switch-profile 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [0.2.3](https://github.com/nicolasdao/switch-profile/compare/v0.2.2...v0.2.3) (2026-02-11)
+
+
+### Bug Fixes
+
+* Add support for AWS CLI v2 SSO session format and improve profile deletion UX ([4eb7366](https://github.com/nicolasdao/switch-profile/commit/4eb7366d6ed1f50f024128d94da213515a4ff9da))
+
+### [0.2.2](https://github.com/nicolasdao/switch-profile/compare/v0.2.1...v0.2.2) (2026-02-10)
+
+
+### Bug Fixes
+
+* SSO profile credentials written as undefined by falling back to aws configure export-credentials ([7067eff](https://github.com/nicolasdao/switch-profile/commit/7067eff15d376a3dd902ee4a03f5db7cfa539918))
+
 ### [0.2.1](https://github.com/nicolasdao/switch-profile/compare/v0.2.0...v0.2.1) (2026-02-08)
 
 ## [0.2.0](https://github.com/nicolasdao/switch-profile/compare/v0.1.2...v0.2.0) (2026-02-08)

package/docs/aws-profile-management.md

@@ -42,7 +42,8 @@ Each profile object contains:
     sso_start_url: 'https://my.awsapps.com/start',  // null if not SSO
     sso_region: 'us-east-1',                  // null if not SSO
     sso_account_id: '123456789012',           // null if not SSO
-    sso_role_name: 'Admin'                    // null if not SSO
+    sso_role_name: 'Admin',                   // null if not SSO
+    sso_session: 'my-session'                 // null if not using SSO sessions (legacy SSO format)
 }
 ```
 
@@ -51,8 +52,9 @@ Each profile object contains:
 2. For each section, extracts the content between it and the next `[` bracket.
 3. Splits content by newline and extracts key-value pairs using `getParam()`.
 4. Strips `[profile ...]` prefix to get the profile name.
-5. For SSO profiles, uses `sso_region` as the effective region.
-6. Builds a `friendlyName` that includes role and account info for SSO profiles.
+5. For newer SSO profiles using `sso_session`, looks up the `[sso-session name]` section to retrieve `sso_start_url` and `sso_region`.
+6. For SSO profiles, uses `sso_region` as the effective region.
+7. Builds a `friendlyName` that includes role and account info for SSO profiles.
 
 #### `getDefaultProfile()`
 
@@ -81,8 +83,10 @@ The main credential retrieval function. Behaves differently for SSO vs. standard
 **For SSO profiles** (when `ssoUrl` is provided):
 
 1. Calls `refreshSsoSession()` to ensure a valid SSO session exists.
-2. Calls `getSsoCredentials()` to get temporary AWS credentials.
+2. Calls `getSsoCredentials()` to get temporary AWS credentials via the CLI cache.
 3. If credentials fail with "session associated with this profile has expired", forces a session refresh and retries.
+4. If `getSsoCredentials()` returns `null` (cache-based lookup failed), falls back to `aws configure export-credentials --profile <name> --format process` which directly outputs credentials as JSON.
+5. If both approaches fail, throws an error.
 
 **For standard profiles** (when `ssoUrl` is null):
 
@@ -284,6 +288,19 @@ User selects an SSO profile
     Search ~/.aws/cli/cache/*.json
     for matching credentials
             │
+            ├── Found → return credentials
+            │
+            └── Not found (null)
+                    │
+                    ▼
+            Fallback: aws configure export-credentials
+                      --profile <name> --format process
+            (directly outputs credentials as JSON)
+                    │
+                    ├── Success → return credentials
+                    │
+                    └── Failure → throw error
+            │
             ▼
     Return { aws_access_key_id,
              aws_secret_access_key,

package/index.js

@@ -280,44 +280,45 @@ const switchCmd = async () => {
 				await setProfileToDefault(defaultProfileName, profiles, `AWS profile ${defaultProfileName.bold} successfully refreshed.`)
 			else if (option == 'delete') {
 				const { delProfiles } = await inquirer.prompt([
-					{ 
-						type: 'checkbox', 
-						name: 'delProfiles', 
-						message: 'Select the profiles you which to delete: ',
+					{
+						type: 'checkbox',
+						name: 'delProfiles',
+						message: 'Select the profiles you wish to delete (SPACE to select, ENTER to confirm):',
 						pageSize: 20,
 						choices: profiles.map((p,i) => {
-							return { 
-								name: `${i+1}. ${p.friendlyName}`, 
-								value: p.name
-							}
-						})
+						return {
+							name: `${i+1}. ${p.friendlyName}`,
+							value: p.name
+						}
+					})
 					}
 				])
 
-				if (!delProfiles.length)
-					return 
+					if (!delProfiles.length)
+						return
 
-				const label = delProfiles.length > 1 ? 'profiles' : 'profile'
-				const labelText = delProfiles.length > 1 ? `those ${delProfiles.length} profiles` : 'this profile'
-				const { delConfirm } = await inquirer.prompt([
-					{ 
-						type: 'confirm', 
-						name: 'delConfirm', 
-						message: `Are you sure you want to delete ${labelText}? `,
-					}
-				])
+						const label = delProfiles.length > 1 ? 'profiles' : 'profile'
+						const labelText = delProfiles.length > 1 ? `those ${delProfiles.length} profiles` : 'this profile'
+						const { delConfirm } = await inquirer.prompt([
+							{
+								type: 'confirm',
+								name: 'delConfirm',
+								message: `Are you sure you want to delete ${labelText}? `,
+							}
+						])
 
-				if (!delConfirm)
-					return 
+					if (!delConfirm)
+						return
 
-				if (defaultProfileName && delProfiles.some(p => p == defaultProfileName))
-					return printAWSerrors([new Error(`Fail to delete ${label}. Profile ${defaultProfileName.bold} is the current default. Set another profile as the default, then try deleting again.`)], { noStack:true })
+						if (defaultProfileName && delProfiles.some(p => p == defaultProfileName)) {
+							return printAWSerrors([new Error(`Fail to delete ${label}. Profile ${defaultProfileName.bold} is the current default. Set another profile as the default, then try deleting again.`)], { noStack:true })
+						}
 
-				const [delErrors] = await deleteProfiles(delProfiles)
-				if (delErrors)
-					return printAWSerrors([new Error(`Fail to delete ${label}`), ...delErrors])
+						const [delErrors] = await deleteProfiles(delProfiles)
+						if (delErrors)
+							return printAWSerrors([new Error(`Fail to delete ${label}`), ...delErrors])
 
-				console.log(`AWS profile${delProfiles.length > 1 ? 's' : ''} successfully deleted.`.green)
+						console.log(`AWS profile${delProfiles.length > 1 ? 's' : ''} successfully deleted.`.green)
 			} else if (option == 'new')
 				await createNewProfile(profiles)
 			else if (option == ABORT_KEY)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switch-profile",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "main": "index.js",
   "bin": "index.js",
   "description": "NPX script that exposes terminal shortcut to easily switch between cloud configuration (aws, gcp).",

package/src/aws/index.js

@@ -107,17 +107,33 @@ const listProfiles = () => catchErrors((async () => {
 			sso_region: getParam(params, 'sso_region'),
 			sso_account_id: getParam(params, 'sso_account_id'),
 			sso_role_name: getParam(params, 'sso_role_name'),
+			sso_session: getParam(params, 'sso_session'),
 			region: getParam(params, 'region'),
 			output: getParam(params, 'output')
 		}
 
+		// Handle newer AWS CLI v2 SSO session format where sso_start_url is in a separate [sso-session] section
+		if (p.sso_session && !p.sso_start_url) {
+			const ssoSessionSection = `[sso-session ${p.sso_session}]`
+			const ssoSessionMatch = configStr.split(ssoSessionSection)
+			if (ssoSessionMatch.length > 1) {
+				const [ssoSessionRest=''] = ssoSessionMatch[1].split('[')
+				const ssoSessionParams = ssoSessionRest.split(EOL)
+				p.sso_start_url = getParam(ssoSessionParams, 'sso_start_url')
+				// If sso_region is not in profile, check the session section
+				if (!p.sso_region) {
+					p.sso_region = getParam(ssoSessionParams, 'sso_region')
+				}
+			}
+		}
+
 		if (p.sso_region)
 			p.region = p.sso_region
 
 		p.friendlyName = `${p.name}${p.sso_start_url ? ` (SSO [role:${p.sso_role_name||'unknown'} - account:${p.sso_account_id||'unknown'}])` : ''}`
 
-		return p 
-	}).filter(p => p.name != 'default')
+		return p
+	}).filter(p => p.name != 'default' && !p.name.startsWith('sso-session '))
 })())
 
 /**
@@ -337,6 +353,26 @@ const getCredentials = (profile, ssoUrl) => catchErrors((async () => {
 				throw wrapErrors(errMsg, ssoCredsErrors)
 		}
 
+		if (!ssoCreds) {
+			try {
+				const data = await exec(`aws configure export-credentials --profile ${profile} --format process`)
+				const parsed = JSON.parse(data)
+				if (parsed.AccessKeyId && parsed.SecretAccessKey) {
+					ssoCreds = {
+						aws_access_key_id: parsed.AccessKeyId,
+						aws_secret_access_key: parsed.SecretAccessKey,
+						aws_session_token: parsed.SessionToken,
+						expiry_date: parsed.Expiration ? new Date(parsed.Expiration) : null
+					}
+				}
+			} catch(e) {
+				// Fallback also failed
+			}
+		}
+
+		if (!ssoCreds)
+			throw new Error(errMsg)
+
 		return ssoCreds
 	} else {
 		const [errors, credsStr] = await getCredsFile()
@@ -344,6 +380,9 @@ const getCredentials = (profile, ssoUrl) => catchErrors((async () => {
 			throw wrapErrors(errMsg, errors)
 
 		const [, rest] = credsStr.split(`[${profile}]`)
+		if (!rest)
+			throw new Error(`Profile ${profile} not found in ${AWS_CREDS_FILE}. Standard profiles must have credentials defined in this file.`)
+
 		const [config=''] = rest.split('[')
 		const params = config.split(EOL)
 		const creds = {
@@ -352,7 +391,7 @@ const getCredentials = (profile, ssoUrl) => catchErrors((async () => {
 			aws_session_token: getParam(params, 'aws_session_token'),
 			expiry_date: null
 		}
-		
+
 		return creds
 	}
 })())
@@ -419,7 +458,7 @@ const deleteProfileFromConfig = (profile, fileContent) => {
 	fileContent = fileContent || ''
 	const regExp = new RegExp(`\\[(profile\\s){0,1}${profile}\\]((.|\\n|\\r)*?)(\\[|$)`)
 	const profileMatch = (fileContent.match(regExp)||[])[0] || ''
-	
+
 	if (!profileMatch)
 		return fileContent
 
@@ -431,7 +470,7 @@ const deleteProfileFromCreds = (profile, fileContent) => {
 	fileContent = fileContent || ''
 	const regExp = new RegExp(`\\[${profile}\\]((.|\\n|\\r)*?)(\\[|$)`)
 	const profileMatch = (fileContent.match(regExp)||[])[0] || ''
-	
+
 	if (!profileMatch)
 		return fileContent
 
@@ -441,7 +480,7 @@ const deleteProfileFromCreds = (profile, fileContent) => {
 
 const deleteProfiles = profiles => catchErrors((async () => {
 	if (!profiles || !profiles.length)
-		return 
+		return
 
 	const errMsg = 'Fail to delete AWS profiles'