@vizamodo/aws-sts-core 0.1.47 → 0.1.50

package/dist/sts/issue.js

@@ -58,31 +58,46 @@ export async function issueAwsCredentials(input) {
         .replace(/-----END CERTIFICATE-----/g, "")
         .replace(/\s+/g, "");
     // --- REFACTOR: Parser ASN.1 an toàn để lấy Serial Number (DECIMAL) ---
+    // --- MINIMAL DER WALK: extract serial number ---
     let certSerialDec;
     try {
-        const certDer = base64ToArrayBuffer(normalizedCert);
-        const derBytes = new Uint8Array(certDer);
+        const der = new Uint8Array(base64ToArrayBuffer(normalizedCert));
         let offset = 0;
-        // X509v3 structure check
-        if (derBytes[offset++] !== 0x30)
-            throw new Error("Not a sequence");
-        offset += derBytes[offset] & 0x80 ? (derBytes[offset] & 0x7f) + 1 : 1;
-        if (derBytes[offset++] !== 0x30)
-            throw new Error("Not a sequence");
-        offset += derBytes[offset] & 0x80 ? (derBytes[offset] & 0x7f) + 1 : 1;
-        // INTEGER (Serial Number)
-        if (derBytes[offset++] !== 0x02)
-            throw new Error("Not an integer");
-        const serialLength = derBytes[offset++];
-        // Bounds check
-        if (offset + serialLength > derBytes.length)
-            throw new Error("Bounds error");
-        const serialBytes = derBytes.slice(offset, offset + serialLength);
-        // Convert to Decimal string
-        certSerialDec = BigInt("0x" + Array.from(serialBytes)
-            .map((b) => b.toString(16).padStart(2, "0"))
-            .join(""))
-            .toString();
+        // helper: read DER length (short + long form)
+        function readLen() {
+            const b = der[offset++];
+            if ((b & 0x80) === 0)
+                return b;
+            const n = b & 0x7f;
+            let len = 0;
+            for (let i = 0; i < n; i++) {
+                len = (len << 8) | der[offset++];
+            }
+            return len;
+        }
+        // Certificate SEQUENCE
+        if (der[offset++] !== 0x30)
+            throw new Error("bad cert");
+        readLen();
+        // TBSCertificate SEQUENCE
+        if (der[offset++] !== 0x30)
+            throw new Error("bad tbs");
+        readLen();
+        // Optional version [0] EXPLICIT (0xa0)
+        if (der[offset] === 0xa0) {
+            offset++; // tag
+            const vLen = readLen(); // length
+            offset += vLen; // skip full version block
+        }
+        // SerialNumber INTEGER
+        if (der[offset++] !== 0x02)
+            throw new Error("bad serial tag");
+        const serialLen = readLen();
+        const serial = der.slice(offset, offset + serialLen);
+        certSerialDec = BigInt("0x" +
+            Array.from(serial)
+                .map(b => b.toString(16).padStart(2, "0"))
+                .join("")).toString();
     }
     catch (e) {
         console.error("[issueAwsCredentials] Failed to parse cert serial", e);
@@ -138,6 +153,15 @@ export async function issueAwsCredentials(input) {
         }
         const json = await res.json();
         const creds = json?.credentialSet?.[0]?.credentials;
+        console.log("[issueAwsCredentials][aws-response]", {
+            raw: json,
+        });
+        console.log("[issueAwsCredentials][parsed-credentials]", {
+            accessKeyId: creds?.accessKeyId,
+            secretAccessKey: creds.secretAccessKey,
+            sessionToken: creds.sessionToken,
+            expiration: creds?.expiration,
+        });
         return {
             accessKeyId: creds.accessKeyId,
             secretAccessKey: creds.secretAccessKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizamodo/aws-sts-core",
-  "version": "0.1.47",
+  "version": "0.1.50",
   "description": "Pure AWS STS + SigV4 (X509 Roles Anywhere) core logic",
   "type": "module",
   "main": "dist/index.js",