aws_sdk_sts/operation/
get_web_identity_token.rs

1// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
2/// Orchestration and serialization glue logic for `GetWebIdentityToken`.
3#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct GetWebIdentityToken;
6impl GetWebIdentityToken {
7    /// Creates a new `GetWebIdentityToken`
8    pub fn new() -> Self {
9        Self
10    }
11    pub(crate) async fn orchestrate(
12                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13                        input: crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
14                    ) -> ::std::result::Result<crate::operation::get_web_identity_token::GetWebIdentityTokenOutput, ::aws_smithy_runtime_api::client::result::SdkError<crate::operation::get_web_identity_token::GetWebIdentityTokenError, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
15                        let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>| {
16                            err.map_service_error(|err| {
17                                err.downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>().expect("correct error type")
18                            })
19                        };
20                        let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
21                            .await
22                            .map_err(map_err)?;
23                        let output = context.finalize().map_err(map_err)?;
24                        ::std::result::Result::Ok(output.downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenOutput>().expect("correct output type"))
25                    }
26
27                    pub(crate) async fn orchestrate_with_stop_point(
28                        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
29                        input: crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
30                        stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
31                    ) -> ::std::result::Result<::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext, ::aws_smithy_runtime_api::client::result::SdkError<::aws_smithy_runtime_api::client::interceptors::context::Error, ::aws_smithy_runtime_api::client::orchestrator::HttpResponse>> {
32                        let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
33                        use ::tracing::Instrument;
34                        ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
35                            "STS",
36                            "GetWebIdentityToken",
37                            input,
38                            runtime_plugins,
39                            stop_point
40                        )
41                        // Create a parent span for the entire operation. Includes a random, internal-only,
42                        // seven-digit ID for the operation orchestration so that it can be correlated in the logs.
43                        .instrument(::tracing::debug_span!(
44                                "STS.GetWebIdentityToken",
45                                "rpc.service" = "STS",
46                                "rpc.method" = "GetWebIdentityToken",
47                                "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
48                                "rpc.system" = "aws-api",
49                            ))
50                        .await
51                    }
52
53                    pub(crate) fn operation_runtime_plugins(
54                        client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
55                        client_config: &crate::config::Config,
56                        config_override: ::std::option::Option<crate::config::Builder>,
57                    ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
58                        let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
59
60                        if let ::std::option::Option::Some(config_override) = config_override {
61                            for plugin in config_override.runtime_plugins.iter().cloned() {
62                                runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
63                            }
64                            runtime_plugins = runtime_plugins.with_operation_plugin(
65                                crate::config::ConfigOverrideRuntimePlugin::new(config_override, client_config.config.clone(), &client_config.runtime_components)
66                            );
67                        }
68                        runtime_plugins
69                    }
70}
71impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for GetWebIdentityToken {
72                fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
73                    let mut cfg = ::aws_smithy_types::config_bag::Layer::new("GetWebIdentityToken");
74
75                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(GetWebIdentityTokenRequestSerializer));
76                    cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(GetWebIdentityTokenResponseDeserializer));
77
78                    cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
79                        crate::config::auth::Params::builder()
80                            .operation_name("GetWebIdentityToken")
81                            .build()
82                            .expect("required fields set")
83                    ));
84
85                    cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::SensitiveOutput);
86cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
87                            "GetWebIdentityToken",
88                            "STS",
89                        ));
90let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
91                            signing_options.double_uri_encode = true;
92                            signing_options.content_sha256_header = false;
93                            signing_options.normalize_uri_path = true;
94                            signing_options.payload_override = None;
95
96                            cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
97                                signing_options,
98                                ..::std::default::Default::default()
99                            });
100
101                    ::std::option::Option::Some(cfg.freeze())
102                }
103
104                fn runtime_components(&self, _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
105                    #[allow(unused_mut)]
106                    let mut rcb = ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("GetWebIdentityToken")
107                            .with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(GetWebIdentityTokenTelemetryInputCaptureInterceptor))
108.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default()))
109.with_interceptor(::aws_smithy_runtime_api::client::interceptors::SharedInterceptor::permanent(GetWebIdentityTokenEndpointParamsInterceptor))
110                            .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new())
111.with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new())
112.with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::builder().transient_errors({
113                                            let mut transient_errors: Vec<&'static str> = ::aws_runtime::retries::classifiers::TRANSIENT_ERRORS.into();
114                                            transient_errors.push("IDPCommunicationError");
115                                            ::std::borrow::Cow::Owned(transient_errors)
116                                            }).build())
117.with_retry_classifier(::aws_runtime::service_clock_skew::ServiceClockSkewClassifier::<crate::operation::get_web_identity_token::GetWebIdentityTokenError>::new());
118
119                    ::std::borrow::Cow::Owned(rcb)
120                }
121            }
122
123            #[derive(Debug)]
124            struct GetWebIdentityTokenTelemetryInputCaptureInterceptor;
125
126            #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
127            impl ::aws_smithy_runtime_api::client::interceptors::Intercept for GetWebIdentityTokenTelemetryInputCaptureInterceptor {
128                fn name(&self) -> &'static str {
129                    "GetWebIdentityTokenTelemetryInputCaptureInterceptor"
130                }
131
132                fn read_before_execution(
133                    &self,
134                    context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
135                    cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
136                ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
137                    // Nothing to do unless the customer opted in by naming members to record.
138                    let ::std::option::Option::Some(requested) = cfg.load::<::aws_smithy_types::telemetry::RequestedTelemetryAttributes>().filter(|r| !r.is_empty()) else {
139                        return ::std::result::Result::Ok(());
140                    };
141
142                    let ::std::option::Option::Some(input) = context.input().downcast_ref::<GetWebIdentityTokenInput>() else {
143                        // A mismatched input is not this interceptor's concern; skip quietly.
144                        return ::std::result::Result::Ok(());
145                    };
146
147                    let mut captured = ::aws_smithy_types::telemetry::CapturedTelemetryAttributes::default();
148                    if requested.should_capture("SigningAlgorithm") {
149                            if let ::std::option::Option::Some(value) = input.signing_algorithm.as_deref() {
150                                captured.insert("SigningAlgorithm", value);
151                            }
152                        }
153
154                    cfg.interceptor_state().store_put(captured);
155                    ::std::result::Result::Ok(())
156                }
157            }
158#[derive(Debug)]
159            struct GetWebIdentityTokenResponseDeserializer;
160            impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for GetWebIdentityTokenResponseDeserializer {
161
162
163                fn deserialize_nonstreaming_with_config(&self, response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse, _cfg: &::aws_smithy_types::config_bag::ConfigBag) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
164                    let (success, status) = (response.status().is_success(), response.status().as_u16());
165            let headers = response.headers();
166            let body = response.body().bytes().expect("body loaded");
167            #[allow(unused_mut)]
168            let mut force_error = false;
169            ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
170            let parse_result = if !success && status != 200 || force_error {
171                crate::protocol_serde::shape_get_web_identity_token::de_get_web_identity_token_http_error(status, headers, body, _cfg)
172            } else {
173                crate::protocol_serde::shape_get_web_identity_token::de_get_web_identity_token_http_response(status, headers, body, _cfg)
174            };
175            crate::protocol_serde::type_erase_result(parse_result)
176                }
177            }
178#[derive(Debug)]
179            struct GetWebIdentityTokenRequestSerializer;
180            impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for GetWebIdentityTokenRequestSerializer {
181                #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
182                fn serialize_input(&self, input: ::aws_smithy_runtime_api::client::interceptors::context::Input, _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
183                    let input = input.downcast::<crate::operation::get_web_identity_token::GetWebIdentityTokenInput>().expect("correct type");
184                    let _header_serialization_settings = _cfg.load::<crate::serialization_settings::HeaderSerializationSettings>().cloned().unwrap_or_default();
185                    let mut request_builder = {
186                        #[allow(clippy::uninlined_format_args)]
187fn uri_base(_input: &crate::operation::get_web_identity_token::GetWebIdentityTokenInput, output: &mut ::std::string::String) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
188    use ::std::fmt::Write as _;
189    ::std::write!(output, "/").expect("formatting should succeed");
190    ::std::result::Result::Ok(())
191}
192#[allow(clippy::unnecessary_wraps)]
193fn update_http_builder(
194                input: &crate::operation::get_web_identity_token::GetWebIdentityTokenInput,
195                builder: ::http_1x::request::Builder
196            ) -> ::std::result::Result<::http_1x::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
197    let mut uri = ::std::string::String::new();
198    uri_base(input, &mut uri)?;
199    ::std::result::Result::Ok(builder.method("POST").uri(uri))
200}
201let mut builder = update_http_builder(&input, ::http_1x::request::Builder::new())?;
202builder = _header_serialization_settings.set_default_header(builder, ::http_1x::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
203builder
204                    };
205                    let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_get_web_identity_token_input::ser_get_web_identity_token_input_input_input(&input)?);
206                    if let Some(content_length) = body.content_length() {
207                                let content_length = content_length.to_string();
208                                request_builder = _header_serialization_settings.set_default_header(request_builder, ::http_1x::header::CONTENT_LENGTH, &content_length);
209                            }
210                    ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
211                }
212            }
213#[derive(Debug)]
214            struct GetWebIdentityTokenEndpointParamsInterceptor;
215
216            #[::aws_smithy_runtime_api::client::interceptors::dyn_dispatch_hint]
217            impl ::aws_smithy_runtime_api::client::interceptors::Intercept for GetWebIdentityTokenEndpointParamsInterceptor {
218                fn name(&self) -> &'static str {
219                    "GetWebIdentityTokenEndpointParamsInterceptor"
220                }
221
222                fn read_before_execution(
223                    &self,
224                    context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<'_, ::aws_smithy_runtime_api::client::interceptors::context::Input, ::aws_smithy_runtime_api::client::interceptors::context::Output, ::aws_smithy_runtime_api::client::interceptors::context::Error>,
225                    cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
226                ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
227                    let _input = context.input()
228                        .downcast_ref::<GetWebIdentityTokenInput>()
229                        .ok_or("failed to downcast to GetWebIdentityTokenInput")?;
230
231
232
233                    let params = crate::config::endpoint::Params::builder()
234                        .set_region(cfg.load::<::aws_types::region::Region>().map(|r|r.as_ref().to_owned()))
235.set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
236.set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
237.set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
238                        .build()
239                        .map_err(|err| ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err))?;
240                    cfg.interceptor_state().store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
241                    ::std::result::Result::Ok(())
242                }
243            }
244
245            // The get_* functions below are generated from JMESPath expressions in the
246            // operationContextParams trait. They target the operation's input shape.
247
248
249
250/// Error type for the `GetWebIdentityTokenError` operation.
251#[non_exhaustive]
252#[derive(::std::fmt::Debug)]
253pub enum GetWebIdentityTokenError {
254    /// <p>The requested token payload size exceeds the maximum allowed size. Reduce the number of request tags included in the <code>GetWebIdentityToken</code> API call to reduce the token payload size.</p>
255    JwtPayloadSizeExceededException(crate::types::error::JwtPayloadSizeExceededException),
256    /// <p>The outbound web identity federation feature is not enabled for this account. To use this feature, you must first enable it through the Amazon Web Services Management Console or API.</p>
257    OutboundWebIdentityFederationDisabledException(crate::types::error::OutboundWebIdentityFederationDisabledException),
258    /// <p>The requested token duration would extend the session beyond its original expiration time. You cannot use this operation to extend the lifetime of a session beyond what was granted when the session was originally created.</p>
259    SessionDurationEscalationException(crate::types::error::SessionDurationEscalationException),
260    /// An unexpected error occurred (e.g., invalid JSON returned by the service or an unknown error code).
261                    #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
262    variable wildcard pattern and check `.code()`:
263     \
264    &nbsp;&nbsp;&nbsp;`err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
265     \
266    See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-GetWebIdentityTokenError) for what information is available for the error.")]
267                    Unhandled(crate::error::sealed_unhandled::Unhandled),
268}
269impl GetWebIdentityTokenError {
270    /// Creates the `GetWebIdentityTokenError::Unhandled` variant from any error type.
271                    pub fn unhandled(err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>) -> Self {
272                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.into(), meta: ::std::default::Default::default() })
273                    }
274
275                    /// Creates the `GetWebIdentityTokenError::Unhandled` variant from an [`ErrorMetadata`](::aws_smithy_types::error::ErrorMetadata).
276                    pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
277                        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source: err.clone().into(), meta: err })
278                    }
279    ///
280    /// Returns error metadata, which includes the error code, message,
281    /// request ID, and potentially additional information.
282    ///
283    pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
284        match self {
285            Self::JwtPayloadSizeExceededException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
286            Self::OutboundWebIdentityFederationDisabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
287            Self::SessionDurationEscalationException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
288            Self::Unhandled(e) => &e.meta,
289        }
290    }
291    /// Returns `true` if the error kind is `GetWebIdentityTokenError::JwtPayloadSizeExceededException`.
292    pub fn is_jwt_payload_size_exceeded_exception(&self) -> bool {
293        matches!(self, Self::JwtPayloadSizeExceededException(_))
294    }
295    /// Returns `true` if the error kind is `GetWebIdentityTokenError::OutboundWebIdentityFederationDisabledException`.
296    pub fn is_outbound_web_identity_federation_disabled_exception(&self) -> bool {
297        matches!(self, Self::OutboundWebIdentityFederationDisabledException(_))
298    }
299    /// Returns `true` if the error kind is `GetWebIdentityTokenError::SessionDurationEscalationException`.
300    pub fn is_session_duration_escalation_exception(&self) -> bool {
301        matches!(self, Self::SessionDurationEscalationException(_))
302    }
303}
304impl ::std::error::Error for GetWebIdentityTokenError {
305    fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
306        match self {
307            Self::JwtPayloadSizeExceededException(_inner) =>
308            ::std::option::Option::Some(_inner)
309            ,
310            Self::OutboundWebIdentityFederationDisabledException(_inner) =>
311            ::std::option::Option::Some(_inner)
312            ,
313            Self::SessionDurationEscalationException(_inner) =>
314            ::std::option::Option::Some(_inner)
315            ,
316            Self::Unhandled(_inner) => {
317                ::std::option::Option::Some(&*_inner.source)
318            }
319        }
320    }
321}
322impl ::std::fmt::Display for GetWebIdentityTokenError {
323    fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
324        match self {
325            Self::JwtPayloadSizeExceededException(_inner) =>
326            _inner.fmt(f)
327            ,
328            Self::OutboundWebIdentityFederationDisabledException(_inner) =>
329            _inner.fmt(f)
330            ,
331            Self::SessionDurationEscalationException(_inner) =>
332            _inner.fmt(f)
333            ,
334            Self::Unhandled(_inner) => {
335                if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
336                                                        write!(f, "unhandled error ({code})")
337                                                    } else {
338                                                        f.write_str("unhandled error")
339                                                    }
340            }
341        }
342    }
343}
344impl ::aws_smithy_types::retry::ProvideErrorKind for GetWebIdentityTokenError {
345    fn code(&self) -> ::std::option::Option<&str> {
346        ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
347    }
348    fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
349        ::std::option::Option::None
350    }
351}
352impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for GetWebIdentityTokenError {
353    fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
354        match self {
355            Self::JwtPayloadSizeExceededException(_inner) =>
356            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
357            ,
358            Self::OutboundWebIdentityFederationDisabledException(_inner) =>
359            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
360            ,
361            Self::SessionDurationEscalationException(_inner) =>
362            ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
363            ,
364            Self::Unhandled(_inner) => {
365                &_inner.meta
366            }
367        }
368    }
369}
370impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for GetWebIdentityTokenError {
371    fn create_unhandled_error(
372                        source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
373                        meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>
374                    ) -> Self {
375        Self::Unhandled(crate::error::sealed_unhandled::Unhandled { source, meta: meta.unwrap_or_default() })
376    }
377}
378impl ::aws_types::request_id::RequestId for crate::operation::get_web_identity_token::GetWebIdentityTokenError {
379                                fn request_id(&self) -> Option<&str> {
380                                    self.meta().request_id()
381                                }
382                            }
383
384pub use crate::operation::get_web_identity_token::_get_web_identity_token_input::GetWebIdentityTokenInput;
385
386pub use crate::operation::get_web_identity_token::_get_web_identity_token_output::GetWebIdentityTokenOutput;
387
388mod _get_web_identity_token_input;
389
390mod _get_web_identity_token_output;
391
392/// Builders
393pub mod builders;
394
aws_sdk_sts/operation/get_web_identity_token.rs

aws_sdk_sts/operation/
get_web_identity_token.rs
