Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@aws-sdk/token-providers
Advanced tools
@aws-sdk/token-providers is a package within the AWS SDK for JavaScript that provides various token providers for acquiring and managing tokens used for authentication and authorization with AWS services.
FromSSOToken
This feature allows you to create a token provider that retrieves tokens from AWS Single Sign-On (SSO). The code sample demonstrates how to configure the SSO token provider with a specific SSO session.
const { fromSSOToken } = require('@aws-sdk/token-providers');
const ssoTokenProvider = fromSSOToken({
ssoClient: new SSOClient({ region: 'us-west-2' }),
ssoSession: 'my-sso-session'
});
FromWebIdentityToken
This feature allows you to create a token provider that retrieves tokens from a web identity token file. The code sample demonstrates how to configure the web identity token provider with a specific role ARN and token file path.
const { fromWebIdentityToken } = require('@aws-sdk/token-providers');
const webIdentityTokenProvider = fromWebIdentityToken({
roleArn: 'arn:aws:iam::123456789012:role/WebIdentityRole',
webIdentityTokenFile: '/path/to/token'
});
FromCognitoIdentity
This feature allows you to create a token provider that retrieves tokens from Amazon Cognito Identity. The code sample demonstrates how to configure the Cognito identity token provider with a specific identity pool ID and logins.
const { fromCognitoIdentity } = require('@aws-sdk/token-providers');
const cognitoIdentityProvider = fromCognitoIdentity({
identityPoolId: 'us-west-2:example-pool-id',
logins: {
'cognito-idp.us-west-2.amazonaws.com/us-west-2_example': 'example-token'
}
});
The 'aws-sdk' package is the official AWS SDK for JavaScript, which includes a wide range of services and features for interacting with AWS. It provides comprehensive support for AWS services, including token management, but it is a larger package compared to @aws-sdk/token-providers, which is more focused on token providers.
The 'aws-amplify' package is a JavaScript library for frontend and mobile developers building cloud-enabled applications. It includes support for authentication, including token management with Amazon Cognito. While it offers similar functionalities, it is more geared towards frontend development and user authentication flows.
The 'aws-cdk' package is the AWS Cloud Development Kit, which allows developers to define cloud infrastructure using code. It includes support for managing authentication and authorization tokens as part of infrastructure as code. However, it is primarily focused on infrastructure management rather than just token providers.
A collection of all token providers. The token providers should be used when the authorization
type is going to be token based. For example, the bearer
authorization type set using
httpBearerAuth trait in Smithy.
import { fromStatic } from "@aws-sdk/token-providers"
const token = { token: "TOKEN" };
const staticTokenProvider = fromStatic(token);
cont staticToken = await staticTokenProvider(); // returns { token: "TOKEN" }
import { fromSso } from "@aws-sdk/token-providers"
// returns token from SSO token cache or ssoOidc.createToken() call.
cont ssoToken = await fromSso();
import { nodeProvider } from "@aws-sdk/token-providers"
// returns token from default providers.
cont token = await nodeProvider();
3.202.0 (2022-11-02)
FAQs
A collection of token providers
The npm package @aws-sdk/token-providers receives a total of 16,598,980 weekly downloads. As such, @aws-sdk/token-providers popularity was classified as popular.
We found that @aws-sdk/token-providers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.