replicas-cli 0.2.480 → 0.2.481
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.mjs +40 -7
- package/package.json +1 -1
- package/dist/bowser-S7EOQFFD.mjs +0 -2822
- package/dist/chunk-2Y7DHPWA.mjs +0 -1499
- package/dist/chunk-3D7LWA6F.mjs +0 -3158
- package/dist/chunk-5YGPPG6H.mjs +0 -2109
- package/dist/chunk-JGNUGZKP.mjs +0 -439
- package/dist/chunk-MPRIIAGC.mjs +0 -50
- package/dist/chunk-QLNB4JLM.mjs +0 -1058
- package/dist/chunk-QNN4YYAM.mjs +0 -581
- package/dist/dist-es-2ASZB5FV.mjs +0 -88
- package/dist/dist-es-KFBV5JD6.mjs +0 -170
- package/dist/dist-es-LSOKN4PB.mjs +0 -48
- package/dist/dist-es-MSRO2TYM.mjs +0 -496
- package/dist/dist-es-Q7U2N35F.mjs +0 -379
- package/dist/dist-es-RC6ASTRR.mjs +0 -70
- package/dist/dist-es-TCIQCXEL.mjs +0 -318
- package/dist/event-streams-65STPXKL.mjs +0 -1274
- package/dist/loadSso-7KJNALIR.mjs +0 -577
- package/dist/signin-TQJQWVXN.mjs +0 -741
- package/dist/sso-oidc-NISHBRLW.mjs +0 -830
- package/dist/sts-LEFX4YOG.mjs +0 -6370
|
@@ -1,170 +0,0 @@
|
|
|
1
|
-
#!/usr/bin/env bun
|
|
2
|
-
import {
|
|
3
|
-
NodeHttpHandler
|
|
4
|
-
} from "./chunk-JGNUGZKP.mjs";
|
|
5
|
-
import {
|
|
6
|
-
setCredentialFeature
|
|
7
|
-
} from "./chunk-3D7LWA6F.mjs";
|
|
8
|
-
import {
|
|
9
|
-
CredentialsProviderError,
|
|
10
|
-
HttpRequest
|
|
11
|
-
} from "./chunk-5YGPPG6H.mjs";
|
|
12
|
-
import {
|
|
13
|
-
parseRfc3339DateTime,
|
|
14
|
-
sdkStreamMixin
|
|
15
|
-
} from "./chunk-QLNB4JLM.mjs";
|
|
16
|
-
import "./chunk-MPRIIAGC.mjs";
|
|
17
|
-
|
|
18
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.50/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
|
|
19
|
-
import fs from "fs/promises";
|
|
20
|
-
|
|
21
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.50/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
|
|
22
|
-
var ECS_CONTAINER_HOST = "169.254.170.2";
|
|
23
|
-
var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
|
|
24
|
-
var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
|
|
25
|
-
var checkUrl = (url, logger) => {
|
|
26
|
-
if (url.protocol === "https:") {
|
|
27
|
-
return;
|
|
28
|
-
}
|
|
29
|
-
if (url.hostname === ECS_CONTAINER_HOST || url.hostname === EKS_CONTAINER_HOST_IPv4 || url.hostname === EKS_CONTAINER_HOST_IPv6) {
|
|
30
|
-
return;
|
|
31
|
-
}
|
|
32
|
-
if (url.hostname.includes("[")) {
|
|
33
|
-
if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
|
|
34
|
-
return;
|
|
35
|
-
}
|
|
36
|
-
} else {
|
|
37
|
-
if (url.hostname === "localhost") {
|
|
38
|
-
return;
|
|
39
|
-
}
|
|
40
|
-
const ipComponents = url.hostname.split(".");
|
|
41
|
-
const inRange = (component) => {
|
|
42
|
-
const num = parseInt(component, 10);
|
|
43
|
-
return 0 <= num && num <= 255;
|
|
44
|
-
};
|
|
45
|
-
if (ipComponents[0] === "127" && inRange(ipComponents[1]) && inRange(ipComponents[2]) && inRange(ipComponents[3]) && ipComponents.length === 4) {
|
|
46
|
-
return;
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
|
|
50
|
-
- loopback CIDR 127.0.0.0/8 or [::1/128]
|
|
51
|
-
- ECS container host 169.254.170.2
|
|
52
|
-
- EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });
|
|
53
|
-
};
|
|
54
|
-
|
|
55
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.50/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
|
|
56
|
-
function createGetRequest(url) {
|
|
57
|
-
return new HttpRequest({
|
|
58
|
-
protocol: url.protocol,
|
|
59
|
-
hostname: url.hostname,
|
|
60
|
-
port: Number(url.port),
|
|
61
|
-
path: url.pathname,
|
|
62
|
-
query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {
|
|
63
|
-
acc[k] = v;
|
|
64
|
-
return acc;
|
|
65
|
-
}, {}),
|
|
66
|
-
fragment: url.hash
|
|
67
|
-
});
|
|
68
|
-
}
|
|
69
|
-
async function getCredentials(response, logger) {
|
|
70
|
-
const stream = sdkStreamMixin(response.body);
|
|
71
|
-
const str = await stream.transformToString();
|
|
72
|
-
if (response.statusCode === 200) {
|
|
73
|
-
const parsed = JSON.parse(str);
|
|
74
|
-
if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
|
|
75
|
-
throw new CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger });
|
|
76
|
-
}
|
|
77
|
-
return {
|
|
78
|
-
accessKeyId: parsed.AccessKeyId,
|
|
79
|
-
secretAccessKey: parsed.SecretAccessKey,
|
|
80
|
-
sessionToken: parsed.Token,
|
|
81
|
-
expiration: parseRfc3339DateTime(parsed.Expiration)
|
|
82
|
-
};
|
|
83
|
-
}
|
|
84
|
-
if (response.statusCode >= 400 && response.statusCode < 500) {
|
|
85
|
-
let parsedBody = {};
|
|
86
|
-
try {
|
|
87
|
-
parsedBody = JSON.parse(str);
|
|
88
|
-
} catch (e) {
|
|
89
|
-
}
|
|
90
|
-
throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {
|
|
91
|
-
Code: parsedBody.Code,
|
|
92
|
-
Message: parsedBody.Message
|
|
93
|
-
});
|
|
94
|
-
}
|
|
95
|
-
throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });
|
|
96
|
-
}
|
|
97
|
-
|
|
98
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.50/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
|
|
99
|
-
var retryWrapper = (toRetry, maxRetries, delayMs) => {
|
|
100
|
-
return async () => {
|
|
101
|
-
for (let i = 0; i < maxRetries; ++i) {
|
|
102
|
-
try {
|
|
103
|
-
return await toRetry();
|
|
104
|
-
} catch (e) {
|
|
105
|
-
await new Promise((resolve) => setTimeout(resolve, delayMs));
|
|
106
|
-
}
|
|
107
|
-
}
|
|
108
|
-
return await toRetry();
|
|
109
|
-
};
|
|
110
|
-
};
|
|
111
|
-
|
|
112
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.50/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
|
|
113
|
-
var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
|
|
114
|
-
var DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
|
|
115
|
-
var AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
|
|
116
|
-
var AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
|
|
117
|
-
var AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
|
|
118
|
-
var fromHttp = (options = {}) => {
|
|
119
|
-
options.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");
|
|
120
|
-
let host;
|
|
121
|
-
const relative = options.awsContainerCredentialsRelativeUri ?? process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
|
|
122
|
-
const full = options.awsContainerCredentialsFullUri ?? process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
|
|
123
|
-
const token = options.awsContainerAuthorizationToken ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
|
|
124
|
-
const tokenFile = options.awsContainerAuthorizationTokenFile ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
|
|
125
|
-
const warn = options.logger?.constructor?.name === "NoOpLogger" || !options.logger?.warn ? console.warn : options.logger.warn.bind(options.logger);
|
|
126
|
-
if (relative && full) {
|
|
127
|
-
warn("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
|
|
128
|
-
warn("awsContainerCredentialsFullUri will take precedence.");
|
|
129
|
-
}
|
|
130
|
-
if (token && tokenFile) {
|
|
131
|
-
warn("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
|
|
132
|
-
warn("awsContainerAuthorizationToken will take precedence.");
|
|
133
|
-
}
|
|
134
|
-
if (full) {
|
|
135
|
-
host = full;
|
|
136
|
-
} else if (relative) {
|
|
137
|
-
host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;
|
|
138
|
-
} else {
|
|
139
|
-
throw new CredentialsProviderError(`No HTTP credential provider host provided.
|
|
140
|
-
Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });
|
|
141
|
-
}
|
|
142
|
-
const url = new URL(host);
|
|
143
|
-
checkUrl(url, options.logger);
|
|
144
|
-
const requestHandler = NodeHttpHandler.create({ connectionTimeout: options.timeout ?? 1e3 });
|
|
145
|
-
const requestTimeout = options.timeout ?? 1e3;
|
|
146
|
-
const provider = retryWrapper(async () => {
|
|
147
|
-
const request = createGetRequest(url);
|
|
148
|
-
if (token) {
|
|
149
|
-
request.headers.Authorization = token;
|
|
150
|
-
} else if (tokenFile) {
|
|
151
|
-
request.headers.Authorization = (await fs.readFile(tokenFile)).toString();
|
|
152
|
-
}
|
|
153
|
-
try {
|
|
154
|
-
const result = await requestHandler.handle(request, { requestTimeout });
|
|
155
|
-
return getCredentials(result.response).then((creds) => setCredentialFeature(creds, "CREDENTIALS_HTTP", "z"));
|
|
156
|
-
} catch (e) {
|
|
157
|
-
throw new CredentialsProviderError(String(e), { logger: options.logger });
|
|
158
|
-
}
|
|
159
|
-
}, options.maxRetries ?? 3, options.timeout ?? 1e3);
|
|
160
|
-
return async () => {
|
|
161
|
-
try {
|
|
162
|
-
return await provider();
|
|
163
|
-
} finally {
|
|
164
|
-
requestHandler.destroy?.();
|
|
165
|
-
}
|
|
166
|
-
};
|
|
167
|
-
};
|
|
168
|
-
export {
|
|
169
|
-
fromHttp
|
|
170
|
-
};
|
|
@@ -1,48 +0,0 @@
|
|
|
1
|
-
#!/usr/bin/env bun
|
|
2
|
-
import {
|
|
3
|
-
setCredentialFeature
|
|
4
|
-
} from "./chunk-3D7LWA6F.mjs";
|
|
5
|
-
import {
|
|
6
|
-
CredentialsProviderError
|
|
7
|
-
} from "./chunk-5YGPPG6H.mjs";
|
|
8
|
-
import "./chunk-QLNB4JLM.mjs";
|
|
9
|
-
import "./chunk-MPRIIAGC.mjs";
|
|
10
|
-
|
|
11
|
-
// ../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.48/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
|
|
12
|
-
var ENV_KEY = "AWS_ACCESS_KEY_ID";
|
|
13
|
-
var ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
|
|
14
|
-
var ENV_SESSION = "AWS_SESSION_TOKEN";
|
|
15
|
-
var ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
|
|
16
|
-
var ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
|
|
17
|
-
var ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
|
|
18
|
-
var fromEnv = (init) => async () => {
|
|
19
|
-
init?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");
|
|
20
|
-
const accessKeyId = process.env[ENV_KEY];
|
|
21
|
-
const secretAccessKey = process.env[ENV_SECRET];
|
|
22
|
-
const sessionToken = process.env[ENV_SESSION];
|
|
23
|
-
const expiry = process.env[ENV_EXPIRATION];
|
|
24
|
-
const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];
|
|
25
|
-
const accountId = process.env[ENV_ACCOUNT_ID];
|
|
26
|
-
if (accessKeyId && secretAccessKey) {
|
|
27
|
-
const credentials = {
|
|
28
|
-
accessKeyId,
|
|
29
|
-
secretAccessKey,
|
|
30
|
-
...sessionToken && { sessionToken },
|
|
31
|
-
...expiry && { expiration: new Date(expiry) },
|
|
32
|
-
...credentialScope && { credentialScope },
|
|
33
|
-
...accountId && { accountId }
|
|
34
|
-
};
|
|
35
|
-
setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS", "g");
|
|
36
|
-
return credentials;
|
|
37
|
-
}
|
|
38
|
-
throw new CredentialsProviderError("Unable to find environment variable credentials.", { logger: init?.logger });
|
|
39
|
-
};
|
|
40
|
-
export {
|
|
41
|
-
ENV_ACCOUNT_ID,
|
|
42
|
-
ENV_CREDENTIAL_SCOPE,
|
|
43
|
-
ENV_EXPIRATION,
|
|
44
|
-
ENV_KEY,
|
|
45
|
-
ENV_SECRET,
|
|
46
|
-
ENV_SESSION,
|
|
47
|
-
fromEnv
|
|
48
|
-
};
|