switch-profile 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [0.2.2](https://github.com/nicolasdao/switch-profile/compare/v0.2.1...v0.2.2) (2026-02-10)
+
+
+### Bug Fixes
+
+* SSO profile credentials written as undefined by falling back to aws configure export-credentials ([7067eff](https://github.com/nicolasdao/switch-profile/commit/7067eff15d376a3dd902ee4a03f5db7cfa539918))
+
 ### [0.2.1](https://github.com/nicolasdao/switch-profile/compare/v0.2.0...v0.2.1) (2026-02-08)
 
 ## [0.2.0](https://github.com/nicolasdao/switch-profile/compare/v0.1.2...v0.2.0) (2026-02-08)

package/docs/aws-profile-management.md

@@ -81,8 +81,10 @@ The main credential retrieval function. Behaves differently for SSO vs. standard
 **For SSO profiles** (when `ssoUrl` is provided):
 
 1. Calls `refreshSsoSession()` to ensure a valid SSO session exists.
-2. Calls `getSsoCredentials()` to get temporary AWS credentials.
+2. Calls `getSsoCredentials()` to get temporary AWS credentials via the CLI cache.
 3. If credentials fail with "session associated with this profile has expired", forces a session refresh and retries.
+4. If `getSsoCredentials()` returns `null` (cache-based lookup failed), falls back to `aws configure export-credentials --profile <name> --format process` which directly outputs credentials as JSON.
+5. If both approaches fail, throws an error.
 
 **For standard profiles** (when `ssoUrl` is null):
 
@@ -284,6 +286,19 @@ User selects an SSO profile
     Search ~/.aws/cli/cache/*.json
     for matching credentials
             │
+            ├── Found → return credentials
+            │
+            └── Not found (null)
+                    │
+                    ▼
+            Fallback: aws configure export-credentials
+                      --profile <name> --format process
+            (directly outputs credentials as JSON)
+                    │
+                    ├── Success → return credentials
+                    │
+                    └── Failure → throw error
+            │
             ▼
     Return { aws_access_key_id,
              aws_secret_access_key,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switch-profile",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "main": "index.js",
   "bin": "index.js",
   "description": "NPX script that exposes terminal shortcut to easily switch between cloud configuration (aws, gcp).",

package/src/aws/index.js

@@ -337,6 +337,26 @@ const getCredentials = (profile, ssoUrl) => catchErrors((async () => {
 				throw wrapErrors(errMsg, ssoCredsErrors)
 		}
 
+		if (!ssoCreds) {
+			try {
+				const data = await exec(`aws configure export-credentials --profile ${profile} --format process`)
+				const parsed = JSON.parse(data)
+				if (parsed.AccessKeyId && parsed.SecretAccessKey) {
+					ssoCreds = {
+						aws_access_key_id: parsed.AccessKeyId,
+						aws_secret_access_key: parsed.SecretAccessKey,
+						aws_session_token: parsed.SessionToken,
+						expiry_date: parsed.Expiration ? new Date(parsed.Expiration) : null
+					}
+				}
+			} catch(e) {
+				// Fallback also failed
+			}
+		}
+
+		if (!ssoCreds)
+			throw new Error(errMsg)
+
 		return ssoCreds
 	} else {
 		const [errors, credsStr] = await getCredsFile()