Initial

resources/app/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js

@@ -0,0 +1,21 @@
+import { CredentialsProviderError } from "@smithy/property-provider";
+import { readFileSync } from "fs";
+import { fromWebToken } from "./fromWebToken";
+const ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE";
+const ENV_ROLE_ARN = "AWS_ROLE_ARN";
+const ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME";
+export const fromTokenFile = (init = {}) => async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-web-identity", "fromTokenFile");
+    const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
+    const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];
+    const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];
+    if (!webIdentityTokenFile || !roleArn) {
+        throw new CredentialsProviderError("Web identity configuration not specified");
+    }
+    return fromWebToken({
+        ...init,
+        webIdentityToken: readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
+        roleArn,
+        roleSessionName,
+    })();
+};

resources/app/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js

@@ -0,0 +1,22 @@
+export const fromWebToken = (init) => async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-web-identity", "fromWebToken");
+    const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
+    let { roleAssumerWithWebIdentity } = init;
+    if (!roleAssumerWithWebIdentity) {
+        const { getDefaultRoleAssumerWithWebIdentity } = await import("@aws-sdk/client-sts");
+        roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
+            ...init.clientConfig,
+            credentialProviderLogger: init.logger,
+            parentClientConfig: init.parentClientConfig,
+        }, init.clientPlugins);
+    }
+    return roleAssumerWithWebIdentity({
+        RoleArn: roleArn,
+        RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,
+        WebIdentityToken: webIdentityToken,
+        ProviderId: providerId,
+        PolicyArns: policyArns,
+        Policy: policy,
+        DurationSeconds: durationSeconds,
+    });
+};

resources/app/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js

@@ -0,0 +1,2 @@
+export * from "./fromTokenFile";
+export * from "./fromWebToken";