@psnext/slingcli 3.5.20261007-3 → 3.5.20261019-1

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.js

@@ -1,4 +1,5 @@
 import { HttpRequest } from "@smithy/core/protocols";
+import { SMITHY_CONTEXT_KEY } from "@smithy/types";
 import { getAgeHeader, getDateHeader, getSkewCorrectedDate, getUpdatedSystemClockOffset } from "../utils";
 const throwSigningPropertyError = (name, property) => {
     if (!property) {
@@ -6,6 +7,12 @@ const throwSigningPropertyError = (name, property) => {
     }
     return property;
 };
+const hasEventStreamOutput = (signingProperties) => {
+    const context = signingProperties.context;
+    const eventStream = context?.[SMITHY_CONTEXT_KEY]
+        ?.eventStream;
+    return eventStream?.output === true;
+};
 export const validateSigningProperties = async (signingProperties) => {
     const context = throwSigningPropertyError("context", signingProperties.context);
     const config = throwSigningPropertyError("config", signingProperties.config);
@@ -41,7 +48,9 @@ export class AwsSdkSigV4Signer {
         }
         const noSkewCorrection = (await config.disableClockSkewCorrection?.()) === true;
         signingProperties._disableClockSkewCorrection = noSkewCorrection;
-        if (!noSkewCorrection) {
+        const skipSkewSampling = noSkewCorrection || hasEventStreamOutput(signingProperties);
+        signingProperties._skipClockSkewSampling = skipSkewSampling;
+        if (!skipSkewSampling) {
             signingProperties._preRequestSystemClockOffset = config.systemClockOffset;
             signingProperties._requestSentAt = Date.now();
         }
@@ -55,7 +64,7 @@ export class AwsSdkSigV4Signer {
     errorHandler(signingProperties) {
         return (error) => {
             const errorException = error;
-            if (!signingProperties._disableClockSkewCorrection) {
+            if (!signingProperties._skipClockSkewSampling && !signingProperties._disableClockSkewCorrection) {
                 const serverTime = errorException.ServerTime ?? getDateHeader(errorException.$response);
                 if (serverTime) {
                     const config = throwSigningPropertyError("config", signingProperties.config);
@@ -76,7 +85,7 @@ export class AwsSdkSigV4Signer {
         };
     }
     successHandler(httpResponse, signingProperties) {
-        if (signingProperties._disableClockSkewCorrection) {
+        if (signingProperties._skipClockSkewSampling || signingProperties._disableClockSkewCorrection) {
             return;
         }
         const dateHeader = getDateHeader(httpResponse);

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/index.js

@@ -3,13 +3,7 @@ export { AwsJson1_0Protocol } from "./json/AwsJson1_0Protocol";
 export { AwsJson1_1Protocol } from "./json/AwsJson1_1Protocol";
 export { AwsJsonRpcProtocol } from "./json/AwsJsonRpcProtocol";
 export { AwsRestJsonProtocol } from "./json/AwsRestJsonProtocol";
-export { JsonCodec } from "./json/codec-v1/JsonCodec";
-export { JsonShapeDeserializer } from "./json/codec-v1/JsonShapeDeserializer";
-export { JsonShapeSerializer } from "./json/codec-v1/JsonShapeSerializer";
-export { JsonCodec2 } from "./json/codec-v2/JsonCodec2";
-export { JsonShapeDeserializer2 } from "./json/codec-v2/JsonShapeDeserializer2";
-export { JsonShapeSerializer2 } from "./json/codec-v2/JsonShapeSerializer2";
-export { parseJsonBody, parseJsonErrorBody, loadRestJsonErrorCode, loadJsonRpcErrorCode } from "./json/parseJsonBody";
+export { JsonCodec, JsonCodec2, JsonShapeDeserializer, JsonShapeDeserializer2, JsonShapeSerializer, JsonShapeSerializer2, loadJsonRpcErrorCode, loadRestJsonErrorCode, parseJsonBody, parseJsonErrorBody, } from "@smithy/core/protocols";
 export { AwsEc2QueryProtocol } from "./query/AwsEc2QueryProtocol";
 export { AwsQueryProtocol } from "./query/AwsQueryProtocol";
 export { QueryShapeSerializer } from "./query/QueryShapeSerializer";

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/AwsJsonRpcProtocol.js

@@ -1,8 +1,6 @@
-import { RpcProtocol } from "@smithy/core/protocols";
+import { JsonCodec2, loadJsonRpcErrorCode, RpcProtocol } from "@smithy/core/protocols";
 import { deref, NormalizedSchema } from "@smithy/core/schema";
 import { ProtocolLib } from "../ProtocolLib";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
-import { loadJsonRpcErrorCode } from "./parseJsonBody";
 export class AwsJsonRpcProtocol extends RpcProtocol {
     serializer;
     deserializer;

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/AwsRestJsonProtocol.js

@@ -1,8 +1,6 @@
-import { HttpBindingProtocol, HttpInterceptingShapeDeserializer, HttpInterceptingShapeSerializer, } from "@smithy/core/protocols";
+import { HttpBindingProtocol, HttpInterceptingShapeDeserializer, HttpInterceptingShapeSerializer, JsonCodec2, loadRestJsonErrorCode, } from "@smithy/core/protocols";
 import { NormalizedSchema } from "@smithy/core/schema";
 import { ProtocolLib } from "../ProtocolLib";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
-import { loadRestJsonErrorCode } from "./parseJsonBody";
 export class AwsRestJsonProtocol extends HttpBindingProtocol {
     serializer;
     deserializer;

package/node_modules/@aws-sdk/core/dist-types/submodules/protocols/index.d.ts

@@ -3,14 +3,8 @@ export { AwsJson1_0Protocol } from "./json/AwsJson1_0Protocol";
 export { AwsJson1_1Protocol } from "./json/AwsJson1_1Protocol";
 export { AwsJsonRpcProtocol } from "./json/AwsJsonRpcProtocol";
 export { AwsRestJsonProtocol } from "./json/AwsRestJsonProtocol";
-export { JsonCodec } from "./json/codec-v1/JsonCodec";
-export type { JsonSettings } from "./json/JsonSettings";
-export { JsonShapeDeserializer } from "./json/codec-v1/JsonShapeDeserializer";
-export { JsonShapeSerializer } from "./json/codec-v1/JsonShapeSerializer";
-export { JsonCodec2 } from "./json/codec-v2/JsonCodec2";
-export { JsonShapeDeserializer2 } from "./json/codec-v2/JsonShapeDeserializer2";
-export { JsonShapeSerializer2 } from "./json/codec-v2/JsonShapeSerializer2";
-export { parseJsonBody, parseJsonErrorBody, loadRestJsonErrorCode, loadJsonRpcErrorCode } from "./json/parseJsonBody";
+export { JsonCodec, JsonCodec2, JsonShapeDeserializer, JsonShapeDeserializer2, JsonShapeSerializer, JsonShapeSerializer2, loadJsonRpcErrorCode, loadRestJsonErrorCode, parseJsonBody, parseJsonErrorBody, } from "@smithy/core/protocols";
+export type { JsonSettings } from "@smithy/core/protocols";
 export { AwsEc2QueryProtocol } from "./query/AwsEc2QueryProtocol";
 export { AwsQueryProtocol } from "./query/AwsQueryProtocol";
 export type { QuerySerializerSettings } from "./query/QuerySerializerSettings";

package/node_modules/@aws-sdk/core/dist-types/submodules/protocols/json/AwsJson1_0Protocol.d.ts

@@ -1,7 +1,6 @@
 import type { TypeRegistry } from "@smithy/core/schema";
+import type { JsonCodec, JsonCodec2 } from "@smithy/core/protocols";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
-import type { JsonCodec } from "./codec-v1/JsonCodec";
-import type { JsonCodec2 } from "./codec-v2/JsonCodec2";
 /**
  * @public
  * @see https://smithy.io/2.0/aws/protocols/aws-json-1_1-protocol.html#differences-between-awsjson1-0-and-awsjson1-1

package/node_modules/@aws-sdk/core/dist-types/submodules/protocols/json/AwsJson1_1Protocol.d.ts

@@ -1,7 +1,6 @@
 import type { TypeRegistry } from "@smithy/core/schema";
+import type { JsonCodec, JsonCodec2 } from "@smithy/core/protocols";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
-import type { JsonCodec } from "./codec-v1/JsonCodec";
-import type { JsonCodec2 } from "./codec-v2/JsonCodec2";
 /**
  * @public
  * @see https://smithy.io/2.0/aws/protocols/aws-json-1_1-protocol.html#differences-between-awsjson1-0-and-awsjson1-1

package/node_modules/@aws-sdk/core/dist-types/submodules/protocols/json/AwsJsonRpcProtocol.d.ts

@@ -1,8 +1,7 @@
-import { RpcProtocol } from "@smithy/core/protocols";
+import { JsonCodec2, RpcProtocol } from "@smithy/core/protocols";
+import type { JsonCodec } from "@smithy/core/protocols";
 import type { TypeRegistry } from "@smithy/core/schema";
 import type { EndpointBearer, HandlerExecutionContext, HttpRequest, HttpResponse, OperationSchema, ResponseMetadata, SerdeFunctions, ShapeDeserializer, ShapeSerializer } from "@smithy/types";
-import type { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 /**
  * @public
  */

package/node_modules/@aws-sdk/core/dist-types/submodules/protocols/json/AwsRestJsonProtocol.d.ts

@@ -1,8 +1,7 @@
-import { HttpBindingProtocol } from "@smithy/core/protocols";
+import { HttpBindingProtocol, JsonCodec2 } from "@smithy/core/protocols";
+import type { JsonCodec } from "@smithy/core/protocols";
 import type { TypeRegistry } from "@smithy/core/schema";
 import type { EndpointBearer, HandlerExecutionContext, HttpRequest, HttpResponse, MetadataBearer, OperationSchema, ResponseMetadata, SerdeFunctions, ShapeDeserializer, ShapeSerializer } from "@smithy/types";
-import type { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 /**
  * @public
  */

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/index.d.ts

@@ -3,19 +3,19 @@ export { AwsJson1_0Protocol } from "./json/AwsJson1_0Protocol";
 export { AwsJson1_1Protocol } from "./json/AwsJson1_1Protocol";
 export { AwsJsonRpcProtocol } from "./json/AwsJsonRpcProtocol";
 export { AwsRestJsonProtocol } from "./json/AwsRestJsonProtocol";
-export { JsonCodec } from "./json/codec-v1/JsonCodec";
-export { JsonSettings } from "./json/JsonSettings";
-export { JsonShapeDeserializer } from "./json/codec-v1/JsonShapeDeserializer";
-export { JsonShapeSerializer } from "./json/codec-v1/JsonShapeSerializer";
-export { JsonCodec2 } from "./json/codec-v2/JsonCodec2";
-export { JsonShapeDeserializer2 } from "./json/codec-v2/JsonShapeDeserializer2";
-export { JsonShapeSerializer2 } from "./json/codec-v2/JsonShapeSerializer2";
 export {
+  JsonCodec,
+  JsonCodec2,
+  JsonShapeDeserializer,
+  JsonShapeDeserializer2,
+  JsonShapeSerializer,
+  JsonShapeSerializer2,
+  loadJsonRpcErrorCode,
+  loadRestJsonErrorCode,
   parseJsonBody,
   parseJsonErrorBody,
-  loadRestJsonErrorCode,
-  loadJsonRpcErrorCode,
-} from "./json/parseJsonBody";
+} from "@smithy/core/protocols";
+export { JsonSettings } from "@smithy/core/protocols";
 export { AwsEc2QueryProtocol } from "./query/AwsEc2QueryProtocol";
 export { AwsQueryProtocol } from "./query/AwsQueryProtocol";
 export { QuerySerializerSettings } from "./query/QuerySerializerSettings";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJson1_0Protocol.d.ts

@@ -1,7 +1,6 @@
 import { TypeRegistry } from "@smithy/core/schema";
+import { JsonCodec, JsonCodec2 } from "@smithy/core/protocols";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
-import { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsJson1_0Protocol extends AwsJsonRpcProtocol {
   constructor({
     defaultNamespace,

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJson1_1Protocol.d.ts

@@ -1,7 +1,6 @@
 import { TypeRegistry } from "@smithy/core/schema";
+import { JsonCodec, JsonCodec2 } from "@smithy/core/protocols";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
-import { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsJson1_1Protocol extends AwsJsonRpcProtocol {
   constructor({
     defaultNamespace,

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJsonRpcProtocol.d.ts

@@ -1,4 +1,5 @@
-import { RpcProtocol } from "@smithy/core/protocols";
+import { JsonCodec2, RpcProtocol } from "@smithy/core/protocols";
+import { JsonCodec } from "@smithy/core/protocols";
 import { TypeRegistry } from "@smithy/core/schema";
 import {
   EndpointBearer,
@@ -11,8 +12,6 @@ import {
   ShapeDeserializer,
   ShapeSerializer,
 } from "@smithy/types";
-import { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare abstract class AwsJsonRpcProtocol extends RpcProtocol {
   protected serializer: ShapeSerializer<string | Uint8Array>;
   protected deserializer: ShapeDeserializer<string | Uint8Array>;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsRestJsonProtocol.d.ts

@@ -1,4 +1,5 @@
-import { HttpBindingProtocol } from "@smithy/core/protocols";
+import { HttpBindingProtocol, JsonCodec2 } from "@smithy/core/protocols";
+import { JsonCodec } from "@smithy/core/protocols";
 import { TypeRegistry } from "@smithy/core/schema";
 import {
   EndpointBearer,
@@ -12,8 +13,6 @@ import {
   ShapeDeserializer,
   ShapeSerializer,
 } from "@smithy/types";
-import { JsonCodec } from "./codec-v1/JsonCodec";
-import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsRestJsonProtocol extends HttpBindingProtocol {
   protected serializer: ShapeSerializer<string | Uint8Array>;
   protected deserializer: ShapeDeserializer<string | Uint8Array>;

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.978.1",
+  "version": "3.978.4",
   "description": "Core functions & classes shared by multiple AWS SDK clients.",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages-internal/core",
   "license": "Apache-2.0",
@@ -127,8 +127,8 @@
     "@aws-sdk/types": "^3.974.6",
     "@aws-sdk/xml-builder": "^3.972.41",
     "@aws/lambda-invoke-store": "^0.3.0",
-    "@smithy/core": "^3.35.0",
-    "@smithy/signature-v4": "^5.7.3",
+    "@smithy/core": "^3.36.0",
+    "@smithy/signature-v4": "^5.7.4",
     "@smithy/types": "^4.19.0",
     "bowser": "^2.11.0",
     "tslib": "^2.6.2"

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.972.72",
+  "version": "3.972.75",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "keywords": [
     "aws",
@@ -43,9 +43,9 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/core": "^3.978.4",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.972.74",
+  "version": "3.972.77",
   "description": "AWS credential provider for containers and HTTP sources",
   "keywords": [
     "aws",
@@ -53,9 +53,9 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/core": "^3.978.4",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/fetch-http-handler": "^5.8.0",
     "@smithy/node-http-handler": "^4.12.1",
     "@smithy/types": "^4.19.0",

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.973.17",
+  "version": "3.973.20",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -45,16 +45,16 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
-    "@aws-sdk/credential-provider-env": "^3.972.72",
-    "@aws-sdk/credential-provider-http": "^3.972.74",
-    "@aws-sdk/credential-provider-login": "^3.972.79",
-    "@aws-sdk/credential-provider-process": "^3.972.72",
-    "@aws-sdk/credential-provider-sso": "^3.973.16",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.78",
-    "@aws-sdk/nested-clients": "^3.997.46",
+    "@aws-sdk/core": "^3.978.4",
+    "@aws-sdk/credential-provider-env": "^3.972.75",
+    "@aws-sdk/credential-provider-http": "^3.972.77",
+    "@aws-sdk/credential-provider-login": "^3.972.82",
+    "@aws-sdk/credential-provider-process": "^3.972.75",
+    "@aws-sdk/credential-provider-sso": "^3.973.19",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.81",
+    "@aws-sdk/nested-clients": "^3.997.49",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/credential-provider-imds": "^4.5.2",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"

package/node_modules/@aws-sdk/credential-provider-login/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-login",
-  "version": "3.972.79",
+  "version": "3.972.82",
   "description": "AWS credential provider that sources credentials from aws login cached tokens",
   "keywords": [
     "aws",
@@ -45,10 +45,10 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
-    "@aws-sdk/nested-clients": "^3.997.46",
+    "@aws-sdk/core": "^3.978.4",
+    "@aws-sdk/nested-clients": "^3.997.49",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/credential-provider-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-node",
-  "version": "3.972.84",
+  "version": "3.972.87",
   "description": "AWS credential provider that sources credentials from a Node.JS environment. ",
   "keywords": [
     "aws",
@@ -45,14 +45,14 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/credential-provider-env": "^3.972.72",
-    "@aws-sdk/credential-provider-http": "^3.972.74",
-    "@aws-sdk/credential-provider-ini": "^3.973.17",
-    "@aws-sdk/credential-provider-process": "^3.972.72",
-    "@aws-sdk/credential-provider-sso": "^3.973.16",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.78",
+    "@aws-sdk/credential-provider-env": "^3.972.75",
+    "@aws-sdk/credential-provider-http": "^3.972.77",
+    "@aws-sdk/credential-provider-ini": "^3.973.20",
+    "@aws-sdk/credential-provider-process": "^3.972.75",
+    "@aws-sdk/credential-provider-sso": "^3.973.19",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.81",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/credential-provider-imds": "^4.5.2",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"

package/node_modules/@aws-sdk/credential-provider-process/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-process",
-  "version": "3.972.72",
+  "version": "3.972.75",
   "description": "AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -43,9 +43,9 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/core": "^3.978.4",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/credential-provider-sso/node_modules/@aws-sdk/token-providers/dist-cjs/index.js

@@ -62,6 +62,7 @@ const writeSSOTokenToFile = (id, ssoToken) => {
 };
 
 const lastRefreshAttemptTimes = new Map();
+const inFlightRefreshes = new Map();
 const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     init.logger?.debug("@aws-sdk/token-providers - fromSso");
     const profiles = await parseKnownFiles(init);
@@ -76,6 +77,10 @@ const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
         throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);
     }
     const ssoSessionName = profile["sso_session"];
+    const inFlightRefresh = inFlightRefreshes.get(ssoSessionName);
+    if (inFlightRefresh) {
+        return await inFlightRefresh;
+    }
     const ssoSessions = await loadSsoSessionData(init);
     const ssoSession = ssoSessions[ssoSessionName];
     if (!ssoSession) {
@@ -105,6 +110,10 @@ const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
         return existingToken;
     }
+    const inFlightRefreshAfterReadingToken = inFlightRefreshes.get(ssoSessionName);
+    if (inFlightRefreshAfterReadingToken) {
+        return await inFlightRefreshAfterReadingToken;
+    }
     const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;
     if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {
         validateTokenExpiry(existingToken);
@@ -113,30 +122,39 @@ const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     validateTokenKey("clientId", ssoToken.clientId, true);
     validateTokenKey("clientSecret", ssoToken.clientSecret, true);
     validateTokenKey("refreshToken", ssoToken.refreshToken, true);
-    try {
-        lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
-        const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
-        validateTokenKey("accessToken", newSsoOidcToken.accessToken);
-        validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
-        const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+    const refresh = (async () => {
         try {
-            await writeSSOTokenToFile(ssoSessionName, {
-                ...ssoToken,
-                accessToken: newSsoOidcToken.accessToken,
-                expiresAt: newTokenExpiration.toISOString(),
-                refreshToken: newSsoOidcToken.refreshToken,
-            });
+            lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
+            const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
+            validateTokenKey("accessToken", newSsoOidcToken.accessToken);
+            validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
+            const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+            try {
+                await writeSSOTokenToFile(ssoSessionName, {
+                    ...ssoToken,
+                    accessToken: newSsoOidcToken.accessToken,
+                    expiresAt: newTokenExpiration.toISOString(),
+                    refreshToken: newSsoOidcToken.refreshToken,
+                });
+            }
+            catch (error) {
+            }
+            return {
+                token: newSsoOidcToken.accessToken,
+                expiration: newTokenExpiration,
+            };
         }
         catch (error) {
+            validateTokenExpiry(existingToken);
+            return existingToken;
         }
-        return {
-            token: newSsoOidcToken.accessToken,
-            expiration: newTokenExpiration,
-        };
+    })();
+    inFlightRefreshes.set(ssoSessionName, refresh);
+    try {
+        return await refresh;
     }
-    catch (error) {
-        validateTokenExpiry(existingToken);
-        return existingToken;
+    finally {
+        inFlightRefreshes.delete(ssoSessionName);
     }
 };
 

package/node_modules/@aws-sdk/credential-provider-sso/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js

@@ -5,6 +5,7 @@ import { validateTokenExpiry } from "./validateTokenExpiry";
 import { validateTokenKey } from "./validateTokenKey";
 import { writeSSOTokenToFile } from "./writeSSOTokenToFile";
 const lastRefreshAttemptTimes = new Map();
+const inFlightRefreshes = new Map();
 export const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     init.logger?.debug("@aws-sdk/token-providers - fromSso");
     const profiles = await parseKnownFiles(init);
@@ -19,6 +20,10 @@ export const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
         throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);
     }
     const ssoSessionName = profile["sso_session"];
+    const inFlightRefresh = inFlightRefreshes.get(ssoSessionName);
+    if (inFlightRefresh) {
+        return await inFlightRefresh;
+    }
     const ssoSessions = await loadSsoSessionData(init);
     const ssoSession = ssoSessions[ssoSessionName];
     if (!ssoSession) {
@@ -48,6 +53,10 @@ export const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
         return existingToken;
     }
+    const inFlightRefreshAfterReadingToken = inFlightRefreshes.get(ssoSessionName);
+    if (inFlightRefreshAfterReadingToken) {
+        return await inFlightRefreshAfterReadingToken;
+    }
     const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;
     if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {
         validateTokenExpiry(existingToken);
@@ -56,29 +65,38 @@ export const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
     validateTokenKey("clientId", ssoToken.clientId, true);
     validateTokenKey("clientSecret", ssoToken.clientSecret, true);
     validateTokenKey("refreshToken", ssoToken.refreshToken, true);
-    try {
-        lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
-        const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
-        validateTokenKey("accessToken", newSsoOidcToken.accessToken);
-        validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
-        const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+    const refresh = (async () => {
         try {
-            await writeSSOTokenToFile(ssoSessionName, {
-                ...ssoToken,
-                accessToken: newSsoOidcToken.accessToken,
-                expiresAt: newTokenExpiration.toISOString(),
-                refreshToken: newSsoOidcToken.refreshToken,
-            });
+            lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
+            const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
+            validateTokenKey("accessToken", newSsoOidcToken.accessToken);
+            validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
+            const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+            try {
+                await writeSSOTokenToFile(ssoSessionName, {
+                    ...ssoToken,
+                    accessToken: newSsoOidcToken.accessToken,
+                    expiresAt: newTokenExpiration.toISOString(),
+                    refreshToken: newSsoOidcToken.refreshToken,
+                });
+            }
+            catch (error) {
+            }
+            return {
+                token: newSsoOidcToken.accessToken,
+                expiration: newTokenExpiration,
+            };
         }
         catch (error) {
+            validateTokenExpiry(existingToken);
+            return existingToken;
         }
-        return {
-            token: newSsoOidcToken.accessToken,
-            expiration: newTokenExpiration,
-        };
+    })();
+    inFlightRefreshes.set(ssoSessionName, refresh);
+    try {
+        return await refresh;
     }
-    catch (error) {
-        validateTokenExpiry(existingToken);
-        return existingToken;
+    finally {
+        inFlightRefreshes.delete(ssoSessionName);
     }
 };

package/node_modules/@aws-sdk/credential-provider-sso/node_modules/@aws-sdk/token-providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/token-providers",
-  "version": "3.1138.0",
+  "version": "3.1153.0",
   "description": "A collection of token providers",
   "keywords": [
     "aws",
@@ -48,10 +48,10 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
-    "@aws-sdk/nested-clients": "^3.997.46",
+    "@aws-sdk/core": "^3.978.4",
+    "@aws-sdk/nested-clients": "^3.997.49",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/credential-provider-sso/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-sso",
-  "version": "3.973.16",
+  "version": "3.973.19",
   "description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
   "keywords": [
     "aws",
@@ -45,11 +45,11 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.1",
-    "@aws-sdk/nested-clients": "^3.997.46",
-    "@aws-sdk/token-providers": "3.1138.0",
+    "@aws-sdk/core": "^3.978.4",
+    "@aws-sdk/nested-clients": "^3.997.49",
+    "@aws-sdk/token-providers": "3.1153.0",
     "@aws-sdk/types": "^3.974.6",
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.36.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },