Session token must be included if used in signing

Continue to supply session token when included as part of signature. See department-stockholm#12
zenchicken · Jan 7, 2020 · 401f637 · 401f637
1 parent 8766478
commit 401f637
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.js b/index.js
@@ -221,7 +221,7 @@ exports.createPresignedURL = function(
 
   // when a session token must NOT be "signed" into the canonical request
   // (needed for some services, such as IoT)
-  if (options.sessionToken && !options.signSessionToken) {
+  if (options.sessionToken && options.signSessionToken) {
     query["X-Amz-Security-Token"] = options.sessionToken;
   } else {
     delete query["X-Amz-Security-Token"];