chore: forcerefresh

Author: kuhe

packages/credential-provider-node/package.json

@@ -15,7 +15,7 @@
     "build:types": "tsc -p tsconfig.types.json",
     "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
     "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo",
-    "test": "yarn g:vitest run",
+    "test": "yarn g:vitest run --reporter verbose",
     "test:watch": "yarn g:vitest watch",
     "test:integration": "yarn g:vitest run -c vitest.config.integ.mts",
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"

packages/credential-provider-node/src/runtime/memoize-chain.spec.ts

@@ -131,4 +131,29 @@ describe("memoize runtime config aware AWS credential chain", () => {
       expect(expiringCredentials).toHaveBeenCalledTimes(3);
     }
   });
+
+  it("can be force refreshed", async () => {
+    const provider = memoizeChain([expiringCredentials], credentialsWillNeedRefresh);
+
+    const credentials = await Promise.all([
+      provider({ forceRefresh: true }),
+      provider({ forceRefresh: true }),
+      provider({ forceRefresh: true }),
+      provider({ forceRefresh: true }),
+      provider({ forceRefresh: true }),
+    ]);
+    let sequence = 0;
+
+    for (const c of credentials) {
+      expect(c).toEqual({
+        accessKeyId: "",
+        secretAccessKey: "",
+        expiration,
+        sequence: sequence++,
+        runtimeOptions: ["forceRefresh"],
+      });
+    }
+
+    expect(expiringCredentials).toHaveBeenCalledTimes(5);
+  });
 });

packages/credential-provider-node/src/runtime/memoize-chain.ts

@@ -31,6 +31,9 @@ export function memoizeChain(
   let credentials: AwsCredentialIdentity | undefined;
 
   const provider = async (options?: AwsIdentityProperties & { forceRefresh?: boolean }) => {
+    if (options?.forceRefresh) {
+      return await chain(options);
+    }
     if (activeLock) {
       await activeLock;
     } else if (!credentials || treatAsExpired?.(credentials!)) {