sst 3.0.33 → 3.0.36

package/dist/aws/bus.js

@@ -2,8 +2,9 @@ import { client } from "../aws/client.js";
 import { Resource } from "../resource.js";
 export var bus;
 (function (bus) {
-    function url(options) {
-        const region = options?.region || client.region;
+    function url(region, options) {
+        if (options?.region)
+            region = options.region;
         return `https://events.${region}.amazonaws.com/`;
     }
     function subscriber(_events, cb) {
@@ -22,7 +23,8 @@ export var bus;
      * */
     bus.handler = subscriber;
     async function publish(name, def, properties, options) {
-        const u = url(options?.aws);
+        const c = await client();
+        const u = url(c.region, options?.aws);
         const evt = typeof def === "string"
             ? {
                 type: def,
@@ -30,7 +32,7 @@ export var bus;
                 metadata: options?.metadata || {},
             }
             : await def.create(properties, options?.metadata);
-        const res = await client.fetch(u, {
+        const res = await c.fetch(u, {
             method: "POST",
             aws: options?.aws,
             headers: {

package/dist/aws/client.d.ts

@@ -1,3 +1,3 @@
 import { AwsClient } from "aws4fetch";
-export declare const client: AwsClient;
+export declare function client(): Promise<AwsClient>;
 export type AwsOptions = Exclude<Parameters<AwsClient["fetch"]>[1], null | undefined>["aws"];

package/dist/aws/client.js

@@ -1,7 +1,35 @@
 import { AwsClient } from "aws4fetch";
-export const client = new AwsClient({
-    accessKeyId: process.env.AWS_ACCESS_KEY_ID,
-    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
-    sessionToken: process.env.AWS_SESSION_TOKEN,
-    region: process.env.AWS_REGION,
-});
+let cachedCredentials = null;
+async function getCredentials(url) {
+    if (cachedCredentials) {
+        const currentTime = new Date();
+        const fiveMinutesFromNow = new Date(currentTime.getTime() + 5 * 60000);
+        const expirationTime = new Date(cachedCredentials.Expiration);
+        if (expirationTime > fiveMinutesFromNow) {
+            return cachedCredentials;
+        }
+    }
+    const credentials = (await fetch(url).then((res) => res.json()));
+    cachedCredentials = credentials;
+    return credentials;
+}
+export async function client() {
+    if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
+        return new AwsClient({
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+            sessionToken: process.env.AWS_SESSION_TOKEN,
+            region: process.env.AWS_REGION,
+        });
+    }
+    if (process.env.ECS_CONTAINER_METADATA_URI_V4) {
+        const credentials = await getCredentials(process.env.ECS_CONTAINER_METADATA_URI_V4 + "/credentials");
+        return new AwsClient({
+            accessKeyId: credentials.AccessKeyId,
+            secretAccessKey: credentials.SecretAccessKey,
+            sessionToken: credentials.Token,
+            region: process.env.AWS_REGION,
+        });
+    }
+    throw new Error("No AWS credentials found");
+}

package/dist/aws/realtime.d.ts

@@ -1,4 +1,4 @@
-import { IoTCustomAuthorizerHandler } from "aws-lambda";
+import { Context, IoTCustomAuthorizerEvent } from "aws-lambda";
 export declare namespace realtime {
     interface AuthResult {
         /**
@@ -57,5 +57,22 @@ export declare namespace realtime {
      * });
      * ```
      */
-    function authorizer(input: (token: string) => Promise<AuthResult>): IoTCustomAuthorizerHandler;
+    function authorizer(input: (token: string) => Promise<AuthResult>): (evt: IoTCustomAuthorizerEvent, context: Context) => Promise<{
+        isAuthenticated: boolean;
+        principalId: string;
+        disconnectAfterInSeconds: number;
+        refreshAfterInSeconds: number;
+        policyDocuments: {
+            Version: string;
+            Statement: ({
+                Action: string;
+                Effect: string;
+                Resource: string;
+            } | {
+                Action: string;
+                Effect: string;
+                Resource: string[];
+            })[];
+        }[];
+    }>;
 }

package/package.json

@@ -3,7 +3,7 @@
   "name": "sst",
   "type": "module",
   "sideEffects": false,
-  "version": "3.0.33",
+  "version": "3.0.36",
   "main": "./dist/index.js",
   "exports": {
     ".": "./dist/index.js",