sst 2.24.27 → 2.25.0

package/constructs/NextjsSite.d.ts

@@ -25,6 +25,34 @@ export interface NextjsSiteProps extends Omit<SsrSiteProps, "nodejs"> {
     warm?: number;
     cdk?: SsrSiteProps["cdk"] & {
         revalidation?: Pick<FunctionProps, "vpc" | "vpcSubnets">;
+        /**
+         * Override the CloudFront cache policy properties for responses from the
+         * server rendering Lambda.
+         *
+         * @default
+         * By default, the cache policy is configured to cache all responses from
+         * the server rendering Lambda based on the query-key only. If you're using
+         * cookie or header based authentication, you'll need to override the
+         * cache policy to cache based on those values as well.
+         *
+         * ```js
+         * serverCachePolicy: new CachePolicy(this, "ServerCache", {
+         *   queryStringBehavior: CacheQueryStringBehavior.all()
+         *   headerBehavior: CacheHeaderBehavior.allowList(
+         *     "accept",
+         *     "rsc",
+         *     "next-router-prefetch",
+         *     "next-router-state-tree",
+         *     "next-url",
+         *   ),
+         *   cookieBehavior: CacheCookieBehavior.none()
+         *   defaultTtl: Duration.days(0)
+         *   maxTtl: Duration.days(365)
+         *   minTtl: Duration.days(0)
+         * })
+         * ```
+         */
+        serverCachePolicy?: NonNullable<SsrSiteProps["cdk"]>["serverCachePolicy"];
     };
 }
 /**

package/constructs/SsrSite.d.ts

@@ -1,10 +1,10 @@
 import { Construct } from "constructs";
 import { Bucket, BucketProps, IBucket } from "aws-cdk-lib/aws-s3";
-import { FunctionProps } from "aws-cdk-lib/aws-lambda";
+import { FunctionProps as CdkFunctionProps } from "aws-cdk-lib/aws-lambda";
 import { ICachePolicy, IResponseHeadersPolicy, BehaviorOptions, CachePolicy, Function as CfFunction, FunctionEventType as CfFunctionEventType } from "aws-cdk-lib/aws-cloudfront";
 import { Distribution, DistributionDomainProps } from "./Distribution.js";
 import { SSTConstruct } from "./Construct.js";
-import { NodeJSProps } from "./Function.js";
+import { NodeJSProps, FunctionProps } from "./Function.js";
 import { SsrFunction } from "./SsrFunction.js";
 import { EdgeFunction } from "./EdgeFunction.js";
 import { BaseSiteFileOptions, BaseSiteReplaceProps, BaseSiteCdkDistributionProps } from "./BaseSite.js";
@@ -190,8 +190,22 @@ export interface SsrSiteProps {
          * Override the CloudFront cache policy properties for responses from the
          * server rendering Lambda.
          *
-         * @note The default cache policy that is used in the abscene of this property
-         * is one that performs no caching of the server response.
+         * @default
+         * By default, the cache policy is configured to cache all responses from
+         * the server rendering Lambda based on the query-key only. If you're using
+         * cookie or header based authentication, you'll need to override the
+         * cache policy to cache based on those values as well.
+         *
+         * ```js
+         * serverCachePolicy: new CachePolicy(this, "ServerCache", {
+         *   queryStringBehavior: CacheQueryStringBehavior.all()
+         *   headerBehavior: CacheHeaderBehavior.none()
+         *   cookieBehavior: CacheCookieBehavior.none()
+         *   defaultTtl: Duration.days(0)
+         *   maxTtl: Duration.days(365)
+         *   minTtl: Duration.days(0)
+         * })
+         * ```
          */
         serverCachePolicy?: ICachePolicy;
         /**
@@ -199,7 +213,7 @@ export interface SsrSiteProps {
          * from the server rendering Lambda.
          */
         responseHeadersPolicy?: IResponseHeadersPolicy;
-        server?: Pick<FunctionProps, "vpc" | "vpcSubnets" | "securityGroups" | "allowAllOutbound" | "allowPublicSubnet" | "architecture" | "logRetention">;
+        server?: Pick<CdkFunctionProps, "vpc" | "vpcSubnets" | "securityGroups" | "allowAllOutbound" | "allowPublicSubnet" | "architecture" | "logRetention"> & Pick<FunctionProps, "copyFiles">;
     };
     /**
      * Pass in a list of file options to customize cache control and content type specific files.

package/constructs/StaticSite.js

@@ -310,7 +310,7 @@ interface ImportMeta {
         const uploader = new Function(this, "S3Uploader", {
             code: Code.fromAsset(path.join(__dirname, "../support/base-site-custom-resource")),
             layers: [cliLayer],
-            runtime: Runtime.PYTHON_3_7,
+            runtime: Runtime.PYTHON_3_11,
             handler: "s3-upload.handler",
             timeout: Duration.minutes(15),
             memorySize: 1024,
@@ -321,7 +321,7 @@ interface ImportMeta {
         const handler = new Function(this, "S3Handler", {
             code: Code.fromAsset(path.join(__dirname, "../support/base-site-custom-resource")),
             layers: [cliLayer],
-            runtime: Runtime.PYTHON_3_7,
+            runtime: Runtime.PYTHON_3_11,
             handler: "s3-handler.handler",
             timeout: Duration.minutes(15),
             memorySize: 1024,

package/constructs/future/Auth.d.ts

@@ -2,6 +2,7 @@ import { Construct } from "constructs";
 import { Api, ApiProps } from "../Api.js";
 import { FunctionDefinition } from "../Function.js";
 import { SSTConstruct } from "../Construct.js";
+import { Secret } from "../Secret.js";
 import { FunctionBindingProps } from "../util/functionBinding.js";
 export interface AuthProps {
     /**
@@ -65,8 +66,8 @@ export declare class Auth extends Construct implements SSTConstruct {
     readonly id: string;
     private readonly authenticator;
     private api;
-    private publicKey;
-    private privateKey;
+    publicKey: Secret;
+    privateKey: Secret;
     constructor(scope: Construct, id: string, props: AuthProps);
     get url(): string;
     /** @internal */

package/node/future/auth/session.d.ts

@@ -66,12 +66,6 @@ export declare function createSessionBuilder<SessionTypes extends Record<string,
         type: "public";
         properties: {};
     };
-    $type: { [type in keyof SessionTypes]: {
-        type: type;
-        properties: SessionTypes[type];
-    }; }[keyof SessionTypes] | {
-        type: "public";
-        properties: {};
-    };
+    $type: SessionTypes;
 };
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "sideEffects": false,
   "name": "sst",
-  "version": "2.24.27",
+  "version": "2.25.0",
   "bin": {
     "sst": "cli/sst.js"
   },
@@ -25,12 +25,12 @@
   },
   "homepage": "https://sst.dev",
   "dependencies": {
-    "@aws-cdk/aws-apigatewayv2-alpha": "^2.91.0-alpha.0",
-    "@aws-cdk/aws-apigatewayv2-authorizers-alpha": "^2.91.0-alpha.0",
-    "@aws-cdk/aws-apigatewayv2-integrations-alpha": "^2.91.0-alpha.0",
-    "@aws-cdk/cloud-assembly-schema": "2.91.0",
-    "@aws-cdk/cloudformation-diff": "2.91.0",
-    "@aws-cdk/cx-api": "2.91.0",
+    "@aws-cdk/aws-apigatewayv2-alpha": "^2.95.1-alpha.0",
+    "@aws-cdk/aws-apigatewayv2-authorizers-alpha": "^2.95.1-alpha.0",
+    "@aws-cdk/aws-apigatewayv2-integrations-alpha": "^2.95.1-alpha.0",
+    "@aws-cdk/cloud-assembly-schema": "2.95.1",
+    "@aws-cdk/cloudformation-diff": "2.95.1",
+    "@aws-cdk/cx-api": "2.95.1",
     "@aws-crypto/sha256-js": "^5.0.0",
     "@aws-sdk/client-cloudformation": "^3.279.0",
     "@aws-sdk/client-ecs": "^3.279.0",
@@ -55,11 +55,11 @@
     "@smithy/signature-v4": "^2.0.4",
     "@trpc/server": "9.16.0",
     "adm-zip": "^0.5.10",
-    "aws-cdk-lib": "2.91.0",
+    "aws-cdk-lib": "2.95.1",
     "aws-iot-device-sdk": "^2.2.12",
     "aws-sdk": "^2.1326.0",
     "builtin-modules": "3.2.0",
-    "cdk-assets": "2.91.0",
+    "cdk-assets": "2.95.1",
     "chalk": "^5.2.0",
     "chokidar": "^3.5.3",
     "ci-info": "^3.7.0",