@sp-api-sdk/auth - npm Package Compare versions

Comparing version 1.7.4 to 1.8.0

dist/cjs/package.json

@@ -5,3 +5,3 @@ {
     "description": "Amazon Selling Partner API authentication helper class",
-    "version": "1.7.3",
+    "version": "1.7.4",
     "main": "dist/cjs/index.js",
@@ -8,0 +8,0 @@ "module": "dist/es/index.js",

dist/cjs/src/security-token-service/index.js

@@ -12,2 +12,3 @@ "use strict";
         this.secretAccessKey = parameters.secretAccessKey;
+        this.sessionToken = parameters.sessionToken;
         this.role = parameters.role;
@@ -33,3 +34,4 @@ this.region = parameters.region;
                 accessKeyId: this.accessKeyId,
-                secretAccessKey: this.secretAccessKey
+                secretAccessKey: this.secretAccessKey,
+                sessionToken: this.sessionToken
             }
@@ -36,0 +38,0 @@ };

dist/cjs/src/selling-partner-api-auth.js

@@ -19,10 +19,11 @@ "use strict";
         const secretAccessKey = parameters.secretAccessKey || process.env.AWS_SECRET_ACCESS_KEY;
+        const sessionToken = parameters.sessionToken || process.env.AWS_SESSION_TOKEN;
         const region = parameters.region || process.env.AWS_DEFAULT_REGION;
-        const arn = parameters.role?.arn || process.env.AWS_ROLE_ARN;
-        const sessionName = parameters.role?.sessionName || process.env.AWS_ROLE_SESSION_NAME || `${package_json_1.default.name.replace('/', '-')}@${package_json_1.default.version}`;
+        const roleArn = parameters.role?.arn || process.env.AWS_ROLE_ARN;
+        const roleSessionName = parameters.role?.sessionName || process.env.AWS_ROLE_SESSION_NAME || `${package_json_1.default.name.replace('/', '-')}@${package_json_1.default.version}`;
         let role = null;
-        if (arn) {
+        if (roleArn) {
             role = {
-                arn,
-                sessionName
+                arn: roleArn,
+                sessionName: roleSessionName
             };
@@ -44,2 +45,3 @@ }
         this._secretAccessKey = secretAccessKey;
+        this._sessionToken = sessionToken;
         if (parameters.refreshToken) {
@@ -80,3 +82,4 @@ this.accessToken = new access_token_1.AccessToken({
             AccessKeyId: this._accessKeyId,
-            SecretAccessKey: this._secretAccessKey
+            SecretAccessKey: this._secretAccessKey,
+            SessionToken: this._sessionToken
         };
@@ -83,0 +86,0 @@ }

dist/es/package.json

@@ -5,3 +5,3 @@ {
     "description": "Amazon Selling Partner API authentication helper class",
-    "version": "1.7.3",
+    "version": "1.7.4",
     "main": "dist/cjs/index.js",
@@ -8,0 +8,0 @@ "module": "dist/es/index.js",

dist/es/src/security-token-service/index.js

@@ -8,2 +8,3 @@ import { STSClient, AssumeRoleCommand } from '@aws-sdk/client-sts';
         this.secretAccessKey = parameters.secretAccessKey;
+        this.sessionToken = parameters.sessionToken;
         this.role = parameters.role;
@@ -29,3 +30,4 @@ this.region = parameters.region;
                 accessKeyId: this.accessKeyId,
-                secretAccessKey: this.secretAccessKey
+                secretAccessKey: this.secretAccessKey,
+                sessionToken: this.sessionToken
             }
@@ -32,0 +34,0 @@ };

dist/es/src/selling-partner-api-auth.js

@@ -15,10 +15,11 @@ /* eslint-disable @typescript-eslint/prefer-nullish-coalescing */
         const secretAccessKey = parameters.secretAccessKey || process.env.AWS_SECRET_ACCESS_KEY;
+        const sessionToken = parameters.sessionToken || process.env.AWS_SESSION_TOKEN;
         const region = parameters.region || process.env.AWS_DEFAULT_REGION;
-        const arn = parameters.role?.arn || process.env.AWS_ROLE_ARN;
-        const sessionName = parameters.role?.sessionName || process.env.AWS_ROLE_SESSION_NAME || `${pkg.name.replace('/', '-')}@${pkg.version}`;
+        const roleArn = parameters.role?.arn || process.env.AWS_ROLE_ARN;
+        const roleSessionName = parameters.role?.sessionName || process.env.AWS_ROLE_SESSION_NAME || `${pkg.name.replace('/', '-')}@${pkg.version}`;
         let role = null;
-        if (arn) {
+        if (roleArn) {
             role = {
-                arn,
-                sessionName
+                arn: roleArn,
+                sessionName: roleSessionName
             };
@@ -40,2 +41,3 @@ }
         this._secretAccessKey = secretAccessKey;
+        this._sessionToken = sessionToken;
         if (parameters.refreshToken) {
@@ -76,5 +78,6 @@ this.accessToken = new AccessToken({
             AccessKeyId: this._accessKeyId,
-            SecretAccessKey: this._secretAccessKey
+            SecretAccessKey: this._secretAccessKey,
+            SessionToken: this._sessionToken
         };
     }
 }

dist/types/src/security-token-service/index.d.ts

@@ -10,2 +10,3 @@ import { Credentials } from '@aws-sdk/client-sts';
     secretAccessKey: string;
+    sessionToken?: string;
     role: Role;
@@ -17,2 +18,3 @@ region?: string;
     readonly secretAccessKey: string;
+    readonly sessionToken?: string;
     readonly role: Role;
@@ -19,0 +21,0 @@ readonly region?: string;

dist/types/src/selling-partner-api-auth.d.ts

@@ -12,2 +12,3 @@ import { Credentials } from '@aws-sdk/client-sts';
     secretAccessKey?: string;
+    sessionToken?: string;
     region?: string;
@@ -27,2 +28,3 @@ role?: {
     private readonly _secretAccessKey;
+    private readonly _sessionToken?;
     constructor(parameters: RequireExactlyOne<SellingPartnerAuthParameters, 'refreshToken' | 'scopes'>);
@@ -29,0 +31,0 @@ /**

package.json

@@ -5,3 +5,3 @@ {
   "description": "Amazon Selling Partner API authentication helper class",
-  "version": "1.7.4",
+  "version": "1.8.0",
   "main": "dist/cjs/index.js",
@@ -52,3 +52,3 @@ "module": "dist/es/index.js",
   ],
-  "gitHead": "7aa045dcc123032271f4b032b9a1ae64c4ec50c9"
+  "gitHead": "afad96821e26dec6062f5d13947498835e0f6396"
 }

README.md

@@ -24,3 +24,4 @@ # `@sp-api-sdk/auth`
   accessKeyId: '',
-  secretAccessKey: ''
+  secretAccessKey: '',
+  sessionToken: '' // If you’re authenticated using temporary credentials
 })
@@ -67,2 +68,3 @@
 | `secretAccessKey`  | AWS_SECRET_ACCESS_KEY  |
+| `sessionToken`     | AWS_SESSION_TOKEN      |
 | `region`           | AWS_DEFAULT_REGION     |
@@ -69,0 +71,0 @@ | `role.arn`         | AWS_ROLE_ARN           |

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

126588

increased by0.7%

Lines of code

531

increased by2.71%

Number of lines in readme file

100

increased by2.04%

Worsened metrics

Number of low supply chain risk alerts

16

increased by14.29%

No dependency changes