttpSigningMiddlewareOptions, } from "./functions/s3ExpressHttpSigningMiddleware";

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/s3-express/functions/s3ExpressHttpSigningMiddleware.d.ts

@@ -0,0 +1,27 @@
+import { IHttpRequest } from "@smithy/protocol-http";
+import { AuthScheme, AwsCredentialIdentity, FinalizeRequestMiddleware, Pluggable, RequestSigner } from "@smithy/types";
+interface SigningProperties {
+    signingRegion: string;
+    signingDate: Date;
+    signingService: string;
+}
+interface PreviouslyResolved {
+    signer: (authScheme?: AuthScheme | undefined) => Promise<RequestSigner & {
+        signWithCredentials(req: IHttpRequest, identity: AwsCredentialIdentity, opts?: Partial<SigningProperties>): Promise<IHttpRequest>;
+    }>;
+}
+/**
+ * @internal
+ */
+export declare const s3ExpressHttpSigningMiddlewareOptions: import("@smithy/types").FinalizeRequestHandlerOptions & import("@smithy/types").RelativeLocation & Omit<import("@smithy/types").HandlerOptions, "step">;
+/**
+ * @internal
+ */
+export declare const s3ExpressHttpSigningMiddleware: <Input extends object, Output extends object>(config: PreviouslyResolved) => FinalizeRequestMiddleware<any, any>;
+/**
+ * @internal
+ */
+export declare const getS3ExpressHttpSigningPlugin: (config: {
+    signer: (authScheme?: AuthScheme | undefined) => Promise<RequestSigner>;
+}) => Pluggable<any, any>;
+export {};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/s3-express/functions/signS3Express.d.ts

@@ -0,0 +1,13 @@
+import type { AwsCredentialIdentity, HttpRequest as IHttpRequest } from "@smithy/types";
+import { S3ExpressIdentity } from "../interfaces/S3ExpressIdentity";
+export declare const signS3Express: (s3ExpressIdentity: S3ExpressIdentity, signingOptions: {
+    signingDate: Date;
+    signingRegion: string;
+    signingService: string;
+}, request: IHttpRequest, sigV4MultiRegionSigner: {
+    signWithCredentials(req: IHttpRequest, identity: AwsCredentialIdentity, opts?: Partial<{
+        signingDate: Date;
+        signingRegion: string;
+        signingService: string;
+    }> | undefined): Promise<IHttpRequest>;
+}) => Promise<IHttpRequest>;

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/s3-express/index.d.ts

@@ -4,5 +4,6 @@ export { S3ExpressIdentityProviderImpl } from "./classes/S3ExpressIdentityProvid
 export { SignatureV4S3Express } from "./classes/SignatureV4S3Express";
 export { NODE_DISABLE_S3_EXPRESS_SESSION_AUTH_OPTIONS } from "./constants";
 export { getS3ExpressPlugin, s3ExpressMiddleware, s3ExpressMiddlewareOptions } from "./functions/s3ExpressMiddleware";
+export { getS3ExpressHttpSigningPlugin, s3ExpressHttpSigningMiddleware, s3ExpressHttpSigningMiddlewareOptions, } from "./functions/s3ExpressHttpSigningMiddleware";
 export { S3ExpressIdentity } from "./interfaces/S3ExpressIdentity";
 export { S3ExpressIdentityProvider } from "./interfaces/S3ExpressIdentityProvider";

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/ts3.4/s3-express/functions/s3ExpressHttpSigningMiddleware.d.ts

@@ -0,0 +1,40 @@
+import { IHttpRequest } from "@smithy/protocol-http";
+import {
+  AuthScheme,
+  AwsCredentialIdentity,
+  FinalizeRequestMiddleware,
+  Pluggable,
+  RequestSigner,
+} from "@smithy/types";
+interface SigningProperties {
+  signingRegion: string;
+  signingDate: Date;
+  signingService: string;
+}
+interface PreviouslyResolved {
+  signer: (authScheme?: AuthScheme | undefined) => Promise<
+    RequestSigner & {
+      signWithCredentials(
+        req: IHttpRequest,
+        identity: AwsCredentialIdentity,
+        opts?: Partial<SigningProperties>
+      ): Promise<IHttpRequest>;
+    }
+  >;
+}
+export declare const s3ExpressHttpSigningMiddlewareOptions: import("@smithy/types").FinalizeRequestHandlerOptions &
+  import("@smithy/types").RelativeLocation &
+  Pick<
+    import("@smithy/types").HandlerOptions,
+    Exclude<keyof import("@smithy/types").HandlerOptions, "step">
+  >;
+export declare const s3ExpressHttpSigningMiddleware: <
+  Input extends object,
+  Output extends object
+>(
+  config: PreviouslyResolved
+) => FinalizeRequestMiddleware<any, any>;
+export declare const getS3ExpressHttpSigningPlugin: (config: {
+  signer: (authScheme?: AuthScheme | undefined) => Promise<RequestSigner>;
+}) => Pluggable<any, any>;
+export {};

package/node_modules/@aws-sdk/middleware-sdk-s3/dist-types/ts3.4/s3-express/functions/signS3Express.d.ts

@@ -0,0 +1,27 @@
+import {
+  AwsCredentialIdentity,
+  HttpRequest as IHttpRequest,
+} from "@smithy/types";
+import { S3ExpressIdentity } from "../interfaces/S3ExpressIdentity";
+export declare const signS3Express: (
+  s3ExpressIdentity: S3ExpressIdentity,
+  signingOptions: {
+    signingDate: Date;
+    signingRegion: string;
+    signingService: string;
+  },
+  request: IHttpRequest,
+  sigV4MultiRegionSigner: {
+    signWithCredentials(
+      req: IHttpRequest,
+      identity: AwsCredentialIdentity,
+      opts?:
+        | Partial<{
+            signingDate: Date;
+            signingRegion: string;
+            signingService: string;
+          }>
+        | undefined
+    ): Promise<IHttpRequest>;
+  }
+) => Promise<IHttpRequest>;