wehub-resource-sync
d25d482dc2
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
Publish CLI Package / publish-npm (push) Has been cancelled
Publish Python SDK / publish-pypi (push) Has been cancelled
Publish TypeScript SDK / publish-npm (push) Has been cancelled
63 lines
2.2 KiB
TypeScript
63 lines
2.2 KiB
TypeScript
import { z } from 'zod'
|
|
import type {
|
|
ContractBody,
|
|
ContractBodyInput,
|
|
ContractJsonResponse,
|
|
} from '@/lib/api/contracts/types'
|
|
import { defineRouteContract } from '@/lib/api/contracts/types'
|
|
import { validateAwsRegion } from '@/lib/core/security/input-validation'
|
|
|
|
const AssumeRoleWithWebIdentitySchema = z.object({
|
|
region: z
|
|
.string()
|
|
.min(1, 'AWS region is required')
|
|
.refine((v) => validateAwsRegion(v).isValid, {
|
|
message: 'Invalid AWS region format (e.g., us-east-1, eu-west-2)',
|
|
}),
|
|
roleArn: z.string().min(20, 'Role ARN is required').max(2048),
|
|
roleSessionName: z.string().min(2, 'Role session name is required').max(64),
|
|
webIdentityToken: z
|
|
.string()
|
|
.min(4, 'Web identity token is required')
|
|
.max(20000, 'Web identity token must not exceed 20000 characters'),
|
|
providerId: z.string().min(4).max(2048).nullish(),
|
|
policy: z.string().max(2048).nullish(),
|
|
policyArns: z
|
|
.string()
|
|
.nullish()
|
|
.refine((v) => !v || v.split(',').filter((arn) => arn.trim().length > 0).length <= 10, {
|
|
message: 'A maximum of 10 policy ARNs can be provided',
|
|
}),
|
|
durationSeconds: z.number().int().min(900).max(43200).nullish(),
|
|
})
|
|
|
|
const AssumeRoleWithWebIdentityResponseSchema = z.object({
|
|
accessKeyId: z.string(),
|
|
secretAccessKey: z.string(),
|
|
sessionToken: z.string(),
|
|
expiration: z.string().nullable(),
|
|
assumedRoleArn: z.string(),
|
|
assumedRoleId: z.string(),
|
|
subjectFromWebIdentityToken: z.string(),
|
|
audience: z.string().nullable(),
|
|
provider: z.string().nullable(),
|
|
packedPolicySize: z.number().nullable(),
|
|
sourceIdentity: z.string().nullable(),
|
|
})
|
|
|
|
export const awsStsAssumeRoleWithWebIdentityContract = defineRouteContract({
|
|
method: 'POST',
|
|
path: '/api/tools/sts/assume-role-with-web-identity',
|
|
body: AssumeRoleWithWebIdentitySchema,
|
|
response: { mode: 'json', schema: AssumeRoleWithWebIdentityResponseSchema },
|
|
})
|
|
export type AwsStsAssumeRoleWithWebIdentityRequest = ContractBodyInput<
|
|
typeof awsStsAssumeRoleWithWebIdentityContract
|
|
>
|
|
export type AwsStsAssumeRoleWithWebIdentityBody = ContractBody<
|
|
typeof awsStsAssumeRoleWithWebIdentityContract
|
|
>
|
|
export type AwsStsAssumeRoleWithWebIdentityResponse = ContractJsonResponse<
|
|
typeof awsStsAssumeRoleWithWebIdentityContract
|
|
>
|