@semiont/graph 0.5.27 → 0.5.29
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/{chunk-GPJBZ6EG.js → chunk-2FPUYYXX.js} +9 -1
- package/dist/chunk-2FPUYYXX.js.map +1 -0
- package/dist/{chunk-Y62BMZ25.js → chunk-52FQCX5M.js} +18 -6
- package/dist/chunk-52FQCX5M.js.map +1 -0
- package/dist/{chunk-NYHKKGBV.js → chunk-MO34K2LQ.js} +32 -19
- package/dist/chunk-MO34K2LQ.js.map +1 -0
- package/dist/{chunk-7BYJ5YHD.js → chunk-SFMOIR7Y.js} +10 -10
- package/dist/{chunk-7BYJ5YHD.js.map → chunk-SFMOIR7Y.js.map} +1 -1
- package/dist/{chunk-YYVVWLB2.js → chunk-TKWHSSPF.js} +35 -16
- package/dist/chunk-TKWHSSPF.js.map +1 -0
- package/dist/{chunk-RRZDPP7Z.js → chunk-X77CPJUJ.js} +2 -2
- package/dist/{chunk-UKT6IXAM.js → chunk-XTHXGGIJ.js} +3 -3
- package/dist/{chunk-RBRHTAJN.js → chunk-ZPM4D2XD.js} +14 -5
- package/dist/chunk-ZPM4D2XD.js.map +1 -0
- package/dist/{dist-es-7CR3IHJD.js → dist-es-DYVW35LB.js} +13 -13
- package/dist/{dist-es-2ZN6SLSG.js → dist-es-F44WH2AS.js} +25 -25
- package/dist/dist-es-F44WH2AS.js.map +1 -0
- package/dist/{dist-es-M72B762W.js → dist-es-FTEZAK7G.js} +5 -5
- package/dist/{dist-es-NGG7JHEH.js → dist-es-FV5JDCUX.js} +4 -4
- package/dist/{dist-es-ILOZ33QI.js → dist-es-ISXX5KU4.js} +5 -5
- package/dist/{dist-es-V3UQXKNJ.js → dist-es-RTE7BVXX.js} +5 -5
- package/dist/{dist-es-LN4LZWKV.js → dist-es-V7467ELV.js} +3 -3
- package/dist/{dist-es-RZ3HNVJG.js → dist-es-WEW6PTSK.js} +15 -11
- package/dist/dist-es-WEW6PTSK.js.map +1 -0
- package/dist/{dist-es-J63OY2RR.js → dist-es-Z4NFJDXO.js} +5 -5
- package/dist/{event-streams-2HBIXE6X.js → event-streams-UU2VASBU.js} +36 -27
- package/dist/event-streams-UU2VASBU.js.map +1 -0
- package/dist/index.d.ts +3 -6
- package/dist/index.js +250 -359
- package/dist/index.js.map +1 -1
- package/dist/{loadSso-JTXSMWFI.js → loadSso-2Y2JSLM2.js} +8 -8
- package/dist/{signin-BM6IHIKX.js → signin-3VN2CNSY.js} +8 -8
- package/dist/{sso-oidc-IBGZ52NP.js → sso-oidc-76COL3D2.js} +8 -8
- package/dist/{sts-44HZWQDH.js → sts-BLFDXC4J.js} +8 -8
- package/package.json +10 -10
- package/dist/chunk-GPJBZ6EG.js.map +0 -1
- package/dist/chunk-NYHKKGBV.js.map +0 -1
- package/dist/chunk-RBRHTAJN.js.map +0 -1
- package/dist/chunk-Y62BMZ25.js.map +0 -1
- package/dist/chunk-YYVVWLB2.js.map +0 -1
- package/dist/dist-es-2ZN6SLSG.js.map +0 -1
- package/dist/dist-es-RZ3HNVJG.js.map +0 -1
- package/dist/event-streams-2HBIXE6X.js.map +0 -1
- /package/dist/{chunk-RRZDPP7Z.js.map → chunk-X77CPJUJ.js.map} +0 -0
- /package/dist/{chunk-UKT6IXAM.js.map → chunk-XTHXGGIJ.js.map} +0 -0
- /package/dist/{dist-es-7CR3IHJD.js.map → dist-es-DYVW35LB.js.map} +0 -0
- /package/dist/{dist-es-M72B762W.js.map → dist-es-FTEZAK7G.js.map} +0 -0
- /package/dist/{dist-es-NGG7JHEH.js.map → dist-es-FV5JDCUX.js.map} +0 -0
- /package/dist/{dist-es-ILOZ33QI.js.map → dist-es-ISXX5KU4.js.map} +0 -0
- /package/dist/{dist-es-V3UQXKNJ.js.map → dist-es-RTE7BVXX.js.map} +0 -0
- /package/dist/{dist-es-LN4LZWKV.js.map → dist-es-V7467ELV.js.map} +0 -0
- /package/dist/{dist-es-J63OY2RR.js.map → dist-es-Z4NFJDXO.js.map} +0 -0
- /package/dist/{loadSso-JTXSMWFI.js.map → loadSso-2Y2JSLM2.js.map} +0 -0
- /package/dist/{signin-BM6IHIKX.js.map → signin-3VN2CNSY.js.map} +0 -0
- /package/dist/{sso-oidc-IBGZ52NP.js.map → sso-oidc-76COL3D2.js.map} +0 -0
- /package/dist/{sts-44HZWQDH.js.map → sts-BLFDXC4J.js.map} +0 -0
|
@@ -1,17 +1,17 @@
|
|
|
1
1
|
import {
|
|
2
2
|
NodeHttpHandler
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-52FQCX5M.js";
|
|
4
4
|
import {
|
|
5
5
|
setCredentialFeature
|
|
6
|
-
} from "./chunk-
|
|
6
|
+
} from "./chunk-ZPM4D2XD.js";
|
|
7
7
|
import {
|
|
8
8
|
CredentialsProviderError
|
|
9
|
-
} from "./chunk-
|
|
9
|
+
} from "./chunk-TKWHSSPF.js";
|
|
10
10
|
import {
|
|
11
11
|
HttpRequest,
|
|
12
12
|
parseRfc3339DateTime,
|
|
13
13
|
sdkStreamMixin
|
|
14
|
-
} from "./chunk-
|
|
14
|
+
} from "./chunk-2FPUYYXX.js";
|
|
15
15
|
|
|
16
16
|
// ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
|
|
17
17
|
import fs from "fs/promises";
|
|
@@ -172,4 +172,4 @@ var validateToken = (token) => {
|
|
|
172
172
|
export {
|
|
173
173
|
fromHttp
|
|
174
174
|
};
|
|
175
|
-
//# sourceMappingURL=dist-es-
|
|
175
|
+
//# sourceMappingURL=dist-es-FTEZAK7G.js.map
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
import {
|
|
2
2
|
setCredentialFeature
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-ZPM4D2XD.js";
|
|
4
4
|
import {
|
|
5
5
|
CredentialsProviderError,
|
|
6
6
|
externalDataInterceptor,
|
|
7
7
|
getProfileName,
|
|
8
8
|
parseKnownFiles
|
|
9
|
-
} from "./chunk-
|
|
10
|
-
import "./chunk-
|
|
9
|
+
} from "./chunk-TKWHSSPF.js";
|
|
10
|
+
import "./chunk-2FPUYYXX.js";
|
|
11
11
|
|
|
12
12
|
// ../../node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
|
|
13
13
|
import { exec } from "child_process";
|
|
@@ -84,4 +84,4 @@ var fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
|
84
84
|
export {
|
|
85
85
|
fromProcess
|
|
86
86
|
};
|
|
87
|
-
//# sourceMappingURL=dist-es-
|
|
87
|
+
//# sourceMappingURL=dist-es-FV5JDCUX.js.map
|
|
@@ -6,10 +6,10 @@ import {
|
|
|
6
6
|
ENV_SECRET,
|
|
7
7
|
ENV_SESSION,
|
|
8
8
|
fromEnv
|
|
9
|
-
} from "./chunk-
|
|
10
|
-
import "./chunk-
|
|
11
|
-
import "./chunk-
|
|
12
|
-
import "./chunk-
|
|
9
|
+
} from "./chunk-XTHXGGIJ.js";
|
|
10
|
+
import "./chunk-ZPM4D2XD.js";
|
|
11
|
+
import "./chunk-TKWHSSPF.js";
|
|
12
|
+
import "./chunk-2FPUYYXX.js";
|
|
13
13
|
export {
|
|
14
14
|
ENV_ACCOUNT_ID,
|
|
15
15
|
ENV_CREDENTIAL_SCOPE,
|
|
@@ -19,4 +19,4 @@ export {
|
|
|
19
19
|
ENV_SESSION,
|
|
20
20
|
fromEnv
|
|
21
21
|
};
|
|
22
|
-
//# sourceMappingURL=dist-es-
|
|
22
|
+
//# sourceMappingURL=dist-es-ISXX5KU4.js.map
|
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
import {
|
|
2
2
|
setCredentialFeature
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-ZPM4D2XD.js";
|
|
4
4
|
import {
|
|
5
5
|
CredentialsProviderError,
|
|
6
6
|
getProfileName,
|
|
7
7
|
parseKnownFiles
|
|
8
|
-
} from "./chunk-
|
|
8
|
+
} from "./chunk-TKWHSSPF.js";
|
|
9
9
|
import {
|
|
10
10
|
HttpRequest
|
|
11
|
-
} from "./chunk-
|
|
11
|
+
} from "./chunk-2FPUYYXX.js";
|
|
12
12
|
|
|
13
13
|
// ../../node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
|
|
14
14
|
import { createHash, createPrivateKey, createPublicKey, sign } from "crypto";
|
|
@@ -64,7 +64,7 @@ var LoginCredentialsFetcher = class _LoginCredentialsFetcher {
|
|
|
64
64
|
if (freshExpiry - Date.now() > _LoginCredentialsFetcher.REFRESH_THRESHOLD) {
|
|
65
65
|
return this.toCredentials(freshToken.accessToken);
|
|
66
66
|
}
|
|
67
|
-
const { SigninClient, CreateOAuth2TokenCommand } = await import("./signin-
|
|
67
|
+
const { SigninClient, CreateOAuth2TokenCommand } = await import("./signin-3VN2CNSY.js");
|
|
68
68
|
const { logger, userAgentAppId } = this.callerClientConfig ?? {};
|
|
69
69
|
const isH2 = (requestHandler2) => {
|
|
70
70
|
return requestHandler2?.metadata?.handlerProtocol === "h2";
|
|
@@ -291,4 +291,4 @@ var fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
|
|
|
291
291
|
export {
|
|
292
292
|
fromLoginCredentials
|
|
293
293
|
};
|
|
294
|
-
//# sourceMappingURL=dist-es-
|
|
294
|
+
//# sourceMappingURL=dist-es-RTE7BVXX.js.map
|
|
@@ -2,10 +2,10 @@ import {
|
|
|
2
2
|
CredentialsProviderError,
|
|
3
3
|
ProviderError,
|
|
4
4
|
loadConfig
|
|
5
|
-
} from "./chunk-
|
|
5
|
+
} from "./chunk-TKWHSSPF.js";
|
|
6
6
|
import {
|
|
7
7
|
parseUrl
|
|
8
|
-
} from "./chunk-
|
|
8
|
+
} from "./chunk-2FPUYYXX.js";
|
|
9
9
|
|
|
10
10
|
// ../../node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
|
|
11
11
|
var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string";
|
|
@@ -374,4 +374,4 @@ export {
|
|
|
374
374
|
httpRequest,
|
|
375
375
|
providerConfigFromInit
|
|
376
376
|
};
|
|
377
|
-
//# sourceMappingURL=dist-es-
|
|
377
|
+
//# sourceMappingURL=dist-es-V7467ELV.js.map
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import {
|
|
2
2
|
setCredentialFeature
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-ZPM4D2XD.js";
|
|
4
4
|
import {
|
|
5
5
|
CredentialsProviderError,
|
|
6
6
|
TokenProviderError,
|
|
@@ -9,8 +9,8 @@ import {
|
|
|
9
9
|
getSSOTokenFromFile,
|
|
10
10
|
loadSsoSessionData,
|
|
11
11
|
parseKnownFiles
|
|
12
|
-
} from "./chunk-
|
|
13
|
-
import "./chunk-
|
|
12
|
+
} from "./chunk-TKWHSSPF.js";
|
|
13
|
+
import "./chunk-2FPUYYXX.js";
|
|
14
14
|
|
|
15
15
|
// ../../node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
|
|
16
16
|
var isSsoProfile = (arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
|
|
@@ -21,7 +21,7 @@ var REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the
|
|
|
21
21
|
|
|
22
22
|
// ../../node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
|
|
23
23
|
var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
|
|
24
|
-
const { SSOOIDCClient } = await import("./sso-oidc-
|
|
24
|
+
const { SSOOIDCClient } = await import("./sso-oidc-76COL3D2.js");
|
|
25
25
|
const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];
|
|
26
26
|
const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {
|
|
27
27
|
region: ssoRegion ?? init.clientConfig?.region,
|
|
@@ -33,7 +33,7 @@ var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
|
|
|
33
33
|
|
|
34
34
|
// ../../node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
|
|
35
35
|
var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {
|
|
36
|
-
const { CreateTokenCommand } = await import("./sso-oidc-
|
|
36
|
+
const { CreateTokenCommand } = await import("./sso-oidc-76COL3D2.js");
|
|
37
37
|
const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);
|
|
38
38
|
return ssoOidcClient.send(new CreateTokenCommand({
|
|
39
39
|
clientId: ssoToken.clientId,
|
|
@@ -67,7 +67,7 @@ var writeSSOTokenToFile = (id, ssoToken) => {
|
|
|
67
67
|
};
|
|
68
68
|
|
|
69
69
|
// ../../node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
|
|
70
|
-
var
|
|
70
|
+
var lastRefreshAttemptTimes = /* @__PURE__ */ new Map();
|
|
71
71
|
var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
72
72
|
init.logger?.debug("@aws-sdk/token-providers - fromSso");
|
|
73
73
|
const profiles = await parseKnownFiles(init);
|
|
@@ -102,11 +102,15 @@ var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
|
102
102
|
validateTokenKey("accessToken", ssoToken.accessToken);
|
|
103
103
|
validateTokenKey("expiresAt", ssoToken.expiresAt);
|
|
104
104
|
const { accessToken, expiresAt } = ssoToken;
|
|
105
|
-
const existingToken = {
|
|
105
|
+
const existingToken = {
|
|
106
|
+
token: accessToken,
|
|
107
|
+
expiration: new Date(expiresAt)
|
|
108
|
+
};
|
|
106
109
|
if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
|
|
107
110
|
return existingToken;
|
|
108
111
|
}
|
|
109
|
-
|
|
112
|
+
const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;
|
|
113
|
+
if (Date.now() - lastRefreshAttemptTime < 30 * 1e3) {
|
|
110
114
|
validateTokenExpiry(existingToken);
|
|
111
115
|
return existingToken;
|
|
112
116
|
}
|
|
@@ -114,7 +118,7 @@ var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
|
|
|
114
118
|
validateTokenKey("clientSecret", ssoToken.clientSecret, true);
|
|
115
119
|
validateTokenKey("refreshToken", ssoToken.refreshToken, true);
|
|
116
120
|
try {
|
|
117
|
-
|
|
121
|
+
lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
|
|
118
122
|
const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
|
|
119
123
|
validateTokenKey("accessToken", newSsoOidcToken.accessToken);
|
|
120
124
|
validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
|
|
@@ -181,7 +185,7 @@ var resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoR
|
|
|
181
185
|
});
|
|
182
186
|
}
|
|
183
187
|
const { accessToken } = token;
|
|
184
|
-
const { SSOClient, GetRoleCredentialsCommand } = await import("./loadSso-
|
|
188
|
+
const { SSOClient, GetRoleCredentialsCommand } = await import("./loadSso-2Y2JSLM2.js");
|
|
185
189
|
const sso = ssoClient || new SSOClient(Object.assign({}, clientConfig ?? {}, {
|
|
186
190
|
logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,
|
|
187
191
|
region: clientConfig?.region ?? ssoRegion,
|
|
@@ -314,4 +318,4 @@ export {
|
|
|
314
318
|
isSsoProfile,
|
|
315
319
|
validateSsoProfile
|
|
316
320
|
};
|
|
317
|
-
//# sourceMappingURL=dist-es-
|
|
321
|
+
//# sourceMappingURL=dist-es-WEW6PTSK.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/constants.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js","../../../node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/fromSso.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js"],"sourcesContent":["export const isSsoProfile = (arg) => arg &&\n (typeof arg.sso_start_url === \"string\" ||\n typeof arg.sso_account_id === \"string\" ||\n typeof arg.sso_session === \"string\" ||\n typeof arg.sso_region === \"string\" ||\n typeof arg.sso_role_name === \"string\");\n","export const EXPIRE_WINDOW_MS = 5 * 60 * 1000;\nexport const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;\n","export const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {\n const { SSOOIDCClient } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];\n const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {\n region: ssoRegion ?? init.clientConfig?.region,\n logger: coalesce(\"logger\"),\n userAgentAppId: coalesce(\"userAgentAppId\"),\n }));\n return ssoOidcClient;\n};\n","import { getSsoOidcClient } from \"./getSsoOidcClient\";\nexport const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {\n const { CreateTokenCommand } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);\n return ssoOidcClient.send(new CreateTokenCommand({\n clientId: ssoToken.clientId,\n clientSecret: ssoToken.clientSecret,\n refreshToken: ssoToken.refreshToken,\n grantType: \"refresh_token\",\n }));\n};\n","import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenExpiry = (token) => {\n if (token.expiration && token.expiration.getTime() < Date.now()) {\n throw new TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenKey = (key, value, forRefresh = false) => {\n if (typeof value === \"undefined\") {\n throw new TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? \". Cannot refresh\" : \"\"}. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { getSSOTokenFilepath } from \"@smithy/core/config\";\nimport { promises as fsPromises } from \"node:fs\";\nconst { writeFile } = fsPromises;\nexport const writeSSOTokenToFile = (id, ssoToken) => {\n const tokenFilepath = getSSOTokenFilepath(id);\n const tokenString = JSON.stringify(ssoToken, null, 2);\n return writeFile(tokenFilepath, tokenString);\n};\n","import { getProfileName, getSSOTokenFromFile, loadSsoSessionData, parseKnownFiles, TokenProviderError, } from \"@smithy/core/config\";\nimport { EXPIRE_WINDOW_MS, REFRESH_MESSAGE } from \"./constants\";\nimport { getNewSsoOidcToken } from \"./getNewSsoOidcToken\";\nimport { validateTokenExpiry } from \"./validateTokenExpiry\";\nimport { validateTokenKey } from \"./validateTokenKey\";\nimport { writeSSOTokenToFile } from \"./writeSSOTokenToFile\";\nconst lastRefreshAttemptTimes = new Map();\nexport const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/token-providers - fromSso\");\n const profiles = await parseKnownFiles(init);\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile) {\n throw new TokenProviderError(`Profile '${profileName}' could not be found in shared credentials file.`, false);\n }\n else if (!profile[\"sso_session\"]) {\n throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);\n }\n const ssoSessionName = profile[\"sso_session\"];\n const ssoSessions = await loadSsoSessionData(init);\n const ssoSession = ssoSessions[ssoSessionName];\n if (!ssoSession) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' could not be found in shared credentials file.`, false);\n }\n for (const ssoSessionRequiredKey of [\"sso_start_url\", \"sso_region\"]) {\n if (!ssoSession[ssoSessionRequiredKey]) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' is missing required property '${ssoSessionRequiredKey}'.`, false);\n }\n }\n const ssoStartUrl = ssoSession[\"sso_start_url\"];\n const ssoRegion = ssoSession[\"sso_region\"];\n let ssoToken;\n try {\n ssoToken = await getSSOTokenFromFile(ssoSessionName);\n }\n catch (e) {\n throw new TokenProviderError(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`, false);\n }\n validateTokenKey(\"accessToken\", ssoToken.accessToken);\n validateTokenKey(\"expiresAt\", ssoToken.expiresAt);\n const { accessToken, expiresAt } = ssoToken;\n const existingToken = {\n token: accessToken,\n expiration: new Date(expiresAt),\n };\n if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {\n return existingToken;\n }\n const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;\n if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n validateTokenKey(\"clientId\", ssoToken.clientId, true);\n validateTokenKey(\"clientSecret\", ssoToken.clientSecret, true);\n validateTokenKey(\"refreshToken\", ssoToken.refreshToken, true);\n try {\n lastRefreshAttemptTimes.set(ssoSessionName, Date.now());\n const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);\n validateTokenKey(\"accessToken\", newSsoOidcToken.accessToken);\n validateTokenKey(\"expiresIn\", newSsoOidcToken.expiresIn);\n const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);\n try {\n await writeSSOTokenToFile(ssoSessionName, {\n ...ssoToken,\n accessToken: newSsoOidcToken.accessToken,\n expiresAt: newTokenExpiration.toISOString(),\n refreshToken: newSsoOidcToken.refreshToken,\n });\n }\n catch (error) {\n }\n return {\n token: newSsoOidcToken.accessToken,\n expiration: newTokenExpiration,\n };\n }\n catch (error) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n};\n","import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { fromSso as getSsoTokenProvider } from \"@aws-sdk/token-providers\";\nimport { CredentialsProviderError, getSSOTokenFromFile } from \"@smithy/core/config\";\nconst SHOULD_FAIL_CREDENTIAL_CHAIN = false;\nexport const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, }) => {\n let token;\n const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;\n if (ssoSession) {\n try {\n const _token = await getSsoTokenProvider({\n profile,\n filepath,\n configFilepath,\n ignoreCache,\n clientConfig,\n parentClientConfig,\n logger,\n })({ callerClientConfig });\n token = {\n accessToken: _token.token,\n expiresAt: new Date(_token.expiration).toISOString(),\n };\n }\n catch (e) {\n throw new CredentialsProviderError(e.message, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n else {\n try {\n token = await getSSOTokenFromFile(ssoStartUrl);\n }\n catch (e) {\n throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {\n throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { accessToken } = token;\n const { SSOClient, GetRoleCredentialsCommand } = await import(\"./loadSso.js\");\n const sso = ssoClient ||\n new SSOClient(Object.assign({}, clientConfig ?? {}, {\n logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,\n region: clientConfig?.region ?? ssoRegion,\n userAgentAppId: clientConfig?.userAgentAppId ?? callerClientConfig?.userAgentAppId ?? parentClientConfig?.userAgentAppId,\n }));\n let ssoResp;\n try {\n ssoResp = await sso.send(new GetRoleCredentialsCommand({\n accountId: ssoAccountId,\n roleName: ssoRoleName,\n accessToken,\n }));\n }\n catch (e) {\n throw new CredentialsProviderError(e, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;\n if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {\n throw new CredentialsProviderError(\"SSO returns an invalid temporary credential.\", {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const credentials = {\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiration: new Date(expiration),\n ...(credentialScope && { credentialScope }),\n ...(accountId && { accountId }),\n };\n if (ssoSession) {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO\", \"s\");\n }\n else {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO_LEGACY\", \"u\");\n }\n return credentials;\n};\n","import { CredentialsProviderError } from \"@smithy/core/config\";\nexport const validateSsoProfile = (profile, logger) => {\n const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n }\n return profile;\n};\n","import { CredentialsProviderError, getProfileName, loadSsoSessionData, parseKnownFiles } from \"@smithy/core/config\";\nimport { isSsoProfile } from \"./isSsoProfile\";\nimport { resolveSSOCredentials } from \"./resolveSSOCredentials\";\nimport { validateSsoProfile } from \"./validateSsoProfile\";\nexport const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-sso - fromSSO\");\n const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;\n const { ssoClient } = init;\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {\n const profiles = await parseKnownFiles(init);\n const profile = profiles[profileName];\n if (!profile) {\n throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });\n }\n if (!isSsoProfile(profile)) {\n throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {\n logger: init.logger,\n });\n }\n if (profile?.sso_session) {\n const ssoSessions = await loadSsoSessionData(init);\n const session = ssoSessions[profile.sso_session];\n const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;\n if (ssoRegion && ssoRegion !== session.sso_region) {\n throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {\n throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n profile.sso_region = session.sso_region;\n profile.sso_start_url = session.sso_start_url;\n }\n const { sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session } = validateSsoProfile(profile, init.logger);\n return resolveSSOCredentials({\n ssoStartUrl: sso_start_url,\n ssoSession: sso_session,\n ssoAccountId: sso_account_id,\n ssoRegion: sso_region,\n ssoRoleName: sso_role_name,\n ssoClient: ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {\n throw new CredentialsProviderError(\"Incomplete configuration. The fromSSO() argument hash must include \" +\n '\"ssoStartUrl\", \"ssoAccountId\", \"ssoRegion\", \"ssoRoleName\"', { tryNextLink: false, logger: init.logger });\n }\n else {\n return resolveSSOCredentials({\n ssoStartUrl,\n ssoSession,\n ssoAccountId,\n ssoRegion,\n ssoRoleName,\n ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n};\n"],"mappings":";;;;;;;;;;;;;;;AAAO,IAAM,eAAe,CAAC,QAAQ,QAChC,OAAO,IAAI,kBAAkB,YAC1B,OAAO,IAAI,mBAAmB,YAC9B,OAAO,IAAI,gBAAgB,YAC3B,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,kBAAkB;;;ACL9B,IAAM,mBAAmB,IAAI,KAAK;AAClC,IAAM,kBAAkB;;;ACDxB,IAAM,mBAAmB,OAAO,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAChF,QAAM,EAAE,cAAc,IAAI,MAAM,OAAO,wBAAkC;AACzE,QAAM,WAAW,CAAC,SAAS,KAAK,eAAe,IAAI,KAAK,KAAK,qBAAqB,IAAI,KAAK,qBAAqB,IAAI;AACpH,QAAM,gBAAgB,IAAI,cAAc,OAAO,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;AAAA,IAC/E,QAAQ,aAAa,KAAK,cAAc;AAAA,IACxC,QAAQ,SAAS,QAAQ;AAAA,IACzB,gBAAgB,SAAS,gBAAgB;AAAA,EAC7C,CAAC,CAAC;AACF,SAAO;AACX;;;ACRO,IAAM,qBAAqB,OAAO,UAAU,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAC5F,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,wBAAkC;AAC9E,QAAM,gBAAgB,MAAM,iBAAiB,WAAW,MAAM,kBAAkB;AAChF,SAAO,cAAc,KAAK,IAAI,mBAAmB;AAAA,IAC7C,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,WAAW;AAAA,EACf,CAAC,CAAC;AACN;;;ACRO,IAAM,sBAAsB,CAAC,UAAU;AAC1C,MAAI,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,GAAG;AAC7D,UAAM,IAAI,mBAAmB,qBAAqB,eAAe,IAAI,KAAK;AAAA,EAC9E;AACJ;;;ACJO,IAAM,mBAAmB,CAAC,KAAK,OAAO,aAAa,UAAU;AAChE,MAAI,OAAO,UAAU,aAAa;AAC9B,UAAM,IAAI,mBAAmB,0BAA0B,GAAG,iBAAiB,aAAa,qBAAqB,EAAE,KAAK,eAAe,IAAI,KAAK;AAAA,EAChJ;AACJ;;;ACLA,SAAS,YAAY,kBAAkB;AACvC,IAAM,EAAE,UAAU,IAAI;AACf,IAAM,sBAAsB,CAAC,IAAI,aAAa;AACjD,QAAM,gBAAgB,oBAAoB,EAAE;AAC5C,QAAM,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC;AACpD,SAAO,UAAU,eAAe,WAAW;AAC/C;;;ACDA,IAAM,0BAA0B,oBAAI,IAAI;AACjC,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AACzE,OAAK,QAAQ,MAAM,oCAAoC;AACvD,QAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,QAAM,cAAc,eAAe;AAAA,IAC/B,SAAS,KAAK,WAAW,oBAAoB;AAAA,EACjD,CAAC;AACD,QAAM,UAAU,SAAS,WAAW;AACpC,MAAI,CAAC,SAAS;AACV,UAAM,IAAI,mBAAmB,YAAY,WAAW,oDAAoD,KAAK;AAAA,EACjH,WACS,CAAC,QAAQ,aAAa,GAAG;AAC9B,UAAM,IAAI,mBAAmB,YAAY,WAAW,+CAA+C;AAAA,EACvG;AACA,QAAM,iBAAiB,QAAQ,aAAa;AAC5C,QAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,QAAM,aAAa,YAAY,cAAc;AAC7C,MAAI,CAAC,YAAY;AACb,UAAM,IAAI,mBAAmB,gBAAgB,cAAc,oDAAoD,KAAK;AAAA,EACxH;AACA,aAAW,yBAAyB,CAAC,iBAAiB,YAAY,GAAG;AACjE,QAAI,CAAC,WAAW,qBAAqB,GAAG;AACpC,YAAM,IAAI,mBAAmB,gBAAgB,cAAc,mCAAmC,qBAAqB,MAAM,KAAK;AAAA,IAClI;AAAA,EACJ;AACA,QAAM,cAAc,WAAW,eAAe;AAC9C,QAAM,YAAY,WAAW,YAAY;AACzC,MAAI;AACJ,MAAI;AACA,eAAW,MAAM,oBAAoB,cAAc;AAAA,EACvD,SACO,GAAG;AACN,UAAM,IAAI,mBAAmB,iDAAiD,WAAW,iCAAiC,eAAe,IAAI,KAAK;AAAA,EACtJ;AACA,mBAAiB,eAAe,SAAS,WAAW;AACpD,mBAAiB,aAAa,SAAS,SAAS;AAChD,QAAM,EAAE,aAAa,UAAU,IAAI;AACnC,QAAM,gBAAgB;AAAA,IAClB,OAAO;AAAA,IACP,YAAY,IAAI,KAAK,SAAS;AAAA,EAClC;AACA,MAAI,cAAc,WAAW,QAAQ,IAAI,KAAK,IAAI,IAAI,kBAAkB;AACpE,WAAO;AAAA,EACX;AACA,QAAM,yBAAyB,wBAAwB,IAAI,cAAc,KAAK;AAC9E,MAAI,KAAK,IAAI,IAAI,yBAAyB,KAAK,KAAM;AACjD,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACA,mBAAiB,YAAY,SAAS,UAAU,IAAI;AACpD,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,MAAI;AACA,4BAAwB,IAAI,gBAAgB,KAAK,IAAI,CAAC;AACtD,UAAM,kBAAkB,MAAM,mBAAmB,UAAU,WAAW,MAAM,kBAAkB;AAC9F,qBAAiB,eAAe,gBAAgB,WAAW;AAC3D,qBAAiB,aAAa,gBAAgB,SAAS;AACvD,UAAM,qBAAqB,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,YAAY,GAAI;AACjF,QAAI;AACA,YAAM,oBAAoB,gBAAgB;AAAA,QACtC,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,WAAW,mBAAmB,YAAY;AAAA,QAC1C,cAAc,gBAAgB;AAAA,MAClC,CAAC;AAAA,IACL,SACO,OAAO;AAAA,IACd;AACA,WAAO;AAAA,MACH,OAAO,gBAAgB;AAAA,MACvB,YAAY;AAAA,IAChB;AAAA,EACJ,SACO,OAAO;AACV,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACJ;;;AChFA,IAAM,+BAA+B;AAC9B,IAAM,wBAAwB,OAAO,EAAE,aAAa,YAAY,cAAc,WAAW,aAAa,WAAW,cAAc,oBAAoB,oBAAoB,SAAS,UAAU,gBAAgB,aAAa,OAAQ,MAAM;AACxO,MAAI;AACJ,QAAM,iBAAiB;AACvB,MAAI,YAAY;AACZ,QAAI;AACA,YAAM,SAAS,MAAM,QAAoB;AAAA,QACrC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACJ,CAAC,EAAE,EAAE,mBAAmB,CAAC;AACzB,cAAQ;AAAA,QACJ,aAAa,OAAO;AAAA,QACpB,WAAW,IAAI,KAAK,OAAO,UAAU,EAAE,YAAY;AAAA,MACvD;AAAA,IACJ,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,EAAE,SAAS;AAAA,QAC1C,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ,OACK;AACD,QAAI;AACA,cAAQ,MAAM,oBAAoB,WAAW;AAAA,IACjD,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,4DAA4D,cAAc,IAAI;AAAA,QAC7G,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AACA,MAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG;AACvD,UAAM,IAAI,yBAAyB,6DAA6D,cAAc,IAAI;AAAA,MAC9G,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,YAAY,IAAI;AACxB,QAAM,EAAE,WAAW,0BAA0B,IAAI,MAAM,OAAO,uBAAc;AAC5E,QAAM,MAAM,aACR,IAAI,UAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,CAAC,GAAG;AAAA,IAChD,QAAQ,cAAc,UAAU,oBAAoB,UAAU,oBAAoB;AAAA,IAClF,QAAQ,cAAc,UAAU;AAAA,IAChC,gBAAgB,cAAc,kBAAkB,oBAAoB,kBAAkB,oBAAoB;AAAA,EAC9G,CAAC,CAAC;AACN,MAAI;AACJ,MAAI;AACA,cAAU,MAAM,IAAI,KAAK,IAAI,0BAA0B;AAAA,MACnD,WAAW;AAAA,MACX,UAAU;AAAA,MACV;AAAA,IACJ,CAAC,CAAC;AAAA,EACN,SACO,GAAG;AACN,UAAM,IAAI,yBAAyB,GAAG;AAAA,MAClC,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,iBAAiB,EAAE,aAAa,iBAAiB,cAAc,YAAY,iBAAiB,UAAU,IAAI,CAAC,EAAG,IAAI;AAC1H,MAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,YAAY;AAClE,UAAM,IAAI,yBAAyB,gDAAgD;AAAA,MAC/E,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,cAAc;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,IAAI,KAAK,UAAU;AAAA,IAC/B,GAAI,mBAAmB,EAAE,gBAAgB;AAAA,IACzC,GAAI,aAAa,EAAE,UAAU;AAAA,EACjC;AACA,MAAI,YAAY;AACZ,yBAAqB,aAAa,mBAAmB,GAAG;AAAA,EAC5D,OACK;AACD,yBAAqB,aAAa,0BAA0B,GAAG;AAAA,EACnE;AACA,SAAO;AACX;;;AC1FO,IAAM,qBAAqB,CAAC,SAAS,WAAW;AACnD,QAAM,EAAE,eAAe,gBAAgB,YAAY,cAAc,IAAI;AACrE,MAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC,eAAe;AACpE,UAAM,IAAI,yBAAyB,iJACwB,OAAO,KAAK,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,qFAAwF,EAAE,aAAa,OAAO,OAAO,CAAC;AAAA,EACpN;AACA,SAAO;AACX;;;ACJO,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AACzE,OAAK,QAAQ,MAAM,4CAA4C;AAC/D,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,WAAW,IAAI;AAC1E,QAAM,EAAE,UAAU,IAAI;AACtB,QAAM,cAAc,eAAe;AAAA,IAC/B,SAAS,KAAK,WAAW,oBAAoB;AAAA,EACjD,CAAC;AACD,MAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,eAAe,CAAC,YAAY;AAC5E,UAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,UAAM,UAAU,SAAS,WAAW;AACpC,QAAI,CAAC,SAAS;AACV,YAAM,IAAI,yBAAyB,WAAW,WAAW,mBAAmB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IACvG;AACA,QAAI,CAAC,aAAa,OAAO,GAAG;AACxB,YAAM,IAAI,yBAAyB,WAAW,WAAW,4CAA4C;AAAA,QACjG,QAAQ,KAAK;AAAA,MACjB,CAAC;AAAA,IACL;AACA,QAAI,SAAS,aAAa;AACtB,YAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,YAAM,UAAU,YAAY,QAAQ,WAAW;AAC/C,YAAM,cAAc,8BAA8B,WAAW,oBAAoB,QAAQ,WAAW;AACpG,UAAI,aAAa,cAAc,QAAQ,YAAY;AAC/C,cAAM,IAAI,yBAAyB,2BAA2B,aAAa;AAAA,UACvE,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,UAAI,eAAe,gBAAgB,QAAQ,eAAe;AACtD,cAAM,IAAI,yBAAyB,8BAA8B,aAAa;AAAA,UAC1E,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,cAAQ,aAAa,QAAQ;AAC7B,cAAQ,gBAAgB,QAAQ;AAAA,IACpC;AACA,UAAM,EAAE,eAAe,gBAAgB,YAAY,eAAe,YAAY,IAAI,mBAAmB,SAAS,KAAK,MAAM;AACzH,WAAO,sBAAsB;AAAA,MACzB,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,WAAW;AAAA,MACX,aAAa;AAAA,MACb;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL,WACS,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,aAAa;AAClE,UAAM,IAAI,yBAAyB,gIAC8B,EAAE,aAAa,OAAO,QAAQ,KAAK,OAAO,CAAC;AAAA,EAChH,OACK;AACD,WAAO,sBAAsB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL;AACJ;","names":[]}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import {
|
|
2
2
|
setCredentialFeature
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-ZPM4D2XD.js";
|
|
4
4
|
import {
|
|
5
5
|
CredentialsProviderError,
|
|
6
6
|
externalDataInterceptor
|
|
7
|
-
} from "./chunk-
|
|
8
|
-
import "./chunk-
|
|
7
|
+
} from "./chunk-TKWHSSPF.js";
|
|
8
|
+
import "./chunk-2FPUYYXX.js";
|
|
9
9
|
|
|
10
10
|
// ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
|
|
11
11
|
import { readFileSync } from "fs";
|
|
@@ -16,7 +16,7 @@ var fromWebToken = (init) => async (awsIdentityProperties) => {
|
|
|
16
16
|
const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
|
|
17
17
|
let { roleAssumerWithWebIdentity } = init;
|
|
18
18
|
if (!roleAssumerWithWebIdentity) {
|
|
19
|
-
const { getDefaultRoleAssumerWithWebIdentity } = await import("./sts-
|
|
19
|
+
const { getDefaultRoleAssumerWithWebIdentity } = await import("./sts-BLFDXC4J.js");
|
|
20
20
|
roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
|
|
21
21
|
...init.clientConfig,
|
|
22
22
|
credentialProviderLogger: init.logger,
|
|
@@ -66,4 +66,4 @@ export {
|
|
|
66
66
|
fromTokenFile,
|
|
67
67
|
fromWebToken
|
|
68
68
|
};
|
|
69
|
-
//# sourceMappingURL=dist-es-
|
|
69
|
+
//# sourceMappingURL=dist-es-Z4NFJDXO.js.map
|
|
@@ -1,13 +1,14 @@
|
|
|
1
1
|
import {
|
|
2
2
|
Crc32Node
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-X77CPJUJ.js";
|
|
4
4
|
import {
|
|
5
5
|
TypeRegistry,
|
|
6
6
|
fromHex,
|
|
7
7
|
fromUtf8,
|
|
8
|
+
hasOwn,
|
|
8
9
|
toHex,
|
|
9
10
|
toUtf8
|
|
10
|
-
} from "./chunk-
|
|
11
|
+
} from "./chunk-2FPUYYXX.js";
|
|
11
12
|
|
|
12
13
|
// ../../node_modules/@smithy/core/dist-es/submodules/event-streams/eventstream-codec/Int64.js
|
|
13
14
|
var Int64 = class _Int64 {
|
|
@@ -64,7 +65,9 @@ var HeaderMarshaller = class {
|
|
|
64
65
|
}
|
|
65
66
|
format(headers) {
|
|
66
67
|
const chunks = [];
|
|
67
|
-
for (const headerName
|
|
68
|
+
for (const headerName in headers) {
|
|
69
|
+
if (!hasOwn(headers, headerName))
|
|
70
|
+
continue;
|
|
68
71
|
const bytes = this.fromUtf8(headerName);
|
|
69
72
|
chunks.push(Uint8Array.from([bytes.byteLength]), bytes, this.formatHeaderValue(headers[headerName]));
|
|
70
73
|
}
|
|
@@ -79,27 +82,27 @@ var HeaderMarshaller = class {
|
|
|
79
82
|
formatHeaderValue(header) {
|
|
80
83
|
switch (header.type) {
|
|
81
84
|
case "boolean":
|
|
82
|
-
return Uint8Array.from([header.value ?
|
|
85
|
+
return Uint8Array.from([header.value ? 0 : 1]);
|
|
83
86
|
case "byte":
|
|
84
|
-
return Uint8Array.from([
|
|
87
|
+
return Uint8Array.from([2, header.value]);
|
|
85
88
|
case "short":
|
|
86
89
|
const shortView = new DataView(new ArrayBuffer(3));
|
|
87
|
-
shortView.setUint8(0,
|
|
90
|
+
shortView.setUint8(0, 3);
|
|
88
91
|
shortView.setInt16(1, header.value, false);
|
|
89
92
|
return new Uint8Array(shortView.buffer);
|
|
90
93
|
case "integer":
|
|
91
94
|
const intView = new DataView(new ArrayBuffer(5));
|
|
92
|
-
intView.setUint8(0,
|
|
95
|
+
intView.setUint8(0, 4);
|
|
93
96
|
intView.setInt32(1, header.value, false);
|
|
94
97
|
return new Uint8Array(intView.buffer);
|
|
95
98
|
case "long":
|
|
96
99
|
const longBytes = new Uint8Array(9);
|
|
97
|
-
longBytes[0] =
|
|
100
|
+
longBytes[0] = 5;
|
|
98
101
|
longBytes.set(header.value.bytes, 1);
|
|
99
102
|
return longBytes;
|
|
100
103
|
case "binary":
|
|
101
104
|
const binView = new DataView(new ArrayBuffer(3 + header.value.byteLength));
|
|
102
|
-
binView.setUint8(0,
|
|
105
|
+
binView.setUint8(0, 6);
|
|
103
106
|
binView.setUint16(1, header.value.byteLength, false);
|
|
104
107
|
const binBytes = new Uint8Array(binView.buffer);
|
|
105
108
|
binBytes.set(header.value, 3);
|
|
@@ -107,14 +110,14 @@ var HeaderMarshaller = class {
|
|
|
107
110
|
case "string":
|
|
108
111
|
const utf8Bytes = this.fromUtf8(header.value);
|
|
109
112
|
const strView = new DataView(new ArrayBuffer(3 + utf8Bytes.byteLength));
|
|
110
|
-
strView.setUint8(0,
|
|
113
|
+
strView.setUint8(0, 7);
|
|
111
114
|
strView.setUint16(1, utf8Bytes.byteLength, false);
|
|
112
115
|
const strBytes = new Uint8Array(strView.buffer);
|
|
113
116
|
strBytes.set(utf8Bytes, 3);
|
|
114
117
|
return strBytes;
|
|
115
118
|
case "timestamp":
|
|
116
119
|
const tsBytes = new Uint8Array(9);
|
|
117
|
-
tsBytes[0] =
|
|
120
|
+
tsBytes[0] = 8;
|
|
118
121
|
tsBytes.set(Int64.fromNumber(header.value.valueOf()).bytes, 1);
|
|
119
122
|
return tsBytes;
|
|
120
123
|
case "uuid":
|
|
@@ -122,7 +125,7 @@ var HeaderMarshaller = class {
|
|
|
122
125
|
throw new Error(`Invalid UUID received: ${header.value}`);
|
|
123
126
|
}
|
|
124
127
|
const uuidBytes = new Uint8Array(17);
|
|
125
|
-
uuidBytes[0] =
|
|
128
|
+
uuidBytes[0] = 9;
|
|
126
129
|
uuidBytes.set(fromHex(header.value.replace(/-/g, "")), 1);
|
|
127
130
|
return uuidBytes;
|
|
128
131
|
}
|
|
@@ -135,46 +138,46 @@ var HeaderMarshaller = class {
|
|
|
135
138
|
const name = this.toUtf8(new Uint8Array(headers.buffer, headers.byteOffset + position, nameLength));
|
|
136
139
|
position += nameLength;
|
|
137
140
|
switch (headers.getUint8(position++)) {
|
|
138
|
-
case
|
|
141
|
+
case 0:
|
|
139
142
|
out[name] = {
|
|
140
143
|
type: BOOLEAN_TAG,
|
|
141
144
|
value: true
|
|
142
145
|
};
|
|
143
146
|
break;
|
|
144
|
-
case
|
|
147
|
+
case 1:
|
|
145
148
|
out[name] = {
|
|
146
149
|
type: BOOLEAN_TAG,
|
|
147
150
|
value: false
|
|
148
151
|
};
|
|
149
152
|
break;
|
|
150
|
-
case
|
|
153
|
+
case 2:
|
|
151
154
|
out[name] = {
|
|
152
155
|
type: BYTE_TAG,
|
|
153
156
|
value: headers.getInt8(position++)
|
|
154
157
|
};
|
|
155
158
|
break;
|
|
156
|
-
case
|
|
159
|
+
case 3:
|
|
157
160
|
out[name] = {
|
|
158
161
|
type: SHORT_TAG,
|
|
159
162
|
value: headers.getInt16(position, false)
|
|
160
163
|
};
|
|
161
164
|
position += 2;
|
|
162
165
|
break;
|
|
163
|
-
case
|
|
166
|
+
case 4:
|
|
164
167
|
out[name] = {
|
|
165
168
|
type: INT_TAG,
|
|
166
169
|
value: headers.getInt32(position, false)
|
|
167
170
|
};
|
|
168
171
|
position += 4;
|
|
169
172
|
break;
|
|
170
|
-
case
|
|
173
|
+
case 5:
|
|
171
174
|
out[name] = {
|
|
172
175
|
type: LONG_TAG,
|
|
173
176
|
value: new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8))
|
|
174
177
|
};
|
|
175
178
|
position += 8;
|
|
176
179
|
break;
|
|
177
|
-
case
|
|
180
|
+
case 6:
|
|
178
181
|
const binaryLength = headers.getUint16(position, false);
|
|
179
182
|
position += 2;
|
|
180
183
|
out[name] = {
|
|
@@ -183,7 +186,7 @@ var HeaderMarshaller = class {
|
|
|
183
186
|
};
|
|
184
187
|
position += binaryLength;
|
|
185
188
|
break;
|
|
186
|
-
case
|
|
189
|
+
case 7:
|
|
187
190
|
const stringLength = headers.getUint16(position, false);
|
|
188
191
|
position += 2;
|
|
189
192
|
out[name] = {
|
|
@@ -192,14 +195,14 @@ var HeaderMarshaller = class {
|
|
|
192
195
|
};
|
|
193
196
|
position += stringLength;
|
|
194
197
|
break;
|
|
195
|
-
case
|
|
198
|
+
case 8:
|
|
196
199
|
out[name] = {
|
|
197
200
|
type: TIMESTAMP_TAG,
|
|
198
201
|
value: new Date(new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8)).valueOf())
|
|
199
202
|
};
|
|
200
203
|
position += 8;
|
|
201
204
|
break;
|
|
202
|
-
case
|
|
205
|
+
case 9:
|
|
203
206
|
const uuidBytes = new Uint8Array(headers.buffer, headers.byteOffset + position, 16);
|
|
204
207
|
position += 16;
|
|
205
208
|
out[name] = {
|
|
@@ -644,7 +647,7 @@ var EventStreamSerde = class {
|
|
|
644
647
|
this.defaultContentType = defaultContentType;
|
|
645
648
|
this.compositeErrorRegistry = compositeErrorRegistry;
|
|
646
649
|
}
|
|
647
|
-
async serializeEventStream({ eventStream, requestSchema, initialRequest }) {
|
|
650
|
+
async serializeEventStream({ eventStream, requestSchema, initialRequest, initialMessageType }) {
|
|
648
651
|
const marshaller = this.marshaller;
|
|
649
652
|
const eventStreamMember = requestSchema.getEventStreamMember();
|
|
650
653
|
const unionSchema = requestSchema.getMemberSchema(eventStreamMember);
|
|
@@ -655,7 +658,7 @@ var EventStreamSerde = class {
|
|
|
655
658
|
async *[Symbol.asyncIterator]() {
|
|
656
659
|
if (initialRequest) {
|
|
657
660
|
const headers = {
|
|
658
|
-
":event-type": { type: "string", value: "initial-request" },
|
|
661
|
+
":event-type": { type: "string", value: initialMessageType ?? "initial-request" },
|
|
659
662
|
":message-type": { type: "string", value: "event" },
|
|
660
663
|
":content-type": { type: "string", value: defaultContentType }
|
|
661
664
|
};
|
|
@@ -681,6 +684,8 @@ var EventStreamSerde = class {
|
|
|
681
684
|
}
|
|
682
685
|
let unionMember = "";
|
|
683
686
|
for (const key in event) {
|
|
687
|
+
if (!hasOwn(event, key))
|
|
688
|
+
continue;
|
|
684
689
|
if (key !== "__type") {
|
|
685
690
|
unionMember = key;
|
|
686
691
|
break;
|
|
@@ -699,7 +704,7 @@ var EventStreamSerde = class {
|
|
|
699
704
|
};
|
|
700
705
|
});
|
|
701
706
|
}
|
|
702
|
-
async deserializeEventStream({ response, responseSchema, initialResponseContainer }) {
|
|
707
|
+
async deserializeEventStream({ response, responseSchema, initialResponseContainer, initialMessageType }) {
|
|
703
708
|
const marshaller = this.marshaller;
|
|
704
709
|
const eventStreamMember = responseSchema.getEventStreamMember();
|
|
705
710
|
const unionSchema = responseSchema.getMemberSchema(eventStreamMember);
|
|
@@ -708,13 +713,15 @@ var EventStreamSerde = class {
|
|
|
708
713
|
const asyncIterable = marshaller.deserialize(response.body, async (event) => {
|
|
709
714
|
let unionMember = "";
|
|
710
715
|
for (const key in event) {
|
|
716
|
+
if (!hasOwn(event, key))
|
|
717
|
+
continue;
|
|
711
718
|
if (key !== "__type") {
|
|
712
719
|
unionMember = key;
|
|
713
720
|
break;
|
|
714
721
|
}
|
|
715
722
|
}
|
|
716
723
|
const body = event[unionMember].body;
|
|
717
|
-
if (unionMember === "initial-response") {
|
|
724
|
+
if (unionMember === (initialMessageType ?? "initial-response")) {
|
|
718
725
|
const dataObject = await this.deserializer.read(responseSchema, body);
|
|
719
726
|
delete dataObject[eventStreamMember];
|
|
720
727
|
return {
|
|
@@ -775,6 +782,8 @@ var EventStreamSerde = class {
|
|
|
775
782
|
throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");
|
|
776
783
|
}
|
|
777
784
|
for (const key in firstEvent.value) {
|
|
785
|
+
if (!hasOwn(firstEvent.value, key))
|
|
786
|
+
continue;
|
|
778
787
|
initialResponseContainer[key] = firstEvent.value[key];
|
|
779
788
|
}
|
|
780
789
|
}
|
|
@@ -909,4 +918,4 @@ export {
|
|
|
909
918
|
resolveEventStreamSerdeConfig,
|
|
910
919
|
eventStreamSerdeProvider as universalEventStreamSerdeProvider
|
|
911
920
|
};
|
|
912
|
-
//# sourceMappingURL=event-streams-
|
|
921
|
+
//# sourceMappingURL=event-streams-UU2VASBU.js.map
|