wehub-resource-sync
d25d482dc2
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
Publish CLI Package / publish-npm (push) Has been cancelled
Publish Python SDK / publish-pypi (push) Has been cancelled
Publish TypeScript SDK / publish-npm (push) Has been cancelled
62 lines
2.1 KiB
TypeScript
62 lines
2.1 KiB
TypeScript
import { z } from 'zod'
|
|
import type {
|
|
ContractBody,
|
|
ContractBodyInput,
|
|
ContractJsonResponse,
|
|
} from '@/lib/api/contracts/types'
|
|
import { defineRouteContract } from '@/lib/api/contracts/types'
|
|
import { validateAwsRegion } from '@/lib/core/security/input-validation'
|
|
|
|
const AssumeRoleWithSAMLSchema = z.object({
|
|
region: z
|
|
.string()
|
|
.min(1, 'AWS region is required')
|
|
.refine((v) => validateAwsRegion(v).isValid, {
|
|
message: 'Invalid AWS region format (e.g., us-east-1, eu-west-2)',
|
|
}),
|
|
roleArn: z.string().min(20, 'Role ARN is required').max(2048),
|
|
principalArn: z.string().min(20, 'SAML provider ARN is required').max(2048),
|
|
samlAssertion: z
|
|
.string()
|
|
.min(4, 'SAML assertion is required')
|
|
.max(100000, 'SAML assertion must not exceed 100000 characters'),
|
|
policy: z.string().max(2048).nullish(),
|
|
policyArns: z
|
|
.string()
|
|
.nullish()
|
|
.refine((v) => !v || v.split(',').filter((arn) => arn.trim().length > 0).length <= 10, {
|
|
message: 'A maximum of 10 policy ARNs can be provided',
|
|
}),
|
|
durationSeconds: z.number().int().min(900).max(43200).nullish(),
|
|
})
|
|
|
|
const AssumeRoleWithSAMLResponseSchema = z.object({
|
|
accessKeyId: z.string(),
|
|
secretAccessKey: z.string(),
|
|
sessionToken: z.string(),
|
|
expiration: z.string().nullable(),
|
|
assumedRoleArn: z.string(),
|
|
assumedRoleId: z.string(),
|
|
subject: z.string().nullable(),
|
|
subjectType: z.string().nullable(),
|
|
issuer: z.string().nullable(),
|
|
audience: z.string().nullable(),
|
|
nameQualifier: z.string().nullable(),
|
|
packedPolicySize: z.number().nullable(),
|
|
sourceIdentity: z.string().nullable(),
|
|
})
|
|
|
|
export const awsStsAssumeRoleWithSAMLContract = defineRouteContract({
|
|
method: 'POST',
|
|
path: '/api/tools/sts/assume-role-with-saml',
|
|
body: AssumeRoleWithSAMLSchema,
|
|
response: { mode: 'json', schema: AssumeRoleWithSAMLResponseSchema },
|
|
})
|
|
export type AwsStsAssumeRoleWithSAMLRequest = ContractBodyInput<
|
|
typeof awsStsAssumeRoleWithSAMLContract
|
|
>
|
|
export type AwsStsAssumeRoleWithSAMLBody = ContractBody<typeof awsStsAssumeRoleWithSAMLContract>
|
|
export type AwsStsAssumeRoleWithSAMLResponse = ContractJsonResponse<
|
|
typeof awsStsAssumeRoleWithSAMLContract
|
|
>
|