@vizamodo/aws-sts-core 0.3.26 → 0.3.28

package/dist/federation/login.d.ts

@@ -5,6 +5,7 @@ export declare function buildFederationLoginUrl(input: {
     region: string;
     expiration: string;
     intent?: "console" | "billing" | "dynamodb" | "ssm";
+    forceRefresh?: boolean;
 }): Promise<{
     ok: true;
     loginUrl: string;

package/dist/federation/login.js

@@ -15,10 +15,16 @@ export async function buildFederationLoginUrl(input) {
     const encoded = encodeURIComponent(sessionJson);
     const SigninToken = await getCachedOrFetch(cacheKey, async () => {
         const tokenResp = await fetch(`https://signin.aws.amazon.com/federation?Action=getSigninToken&Session=${encoded}`);
+        if (!tokenResp.ok) {
+            // best-effort: skip cache, let caller retry upstream if needed
+            return "";
+        }
         const json = await tokenResp.json();
-        const token = json.SigninToken;
-        if (!token)
-            throw new Error("federation_failed");
+        const token = json?.SigninToken;
+        if (!token) {
+            // best-effort: skip cache
+            return "";
+        }
         // SigninToken TTL ~15 minutes (AWS behavior)
         const SIGNIN_TOKEN_TTL_SEC = 15 * 60;
         // derive effective TTL = min(tokenTTL, credentialTTL)
@@ -29,8 +35,11 @@ export async function buildFederationLoginUrl(input) {
             return token;
         }
         return wrapResult(token, new Date(Date.now() + effectiveTtlSec * 1000).toISOString());
-    }, { ttlSec: 60 } // fallback only if expiration invalid
+    }, { ttlSec: 60, forceRefresh: input.forceRefresh } // allow caller-controlled retry
     );
+    if (!SigninToken) {
+        throw new Error("[federation] unable to obtain SigninToken");
+    }
     const baseLogin = `https://signin.aws.amazon.com/federation?Action=login` +
         `&Issuer=viza` +
         `&SigninToken=${SigninToken}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizamodo/aws-sts-core",
-  "version": "0.3.26",
+  "version": "0.3.28",
   "description": "Pure AWS STS + SigV4 (X509 Roles Anywhere) core logic",
   "type": "module",
   "main": "dist/index.js",