mirror of
https://code.forgejo.org/actions/setup-node.git
synced 2025-05-20 21:14:45 +00:00
.
This commit is contained in:
eric sciple
parent
fc725ba36b
commit
422b9fdb15
7395 changed files with 1786235 additions and 3476 deletions
5
node_modules/aws4/.travis.yml
generated
vendored
Normal file
5
node_modules/aws4/.travis.yml
generated
vendored
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
language: node_js
|
||||
node_js:
|
||||
- "0.10"
|
||||
- "0.12"
|
||||
- "4.2"
|
||||
19
node_modules/aws4/LICENSE
generated
vendored
Normal file
19
node_modules/aws4/LICENSE
generated
vendored
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
Copyright 2013 Michael Hart (michael.hart.au@gmail.com)
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
this software and associated documentation files (the "Software"), to deal in
|
||||
the Software without restriction, including without limitation the rights to
|
||||
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
|
||||
of the Software, and to permit persons to whom the Software is furnished to do
|
||||
so, subject to the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
SOFTWARE.
|
||||
523
node_modules/aws4/README.md
generated
vendored
Normal file
523
node_modules/aws4/README.md
generated
vendored
Normal file
|
|
@ -0,0 +1,523 @@
|
|||
aws4
|
||||
----
|
||||
|
||||
[](http://travis-ci.org/mhart/aws4)
|
||||
|
||||
A small utility to sign vanilla node.js http(s) request options using Amazon's
|
||||
[AWS Signature Version 4](http://docs.amazonwebservices.com/general/latest/gr/signature-version-4.html).
|
||||
|
||||
Can also be used [in the browser](./browser).
|
||||
|
||||
This signature is supported by nearly all Amazon services, including
|
||||
[S3](http://docs.aws.amazon.com/AmazonS3/latest/API/),
|
||||
[EC2](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/),
|
||||
[DynamoDB](http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/API.html),
|
||||
[Kinesis](http://docs.aws.amazon.com/kinesis/latest/APIReference/),
|
||||
[Lambda](http://docs.aws.amazon.com/lambda/latest/dg/API_Reference.html),
|
||||
[SQS](http://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/),
|
||||
[SNS](http://docs.aws.amazon.com/sns/latest/api/),
|
||||
[IAM](http://docs.aws.amazon.com/IAM/latest/APIReference/),
|
||||
[STS](http://docs.aws.amazon.com/STS/latest/APIReference/),
|
||||
[RDS](http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/),
|
||||
[CloudWatch](http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/),
|
||||
[CloudWatch Logs](http://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/),
|
||||
[CodeDeploy](http://docs.aws.amazon.com/codedeploy/latest/APIReference/),
|
||||
[CloudFront](http://docs.aws.amazon.com/AmazonCloudFront/latest/APIReference/),
|
||||
[CloudTrail](http://docs.aws.amazon.com/awscloudtrail/latest/APIReference/),
|
||||
[ElastiCache](http://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/),
|
||||
[EMR](http://docs.aws.amazon.com/ElasticMapReduce/latest/API/),
|
||||
[Glacier](http://docs.aws.amazon.com/amazonglacier/latest/dev/amazon-glacier-api.html),
|
||||
[CloudSearch](http://docs.aws.amazon.com/cloudsearch/latest/developerguide/APIReq.html),
|
||||
[Elastic Load Balancing](http://docs.aws.amazon.com/ElasticLoadBalancing/latest/APIReference/),
|
||||
[Elastic Transcoder](http://docs.aws.amazon.com/elastictranscoder/latest/developerguide/api-reference.html),
|
||||
[CloudFormation](http://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/),
|
||||
[Elastic Beanstalk](http://docs.aws.amazon.com/elasticbeanstalk/latest/api/),
|
||||
[Storage Gateway](http://docs.aws.amazon.com/storagegateway/latest/userguide/AWSStorageGatewayAPI.html),
|
||||
[Data Pipeline](http://docs.aws.amazon.com/datapipeline/latest/APIReference/),
|
||||
[Direct Connect](http://docs.aws.amazon.com/directconnect/latest/APIReference/),
|
||||
[Redshift](http://docs.aws.amazon.com/redshift/latest/APIReference/),
|
||||
[OpsWorks](http://docs.aws.amazon.com/opsworks/latest/APIReference/),
|
||||
[SES](http://docs.aws.amazon.com/ses/latest/APIReference/),
|
||||
[SWF](http://docs.aws.amazon.com/amazonswf/latest/apireference/),
|
||||
[AutoScaling](http://docs.aws.amazon.com/AutoScaling/latest/APIReference/),
|
||||
[Mobile Analytics](http://docs.aws.amazon.com/mobileanalytics/latest/ug/server-reference.html),
|
||||
[Cognito Identity](http://docs.aws.amazon.com/cognitoidentity/latest/APIReference/),
|
||||
[Cognito Sync](http://docs.aws.amazon.com/cognitosync/latest/APIReference/),
|
||||
[Container Service](http://docs.aws.amazon.com/AmazonECS/latest/APIReference/),
|
||||
[AppStream](http://docs.aws.amazon.com/appstream/latest/developerguide/appstream-api-rest.html),
|
||||
[Key Management Service](http://docs.aws.amazon.com/kms/latest/APIReference/),
|
||||
[Config](http://docs.aws.amazon.com/config/latest/APIReference/),
|
||||
[CloudHSM](http://docs.aws.amazon.com/cloudhsm/latest/dg/api-ref.html),
|
||||
[Route53](http://docs.aws.amazon.com/Route53/latest/APIReference/requests-rest.html) and
|
||||
[Route53 Domains](http://docs.aws.amazon.com/Route53/latest/APIReference/requests-rpc.html).
|
||||
|
||||
Indeed, the only AWS services that *don't* support v4 as of 2014-12-30 are
|
||||
[Import/Export](http://docs.aws.amazon.com/AWSImportExport/latest/DG/api-reference.html) and
|
||||
[SimpleDB](http://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API.html)
|
||||
(they only support [AWS Signature Version 2](https://github.com/mhart/aws2)).
|
||||
|
||||
It also provides defaults for a number of core AWS headers and
|
||||
request parameters, making it very easy to query AWS services, or
|
||||
build out a fully-featured AWS library.
|
||||
|
||||
Example
|
||||
-------
|
||||
|
||||
```javascript
|
||||
var http = require('http'),
|
||||
https = require('https'),
|
||||
aws4 = require('aws4')
|
||||
|
||||
// given an options object you could pass to http.request
|
||||
var opts = {host: 'sqs.us-east-1.amazonaws.com', path: '/?Action=ListQueues'}
|
||||
|
||||
// alternatively (as aws4 can infer the host):
|
||||
opts = {service: 'sqs', region: 'us-east-1', path: '/?Action=ListQueues'}
|
||||
|
||||
// alternatively (as us-east-1 is default):
|
||||
opts = {service: 'sqs', path: '/?Action=ListQueues'}
|
||||
|
||||
aws4.sign(opts) // assumes AWS credentials are available in process.env
|
||||
|
||||
console.log(opts)
|
||||
/*
|
||||
{
|
||||
host: 'sqs.us-east-1.amazonaws.com',
|
||||
path: '/?Action=ListQueues',
|
||||
headers: {
|
||||
Host: 'sqs.us-east-1.amazonaws.com',
|
||||
'X-Amz-Date': '20121226T061030Z',
|
||||
Authorization: 'AWS4-HMAC-SHA256 Credential=ABCDEF/20121226/us-east-1/sqs/aws4_request, ...'
|
||||
}
|
||||
}
|
||||
*/
|
||||
|
||||
// we can now use this to query AWS using the standard node.js http API
|
||||
http.request(opts, function(res) { res.pipe(process.stdout) }).end()
|
||||
/*
|
||||
<?xml version="1.0"?>
|
||||
<ListQueuesResponse xmlns="http://queue.amazonaws.com/doc/2012-11-05/">
|
||||
...
|
||||
*/
|
||||
```
|
||||
|
||||
More options
|
||||
------------
|
||||
|
||||
```javascript
|
||||
// you can also pass AWS credentials in explicitly (otherwise taken from process.env)
|
||||
aws4.sign(opts, {accessKeyId: '', secretAccessKey: ''})
|
||||
|
||||
// can also add the signature to query strings
|
||||
aws4.sign({service: 's3', path: '/my-bucket?X-Amz-Expires=12345', signQuery: true})
|
||||
|
||||
// create a utility function to pipe to stdout (with https this time)
|
||||
function request(o) { https.request(o, function(res) { res.pipe(process.stdout) }).end(o.body || '') }
|
||||
|
||||
// aws4 can infer the HTTP method if a body is passed in
|
||||
// method will be POST and Content-Type: 'application/x-www-form-urlencoded; charset=utf-8'
|
||||
request(aws4.sign({service: 'iam', body: 'Action=ListGroups&Version=2010-05-08'}))
|
||||
/*
|
||||
<ListGroupsResponse xmlns="https://iam.amazonaws.com/doc/2010-05-08/">
|
||||
...
|
||||
*/
|
||||
|
||||
// can specify any custom option or header as per usual
|
||||
request(aws4.sign({
|
||||
service: 'dynamodb',
|
||||
region: 'ap-southeast-2',
|
||||
method: 'POST',
|
||||
path: '/',
|
||||
headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.0',
|
||||
'X-Amz-Target': 'DynamoDB_20120810.ListTables'
|
||||
},
|
||||
body: '{}'
|
||||
}))
|
||||
/*
|
||||
{"TableNames":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
// works with all other services that support Signature Version 4
|
||||
|
||||
request(aws4.sign({service: 's3', path: '/', signQuery: true}))
|
||||
/*
|
||||
<ListAllMyBucketsResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'ec2', path: '/?Action=DescribeRegions&Version=2014-06-15'}))
|
||||
/*
|
||||
<DescribeRegionsResponse xmlns="http://ec2.amazonaws.com/doc/2014-06-15/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'sns', path: '/?Action=ListTopics&Version=2010-03-31'}))
|
||||
/*
|
||||
<ListTopicsResponse xmlns="http://sns.amazonaws.com/doc/2010-03-31/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'sts', path: '/?Action=GetSessionToken&Version=2011-06-15'}))
|
||||
/*
|
||||
<GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cloudsearch', path: '/?Action=ListDomainNames&Version=2013-01-01'}))
|
||||
/*
|
||||
<ListDomainNamesResponse xmlns="http://cloudsearch.amazonaws.com/doc/2013-01-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'ses', path: '/?Action=ListIdentities&Version=2010-12-01'}))
|
||||
/*
|
||||
<ListIdentitiesResponse xmlns="http://ses.amazonaws.com/doc/2010-12-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'autoscaling', path: '/?Action=DescribeAutoScalingInstances&Version=2011-01-01'}))
|
||||
/*
|
||||
<DescribeAutoScalingInstancesResponse xmlns="http://autoscaling.amazonaws.com/doc/2011-01-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'elasticloadbalancing', path: '/?Action=DescribeLoadBalancers&Version=2012-06-01'}))
|
||||
/*
|
||||
<DescribeLoadBalancersResponse xmlns="http://elasticloadbalancing.amazonaws.com/doc/2012-06-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cloudformation', path: '/?Action=ListStacks&Version=2010-05-15'}))
|
||||
/*
|
||||
<ListStacksResponse xmlns="http://cloudformation.amazonaws.com/doc/2010-05-15/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'elasticbeanstalk', path: '/?Action=ListAvailableSolutionStacks&Version=2010-12-01'}))
|
||||
/*
|
||||
<ListAvailableSolutionStacksResponse xmlns="http://elasticbeanstalk.amazonaws.com/docs/2010-12-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'rds', path: '/?Action=DescribeDBInstances&Version=2012-09-17'}))
|
||||
/*
|
||||
<DescribeDBInstancesResponse xmlns="http://rds.amazonaws.com/doc/2012-09-17/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'monitoring', path: '/?Action=ListMetrics&Version=2010-08-01'}))
|
||||
/*
|
||||
<ListMetricsResponse xmlns="http://monitoring.amazonaws.com/doc/2010-08-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'redshift', path: '/?Action=DescribeClusters&Version=2012-12-01'}))
|
||||
/*
|
||||
<DescribeClustersResponse xmlns="http://redshift.amazonaws.com/doc/2012-12-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cloudfront', path: '/2014-05-31/distribution'}))
|
||||
/*
|
||||
<DistributionList xmlns="http://cloudfront.amazonaws.com/doc/2014-05-31/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'elasticache', path: '/?Action=DescribeCacheClusters&Version=2014-07-15'}))
|
||||
/*
|
||||
<DescribeCacheClustersResponse xmlns="http://elasticache.amazonaws.com/doc/2014-07-15/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'elasticmapreduce', path: '/?Action=DescribeJobFlows&Version=2009-03-31'}))
|
||||
/*
|
||||
<DescribeJobFlowsResponse xmlns="http://elasticmapreduce.amazonaws.com/doc/2009-03-31">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'route53', path: '/2013-04-01/hostedzone'}))
|
||||
/*
|
||||
<ListHostedZonesResponse xmlns="https://route53.amazonaws.com/doc/2013-04-01/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'appstream', path: '/applications'}))
|
||||
/*
|
||||
{"_links":{"curie":[{"href":"http://docs.aws.amazon.com/appstream/latest/...
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cognito-sync', path: '/identitypools'}))
|
||||
/*
|
||||
{"Count":0,"IdentityPoolUsages":[],"MaxResults":16,"NextToken":null}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'elastictranscoder', path: '/2012-09-25/pipelines'}))
|
||||
/*
|
||||
{"NextPageToken":null,"Pipelines":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'lambda', path: '/2014-11-13/functions/'}))
|
||||
/*
|
||||
{"Functions":[],"NextMarker":null}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'ecs', path: '/?Action=ListClusters&Version=2014-11-13'}))
|
||||
/*
|
||||
<ListClustersResponse xmlns="http://ecs.amazonaws.com/doc/2014-11-13/">
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'glacier', path: '/-/vaults', headers: {'X-Amz-Glacier-Version': '2012-06-01'}}))
|
||||
/*
|
||||
{"Marker":null,"VaultList":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'storagegateway', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'StorageGateway_20120630.ListGateways'
|
||||
}}))
|
||||
/*
|
||||
{"Gateways":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'datapipeline', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'DataPipeline.ListPipelines'
|
||||
}}))
|
||||
/*
|
||||
{"hasMoreResults":false,"pipelineIdList":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'opsworks', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'OpsWorks_20130218.DescribeStacks'
|
||||
}}))
|
||||
/*
|
||||
{"Stacks":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'route53domains', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'Route53Domains_v20140515.ListDomains'
|
||||
}}))
|
||||
/*
|
||||
{"Domains":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'kinesis', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'Kinesis_20131202.ListStreams'
|
||||
}}))
|
||||
/*
|
||||
{"HasMoreStreams":false,"StreamNames":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cloudtrail', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'CloudTrail_20131101.DescribeTrails'
|
||||
}}))
|
||||
/*
|
||||
{"trailList":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'logs', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'Logs_20140328.DescribeLogGroups'
|
||||
}}))
|
||||
/*
|
||||
{"logGroups":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'codedeploy', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'CodeDeploy_20141006.ListApplications'
|
||||
}}))
|
||||
/*
|
||||
{"applications":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'directconnect', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'OvertureService.DescribeConnections'
|
||||
}}))
|
||||
/*
|
||||
{"connections":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'kms', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'TrentService.ListKeys'
|
||||
}}))
|
||||
/*
|
||||
{"Keys":[],"Truncated":false}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'config', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'StarlingDoveService.DescribeDeliveryChannels'
|
||||
}}))
|
||||
/*
|
||||
{"DeliveryChannels":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({service: 'cloudhsm', body: '{}', headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'CloudHsmFrontendService.ListAvailableZones'
|
||||
}}))
|
||||
/*
|
||||
{"AZList":["us-east-1a","us-east-1b","us-east-1c"]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({
|
||||
service: 'swf',
|
||||
body: '{"registrationStatus":"REGISTERED"}',
|
||||
headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.0',
|
||||
'X-Amz-Target': 'SimpleWorkflowService.ListDomains'
|
||||
}
|
||||
}))
|
||||
/*
|
||||
{"domainInfos":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({
|
||||
service: 'cognito-identity',
|
||||
body: '{"MaxResults": 1}',
|
||||
headers: {
|
||||
'Content-Type': 'application/x-amz-json-1.1',
|
||||
'X-Amz-Target': 'AWSCognitoIdentityService.ListIdentityPools'
|
||||
}
|
||||
}))
|
||||
/*
|
||||
{"IdentityPools":[]}
|
||||
...
|
||||
*/
|
||||
|
||||
request(aws4.sign({
|
||||
service: 'mobileanalytics',
|
||||
path: '/2014-06-05/events',
|
||||
body: JSON.stringify({events:[{
|
||||
eventType: 'a',
|
||||
timestamp: new Date().toISOString(),
|
||||
session: {},
|
||||
}]}),
|
||||
headers: {
|
||||
'Content-Type': 'application/json',
|
||||
'X-Amz-Client-Context': JSON.stringify({
|
||||
client: {client_id: 'a', app_title: 'a'},
|
||||
custom: {},
|
||||
env: {platform: 'a'},
|
||||
services: {},
|
||||
}),
|
||||
}
|
||||
}))
|
||||
/*
|
||||
(HTTP 202, empty response)
|
||||
*/
|
||||
|
||||
// Generate CodeCommit Git access password
|
||||
var signer = new aws4.RequestSigner({
|
||||
service: 'codecommit',
|
||||
host: 'git-codecommit.us-east-1.amazonaws.com',
|
||||
method: 'GIT',
|
||||
path: '/v1/repos/MyAwesomeRepo',
|
||||
})
|
||||
var password = signer.getDateTime() + 'Z' + signer.signature()
|
||||
```
|
||||
|
||||
API
|
||||
---
|
||||
|
||||
### aws4.sign(requestOptions, [credentials])
|
||||
|
||||
This calculates and populates the `Authorization` header of
|
||||
`requestOptions`, and any other necessary AWS headers and/or request
|
||||
options. Returns `requestOptions` as a convenience for chaining.
|
||||
|
||||
`requestOptions` is an object holding the same options that the node.js
|
||||
[http.request](http://nodejs.org/docs/latest/api/http.html#http_http_request_options_callback)
|
||||
function takes.
|
||||
|
||||
The following properties of `requestOptions` are used in the signing or
|
||||
populated if they don't already exist:
|
||||
|
||||
- `hostname` or `host` (will be determined from `service` and `region` if not given)
|
||||
- `method` (will use `'GET'` if not given or `'POST'` if there is a `body`)
|
||||
- `path` (will use `'/'` if not given)
|
||||
- `body` (will use `''` if not given)
|
||||
- `service` (will be calculated from `hostname` or `host` if not given)
|
||||
- `region` (will be calculated from `hostname` or `host` or use `'us-east-1'` if not given)
|
||||
- `headers['Host']` (will use `hostname` or `host` or be calculated if not given)
|
||||
- `headers['Content-Type']` (will use `'application/x-www-form-urlencoded; charset=utf-8'`
|
||||
if not given and there is a `body`)
|
||||
- `headers['Date']` (used to calculate the signature date if given, otherwise `new Date` is used)
|
||||
|
||||
Your AWS credentials (which can be found in your
|
||||
[AWS console](https://portal.aws.amazon.com/gp/aws/securityCredentials))
|
||||
can be specified in one of two ways:
|
||||
|
||||
- As the second argument, like this:
|
||||
|
||||
```javascript
|
||||
aws4.sign(requestOptions, {
|
||||
secretAccessKey: "<your-secret-access-key>",
|
||||
accessKeyId: "<your-access-key-id>",
|
||||
sessionToken: "<your-session-token>"
|
||||
})
|
||||
```
|
||||
|
||||
- From `process.env`, such as this:
|
||||
|
||||
```
|
||||
export AWS_SECRET_ACCESS_KEY="<your-secret-access-key>"
|
||||
export AWS_ACCESS_KEY_ID="<your-access-key-id>"
|
||||
export AWS_SESSION_TOKEN="<your-session-token>"
|
||||
```
|
||||
|
||||
(will also use `AWS_ACCESS_KEY` and `AWS_SECRET_KEY` if available)
|
||||
|
||||
The `sessionToken` property and `AWS_SESSION_TOKEN` environment variable are optional for signing
|
||||
with [IAM STS temporary credentials](http://docs.aws.amazon.com/STS/latest/UsingSTS/using-temp-creds.html).
|
||||
|
||||
Installation
|
||||
------------
|
||||
|
||||
With [npm](http://npmjs.org/) do:
|
||||
|
||||
```
|
||||
npm install aws4
|
||||
```
|
||||
|
||||
Can also be used [in the browser](./browser).
|
||||
|
||||
Thanks
|
||||
------
|
||||
|
||||
Thanks to [@jed](https://github.com/jed) for his
|
||||
[dynamo-client](https://github.com/jed/dynamo-client) lib where I first
|
||||
committed and subsequently extracted this code.
|
||||
|
||||
Also thanks to the
|
||||
[official node.js AWS SDK](https://github.com/aws/aws-sdk-js) for giving
|
||||
me a start on implementing the v4 signature.
|
||||
|
||||
332
node_modules/aws4/aws4.js
generated
vendored
Normal file
332
node_modules/aws4/aws4.js
generated
vendored
Normal file
|
|
@ -0,0 +1,332 @@
|
|||
var aws4 = exports,
|
||||
url = require('url'),
|
||||
querystring = require('querystring'),
|
||||
crypto = require('crypto'),
|
||||
lru = require('./lru'),
|
||||
credentialsCache = lru(1000)
|
||||
|
||||
// http://docs.amazonwebservices.com/general/latest/gr/signature-version-4.html
|
||||
|
||||
function hmac(key, string, encoding) {
|
||||
return crypto.createHmac('sha256', key).update(string, 'utf8').digest(encoding)
|
||||
}
|
||||
|
||||
function hash(string, encoding) {
|
||||
return crypto.createHash('sha256').update(string, 'utf8').digest(encoding)
|
||||
}
|
||||
|
||||
// This function assumes the string has already been percent encoded
|
||||
function encodeRfc3986(urlEncodedString) {
|
||||
return urlEncodedString.replace(/[!'()*]/g, function(c) {
|
||||
return '%' + c.charCodeAt(0).toString(16).toUpperCase()
|
||||
})
|
||||
}
|
||||
|
||||
// request: { path | body, [host], [method], [headers], [service], [region] }
|
||||
// credentials: { accessKeyId, secretAccessKey, [sessionToken] }
|
||||
function RequestSigner(request, credentials) {
|
||||
|
||||
if (typeof request === 'string') request = url.parse(request)
|
||||
|
||||
var headers = request.headers = (request.headers || {}),
|
||||
hostParts = this.matchHost(request.hostname || request.host || headers.Host || headers.host)
|
||||
|
||||
this.request = request
|
||||
this.credentials = credentials || this.defaultCredentials()
|
||||
|
||||
this.service = request.service || hostParts[0] || ''
|
||||
this.region = request.region || hostParts[1] || 'us-east-1'
|
||||
|
||||
// SES uses a different domain from the service name
|
||||
if (this.service === 'email') this.service = 'ses'
|
||||
|
||||
if (!request.method && request.body)
|
||||
request.method = 'POST'
|
||||
|
||||
if (!headers.Host && !headers.host) {
|
||||
headers.Host = request.hostname || request.host || this.createHost()
|
||||
|
||||
// If a port is specified explicitly, use it as is
|
||||
if (request.port)
|
||||
headers.Host += ':' + request.port
|
||||
}
|
||||
if (!request.hostname && !request.host)
|
||||
request.hostname = headers.Host || headers.host
|
||||
|
||||
this.isCodeCommitGit = this.service === 'codecommit' && request.method === 'GIT'
|
||||
}
|
||||
|
||||
RequestSigner.prototype.matchHost = function(host) {
|
||||
var match = (host || '').match(/([^\.]+)\.(?:([^\.]*)\.)?amazonaws\.com(\.cn)?$/)
|
||||
var hostParts = (match || []).slice(1, 3)
|
||||
|
||||
// ES's hostParts are sometimes the other way round, if the value that is expected
|
||||
// to be region equals ‘es’ switch them back
|
||||
// e.g. search-cluster-name-aaaa00aaaa0aaa0aaaaaaa0aaa.us-east-1.es.amazonaws.com
|
||||
if (hostParts[1] === 'es')
|
||||
hostParts = hostParts.reverse()
|
||||
|
||||
return hostParts
|
||||
}
|
||||
|
||||
// http://docs.aws.amazon.com/general/latest/gr/rande.html
|
||||
RequestSigner.prototype.isSingleRegion = function() {
|
||||
// Special case for S3 and SimpleDB in us-east-1
|
||||
if (['s3', 'sdb'].indexOf(this.service) >= 0 && this.region === 'us-east-1') return true
|
||||
|
||||
return ['cloudfront', 'ls', 'route53', 'iam', 'importexport', 'sts']
|
||||
.indexOf(this.service) >= 0
|
||||
}
|
||||
|
||||
RequestSigner.prototype.createHost = function() {
|
||||
var region = this.isSingleRegion() ? '' :
|
||||
(this.service === 's3' && this.region !== 'us-east-1' ? '-' : '.') + this.region,
|
||||
service = this.service === 'ses' ? 'email' : this.service
|
||||
return service + region + '.amazonaws.com'
|
||||
}
|
||||
|
||||
RequestSigner.prototype.prepareRequest = function() {
|
||||
this.parsePath()
|
||||
|
||||
var request = this.request, headers = request.headers, query
|
||||
|
||||
if (request.signQuery) {
|
||||
|
||||
this.parsedPath.query = query = this.parsedPath.query || {}
|
||||
|
||||
if (this.credentials.sessionToken)
|
||||
query['X-Amz-Security-Token'] = this.credentials.sessionToken
|
||||
|
||||
if (this.service === 's3' && !query['X-Amz-Expires'])
|
||||
query['X-Amz-Expires'] = 86400
|
||||
|
||||
if (query['X-Amz-Date'])
|
||||
this.datetime = query['X-Amz-Date']
|
||||
else
|
||||
query['X-Amz-Date'] = this.getDateTime()
|
||||
|
||||
query['X-Amz-Algorithm'] = 'AWS4-HMAC-SHA256'
|
||||
query['X-Amz-Credential'] = this.credentials.accessKeyId + '/' + this.credentialString()
|
||||
query['X-Amz-SignedHeaders'] = this.signedHeaders()
|
||||
|
||||
} else {
|
||||
|
||||
if (!request.doNotModifyHeaders && !this.isCodeCommitGit) {
|
||||
if (request.body && !headers['Content-Type'] && !headers['content-type'])
|
||||
headers['Content-Type'] = 'application/x-www-form-urlencoded; charset=utf-8'
|
||||
|
||||
if (request.body && !headers['Content-Length'] && !headers['content-length'])
|
||||
headers['Content-Length'] = Buffer.byteLength(request.body)
|
||||
|
||||
if (this.credentials.sessionToken && !headers['X-Amz-Security-Token'] && !headers['x-amz-security-token'])
|
||||
headers['X-Amz-Security-Token'] = this.credentials.sessionToken
|
||||
|
||||
if (this.service === 's3' && !headers['X-Amz-Content-Sha256'] && !headers['x-amz-content-sha256'])
|
||||
headers['X-Amz-Content-Sha256'] = hash(this.request.body || '', 'hex')
|
||||
|
||||
if (headers['X-Amz-Date'] || headers['x-amz-date'])
|
||||
this.datetime = headers['X-Amz-Date'] || headers['x-amz-date']
|
||||
else
|
||||
headers['X-Amz-Date'] = this.getDateTime()
|
||||
}
|
||||
|
||||
delete headers.Authorization
|
||||
delete headers.authorization
|
||||
}
|
||||
}
|
||||
|
||||
RequestSigner.prototype.sign = function() {
|
||||
if (!this.parsedPath) this.prepareRequest()
|
||||
|
||||
if (this.request.signQuery) {
|
||||
this.parsedPath.query['X-Amz-Signature'] = this.signature()
|
||||
} else {
|
||||
this.request.headers.Authorization = this.authHeader()
|
||||
}
|
||||
|
||||
this.request.path = this.formatPath()
|
||||
|
||||
return this.request
|
||||
}
|
||||
|
||||
RequestSigner.prototype.getDateTime = function() {
|
||||
if (!this.datetime) {
|
||||
var headers = this.request.headers,
|
||||
date = new Date(headers.Date || headers.date || new Date)
|
||||
|
||||
this.datetime = date.toISOString().replace(/[:\-]|\.\d{3}/g, '')
|
||||
|
||||
// Remove the trailing 'Z' on the timestamp string for CodeCommit git access
|
||||
if (this.isCodeCommitGit) this.datetime = this.datetime.slice(0, -1)
|
||||
}
|
||||
return this.datetime
|
||||
}
|
||||
|
||||
RequestSigner.prototype.getDate = function() {
|
||||
return this.getDateTime().substr(0, 8)
|
||||
}
|
||||
|
||||
RequestSigner.prototype.authHeader = function() {
|
||||
return [
|
||||
'AWS4-HMAC-SHA256 Credential=' + this.credentials.accessKeyId + '/' + this.credentialString(),
|
||||
'SignedHeaders=' + this.signedHeaders(),
|
||||
'Signature=' + this.signature(),
|
||||
].join(', ')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.signature = function() {
|
||||
var date = this.getDate(),
|
||||
cacheKey = [this.credentials.secretAccessKey, date, this.region, this.service].join(),
|
||||
kDate, kRegion, kService, kCredentials = credentialsCache.get(cacheKey)
|
||||
if (!kCredentials) {
|
||||
kDate = hmac('AWS4' + this.credentials.secretAccessKey, date)
|
||||
kRegion = hmac(kDate, this.region)
|
||||
kService = hmac(kRegion, this.service)
|
||||
kCredentials = hmac(kService, 'aws4_request')
|
||||
credentialsCache.set(cacheKey, kCredentials)
|
||||
}
|
||||
return hmac(kCredentials, this.stringToSign(), 'hex')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.stringToSign = function() {
|
||||
return [
|
||||
'AWS4-HMAC-SHA256',
|
||||
this.getDateTime(),
|
||||
this.credentialString(),
|
||||
hash(this.canonicalString(), 'hex'),
|
||||
].join('\n')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.canonicalString = function() {
|
||||
if (!this.parsedPath) this.prepareRequest()
|
||||
|
||||
var pathStr = this.parsedPath.path,
|
||||
query = this.parsedPath.query,
|
||||
headers = this.request.headers,
|
||||
queryStr = '',
|
||||
normalizePath = this.service !== 's3',
|
||||
decodePath = this.service === 's3' || this.request.doNotEncodePath,
|
||||
decodeSlashesInPath = this.service === 's3',
|
||||
firstValOnly = this.service === 's3',
|
||||
bodyHash
|
||||
|
||||
if (this.service === 's3' && this.request.signQuery) {
|
||||
bodyHash = 'UNSIGNED-PAYLOAD'
|
||||
} else if (this.isCodeCommitGit) {
|
||||
bodyHash = ''
|
||||
} else {
|
||||
bodyHash = headers['X-Amz-Content-Sha256'] || headers['x-amz-content-sha256'] ||
|
||||
hash(this.request.body || '', 'hex')
|
||||
}
|
||||
|
||||
if (query) {
|
||||
queryStr = encodeRfc3986(querystring.stringify(Object.keys(query).sort().reduce(function(obj, key) {
|
||||
if (!key) return obj
|
||||
obj[key] = !Array.isArray(query[key]) ? query[key] :
|
||||
(firstValOnly ? query[key][0] : query[key].slice().sort())
|
||||
return obj
|
||||
}, {})))
|
||||
}
|
||||
if (pathStr !== '/') {
|
||||
if (normalizePath) pathStr = pathStr.replace(/\/{2,}/g, '/')
|
||||
pathStr = pathStr.split('/').reduce(function(path, piece) {
|
||||
if (normalizePath && piece === '..') {
|
||||
path.pop()
|
||||
} else if (!normalizePath || piece !== '.') {
|
||||
if (decodePath) piece = decodeURIComponent(piece)
|
||||
path.push(encodeRfc3986(encodeURIComponent(piece)))
|
||||
}
|
||||
return path
|
||||
}, []).join('/')
|
||||
if (pathStr[0] !== '/') pathStr = '/' + pathStr
|
||||
if (decodeSlashesInPath) pathStr = pathStr.replace(/%2F/g, '/')
|
||||
}
|
||||
|
||||
return [
|
||||
this.request.method || 'GET',
|
||||
pathStr,
|
||||
queryStr,
|
||||
this.canonicalHeaders() + '\n',
|
||||
this.signedHeaders(),
|
||||
bodyHash,
|
||||
].join('\n')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.canonicalHeaders = function() {
|
||||
var headers = this.request.headers
|
||||
function trimAll(header) {
|
||||
return header.toString().trim().replace(/\s+/g, ' ')
|
||||
}
|
||||
return Object.keys(headers)
|
||||
.sort(function(a, b) { return a.toLowerCase() < b.toLowerCase() ? -1 : 1 })
|
||||
.map(function(key) { return key.toLowerCase() + ':' + trimAll(headers[key]) })
|
||||
.join('\n')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.signedHeaders = function() {
|
||||
return Object.keys(this.request.headers)
|
||||
.map(function(key) { return key.toLowerCase() })
|
||||
.sort()
|
||||
.join(';')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.credentialString = function() {
|
||||
return [
|
||||
this.getDate(),
|
||||
this.region,
|
||||
this.service,
|
||||
'aws4_request',
|
||||
].join('/')
|
||||
}
|
||||
|
||||
RequestSigner.prototype.defaultCredentials = function() {
|
||||
var env = process.env
|
||||
return {
|
||||
accessKeyId: env.AWS_ACCESS_KEY_ID || env.AWS_ACCESS_KEY,
|
||||
secretAccessKey: env.AWS_SECRET_ACCESS_KEY || env.AWS_SECRET_KEY,
|
||||
sessionToken: env.AWS_SESSION_TOKEN,
|
||||
}
|
||||
}
|
||||
|
||||
RequestSigner.prototype.parsePath = function() {
|
||||
var path = this.request.path || '/',
|
||||
queryIx = path.indexOf('?'),
|
||||
query = null
|
||||
|
||||
if (queryIx >= 0) {
|
||||
query = querystring.parse(path.slice(queryIx + 1))
|
||||
path = path.slice(0, queryIx)
|
||||
}
|
||||
|
||||
// S3 doesn't always encode characters > 127 correctly and
|
||||
// all services don't encode characters > 255 correctly
|
||||
// So if there are non-reserved chars (and it's not already all % encoded), just encode them all
|
||||
if (/[^0-9A-Za-z!'()*\-._~%/]/.test(path)) {
|
||||
path = path.split('/').map(function(piece) {
|
||||
return encodeURIComponent(decodeURIComponent(piece))
|
||||
}).join('/')
|
||||
}
|
||||
|
||||
this.parsedPath = {
|
||||
path: path,
|
||||
query: query,
|
||||
}
|
||||
}
|
||||
|
||||
RequestSigner.prototype.formatPath = function() {
|
||||
var path = this.parsedPath.path,
|
||||
query = this.parsedPath.query
|
||||
|
||||
if (!query) return path
|
||||
|
||||
// Services don't support empty query string keys
|
||||
if (query[''] != null) delete query['']
|
||||
|
||||
return path + '?' + encodeRfc3986(querystring.stringify(query))
|
||||
}
|
||||
|
||||
aws4.RequestSigner = RequestSigner
|
||||
|
||||
aws4.sign = function(request, credentials) {
|
||||
return new RequestSigner(request, credentials).sign()
|
||||
}
|
||||
96
node_modules/aws4/lru.js
generated
vendored
Normal file
96
node_modules/aws4/lru.js
generated
vendored
Normal file
|
|
@ -0,0 +1,96 @@
|
|||
module.exports = function(size) {
|
||||
return new LruCache(size)
|
||||
}
|
||||
|
||||
function LruCache(size) {
|
||||
this.capacity = size | 0
|
||||
this.map = Object.create(null)
|
||||
this.list = new DoublyLinkedList()
|
||||
}
|
||||
|
||||
LruCache.prototype.get = function(key) {
|
||||
var node = this.map[key]
|
||||
if (node == null) return undefined
|
||||
this.used(node)
|
||||
return node.val
|
||||
}
|
||||
|
||||
LruCache.prototype.set = function(key, val) {
|
||||
var node = this.map[key]
|
||||
if (node != null) {
|
||||
node.val = val
|
||||
} else {
|
||||
if (!this.capacity) this.prune()
|
||||
if (!this.capacity) return false
|
||||
node = new DoublyLinkedNode(key, val)
|
||||
this.map[key] = node
|
||||
this.capacity--
|
||||
}
|
||||
this.used(node)
|
||||
return true
|
||||
}
|
||||
|
||||
LruCache.prototype.used = function(node) {
|
||||
this.list.moveToFront(node)
|
||||
}
|
||||
|
||||
LruCache.prototype.prune = function() {
|
||||
var node = this.list.pop()
|
||||
if (node != null) {
|
||||
delete this.map[node.key]
|
||||
this.capacity++
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
function DoublyLinkedList() {
|
||||
this.firstNode = null
|
||||
this.lastNode = null
|
||||
}
|
||||
|
||||
DoublyLinkedList.prototype.moveToFront = function(node) {
|
||||
if (this.firstNode == node) return
|
||||
|
||||
this.remove(node)
|
||||
|
||||
if (this.firstNode == null) {
|
||||
this.firstNode = node
|
||||
this.lastNode = node
|
||||
node.prev = null
|
||||
node.next = null
|
||||
} else {
|
||||
node.prev = null
|
||||
node.next = this.firstNode
|
||||
node.next.prev = node
|
||||
this.firstNode = node
|
||||
}
|
||||
}
|
||||
|
||||
DoublyLinkedList.prototype.pop = function() {
|
||||
var lastNode = this.lastNode
|
||||
if (lastNode != null) {
|
||||
this.remove(lastNode)
|
||||
}
|
||||
return lastNode
|
||||
}
|
||||
|
||||
DoublyLinkedList.prototype.remove = function(node) {
|
||||
if (this.firstNode == node) {
|
||||
this.firstNode = node.next
|
||||
} else if (node.prev != null) {
|
||||
node.prev.next = node.next
|
||||
}
|
||||
if (this.lastNode == node) {
|
||||
this.lastNode = node.prev
|
||||
} else if (node.next != null) {
|
||||
node.next.prev = node.prev
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
function DoublyLinkedNode(key, val) {
|
||||
this.key = key
|
||||
this.val = val
|
||||
this.prev = null
|
||||
this.next = null
|
||||
}
|
||||
75
node_modules/aws4/package.json
generated
vendored
Normal file
75
node_modules/aws4/package.json
generated
vendored
Normal file
|
|
@ -0,0 +1,75 @@
|
|||
{
|
||||
"name": "aws4",
|
||||
"version": "1.8.0",
|
||||
"description": "Signs and prepares requests using AWS Signature Version 4",
|
||||
"author": "Michael Hart <michael.hart.au@gmail.com> (http://github.com/mhart)",
|
||||
"main": "aws4.js",
|
||||
"keywords": [
|
||||
"amazon",
|
||||
"aws",
|
||||
"signature",
|
||||
"s3",
|
||||
"ec2",
|
||||
"autoscaling",
|
||||
"cloudformation",
|
||||
"elasticloadbalancing",
|
||||
"elb",
|
||||
"elasticbeanstalk",
|
||||
"cloudsearch",
|
||||
"dynamodb",
|
||||
"kinesis",
|
||||
"lambda",
|
||||
"glacier",
|
||||
"sqs",
|
||||
"sns",
|
||||
"iam",
|
||||
"sts",
|
||||
"ses",
|
||||
"swf",
|
||||
"storagegateway",
|
||||
"datapipeline",
|
||||
"directconnect",
|
||||
"redshift",
|
||||
"opsworks",
|
||||
"rds",
|
||||
"monitoring",
|
||||
"cloudtrail",
|
||||
"cloudfront",
|
||||
"codedeploy",
|
||||
"elasticache",
|
||||
"elasticmapreduce",
|
||||
"elastictranscoder",
|
||||
"emr",
|
||||
"cloudwatch",
|
||||
"mobileanalytics",
|
||||
"cognitoidentity",
|
||||
"cognitosync",
|
||||
"cognito",
|
||||
"containerservice",
|
||||
"ecs",
|
||||
"appstream",
|
||||
"keymanagementservice",
|
||||
"kms",
|
||||
"config",
|
||||
"cloudhsm",
|
||||
"route53",
|
||||
"route53domains",
|
||||
"logs"
|
||||
],
|
||||
"repository": {
|
||||
"type": "git",
|
||||
"url": "https://github.com/mhart/aws4.git"
|
||||
},
|
||||
"license": "MIT",
|
||||
"devDependencies": {
|
||||
"mocha": "^2.4.5",
|
||||
"should": "^8.2.2"
|
||||
},
|
||||
"scripts": {
|
||||
"test": "mocha ./test/fast.js ./test/slow.js -b -t 100s -R list"
|
||||
}
|
||||
|
||||
,"_resolved": "https://registry.npmjs.org/aws4/-/aws4-1.8.0.tgz"
|
||||
,"_integrity": "sha512-ReZxvNHIOv88FlT7rxcXIIC0fPt4KZqZbOlivyWtXLt8ESx84zd3kMC6iK5jVeS2qt+g7ftS7ye4fi06X5rtRQ=="
|
||||
,"_from": "aws4@1.8.0"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue