1#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct AssumeRoleWithSAML;
6impl AssumeRoleWithSAML {
7 pub fn new() -> Self {
9 Self
10 }
11 pub(crate) async fn orchestrate(
12 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13 input: crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
14 ) -> ::std::result::Result<crate::operation::assume_role_with_saml::AssumeRoleWithSamlOutput, ::aws_smithy_runtime_api::client::result::SdkError<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
15 let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>| {
16 err.map_service_error(|err| {
17 err.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>().expect("correct error type")
18 })
19 };
20 let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
21 .await
22 .map_err(map_err)?;
23 let output = context.finalize().map_err(map_err)?;
24 ::std::result::Result::Ok(output.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSamlOutput>().expect("correct output type"))
25 }
26
27 pub(crate) async fn orchestrate_with_stop_point(
28 runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
29 input: crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
30 stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
31 ) -> ::std::result::Result<::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext, ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
32 let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
33 use ::tracing::Instrument;
34 ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
35 "STS",
36 "AssumeRoleWithSAML",
37 input,
38 runtime_plugins,
39 stop_point
40 )
41 .instrument(::tracing::debug_span!(
44 "STS.AssumeRoleWithSAML",
45 "rpc.service" = "STS",
46 "rpc.method" = "AssumeRoleWithSAML",
47 "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
48 "rpc.system" = "aws-api",
49 ))
50 .await
51 }
52
53 pub(crate) fn operation_runtime_plugins(
54 client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
55 client_config: &crate::config::Config,
56 config_override: ::std::option::Option<crate::config::Builder>,
57 ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
58 let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
59
60 if let ::std::option::Option::Some(config_override) = config_override {
61 for plugin in config_override.runtime_plugins.iter().cloned() {
62 runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
63 }
64 runtime_plugins = runtime_plugins.with_operation_plugin(
65 crate::config::ConfigOverrideRuntimePlugin::new(config_override, client_config.config.clone(), &client_config.runtime_components)
66 );
67 }
68 runtime_plugins
69 }
70}
71impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for AssumeRoleWithSAML {
72 fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
73 let mut cfg = ::aws_smithy_types::config_bag::Layer::new("AssumeRoleWithSAML");
74
75 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(AssumeRoleWithSAMLRequestSerializer));
76 cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(AssumeRoleWithSAMLResponseDeserializer));
77
78 cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
79 crate::config::auth::Params::builder()
80 .operation_name("AssumeRoleWithSAML")
81 .build()
82 .expect("required fields set")
83 ));
84
85 cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
86cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
87 "AssumeRoleWithSAML",
88 "STS",
89 ));
90
91 ::std::option::Option::Some(cfg.freeze())
92 }
93
94 fn runtime_components(&self, _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
95 #[allow(unused_mut)]
96 let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("AssumeRoleWithSAML")
97 .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleWithSAMLTelemetryInputCaptureInterceptor))
98.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
99.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(AssumeRoleWithSAMLEndpointParamsInterceptor))
100 .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new())
101.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new())
102.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::builder().transient_errors({
103 let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
104 transient_errors.push("IDPCommunicationError");
105 ::std::borrow::Cow::Owned(transient_errors)
106 }).build())
107.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError>::new());
108
109 ::std::borrow::Cow::Owned(rcb)
110 }
111 }
112
113 #[derive(Debug)]
114 struct AssumeRoleWithSAMLTelemetryInputCaptureInterceptor;
115
116 #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
117 impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleWithSAMLTelemetryInputCaptureInterceptor {
118 fn name(&self) -> &'static str {
119 "AssumeRoleWithSAMLTelemetryInputCaptureInterceptor"
120 }
121
122 fn read_before_execution(
123 &self,
124 context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
125 cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
126 ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
127 let ::std::option::Option::Some(requested) = cfg.load::<::aws_smithy_types::telemetry::RequestedTelemetryAttributes>().filter(|r| !r.is_empty()) else {
129 return ::std::result::Result::Ok(());
130 };
131
132 let ::std::option::Option::Some(input) = context.input().downcast_ref::<AssumeRoleWithSamlInput>() else {
133 return ::std::result::Result::Ok(());
135 };
136
137 let mut captured = ::aws_smithy_types::telemetry::CapturedTelemetryAttributes::default();
138 if requested.should_capture("RoleArn") {
139 if let ::std::option::Option::Some(value) = input.role_arn.as_deref() {
140 captured.insert("RoleArn", value);
141 }
142 }
143if requested.should_capture("PrincipalArn") {
144 if let ::std::option::Option::Some(value) = input.principal_arn.as_deref() {
145 captured.insert("PrincipalArn", value);
146 }
147 }
148if requested.should_capture("Policy") {
149 if let ::std::option::Option::Some(value) = input.policy.as_deref() {
150 captured.insert("Policy", value);
151 }
152 }
153
154 cfg.interceptor_state().store_put(captured);
155 ::std::result::Result::Ok(())
156 }
157 }
158#[derive(Debug)]
159 struct AssumeRoleWithSAMLResponseDeserializer;
160 impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for AssumeRoleWithSAMLResponseDeserializer {
161
162
163 fn deserialize_nonstreaming_with_config(&self, response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse, _cfg: &::aws_smithy_types::config_bag::ConfigBag) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
164 let (success, status) = (response.status().is_success(), response.status().as_u16());
165 let headers = response.headers();
166 let body = response.body().bytes().expect("body loaded");
167 #[allow(unused_mut)]
168 let mut force_error = false;
169 ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
170 let parse_result = if !success && status != 200 || force_error {
171 crate::protocol_serde::shape_assume_role_with_saml::de_assume_role_with_saml_http_error(status, headers, body, _cfg)
172 } else {
173 crate::protocol_serde::shape_assume_role_with_saml::de_assume_role_with_saml_http_response(status, headers, body, _cfg)
174 };
175 crate::protocol_serde::type_erase_result(parse_result)
176 }
177 }
178#[derive(Debug)]
179 struct AssumeRoleWithSAMLRequestSerializer;
180 impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for AssumeRoleWithSAMLRequestSerializer {
181 #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
182 fn serialize_input(&self, input: ::aws_smithy_runtime_api::client::interceptors::context::Input, _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
183 let input = input.downcast::<crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput>().expect("correct type");
184 let _header_serialization_settings = _cfg.load::<crate::serialization_settings::HeaderSerializationSettings>().cloned().unwrap_or_default();
185 let mut request_builder = {
186 #[allow(clippy::uninlined_format_args)]
187fn uri_base(_input: &crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput, output: &mut ::std::string::String) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
188 use ::std::fmt::Write as _;
189 ::std::write!(output, "/").expect("formatting should succeed");
190 ::std::result::Result::Ok(())
191}
192#[allow(clippy::unnecessary_wraps)]
193fn update_http_builder(
194 input: &crate::operation::assume_role_with_saml::AssumeRoleWithSamlInput,
195 builder: ::http_1x::request::Builder
196 ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
197 let mut uri = ::std::string::String::new();
198 uri_base(input, &mut uri)?;
199 ::std::result::Result::Ok(builder.method("POST").uri(uri))
200}
201let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
202builder = _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
203builder
204 };
205 let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_assume_role_with_saml_input::ser_assume_role_with_saml_input_input_input(&input)?);
206 if let Some(content_length) = body.content_length() {
207 let content_length = content_length.to_string();
208 request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
209 }
210 ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
211 }
212 }
213#[derive(Debug)]
214 struct AssumeRoleWithSAMLEndpointParamsInterceptor;
215
216 #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
217 impl ::aws_smithy_runtime_api::client::interceptors::Intercept for AssumeRoleWithSAMLEndpointParamsInterceptor {
218 fn name(&self) -> &'static str {
219 "AssumeRoleWithSAMLEndpointParamsInterceptor"
220 }
221
222 fn read_before_execution(
223 &self,
224 context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
225 cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
226 ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
227 let _input = context.input()
228 .downcast_ref::<AssumeRoleWithSamlInput>()
229 .ok_or("failed to downcast to AssumeRoleWithSamlInput")?;
230
231
232
233 let params = crate::config::endpoint::Params::builder()
234 .set_region(cfg.load::<::aws_types::region::Region>().map(|r|r.as_ref().to_owned()))
235.set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
236.set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
237.set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
238 .build()
239 .map_err(|err| ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err))?;
240 cfg.interceptor_state().store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
241 ::std::result::Result::Ok(())
242 }
243 }
244
245 #[non_exhaustive]
252#[derive(::std::fmt::Debug)]
253pub enum AssumeRoleWithSAMLError {
254 ExpiredTokenException(crate::types::error::ExpiredTokenException),
256 IdpRejectedClaimException(crate::types::error::IdpRejectedClaimException),
259 InvalidIdentityTokenException(crate::types::error::InvalidIdentityTokenException),
261 MalformedPolicyDocumentException(crate::types::error::MalformedPolicyDocumentException),
263 PackedPolicyTooLargeException(crate::types::error::PackedPolicyTooLargeException),
266 RegionDisabledException(crate::types::error::RegionDisabledException),
268 #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
270 variable wildcard pattern and check `.code()`:
271 \
272 `err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
273 \
274 See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-AssumeRoleWithSAMLError) for what information is available for the error.")]
275 Unhandled(crate::error::sealed_unhandled::Unhandled),
276}
277impl AssumeRoleWithSAMLError {
278 pub fn unhandled(err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>) -> Self {
280 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.into(), meta: ::std::default::Default::default() })
281 }
282
283 pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
285 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.clone().into(), meta: err })
286 }
287 pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
292 match self {
293 Self::ExpiredTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
294 Self::IdpRejectedClaimException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
295 Self::InvalidIdentityTokenException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
296 Self::MalformedPolicyDocumentException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
297 Self::PackedPolicyTooLargeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
298 Self::RegionDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
299 Self::Unhandled(e) => &e.meta,
300 }
301 }
302 pub fn is_expired_token_exception(&self) -> bool {
304 matches!(self, Self::ExpiredTokenException(_))
305 }
306 pub fn is_idp_rejected_claim_exception(&self) -> bool {
308 matches!(self, Self::IdpRejectedClaimException(_))
309 }
310 pub fn is_invalid_identity_token_exception(&self) -> bool {
312 matches!(self, Self::InvalidIdentityTokenException(_))
313 }
314 pub fn is_malformed_policy_document_exception(&self) -> bool {
316 matches!(self, Self::MalformedPolicyDocumentException(_))
317 }
318 pub fn is_packed_policy_too_large_exception(&self) -> bool {
320 matches!(self, Self::PackedPolicyTooLargeException(_))
321 }
322 pub fn is_region_disabled_exception(&self) -> bool {
324 matches!(self, Self::RegionDisabledException(_))
325 }
326}
327impl ::std::error::Error for AssumeRoleWithSAMLError {
328 fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
329 match self {
330 Self::ExpiredTokenException(_inner) =>
331 ::std::option::Option::Some(_inner)
332 ,
333 Self::IdpRejectedClaimException(_inner) =>
334 ::std::option::Option::Some(_inner)
335 ,
336 Self::InvalidIdentityTokenException(_inner) =>
337 ::std::option::Option::Some(_inner)
338 ,
339 Self::MalformedPolicyDocumentException(_inner) =>
340 ::std::option::Option::Some(_inner)
341 ,
342 Self::PackedPolicyTooLargeException(_inner) =>
343 ::std::option::Option::Some(_inner)
344 ,
345 Self::RegionDisabledException(_inner) =>
346 ::std::option::Option::Some(_inner)
347 ,
348 Self::Unhandled(_inner) => {
349 ::std::option::Option::Some(&*_inner.source)
350 }
351 }
352 }
353}
354impl ::std::fmt::Display for AssumeRoleWithSAMLError {
355 fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
356 match self {
357 Self::ExpiredTokenException(_inner) =>
358 _inner.fmt(f)
359 ,
360 Self::IdpRejectedClaimException(_inner) =>
361 _inner.fmt(f)
362 ,
363 Self::InvalidIdentityTokenException(_inner) =>
364 _inner.fmt(f)
365 ,
366 Self::MalformedPolicyDocumentException(_inner) =>
367 _inner.fmt(f)
368 ,
369 Self::PackedPolicyTooLargeException(_inner) =>
370 _inner.fmt(f)
371 ,
372 Self::RegionDisabledException(_inner) =>
373 _inner.fmt(f)
374 ,
375 Self::Unhandled(_inner) => {
376 if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
377 write!(f, "unhandled error ({code})")
378 } else {
379 f.write_str("unhandled error")
380 }
381 }
382 }
383 }
384}
385impl ::aws_smithy_types::retry::ProvideErrorKind for AssumeRoleWithSAMLError {
386 fn code(&self) -> ::std::option::Option<&str> {
387 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
388 }
389 fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
390 ::std::option::Option::None
391 }
392}
393impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for AssumeRoleWithSAMLError {
394 fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
395 match self {
396 Self::ExpiredTokenException(_inner) =>
397 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
398 ,
399 Self::IdpRejectedClaimException(_inner) =>
400 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
401 ,
402 Self::InvalidIdentityTokenException(_inner) =>
403 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
404 ,
405 Self::MalformedPolicyDocumentException(_inner) =>
406 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
407 ,
408 Self::PackedPolicyTooLargeException(_inner) =>
409 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
410 ,
411 Self::RegionDisabledException(_inner) =>
412 ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
413 ,
414 Self::Unhandled(_inner) => {
415 &_inner.meta
416 }
417 }
418 }
419}
420impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for AssumeRoleWithSAMLError {
421 fn create_unhandled_error(
422 source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
423 meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>
424 ) -> Self {
425 Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source, meta: meta.unwrap_or_default() })
426 }
427}
428impl ::aws_types::request_id::RequestId for crate::operation::assume_role_with_saml::AssumeRoleWithSAMLError {
429 fn request_id(&self) -> Option<&str> {
430 self.meta().request_id()
431 }
432 }
433
434pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_input::AssumeRoleWithSamlInput;
435
436pub use crate::operation::assume_role_with_saml::_assume_role_with_saml_output::AssumeRoleWithSamlOutput;
437
438mod _assume_role_with_saml_input;
439
440mod _assume_role_with_saml_output;
441
442pub mod builders;
444