tencentcloud-sdk-nodejs
Version:
49 lines (48 loc) • 1.88 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const tslib_1 = require("tslib");
const fetch_1 = tslib_1.__importDefault(require("./http/fetch"));
const META_URL = "http://metadata.tencentyun.com/latest/meta-data/";
const ROLE_URL = META_URL + "cam/security-credentials/";
const EXPIRE_BUFFER = 30 * 1000;
class CvmRoleCredential {
async getRoleName() {
const response = await fetch_1.default(ROLE_URL, {});
if (!response.ok) {
throw new Error("Get cvm role name failed, Please confirm whether the role is bound");
}
return await response.text();
}
async getRoleCredential(roleName) {
const response = await fetch_1.default(ROLE_URL + roleName, {});
if (!response.ok) {
throw new Error(`Get credential from metadata server by role name ${roleName} failed, http code: ${response.status}`);
}
const json = await response.json();
if (json.Code !== "Success") {
throw new Error(`Get credential from metadata server by role name ${roleName} failed, Code: ${json.Code}`);
}
return json;
}
async getCredential() {
if (!this.roleNameTask) {
this.roleNameTask = this.getRoleName();
}
const roleName = await this.roleNameTask;
if (!this.credentialTask) {
this.credentialTask = this.getRoleCredential(roleName);
}
const credential = await this.credentialTask;
// expired
if (credential.ExpiredTime * 1000 - EXPIRE_BUFFER <= Date.now()) {
this.credentialTask = null;
return this.getCredential();
}
return {
secretId: credential.TmpSecretId,
secretKey: credential.TmpSecretKey,
token: credential.Token,
};
}
}
exports.default = CvmRoleCredential;