node-microsvc-lib
Version:
NodeJS microservice framework library
108 lines • 5.02 kB
JavaScript
"use strict";
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.AWSSecretsManagerProvider = void 0;
const AWS = require("aws-sdk");
const assert = __importStar(require("assert"));
class AWSSecretsManagerProvider {
constructor(solution_name, secret_name, region, aws_creds, aws_role_name = null) {
this._aws_role_name = null;
this._kvs = new Map();
this._solution_name = solution_name;
this._region = region;
this._secret_name = secret_name;
this._aws_creds = aws_creds;
this._aws_role_name = aws_role_name;
assert.ok(this._region);
assert.ok(this._secret_name);
assert.ok(this._aws_creds.accessKeyId);
assert.ok(this._aws_creds.secretAccessKey);
// assert.ok(this._aws_creds.sessionToken); // this is optional
}
get solution_name() {
return this._solution_name;
}
init(keys) {
return __awaiter(this, void 0, void 0, function* () {
if (this._aws_role_name) {
// assume role
const sts = new AWS.STS({});
const role_params = {
RoleArn: this._aws_role_name,
RoleSessionName: `${this._solution_name}_assume_role_session`
};
sts.assumeRole(role_params, (err, data) => {
if (err)
return Promise.reject(err);
if (!data)
return new Error(`AWSSecretsManagerProvider - Could not assume role and get credentials from it`);
// successful response
// @ts-ignore
this._aws_runtime_credentials = new AWS.Credentials(data.Credentials.AccessKeyId, data.Credentials.SecretAccessKey, data.Credentials.SessionToken);
return this._fetch_all_from_aws_secrets_manager(keys);
});
}
else {
// fetch all
this._aws_runtime_credentials = new AWS.Credentials(this._aws_creds.accessKeyId, this._aws_creds.secretAccessKey, this._aws_creds.sessionToken);
return this._fetch_all_from_aws_secrets_manager(keys);
}
});
}
get_value(key_name) {
return this._kvs.get(key_name) || null;
}
_fetch_all_from_aws_secrets_manager(keys) {
return __awaiter(this, void 0, void 0, function* () {
return new Promise((resolve, reject) => {
const secrets_manager = new AWS.SecretsManager({ region: this._region, credentials: this._aws_runtime_credentials });
secrets_manager.getSecretValue({ SecretId: this._secret_name }, (err, secret_data) => {
if (err)
return reject(err);
try {
// successful response
const secrets = JSON.parse(String(secret_data.SecretString));
keys.forEach((key) => {
if (key in secrets) {
this._kvs.set(key, secrets[key]);
}
});
return resolve();
}
catch (e) {
return reject(e);
}
});
});
});
}
}
exports.AWSSecretsManagerProvider = AWSSecretsManagerProvider;
//# sourceMappingURL=aws_secrets_manager.js.map