97 lines
3.0 KiB
JavaScript
97 lines
3.0 KiB
JavaScript
|
var AWS = require('../core');
|
||
|
|
require('../metadata_service');
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Represents credentials received from the metadata service on an EC2 instance.
|
||
|
|
*
|
||
|
|
* By default, this class will connect to the metadata service using
|
||
|
|
* {AWS.MetadataService} and attempt to load any available credentials. If it
|
||
|
|
* can connect, and credentials are available, these will be used with zero
|
||
|
|
* configuration.
|
||
|
|
*
|
||
|
|
* This credentials class will by default timeout after 1 second of inactivity
|
||
|
|
* and retry 3 times.
|
||
|
|
* If your requests to the EC2 metadata service are timing out, you can increase
|
||
|
|
* these values by configuring them directly:
|
||
|
|
*
|
||
|
|
* ```javascript
|
||
|
|
* AWS.config.credentials = new AWS.EC2MetadataCredentials({
|
||
|
|
* httpOptions: { timeout: 5000 }, // 5 second timeout
|
||
|
|
* maxRetries: 10, // retry 10 times
|
||
|
|
* retryDelayOptions: { base: 200 } // see AWS.Config for information
|
||
|
|
* });
|
||
|
|
* ```
|
||
|
|
*
|
||
|
|
* @see AWS.Config.retryDelayOptions
|
||
|
|
*
|
||
|
|
* @!macro nobrowser
|
||
|
|
*/
|
||
|
|
AWS.EC2MetadataCredentials = AWS.util.inherit(AWS.Credentials, {
|
||
|
|
constructor: function EC2MetadataCredentials(options) {
|
||
|
|
AWS.Credentials.call(this);
|
||
|
|
|
||
|
|
options = options ? AWS.util.copy(options) : {};
|
||
|
|
options = AWS.util.merge(
|
||
|
|
{maxRetries: this.defaultMaxRetries}, options);
|
||
|
|
if (!options.httpOptions) options.httpOptions = {};
|
||
|
|
options.httpOptions = AWS.util.merge(
|
||
|
|
{timeout: this.defaultTimeout}, options.httpOptions);
|
||
|
|
|
||
|
|
this.metadataService = new AWS.MetadataService(options);
|
||
|
|
this.metadata = {};
|
||
|
|
},
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @api private
|
||
|
|
*/
|
||
|
|
defaultTimeout: 1000,
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @api private
|
||
|
|
*/
|
||
|
|
defaultMaxRetries: 3,
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Loads the credentials from the instance metadata service
|
||
|
|
*
|
||
|
|
* @callback callback function(err)
|
||
|
|
* Called when the instance metadata service responds (or fails). When
|
||
|
|
* this callback is called with no error, it means that the credentials
|
||
|
|
* information has been loaded into the object (as the `accessKeyId`,
|
||
|
|
* `secretAccessKey`, and `sessionToken` properties).
|
||
|
|
* @param err [Error] if an error occurred, this value will be filled
|
||
|
|
* @see get
|
||
|
|
*/
|
||
|
|
refresh: function refresh(callback) {
|
||
|
|
this.coalesceRefresh(callback || AWS.util.fn.callback);
|
||
|
|
},
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @api private
|
||
|
|
* @param callback
|
||
|
|
*/
|
||
|
|
load: function load(callback) {
|
||
|
|
var self = this;
|
||
|
|
self.metadataService.loadCredentials(function(err, creds) {
|
||
|
|
if (!err) {
|
||
|
|
var currentTime = AWS.util.date.getDate();
|
||
|
|
var expireTime = new Date(creds.Expiration);
|
||
|
|
if (expireTime < currentTime) {
|
||
|
|
err = AWS.util.error(
|
||
|
|
new Error('EC2 Instance Metadata Serivce provided expired credentials'),
|
||
|
|
{ code: 'EC2MetadataCredentialsProviderFailure' }
|
||
|
|
);
|
||
|
|
} else {
|
||
|
|
self.expired = false;
|
||
|
|
self.metadata = creds;
|
||
|
|
self.accessKeyId = creds.AccessKeyId;
|
||
|
|
self.secretAccessKey = creds.SecretAccessKey;
|
||
|
|
self.sessionToken = creds.Token;
|
||
|
|
self.expireTime = expireTime;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
callback(err);
|
||
|
|
});
|
||
|
|
}
|
||
|
|
});
|