Bernt
6de2455917
- Added GLOBAL_MARKETS_TITLE to all translation files - Updated footer with 12 markets (4 active + 8 upcoming) - Translated market section to: zh-cn, zh-tw, ja, ko, th, vi, id, ms, hi - Built and deployed to production - CloudFront invalidation: I3RTMXVFDJXWLG3SYX208OP1CC
30 lines
1.4 KiB
JavaScript
30 lines
1.4 KiB
JavaScript
import { setCredentialFeature } from "@aws-sdk/core/client";
|
|
import { CredentialsProviderError, externalDataInterceptor } from "@smithy/core/config";
|
|
import { readFileSync } from "node:fs";
|
|
import { fromWebToken } from "./fromWebToken";
|
|
const ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE";
|
|
const ENV_ROLE_ARN = "AWS_ROLE_ARN";
|
|
const ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME";
|
|
export const fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
|
|
init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
|
|
const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
|
|
const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];
|
|
const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];
|
|
if (!webIdentityTokenFile || !roleArn) {
|
|
throw new CredentialsProviderError("Web identity configuration not specified", {
|
|
logger: init.logger,
|
|
});
|
|
}
|
|
const credentials = await fromWebToken({
|
|
...init,
|
|
webIdentityToken: externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ??
|
|
readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
|
|
roleArn,
|
|
roleSessionName,
|
|
})(awsIdentityProperties);
|
|
if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
|
|
setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
|
|
}
|
|
return credentials;
|
|
};
|