aws_sdk_sts/operation/
get_web_identity_token.rs

1// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
2/// Orchestration and serialization glue logic for `GetWebIdentityToken`.
3#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct GetWebIdentityToken;
6impl GetWebIdentityToken {
7    /// Creates a new `GetWebIdentityToken`
8    pub fn new() -> Self {
9        Self
10    }
11    pub(crate) async fn orchestrate(
12        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13        input: crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
14    ) -> ::std::result::Result<
15        crate::operation::get_web_identity_token::GetWebIdentityTokenOutput,
16        ::aws_smithy_runtime_api::client::result::SdkError<
17            crate::operation::get_web_identity_token::GetWebIdentityTokenError,
18            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
19        >,
20    > {
21        let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<
22            ::aws_smithy_runtime_api::client::interceptors::context::Error,
23            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
24        >| {
25            err.map_service_error(|err| {
26                err.downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>()
27                    .expect("correct error type")
28            })
29        };
30        let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
31            .await
32            .map_err(map_err)?;
33        let output = context.finalize().map_err(map_err)?;
34        ::std::result::Result::Ok(
35            output
36                .downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenOutput>()
37                .expect("correct output type"),
38        )
39    }
40
41    pub(crate) async fn orchestrate_with_stop_point(
42        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
43        input: crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
44        stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
45    ) -> ::std::result::Result<
46        ::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext,
47        ::aws_smithy_runtime_api::client::result::SdkError<
48            ::aws_smithy_runtime_api::client::interceptors::context::Error,
49            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
50        >,
51    > {
52        let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
53        use ::tracing::Instrument;
54        ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point("STS", "GetWebIdentityToken", input, runtime_plugins, stop_point)
55            // Create a parent span for the entire operation. Includes a random, internal-only,
56            // seven-digit ID for the operation orchestration so that it can be correlated in the logs.
57            .instrument(::tracing::debug_span!(
58                "STS.GetWebIdentityToken",
59                "rpc.service" = "STS",
60                "rpc.method" = "GetWebIdentityToken",
61                "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
62                "rpc.system" = "aws-api",
63            ))
64            .await
65    }
66
67    pub(crate) fn operation_runtime_plugins(
68        client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
69        client_config: &crate::config::Config,
70        config_override: ::std::option::Option<crate::config::Builder>,
71    ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
72        let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
73
74        if let ::std::option::Option::Some(config_override) = config_override {
75            for plugin in config_override.runtime_plugins.iter().cloned() {
76                runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
77            }
78            runtime_plugins = runtime_plugins.with_operation_plugin(crate::config::ConfigOverrideRuntimePlugin::new(
79                config_override,
80                client_config.config.clone(),
81                &client_config.runtime_components,
82            ));
83        }
84        runtime_plugins
85    }
86}
87impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for GetWebIdentityToken {
88    fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
89        let mut cfg = ::aws_smithy_types::config_bag::Layer::new("GetWebIdentityToken");
90
91        cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(
92            GetWebIdentityTokenRequestSerializer,
93        ));
94        cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(
95            GetWebIdentityTokenResponseDeserializer,
96        ));
97
98        cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
99            crate::config::auth::Params::builder()
100                .operation_name("GetWebIdentityToken")
101                .build()
102                .expect("required fields set"),
103        ));
104
105        cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
106        cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
107            "GetWebIdentityToken",
108            "STS",
109        ));
110        let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
111        signing_options.double_uri_encode = true;
112        signing_options.content_sha256_header = false;
113        signing_options.normalize_uri_path = true;
114        signing_options.payload_override = None;
115
116        cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
117            signing_options,
118            ..::std::default::Default::default()
119        });
120
121        ::std::option::Option::Some(cfg.freeze())
122    }
123
124    fn runtime_components(
125        &self,
126        _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder,
127    ) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
128        #[allow(unused_mut)]
129                    let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("GetWebIdentityToken")
130                            .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(GetWebIdentityTokenTelemetryInputCaptureInterceptor))
131.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
132.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(GetWebIdentityTokenEndpointParamsInterceptor))
133                            .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new())
134.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new())
135.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::builder().transient_errors({
136                                            let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
137                                            transient_errors.push("IDPCommunicationError");
138                                            ::std::borrow::Cow::Owned(transient_errors)
139                                            }).build())
140.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new());
141
142        ::std::borrow::Cow::Owned(rcb)
143    }
144}
145
146#[derive(Debug)]
147struct GetWebIdentityTokenTelemetryInputCaptureInterceptor;
148
149#[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
150impl ::aws_smithy_runtime_api::client::interceptors::Intercept for GetWebIdentityTokenTelemetryInputCaptureInterceptor {
151    fn name(&self) -> &'static str {
152        "GetWebIdentityTokenTelemetryInputCaptureInterceptor"
153    }
154
155    fn read_before_execution(
156        &self,
157        context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<
158            '_,
159            ::aws_smithy_runtime_api::client::interceptors::context::Input,
160            ::aws_smithy_runtime_api::client::interceptors::context::Output,
161            ::aws_smithy_runtime_api::client::interceptors::context::Error,
162        >,
163        cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
164    ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
165        // Nothing to do unless the customer opted in by naming members to record.
166        let ::std::option::Option::Some(requested) = cfg
167            .load::<::aws_smithy_types::telemetry::RequestedTelemetryAttributes>()
168            .filter(|r| !r.is_empty())
169        else {
170            return ::std::result::Result::Ok(());
171        };
172
173        let ::std::option::Option::Some(input) = context.input().downcast_ref::<GetWebIdentityTokenInput>() else {
174            // A mismatched input is not this interceptor's concern; skip quietly.
175            return ::std::result::Result::Ok(());
176        };
177
178        let mut captured = ::aws_smithy_types::telemetry::CapturedTelemetryAttributes::default();
179        if requested.should_capture("SigningAlgorithm") {
180            if let ::std::option::Option::Some(value) = input.signing_algorithm.as_deref() {
181                captured.insert("SigningAlgorithm", value);
182            }
183        }
184
185        cfg.interceptor_state().store_put(captured);
186        ::std::result::Result::Ok(())
187    }
188}
189#[derive(Debug)]
190struct GetWebIdentityTokenResponseDeserializer;
191impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for GetWebIdentityTokenResponseDeserializer {
192    fn deserialize_nonstreaming_with_config(
193        &self,
194        response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
195        _cfg: &::aws_smithy_types::config_bag::ConfigBag,
196    ) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
197        let (success, status) = (response.status().is_success(), response.status().as_u16());
198        let headers = response.headers();
199        let body = response.body().bytes().expect("body loaded");
200        #[allow(unused_mut)]
201        let mut force_error = false;
202        ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
203        let parse_result = if !success && status != 200 || force_error {
204            crate::protocol_serde::shape_get_web_identity_token::de_get_web_identity_token_http_error(status, headers, body, _cfg)
205        } else {
206            crate::protocol_serde::shape_get_web_identity_token::de_get_web_identity_token_http_response(status, headers, body, _cfg)
207        };
208        crate::protocol_serde::type_erase_result(parse_result)
209    }
210}
211#[derive(Debug)]
212struct GetWebIdentityTokenRequestSerializer;
213impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for GetWebIdentityTokenRequestSerializer {
214    #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
215    fn serialize_input(
216        &self,
217        input: ::aws_smithy_runtime_api::client::interceptors::context::Input,
218        _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
219    ) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
220        let input = input
221            .downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenInput>()
222            .expect("correct type");
223        let _header_serialization_settings = _cfg
224            .load::<crate::serialization_settings::HeaderSerializationSettings>()
225            .cloned()
226            .unwrap_or_default();
227        let mut request_builder = {
228            #[allow(clippy::uninlined_format_args)]
229            fn uri_base(
230                _input: &crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
231                output: &mut ::std::string::String,
232            ) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
233                use ::std::fmt::Write as _;
234                ::std::write!(output, "/").expect("formatting should succeed");
235                ::std::result::Result::Ok(())
236            }
237            #[allow(clippy::unnecessary_wraps)]
238            fn update_http_builder(
239                input: &crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
240                builder: ::http_1x::request::Builder,
241            ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
242                let mut uri = ::std::string::String::new();
243                uri_base(input, &mut uri)?;
244                ::std::result::Result::Ok(builder.method("POST").uri(uri))
245            }
246            let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
247            builder =
248                _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
249            builder
250        };
251        let body = ::aws_smithy_types::body::SdkBody::from(
252            crate::protocol_serde::shape_get_web_identity_token_input::ser_get_web_identity_token_input_input_input(&input)?,
253        );
254        if let Some(content_length) = body.content_length() {
255            let content_length = content_length.to_string();
256            request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
257        }
258        ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
259    }
260}
261#[derive(Debug)]
262struct GetWebIdentityTokenEndpointParamsInterceptor;
263
264#[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
265impl ::aws_smithy_runtime_api::client::interceptors::Intercept for GetWebIdentityTokenEndpointParamsInterceptor {
266    fn name(&self) -> &'static str {
267        "GetWebIdentityTokenEndpointParamsInterceptor"
268    }
269
270    fn read_before_execution(
271        &self,
272        context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<
273            '_,
274            ::aws_smithy_runtime_api::client::interceptors::context::Input,
275            ::aws_smithy_runtime_api::client::interceptors::context::Output,
276            ::aws_smithy_runtime_api::client::interceptors::context::Error,
277        >,
278        cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
279    ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
280        let _input = context
281            .input()
282            .downcast_ref::<GetWebIdentityTokenInput>()
283            .ok_or("failed to downcast to GetWebIdentityTokenInput")?;
284
285        let params = crate::config::endpoint::Params::builder()
286            .set_region(cfg.load::<::aws_types::region::Region>().map(|r| r.as_ref().to_owned()))
287            .set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
288            .set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
289            .set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
290            .build()
291            .map_err(|err| {
292                ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err)
293            })?;
294        cfg.interceptor_state()
295            .store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
296        ::std::result::Result::Ok(())
297    }
298}
299
300// The get_* functions below are generated from JMESPath expressions in the
301// operationContextParams trait. They target the operation's input shape.
302
303/// Error type for the `GetWebIdentityTokenError` operation.
304#[non_exhaustive]
305#[derive(::std::fmt::Debug)]
306pub enum GetWebIdentityTokenError {
307    /// <p>The requested token payload size exceeds the maximum allowed size. Reduce the number of request tags included in the <code>GetWebIdentityToken</code> API call to reduce the token payload size.</p>
308    JwtPayloadSizeExceededException(crate::types::error::JwtPayloadSizeExceededException),
309    /// <p>The outbound web identity federation feature is not enabled for this account. To use this feature, you must first enable it through the Amazon Web Services Management Console or API.</p>
310    OutboundWebIdentityFederationDisabledException(crate::types::error::OutboundWebIdentityFederationDisabledException),
311    /// <p>The requested token duration would extend the session beyond its original expiration time. You cannot use this operation to extend the lifetime of a session beyond what was granted when the session was originally created.</p>
312    SessionDurationEscalationException(crate::types::error::SessionDurationEscalationException),
313    /// An unexpected error occurred (e.g., invalid JSON returned by the service or an unknown error code).
314    #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
315    variable wildcard pattern and check `.code()`:
316     \
317    &nbsp;&nbsp;&nbsp;`err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
318     \
319    See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-GetWebIdentityTokenError) for what information is available for the error.")]
320    Unhandled(crate::error::sealed_unhandled::Unhandled),
321}
322impl GetWebIdentityTokenError {
323    /// Creates the `GetWebIdentityTokenError::Unhandled` variant from any error type.
324    pub fn unhandled(
325        err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>,
326    ) -> Self {
327        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
328            source: err.into(),
329            meta: ::std::default::Default::default(),
330        })
331    }
332
333    /// Creates the `GetWebIdentityTokenError::Unhandled` variant from an [`ErrorMetadata`](::aws_smithy_types::error::ErrorMetadata).
334    pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
335        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
336            source: err.clone().into(),
337            meta: err,
338        })
339    }
340    ///
341    /// Returns error metadata, which includes the error code, message,
342    /// request ID, and potentially additional information.
343    ///
344    pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
345        match self {
346            Self::JwtPayloadSizeExceededException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
347            Self::OutboundWebIdentityFederationDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
348            Self::SessionDurationEscalationException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
349            Self::Unhandled(e) => &e.meta,
350        }
351    }
352    /// Returns `true` if the error kind is `GetWebIdentityTokenError::JwtPayloadSizeExceededException`.
353    pub fn is_jwt_payload_size_exceeded_exception(&self) -> bool {
354        matches!(self, Self::JwtPayloadSizeExceededException(_))
355    }
356    /// Returns `true` if the error kind is `GetWebIdentityTokenError::OutboundWebIdentityFederationDisabledException`.
357    pub fn is_outbound_web_identity_federation_disabled_exception(&self) -> bool {
358        matches!(self, Self::OutboundWebIdentityFederationDisabledException(_))
359    }
360    /// Returns `true` if the error kind is `GetWebIdentityTokenError::SessionDurationEscalationException`.
361    pub fn is_session_duration_escalation_exception(&self) -> bool {
362        matches!(self, Self::SessionDurationEscalationException(_))
363    }
364}
365impl ::std::error::Error for GetWebIdentityTokenError {
366    fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
367        match self {
368            Self::JwtPayloadSizeExceededException(_inner) => ::std::option::Option::Some(_inner),
369            Self::OutboundWebIdentityFederationDisabledException(_inner) => ::std::option::Option::Some(_inner),
370            Self::SessionDurationEscalationException(_inner) => ::std::option::Option::Some(_inner),
371            Self::Unhandled(_inner) => ::std::option::Option::Some(&*_inner.source),
372        }
373    }
374}
375impl ::std::fmt::Display for GetWebIdentityTokenError {
376    fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
377        match self {
378            Self::JwtPayloadSizeExceededException(_inner) => _inner.fmt(f),
379            Self::OutboundWebIdentityFederationDisabledException(_inner) => _inner.fmt(f),
380            Self::SessionDurationEscalationException(_inner) => _inner.fmt(f),
381            Self::Unhandled(_inner) => {
382                if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
383                    write!(f, "unhandled error ({code})")
384                } else {
385                    f.write_str("unhandled error")
386                }
387            }
388        }
389    }
390}
391impl ::aws_smithy_types::retry::ProvideErrorKind for GetWebIdentityTokenError {
392    fn code(&self) -> ::std::option::Option<&str> {
393        ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
394    }
395    fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
396        ::std::option::Option::None
397    }
398}
399impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for GetWebIdentityTokenError {
400    fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
401        match self {
402            Self::JwtPayloadSizeExceededException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
403            Self::OutboundWebIdentityFederationDisabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
404            Self::SessionDurationEscalationException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
405            Self::Unhandled(_inner) => &_inner.meta,
406        }
407    }
408}
409impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for GetWebIdentityTokenError {
410    fn create_unhandled_error(
411        source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
412        meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
413    ) -> Self {
414        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
415            source,
416            meta: meta.unwrap_or_default(),
417        })
418    }
419}
420impl ::aws_types::request_id::RequestId for crate::operation::get_web_identity_token::GetWebIdentityTokenError {
421    fn request_id(&self) -> Option<&str> {
422        self.meta().request_id()
423    }
424}
425
426pub use crate::operation::get_web_identity_token::_get_web_identity_token_input::GetWebIdentityTokenInput;
427
428pub use crate::operation::get_web_identity_token::_get_web_identity_token_output::GetWebIdentityTokenOutput;
429
430mod _get_web_identity_token_input;
431
432mod _get_web_identity_token_output;
433
434/// Builders
435pub mod builders;
aws_sdk_sts/operation/get_web_identity_token.rs

aws_sdk_sts/operation/
get_web_identity_token.rs
