File Explorer

1"use strict";2/*3 * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.4 * SPDX-License-Identifier: Apache-2.0.5 */6var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {7    if (k2 === undefined) k2 = k;8    var desc = Object.getOwnPropertyDescriptor(m, k);9    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {10      desc = { enumerable: true, get: function() { return m[k]; } };11    }12    Object.defineProperty(o, k2, desc);13}) : (function(o, m, k, k2) {14    if (k2 === undefined) k2 = k;15    o[k2] = m[k];16}));17var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {18    Object.defineProperty(o, "default", { enumerable: true, value: v });19}) : function(o, v) {20    o["default"] = v;21});22var __importStar = (this && this.__importStar) || function (mod) {23    if (mod && mod.__esModule) return mod;24    var result = {};25    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);26    __setModuleDefault(result, mod);27    return result;28};29Object.defineProperty(exports, "__esModule", { value: true });30exports.create_mqtt5_websocket_stream = exports.create_mqtt5_websocket_url = exports.create_websocket_stream = exports.create_websocket_url = void 0;31var mqtt5 = __importStar(require("./mqtt5"));32var error_1 = require("./error");33var websocket = require('@httptoolkit/websocket-stream');34var Crypto = __importStar(require("crypto-js"));35var iot_shared = __importStar(require("../common/aws_iot_shared"));36/** @internal */37function zero_pad(n) {38    return (n > 9) ? n : '0' + n.toString();39}40/** @internal */41function canonical_time(time) {42    var now = time !== null && time !== void 0 ? time : new Date();43    return "".concat(now.getUTCFullYear()).concat(zero_pad(now.getUTCMonth() + 1)).concat(zero_pad(now.getUTCDate()), "T") +44        "".concat(zero_pad(now.getUTCHours())).concat(zero_pad(now.getUTCMinutes())).concat(zero_pad(now.getUTCSeconds()), "Z");45}46/** @internal */47function canonical_day(time) {48    if (time === void 0) { time = canonical_time(); }49    return time.substring(0, time.indexOf('T'));50}51/** @internal */52function make_signing_key(credentials, day, service_name) {53    if (credentials == null || credentials == undefined) {54        throw new error_1.CrtError("make_signing_key: credentials not defined");55    }56    var hash_opts = { asBytes: true };57    var hash = Crypto.HmacSHA256(day, 'AWS4' + credentials.aws_secret_key, hash_opts);58    hash = Crypto.HmacSHA256(credentials.aws_region || '', hash, hash_opts);59    hash = Crypto.HmacSHA256(service_name, hash, hash_opts);60    hash = Crypto.HmacSHA256('aws4_request', hash, hash_opts);61    return hash;62}63/** @internal */64function sign_url(method, url, signing_config, time, day, payload) {65    var _a;66    if (time === void 0) { time = canonical_time(); }67    if (day === void 0) { day = canonical_day(time); }68    if (payload === void 0) { payload = ''; }69    if (signing_config == null || signing_config == undefined) {70        throw new error_1.CrtError("sign_url: signing_config not defined");71    }72    // region should not have been put in credentials, but we have to live with it73    var region = (_a = signing_config.credentials.aws_region) !== null && _a !== void 0 ? _a : signing_config.region;74    var signed_headers = 'host';75    var service = signing_config.service;76    var canonical_headers = "host:".concat(url.hostname.toLowerCase(), "\n");77    var payload_hash = Crypto.SHA256(payload, { asBytes: true });78    var canonical_params = url.search.replace(new RegExp('^\\?'), '');79    var canonical_request = "".concat(method, "\n").concat(url.pathname, "\n").concat(canonical_params, "\n").concat(canonical_headers, "\n").concat(signed_headers, "\n").concat(payload_hash);80    var canonical_request_hash = Crypto.SHA256(canonical_request, { asBytes: true });81    var signature_raw = "AWS4-HMAC-SHA256\n".concat(time, "\n").concat(day, "/").concat(region, "/").concat(service, "/aws4_request\n").concat(canonical_request_hash);82    var signing_key = make_signing_key(signing_config.credentials, day, service);83    var signature = Crypto.HmacSHA256(signature_raw, signing_key, { asBytes: true });84    var query_params = "".concat(url.search, "&X-Amz-Signature=").concat(signature);85    if (signing_config.credentials.aws_sts_token) {86        query_params += "&X-Amz-Security-Token=".concat(encodeURIComponent(signing_config.credentials.aws_sts_token));87    }88    var signed_url = "".concat(url.protocol, "//").concat(url.hostname).concat(url.pathname).concat(query_params);89    return signed_url;90}91/** @internal */92function create_websocket_url(config) {93    var _a, _b, _c, _d;94    if (config == null || config == undefined) {95        throw new error_1.CrtError("create_websocket_url: config not defined");96    }97    var path = '/mqtt';98    var protocol = (config.websocket || {}).protocol || 'wss';99    if (protocol === 'wss') {100        var websocketoptions = config.websocket;101        var credentials = (_a = config.credentials_provider) === null || _a === void 0 ? void 0 : _a.getCredentials();102        var signing_config_value = (_c = (_b = websocketoptions.create_signing_config) === null || _b === void 0 ? void 0 : _b.call(websocketoptions)) !== null && _c !== void 0 ? _c : {103            service: (_d = websocketoptions.service) !== null && _d !== void 0 ? _d : "iotdevicegateway",104            credentials: credentials,105            date: new Date()106        };107        var signing_config = signing_config_value;108        var time = canonical_time(signing_config.date);109        var day = canonical_day(time);110        var query_params = "X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=".concat(signing_config.credentials.aws_access_id) +111            "%2F".concat(day, "%2F").concat(signing_config.credentials.aws_region, "%2F").concat(signing_config.service, "%2Faws4_request&X-Amz-Date=").concat(time, "&X-Amz-SignedHeaders=host");112        var url = new URL("wss://".concat(config.host_name, ":").concat(config.port).concat(path, "?").concat(query_params));113        return sign_url('GET', url, signing_config, time, day);114    }115    else if (protocol === 'wss-custom-auth') {116        return "wss://".concat(config.host_name, ":").concat(config.port).concat(path);117    }118    throw new URIError("Invalid protocol requested: ".concat(protocol));119}120exports.create_websocket_url = create_websocket_url;121/** @internal */122function create_websocket_stream(config) {123    var url = create_websocket_url(config);124    return websocket(url, ['mqttv3.1'], config.websocket);125}126exports.create_websocket_stream = create_websocket_stream;127/** @internal */128function create_mqtt5_websocket_url(config) {129    var _a, _b;130    if (config == null || config == undefined) {131        throw new error_1.CrtError("create_mqtt5_websocket_url: config not defined");132    }133    var path = '/mqtt';134    var websocketConfig = (_a = config.websocketOptions) !== null && _a !== void 0 ? _a : { urlFactoryOptions: { urlFactory: mqtt5.Mqtt5WebsocketUrlFactoryType.Ws } };135    var urlFactory = websocketConfig.urlFactoryOptions.urlFactory;136    switch (urlFactory) {137        case mqtt5.Mqtt5WebsocketUrlFactoryType.Ws:138            return "ws://".concat(config.hostName, ":").concat(config.port).concat(path);139            break;140        case mqtt5.Mqtt5WebsocketUrlFactoryType.Wss:141            return "wss://".concat(config.hostName, ":").concat(config.port).concat(path);142            break;143        case mqtt5.Mqtt5WebsocketUrlFactoryType.Sigv4:144            var sigv4Options = websocketConfig.urlFactoryOptions;145            var credentials = sigv4Options.credentialsProvider.getCredentials();146            if (credentials === undefined) {147                throw new error_1.CrtError("Websockets with sigv4 requires valid AWS credentials");148            }149            var region = (_b = sigv4Options.region) !== null && _b !== void 0 ? _b : iot_shared.extractRegionFromEndpoint(config.hostName);150            var signingConfig = {151                service: "iotdevicegateway",152                region: region,153                credentials: credentials,154                date: new Date()155            };156            var time = canonical_time(signingConfig.date);157            var day = canonical_day(time);158            var query_params = "X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=".concat(signingConfig.credentials.aws_access_id) +159                "%2F".concat(day, "%2F").concat(region, "%2F").concat(signingConfig.service, "%2Faws4_request&X-Amz-Date=").concat(time, "&X-Amz-SignedHeaders=host");160            var url = new URL("wss://".concat(config.hostName, ":").concat(config.port).concat(path, "?").concat(query_params));161            return sign_url('GET', url, signingConfig, time, day);162        case mqtt5.Mqtt5WebsocketUrlFactoryType.Custom:163            var customOptions = websocketConfig.urlFactoryOptions;164            return customOptions.customUrlFactory();165    }166    throw new URIError("Invalid url factory requested: ".concat(urlFactory));167}168exports.create_mqtt5_websocket_url = create_mqtt5_websocket_url;169/** @internal */170function create_mqtt5_websocket_stream(config) {171    var _a;172    var url = create_mqtt5_websocket_url(config);173    var ws = websocket(url, ['mqtt'], (_a = config.websocketOptions) === null || _a === void 0 ? void 0 : _a.wsOptions);174    return ws;175}176exports.create_mqtt5_websocket_stream = create_mqtt5_websocket_stream;177//# sourceMappingURL=ws.js.map