Merge pull request #125 from aehrt55/feature/support-service-account

feat: support aws web identity token file

__mocks__/Credentials.js

@@ -0,0 +1,7 @@
+class Credentials {
+  constructor() {
+    return {}
+  }
+}
+
+module.exports = Credentials

__mocks__/TokenFileWebIdentityCredentials.js

@@ -0,0 +1,7 @@
+class TokenFileWebIdentityCredentials {
+  constructor() {
+    return {}
+  }
+}
+
+module.exports = TokenFileWebIdentityCredentials

__mocks__/aws-sdk.js

@@ -1,7 +1,11 @@
 const SQS = require('./SQS.js')
+const Credentials = require('./Credentials')
+const TokenFileWebIdentityCredentials = require('./TokenFileWebIdentityCredentials')
 
 const AWS = jest.genMockFromModule()
 
 AWS.SQS = SQS
+AWS.Credentials = Credentials
+AWS.TokenFileWebIdentityCredentials = TokenFileWebIdentityCredentials
 
 module.exports = AWS

lib/plugins/sqsMessageQueue/lib/SQSMessageQueue.js

@@ -3,6 +3,7 @@
  *
  * @description the services for connecting rabbit message queue
  */
+const fs = require('fs')
 const _ = require('lodash')
 const Promise = require('bluebird')
 
@@ -23,17 +24,31 @@ class SQSMessageQueue {
     }
   }
 
+  get credentials() {
+    if (this.awsCredentials) {
+      return awsCredentials;
+    }
+    const { Credentials, TokenFileWebIdentityCredentials } = this.aws
+    const { accessKeyId, secretAccessKey } = this.config
+    this.awsCredentials = accessKeyId
+      ? new Credentials({
+          accessKeyId,
+          secretAccessKey,
+        })
+      : new TokenFileWebIdentityCredentials()
+    return this.awsCredentials
+  }
+
   get sqs() {
     if (!this.singleSqs) {
       if (!this.config) return null
 
-      const { accessKeyId, secretAccessKey, apiVersion, region } = this.config
+      const { apiVersion, region } = this.config
 
       this.singleSqs = new this.aws.SQS({
-        accessKeyId,
-        secretAccessKey,
         apiVersion,
-        region
+        region,
+        credentials: this.credentials,
       })
     }