@vizamodo/aws-sts-core 0.4.32 → 0.4.33

package/dist/sts/issue.js

@@ -26,19 +26,12 @@ let signingKeyPromise = null;
 let cachedSigningKey = null;
 let cachedCertBase64 = null;
 let cachedPrivateKeyBase64 = null;
-// ---- single-flight hard refresh guard + cooldown ----
-let hardRefreshPromise = null;
-let lastHardRefreshAt = 0;
-const HARD_REFRESH_COOLDOWN_MS = 2000;
 export function resetIsolateCache() {
     signingKeyPromise = null;
     cachedSigningKey = null;
     cachedCertBase64 = null;
     cachedPrivateKeyBase64 = null;
 }
-// ---- certificate serial cache (DER walk is CPU-bound, cert rarely rotates) ----
-let cachedCertSerialDec = null;
-let cachedCertSerialSource = null;
 // ---------------------------------------------------------------------------
 // Signing material
 // ---------------------------------------------------------------------------
@@ -162,48 +155,6 @@ export async function issueAwsCredentials(input) {
         }
         if (!res.ok) {
             const status = res.status;
-            // Safe internal hard reset trigger:
-            // Only reset isolate cache on explicit forceRefresh AND first failure
-            if (forceRefresh && status === 403) {
-                const now = Date.now();
-                // Cooldown guard to avoid rapid consecutive hard resets
-                if (now - lastHardRefreshAt < HARD_REFRESH_COOLDOWN_MS) {
-                    console.warn("[aws-rejected][cooldown-skip-hard-reset]", { status, region });
-                    throw new InternalError("aws_rejected");
-                }
-                // Single-flight: only one request performs hard refresh
-                if (!hardRefreshPromise) {
-                    hardRefreshPromise = (async () => {
-                        console.warn("[aws-rejected][hard-reset-trigger]", { status, region });
-                        lastHardRefreshAt = Date.now();
-                        resetIsolateCache();
-                        const { headers: retryHeaders, body: retryBody, host: retryHost } = await buildSignedHeaders();
-                        const retryRes = await fetch(`https://${retryHost}${PATH}`, {
-                            method: "POST",
-                            headers: retryHeaders,
-                            body: retryBody,
-                        });
-                        if (!retryRes.ok) {
-                            console.warn("[aws-rejected][after-hard-reset]", { status: retryRes.status, region });
-                            throw new InternalError("aws_rejected");
-                        }
-                        const retryJson = await retryRes.json();
-                        const retryCreds = retryJson?.credentialSet?.[0]?.credentials;
-                        if (!retryCreds?.accessKeyId || !retryCreds?.secretAccessKey || !retryCreds?.sessionToken) {
-                            throw new InternalError("aws_malformed_credentials");
-                        }
-                        return {
-                            accessKeyId: retryCreds.accessKeyId,
-                            secretAccessKey: retryCreds.secretAccessKey,
-                            sessionToken: retryCreds.sessionToken,
-                            expiration: retryCreds.expiration,
-                        };
-                    })().finally(() => {
-                        hardRefreshPromise = null;
-                    });
-                }
-                return await hardRefreshPromise;
-            }
             console.warn("[aws-rejected]", { status, region, profile });
             throw new InternalError("aws_rejected");
         }
@@ -230,7 +181,7 @@ export async function issueAwsCredentials(input) {
         return value;
     }, {
         ttlSec: 60,
-        forceRefresh: !!forceRefresh
+        forceRefresh
     });
 }
 // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizamodo/aws-sts-core",
-  "version": "0.4.32",
+  "version": "0.4.33",
   "description": "Pure AWS STS + SigV4 (X509 Roles Anywhere) core logic",
   "type": "module",
   "main": "dist/index.js",