Support STS Temp Credentials? #1

ricky11 commented 2026年05月08日 08:05:56 +02:00

Can this package use sessionTokens and STS keys?

example:

const s3 = new S3mini({
accessKeyId: data.AccessKeyId,
secretAccessKey: data.AccessKeySecret,
sessionToken: data.SecurityToken,
endpoint: 'https://....',
region: 'auto',
});

It seems it can only use fully scoped accesskeys and not temp credentials that require a sessionToken?

Also, has it been tested with Alibaba Cloud , ill do that for you but need it to work with sessionTokens

Can this package use sessionTokens and STS keys? example: const s3 = new S3mini({ accessKeyId: data.AccessKeyId, secretAccessKey: data.AccessKeySecret, sessionToken: data.SecurityToken, endpoint: 'https://....', region: 'auto', }); It seems it can only use fully scoped accesskeys and not temp credentials that require a sessionToken? Also, has it been tested with Alibaba Cloud , ill do that for you but need it to work with sessionTokens

Jolly_Good commented 2026年05月10日 09:34:45 +02:00

Yes, no sessionTokens so far. It's the first time I see that "feature" unfortunately. But, if you need it and it won't slow down or increase the lib size, I can try to implement it within a few weeks (I'm currently busy) or you can send me PR.

Regarding Alibaba - I haven't tested their S3 implementation, but if they don't change key prefixes like Google does (from amz-* to goo-*), it should be fine. And I would appreciate if you spawn/setup testing bucket for it as well 👍 Let me know what you prefer ...

Yes, no sessionTokens so far. It's the first time I see that "feature" unfortunately. But, if you need it and it won't slow down or increase the lib size, I can try to implement it within a few weeks (I'm currently busy) or you can send me PR. Regarding Alibaba - I haven't tested their S3 implementation, but if they don't change key prefixes like Google does (from amz-* to goo-*), it should be fine. And I would appreciate if you spawn/setup testing bucket for it as well 👍 Let me know what you prefer ...