@aws-amplify/adapter-nextjs 1.4.0 → 1.4.1-server-auth.7499b16.0

package/dist/cjs/auth/constant.js

@@ -0,0 +1,26 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;
+exports.SUPPORTED_ROUTES = [
+    'sign-in',
+    'sign-in-callback',
+    'sign-up',
+    'sign-out',
+    'sign-out-callback',
+];
+exports.COGNITO_IDENTITY_PROVIDERS = {
+    Google: 'Google',
+    Facebook: 'Facebook',
+    Amazon: 'LoginWithAmazon',
+    Apple: 'SignInWithApple',
+};
+exports.PKCE_COOKIE_NAME = 'com.amplify.server_auth.pkce';
+exports.STATE_COOKIE_NAME = 'com.amplify.server_auth.state';
+exports.IS_SIGNING_OUT_COOKIE_NAME = 'com.amplify.server_auth.isSigningOut';
+exports.AUTH_FLOW_PROOF_MAX_AGE = 10 * 60; // 10 mins in seconds
+exports.REMOVE_COOKIE_MAX_AGE = -1; // -1 to remove the cookie immediately (0 ==> session cookie)
+exports.OAUTH_GRANT_TYPE = 'authorization_code';
+//# sourceMappingURL=constant.js.map

package/dist/cjs/auth/constant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constant.js","sources":["../../../src/auth/constant.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;\nexports.SUPPORTED_ROUTES = [\n    'sign-in',\n    'sign-in-callback',\n    'sign-up',\n    'sign-out',\n    'sign-out-callback',\n];\nexports.COGNITO_IDENTITY_PROVIDERS = {\n    Google: 'Google',\n    Facebook: 'Facebook',\n    Amazon: 'LoginWithAmazon',\n    Apple: 'SignInWithApple',\n};\nexports.PKCE_COOKIE_NAME = 'com.amplify.server_auth.pkce';\nexports.STATE_COOKIE_NAME = 'com.amplify.server_auth.state';\nexports.IS_SIGNING_OUT_COOKIE_NAME = 'com.amplify.server_auth.isSigningOut';\nexports.AUTH_FLOW_PROOF_MAX_AGE = 10 * 60; // 10 mins in seconds\nexports.REMOVE_COOKIE_MAX_AGE = -1; // -1 to remove the cookie immediately (0 ==> session cookie)\nexports.OAUTH_GRANT_TYPE = 'authorization_code';\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC;AAChQ,OAAO,CAAC,gBAAgB,GAAG;AAC3B,IAAI,SAAS;AACb,IAAI,kBAAkB;AACtB,IAAI,SAAS;AACb,IAAI,UAAU;AACd,IAAI,mBAAmB;AACvB,CAAC,CAAC;AACF,OAAO,CAAC,0BAA0B,GAAG;AACrC,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,QAAQ,EAAE,UAAU;AACxB,IAAI,MAAM,EAAE,iBAAiB;AAC7B,IAAI,KAAK,EAAE,iBAAiB;AAC5B,CAAC,CAAC;AACF,OAAO,CAAC,gBAAgB,GAAG,8BAA8B,CAAC;AAC1D,OAAO,CAAC,iBAAiB,GAAG,+BAA+B,CAAC;AAC5D,OAAO,CAAC,0BAA0B,GAAG,sCAAsC,CAAC;AAC5E,OAAO,CAAC,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1C,OAAO,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;AACnC,OAAO,CAAC,gBAAgB,GAAG,oBAAoB;;"}

package/dist/cjs/auth/createAuthRouteHandlersFactory.js

@@ -0,0 +1,84 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthRouteHandlersFactory = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+const adapter_core_1 = require("@aws-amplify/core/internals/adapter-core");
+const utils_2 = require("./utils");
+const handleAuthApiRouteRequestForAppRouter_1 = require("./handleAuthApiRouteRequestForAppRouter");
+const handleAuthApiRouteRequestForPagesRouter_1 = require("./handleAuthApiRouteRequestForPagesRouter");
+const createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOptions = {}, amplifyAppOrigin, runWithAmplifyServerContext, }) => {
+    const handleRequest = async ({ request, contextOrResponse, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
+        if ((0, utils_2.isNextApiRequest)(request) && (0, utils_2.isNextApiResponse)(contextOrResponse)) {
+            // In pages router the response is sent via calling `response.end()` or
+            // `response.send()`. The response is not returned from the handler.
+            // To ensure these two methods are called before the handler returns,
+            // we use `await` here.
+            await (0, handleAuthApiRouteRequestForPagesRouter_1.handleAuthApiRouteRequestForPagesRouter)({
+                request,
+                response: contextOrResponse,
+                handlerInput,
+                userPoolClientId,
+                oAuthConfig,
+                setCookieOptions,
+                origin,
+                runWithAmplifyServerContext,
+            });
+            // In the Pages Router, the final response is handled by contextOrResponse
+            return;
+        }
+        if ((0, utils_2.isNextRequest)(request) &&
+            (0, utils_2.isAuthRoutesHandlersContext)(contextOrResponse)) {
+            // In the App Router, the final response is constructed and returned
+            return (0, handleAuthApiRouteRequestForAppRouter_1.handleAuthApiRouteRequestForAppRouter)({
+                request,
+                handlerContext: contextOrResponse,
+                handlerInput,
+                userPoolClientId,
+                oAuthConfig,
+                setCookieOptions,
+                origin,
+                runWithAmplifyServerContext,
+            });
+        }
+        // this should not be happening
+        throw new Error('Invalid request and context/response combination. The request cannot be handled.');
+    };
+    return (createAuthRoutesHandlersInput = {}) => {
+        // origin validation should happen when createAuthRouteHandlers is being called to create
+        // Auth API routes.
+        if (!amplifyAppOrigin) {
+            throw new adapter_core_1.AmplifyServerContextError({
+                message: 'Could not find the AMPLIFY_APP_ORIGIN environment variable.',
+                recoverySuggestion: 'Add the AMPLIFY_APP_ORIGIN environment variable to the `.env` file of your Next.js project.',
+            });
+        }
+        if (!(0, utils_2.isValidOrigin)(amplifyAppOrigin)) {
+            throw new adapter_core_1.AmplifyServerContextError({
+                message: 'AMPLIFY_APP_ORIGIN environment variable contains an invalid origin string.',
+                recoverySuggestion: 'Ensure the AMPLIFY_APP_ORIGIN environment variable is a valid origin string.',
+            });
+        }
+        // OAuth config validation should happen when createAuthRouteHandlers is being called to create
+        // Auth API routes.
+        (0, utils_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);
+        (0, utils_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);
+        const { userPoolClientId } = resourcesConfig.Auth.Cognito;
+        const { oauth: oAuthConfig } = resourcesConfig.Auth.Cognito.loginWith;
+        const { cookies: setCookieOptions = {} } = runtimeOptions;
+        // The call-site of this returned function is the Next.js API route file
+        return (request, contextOrResponse) => handleRequest({
+            request,
+            contextOrResponse,
+            handlerInput: createAuthRoutesHandlersInput,
+            userPoolClientId,
+            oAuthConfig,
+            setCookieOptions,
+            origin: amplifyAppOrigin,
+        });
+    };
+};
+exports.createAuthRouteHandlersFactory = createAuthRouteHandlersFactory;
+//# sourceMappingURL=createAuthRouteHandlersFactory.js.map

package/dist/cjs/auth/createAuthRouteHandlersFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthRouteHandlersFactory.js","sources":["../../../src/auth/createAuthRouteHandlersFactory.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createAuthRouteHandlersFactory = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst adapter_core_1 = require(\"@aws-amplify/core/internals/adapter-core\");\nconst utils_2 = require(\"./utils\");\nconst handleAuthApiRouteRequestForAppRouter_1 = require(\"./handleAuthApiRouteRequestForAppRouter\");\nconst handleAuthApiRouteRequestForPagesRouter_1 = require(\"./handleAuthApiRouteRequestForPagesRouter\");\nconst createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOptions = {}, amplifyAppOrigin, runWithAmplifyServerContext, }) => {\n    const handleRequest = async ({ request, contextOrResponse, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n        if ((0, utils_2.isNextApiRequest)(request) && (0, utils_2.isNextApiResponse)(contextOrResponse)) {\n            // In pages router the response is sent via calling `response.end()` or\n            // `response.send()`. The response is not returned from the handler.\n            // To ensure these two methods are called before the handler returns,\n            // we use `await` here.\n            await (0, handleAuthApiRouteRequestForPagesRouter_1.handleAuthApiRouteRequestForPagesRouter)({\n                request,\n                response: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n            // In the Pages Router, the final response is handled by contextOrResponse\n            return;\n        }\n        if ((0, utils_2.isNextRequest)(request) &&\n            (0, utils_2.isAuthRoutesHandlersContext)(contextOrResponse)) {\n            // In the App Router, the final response is constructed and returned\n            return (0, handleAuthApiRouteRequestForAppRouter_1.handleAuthApiRouteRequestForAppRouter)({\n                request,\n                handlerContext: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n        }\n        // this should not be happening\n        throw new Error('Invalid request and context/response combination. The request cannot be handled.');\n    };\n    return (createAuthRoutesHandlersInput = {}) => {\n        // origin validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        if (!amplifyAppOrigin) {\n            throw new adapter_core_1.AmplifyServerContextError({\n                message: 'Could not find the AMPLIFY_APP_ORIGIN environment variable.',\n                recoverySuggestion: 'Add the AMPLIFY_APP_ORIGIN environment variable to the `.env` file of your Next.js project.',\n            });\n        }\n        if (!(0, utils_2.isValidOrigin)(amplifyAppOrigin)) {\n            throw new adapter_core_1.AmplifyServerContextError({\n                message: 'AMPLIFY_APP_ORIGIN environment variable contains an invalid origin string.',\n                recoverySuggestion: 'Ensure the AMPLIFY_APP_ORIGIN environment variable is a valid origin string.',\n            });\n        }\n        // OAuth config validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        (0, utils_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);\n        (0, utils_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);\n        const { userPoolClientId } = resourcesConfig.Auth.Cognito;\n        const { oauth: oAuthConfig } = resourcesConfig.Auth.Cognito.loginWith;\n        const { cookies: setCookieOptions = {} } = runtimeOptions;\n        // The call-site of this returned function is the Next.js API route file\n        return (request, contextOrResponse) => handleRequest({\n            request,\n            contextOrResponse,\n            handlerInput: createAuthRoutesHandlersInput,\n            userPoolClientId,\n            oAuthConfig,\n            setCookieOptions,\n            origin: amplifyAppOrigin,\n        });\n    };\n};\nexports.createAuthRouteHandlersFactory = createAuthRouteHandlersFactory;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,8BAA8B,GAAG,KAAK,CAAC,CAAC;AAChD,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,0CAA0C,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,uCAAuC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AACnG,MAAM,yCAAyC,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACvG,MAAM,8BAA8B,GAAG,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,GAAG,EAAE,EAAE,gBAAgB,EAAE,2BAA2B,GAAG,KAAK;AAC7I,IAAI,MAAM,aAAa,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC5I,QAAQ,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE;AACzG;AACA;AACA;AACA;AACA,YAAY,MAAM,IAAI,yCAAyC,CAAC,uCAAuC,EAAE;AACzG,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ,EAAE,iBAAiB;AAC3C,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf;AACA,YAAY,OAAO;AACnB,SAAS;AACT,QAAQ,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC;AAC/C,YAAY,IAAI,OAAO,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,EAAE;AACzE;AACA,YAAY,OAAO,IAAI,uCAAuC,CAAC,qCAAqC,EAAE;AACtG,gBAAgB,OAAO;AACvB,gBAAgB,cAAc,EAAE,iBAAiB;AACjD,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;AAC5G,KAAK,CAAC;AACN,IAAI,OAAO,CAAC,6BAA6B,GAAG,EAAE,KAAK;AACnD;AACA;AACA,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC;AAC/D,gBAAgB,OAAO,EAAE,6DAA6D;AACtF,gBAAgB,kBAAkB,EAAE,6FAA6F;AACjI,aAAa,CAAC,CAAC;AACf,SAAS;AACT,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE;AAC3D,YAAY,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC;AAC/D,gBAAgB,OAAO,EAAE,4EAA4E;AACrG,gBAAgB,kBAAkB,EAAE,8EAA8E;AAClH,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA;AACA,QAAQ,IAAI,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9E,QAAQ,IAAI,OAAO,CAAC,iBAAiB,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrE,QAAQ,MAAM,EAAE,gBAAgB,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;AAClE,QAAQ,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;AAC9E,QAAQ,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC;AAClE;AACA,QAAQ,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,aAAa,CAAC;AAC7D,YAAY,OAAO;AACnB,YAAY,iBAAiB;AAC7B,YAAY,YAAY,EAAE,6BAA6B;AACvD,YAAY,gBAAgB;AAC5B,YAAY,WAAW;AACvB,YAAY,gBAAgB;AAC5B,YAAY,MAAM,EAAE,gBAAgB;AACpC,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC,CAAC;AACF,OAAO,CAAC,8BAA8B,GAAG,8BAA8B;;"}

package/dist/cjs/auth/handleAuthApiRouteRequestForAppRouter.js

@@ -0,0 +1,97 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleAuthApiRouteRequestForAppRouter = void 0;
+const utils_1 = require("./utils");
+const handlers_1 = require("./handlers");
+const handleAuthApiRouteRequestForAppRouter = async ({ request, handlerContext, handlerInput, userPoolClientId, oAuthConfig, origin, setCookieOptions, runWithAmplifyServerContext, }) => {
+    if (request.method !== 'GET') {
+        return new Response(null, { status: 405 });
+    }
+    const { slug } = handlerContext.params;
+    // don't support [...slug] here
+    if (slug === undefined || Array.isArray(slug)) {
+        return new Response(null, { status: 400 });
+    }
+    if (!(0, utils_1.isSupportedAuthApiRoutePath)(slug)) {
+        return new Response(null, { status: 404 });
+    }
+    switch (slug) {
+        case 'sign-up': {
+            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithAppRouter)({
+                request,
+                runWithAmplifyServerContext,
+            });
+            if (hasActiveUserSession) {
+                return new Response(null, {
+                    status: 302,
+                    headers: new Headers({
+                        Location: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),
+                    }),
+                });
+            }
+            return (0, handlers_1.handleSignInSignUpRequest)({
+                request,
+                userPoolClientId,
+                oAuthConfig,
+                customState: handlerInput.customState,
+                origin,
+                setCookieOptions,
+                type: 'signUp',
+            });
+        }
+        case 'sign-in': {
+            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithAppRouter)({
+                request,
+                runWithAmplifyServerContext,
+            });
+            if (hasActiveUserSession) {
+                return new Response(null, {
+                    status: 302,
+                    headers: new Headers({
+                        Location: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),
+                    }),
+                });
+            }
+            return (0, handlers_1.handleSignInSignUpRequest)({
+                request,
+                userPoolClientId,
+                oAuthConfig,
+                customState: handlerInput.customState,
+                origin,
+                setCookieOptions,
+                type: 'signIn',
+            });
+        }
+        case 'sign-out':
+            return (0, handlers_1.handleSignOutRequest)({
+                userPoolClientId,
+                oAuthConfig,
+                origin,
+                setCookieOptions,
+            });
+        case 'sign-in-callback':
+            return (0, handlers_1.handleSignInCallbackRequest)({
+                request,
+                handlerInput,
+                oAuthConfig,
+                origin,
+                setCookieOptions,
+                userPoolClientId,
+            });
+        case 'sign-out-callback':
+            return (0, handlers_1.handleSignOutCallbackRequest)({
+                request,
+                handlerInput,
+                oAuthConfig,
+                userPoolClientId,
+                setCookieOptions,
+            });
+        // default:
+        // is unreachable by the guard of isSupportedAuthApiRoutePath()
+    }
+};
+exports.handleAuthApiRouteRequestForAppRouter = handleAuthApiRouteRequestForAppRouter;
+//# sourceMappingURL=handleAuthApiRouteRequestForAppRouter.js.map

package/dist/cjs/auth/handleAuthApiRouteRequestForAppRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleAuthApiRouteRequestForAppRouter.js","sources":["../../../src/auth/handleAuthApiRouteRequestForAppRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleAuthApiRouteRequestForAppRouter = void 0;\nconst utils_1 = require(\"./utils\");\nconst handlers_1 = require(\"./handlers\");\nconst handleAuthApiRouteRequestForAppRouter = async ({ request, handlerContext, handlerInput, userPoolClientId, oAuthConfig, origin, setCookieOptions, runWithAmplifyServerContext, }) => {\n    if (request.method !== 'GET') {\n        return new Response(null, { status: 405 });\n    }\n    const { slug } = handlerContext.params;\n    // don't support [...slug] here\n    if (slug === undefined || Array.isArray(slug)) {\n        return new Response(null, { status: 400 });\n    }\n    if (!(0, utils_1.isSupportedAuthApiRoutePath)(slug)) {\n        return new Response(null, { status: 404 });\n    }\n    switch (slug) {\n        case 'sign-up': {\n            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithAppRouter)({\n                request,\n                runWithAmplifyServerContext,\n            });\n            if (hasActiveUserSession) {\n                return new Response(null, {\n                    status: 302,\n                    headers: new Headers({\n                        Location: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n                    }),\n                });\n            }\n            return (0, handlers_1.handleSignInSignUpRequest)({\n                request,\n                userPoolClientId,\n                oAuthConfig,\n                customState: handlerInput.customState,\n                origin,\n                setCookieOptions,\n                type: 'signUp',\n            });\n        }\n        case 'sign-in': {\n            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithAppRouter)({\n                request,\n                runWithAmplifyServerContext,\n            });\n            if (hasActiveUserSession) {\n                return new Response(null, {\n                    status: 302,\n                    headers: new Headers({\n                        Location: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n                    }),\n                });\n            }\n            return (0, handlers_1.handleSignInSignUpRequest)({\n                request,\n                userPoolClientId,\n                oAuthConfig,\n                customState: handlerInput.customState,\n                origin,\n                setCookieOptions,\n                type: 'signIn',\n            });\n        }\n        case 'sign-out':\n            return (0, handlers_1.handleSignOutRequest)({\n                userPoolClientId,\n                oAuthConfig,\n                origin,\n                setCookieOptions,\n            });\n        case 'sign-in-callback':\n            return (0, handlers_1.handleSignInCallbackRequest)({\n                request,\n                handlerInput,\n                oAuthConfig,\n                origin,\n                setCookieOptions,\n                userPoolClientId,\n            });\n        case 'sign-out-callback':\n            return (0, handlers_1.handleSignOutCallbackRequest)({\n                request,\n                handlerInput,\n                oAuthConfig,\n                userPoolClientId,\n                setCookieOptions,\n            });\n        // default:\n        // is unreachable by the guard of isSupportedAuthApiRoutePath()\n    }\n};\nexports.handleAuthApiRouteRequestForAppRouter = handleAuthApiRouteRequestForAppRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,qCAAqC,GAAG,KAAK,CAAC,CAAC;AACvD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AACzC,MAAM,qCAAqC,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,2BAA2B,GAAG,KAAK;AAC1L,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE;AAClC,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC;AAC3C;AACA,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACnD,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,EAAE;AACzD,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,QAAQ,IAAI;AAChB,QAAQ,KAAK,SAAS,EAAE;AACxB,YAAY,MAAM,oBAAoB,GAAG,MAAM,IAAI,OAAO,CAAC,iCAAiC,EAAE;AAC9F,gBAAgB,OAAO;AACvB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,YAAY,IAAI,oBAAoB,EAAE;AACtC,gBAAgB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAC1C,oBAAoB,MAAM,EAAE,GAAG;AAC/B,oBAAoB,OAAO,EAAE,IAAI,OAAO,CAAC;AACzC,wBAAwB,QAAQ,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,qBAAqB,CAAC;AACtB,iBAAiB,CAAC,CAAC;AACnB,aAAa;AACb,YAAY,OAAO,IAAI,UAAU,CAAC,yBAAyB,EAAE;AAC7D,gBAAgB,OAAO;AACvB,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,WAAW,EAAE,YAAY,CAAC,WAAW;AACrD,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,gBAAgB,IAAI,EAAE,QAAQ;AAC9B,aAAa,CAAC,CAAC;AACf,SAAS;AACT,QAAQ,KAAK,SAAS,EAAE;AACxB,YAAY,MAAM,oBAAoB,GAAG,MAAM,IAAI,OAAO,CAAC,iCAAiC,EAAE;AAC9F,gBAAgB,OAAO;AACvB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,YAAY,IAAI,oBAAoB,EAAE;AACtC,gBAAgB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAC1C,oBAAoB,MAAM,EAAE,GAAG;AAC/B,oBAAoB,OAAO,EAAE,IAAI,OAAO,CAAC;AACzC,wBAAwB,QAAQ,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,qBAAqB,CAAC;AACtB,iBAAiB,CAAC,CAAC;AACnB,aAAa;AACb,YAAY,OAAO,IAAI,UAAU,CAAC,yBAAyB,EAAE;AAC7D,gBAAgB,OAAO;AACvB,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,WAAW,EAAE,YAAY,CAAC,WAAW;AACrD,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,gBAAgB,IAAI,EAAE,QAAQ;AAC9B,aAAa,CAAC,CAAC;AACf,SAAS;AACT,QAAQ,KAAK,UAAU;AACvB,YAAY,OAAO,IAAI,UAAU,CAAC,oBAAoB,EAAE;AACxD,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf,QAAQ,KAAK,kBAAkB;AAC/B,YAAY,OAAO,IAAI,UAAU,CAAC,2BAA2B,EAAE;AAC/D,gBAAgB,OAAO;AACvB,gBAAgB,YAAY;AAC5B,gBAAgB,WAAW;AAC3B,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf,QAAQ,KAAK,mBAAmB;AAChC,YAAY,OAAO,IAAI,UAAU,CAAC,4BAA4B,EAAE;AAChE,gBAAgB,OAAO;AACvB,gBAAgB,YAAY;AAC5B,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf;AACA;AACA,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,qCAAqC,GAAG,qCAAqC;;"}

package/dist/cjs/auth/handleAuthApiRouteRequestForPagesRouter.js

@@ -0,0 +1,112 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleAuthApiRouteRequestForPagesRouter = void 0;
+const utils_1 = require("./utils");
+const handlers_1 = require("./handlers");
+const handleAuthApiRouteRequestForPagesRouter = async ({ request, response, userPoolClientId, oAuthConfig, handlerInput, origin, setCookieOptions, runWithAmplifyServerContext, }) => {
+    if (request.method !== 'GET') {
+        response.status(405).end();
+        return;
+    }
+    const { slug } = request.query;
+    // don't support [...slug] here
+    if (slug === undefined || Array.isArray(slug)) {
+        response.status(400).end();
+        return;
+    }
+    if (!(0, utils_1.isSupportedAuthApiRoutePath)(slug)) {
+        response.status(404).end();
+        return;
+    }
+    switch (slug) {
+        case 'sign-up': {
+            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithPagesRouter)({
+                request,
+                response,
+                runWithAmplifyServerContext,
+            });
+            if (hasActiveUserSession) {
+                response.redirect(302, (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete));
+                return;
+            }
+            (0, handlers_1.handleSignInSignUpRequestForPagesRouter)({
+                request,
+                response,
+                userPoolClientId,
+                oAuthConfig,
+                customState: handlerInput.customState,
+                origin,
+                setCookieOptions,
+                type: 'signUp',
+            });
+            break;
+        }
+        case 'sign-in': {
+            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithPagesRouter)({
+                request,
+                response,
+                runWithAmplifyServerContext,
+            });
+            if (hasActiveUserSession) {
+                response.redirect(302, (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete));
+                return;
+            }
+            (0, handlers_1.handleSignInSignUpRequestForPagesRouter)({
+                request,
+                response,
+                userPoolClientId,
+                oAuthConfig,
+                customState: handlerInput.customState,
+                origin,
+                setCookieOptions,
+                type: 'signIn',
+            });
+            break;
+        }
+        case 'sign-out':
+            (0, handlers_1.handleSignOutRequestForPagesRouter)({
+                response,
+                userPoolClientId,
+                oAuthConfig,
+                origin,
+                setCookieOptions,
+            });
+            break;
+        case 'sign-in-callback':
+            // In pages router the response is sent via calling `response.end()` or
+            // `response.send()`. The response is not returned from the handler.
+            // To ensure these two methods are called before the handler returns,
+            // we use `await` here.
+            await (0, handlers_1.handleSignInCallbackRequestForPagesRouter)({
+                request,
+                response,
+                handlerInput,
+                userPoolClientId,
+                oAuthConfig,
+                origin,
+                setCookieOptions,
+            });
+            break;
+        case 'sign-out-callback':
+            // In pages router the response is sent via calling `response.end()` or
+            // `response.send()`. The response is not returned from the handler.
+            // To ensure these two methods are called before the handler returns,
+            // we use `await` here.
+            await (0, handlers_1.handleSignOutCallbackRequestForPagesRouter)({
+                request,
+                response,
+                handlerInput,
+                oAuthConfig,
+                userPoolClientId,
+                setCookieOptions,
+            });
+            break;
+        // default:
+        // is unreachable by the guard of isSupportedAuthApiRoutePath()
+    }
+};
+exports.handleAuthApiRouteRequestForPagesRouter = handleAuthApiRouteRequestForPagesRouter;
+//# sourceMappingURL=handleAuthApiRouteRequestForPagesRouter.js.map

package/dist/cjs/auth/handleAuthApiRouteRequestForPagesRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleAuthApiRouteRequestForPagesRouter.js","sources":["../../../src/auth/handleAuthApiRouteRequestForPagesRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleAuthApiRouteRequestForPagesRouter = void 0;\nconst utils_1 = require(\"./utils\");\nconst handlers_1 = require(\"./handlers\");\nconst handleAuthApiRouteRequestForPagesRouter = async ({ request, response, userPoolClientId, oAuthConfig, handlerInput, origin, setCookieOptions, runWithAmplifyServerContext, }) => {\n    if (request.method !== 'GET') {\n        response.status(405).end();\n        return;\n    }\n    const { slug } = request.query;\n    // don't support [...slug] here\n    if (slug === undefined || Array.isArray(slug)) {\n        response.status(400).end();\n        return;\n    }\n    if (!(0, utils_1.isSupportedAuthApiRoutePath)(slug)) {\n        response.status(404).end();\n        return;\n    }\n    switch (slug) {\n        case 'sign-up': {\n            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithPagesRouter)({\n                request,\n                response,\n                runWithAmplifyServerContext,\n            });\n            if (hasActiveUserSession) {\n                response.redirect(302, (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete));\n                return;\n            }\n            (0, handlers_1.handleSignInSignUpRequestForPagesRouter)({\n                request,\n                response,\n                userPoolClientId,\n                oAuthConfig,\n                customState: handlerInput.customState,\n                origin,\n                setCookieOptions,\n                type: 'signUp',\n            });\n            break;\n        }\n        case 'sign-in': {\n            const hasActiveUserSession = await (0, utils_1.hasActiveUserSessionWithPagesRouter)({\n                request,\n                response,\n                runWithAmplifyServerContext,\n            });\n            if (hasActiveUserSession) {\n                response.redirect(302, (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete));\n                return;\n            }\n            (0, handlers_1.handleSignInSignUpRequestForPagesRouter)({\n                request,\n                response,\n                userPoolClientId,\n                oAuthConfig,\n                customState: handlerInput.customState,\n                origin,\n                setCookieOptions,\n                type: 'signIn',\n            });\n            break;\n        }\n        case 'sign-out':\n            (0, handlers_1.handleSignOutRequestForPagesRouter)({\n                response,\n                userPoolClientId,\n                oAuthConfig,\n                origin,\n                setCookieOptions,\n            });\n            break;\n        case 'sign-in-callback':\n            // In pages router the response is sent via calling `response.end()` or\n            // `response.send()`. The response is not returned from the handler.\n            // To ensure these two methods are called before the handler returns,\n            // we use `await` here.\n            await (0, handlers_1.handleSignInCallbackRequestForPagesRouter)({\n                request,\n                response,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                origin,\n                setCookieOptions,\n            });\n            break;\n        case 'sign-out-callback':\n            // In pages router the response is sent via calling `response.end()` or\n            // `response.send()`. The response is not returned from the handler.\n            // To ensure these two methods are called before the handler returns,\n            // we use `await` here.\n            await (0, handlers_1.handleSignOutCallbackRequestForPagesRouter)({\n                request,\n                response,\n                handlerInput,\n                oAuthConfig,\n                userPoolClientId,\n                setCookieOptions,\n            });\n            break;\n        // default:\n        // is unreachable by the guard of isSupportedAuthApiRoutePath()\n    }\n};\nexports.handleAuthApiRouteRequestForPagesRouter = handleAuthApiRouteRequestForPagesRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,uCAAuC,GAAG,KAAK,CAAC,CAAC;AACzD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AACzC,MAAM,uCAAuC,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,2BAA2B,GAAG,KAAK;AACtL,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE;AAClC,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;AACnC;AACA,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACnD,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,EAAE;AACzD,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,QAAQ,IAAI;AAChB,QAAQ,KAAK,SAAS,EAAE;AACxB,YAAY,MAAM,oBAAoB,GAAG,MAAM,IAAI,OAAO,CAAC,mCAAmC,EAAE;AAChG,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,YAAY,IAAI,oBAAoB,EAAE;AACtC,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC;AACjH,gBAAgB,OAAO;AACvB,aAAa;AACb,YAAY,IAAI,UAAU,CAAC,uCAAuC,EAAE;AACpE,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,WAAW,EAAE,YAAY,CAAC,WAAW;AACrD,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,gBAAgB,IAAI,EAAE,QAAQ;AAC9B,aAAa,CAAC,CAAC;AACf,YAAY,MAAM;AAClB,SAAS;AACT,QAAQ,KAAK,SAAS,EAAE;AACxB,YAAY,MAAM,oBAAoB,GAAG,MAAM,IAAI,OAAO,CAAC,mCAAmC,EAAE;AAChG,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,YAAY,IAAI,oBAAoB,EAAE;AACtC,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC;AACjH,gBAAgB,OAAO;AACvB,aAAa;AACb,YAAY,IAAI,UAAU,CAAC,uCAAuC,EAAE;AACpE,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,WAAW,EAAE,YAAY,CAAC,WAAW;AACrD,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,gBAAgB,IAAI,EAAE,QAAQ;AAC9B,aAAa,CAAC,CAAC;AACf,YAAY,MAAM;AAClB,SAAS;AACT,QAAQ,KAAK,UAAU;AACvB,YAAY,IAAI,UAAU,CAAC,kCAAkC,EAAE;AAC/D,gBAAgB,QAAQ;AACxB,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf,YAAY,MAAM;AAClB,QAAQ,KAAK,kBAAkB;AAC/B;AACA;AACA;AACA;AACA,YAAY,MAAM,IAAI,UAAU,CAAC,yCAAyC,EAAE;AAC5E,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,MAAM;AACtB,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf,YAAY,MAAM;AAClB,QAAQ,KAAK,mBAAmB;AAChC;AACA;AACA;AACA;AACA,YAAY,MAAM,IAAI,UAAU,CAAC,0CAA0C,EAAE;AAC7E,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ;AACxB,gBAAgB,YAAY;AAC5B,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,gBAAgB;AAChC,aAAa,CAAC,CAAC;AACf,YAAY,MAAM;AAClB;AACA;AACA,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,uCAAuC,GAAG,uCAAuC;;"}

package/dist/cjs/auth/handlers/handleSignInCallbackRequest.js

@@ -0,0 +1,50 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSignInCallbackRequest = void 0;
+const constant_1 = require("../constant");
+const utils_1 = require("../utils");
+const handleSignInCallbackRequest = async ({ request, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
+    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);
+    if (!code || !state) {
+        return new Response(null, { status: 400 });
+    }
+    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromRequest)(request, [constant_1.PKCE_COOKIE_NAME, constant_1.STATE_COOKIE_NAME]);
+    if (!clientState || clientState !== state || !clientPkce) {
+        return new Response(null, { status: 400 });
+    }
+    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({
+        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),
+        userPoolClientId,
+        oAuthConfig,
+        code,
+        codeVerifier: clientPkce,
+    });
+    if ('error' in tokensPayload) {
+        return new Response(tokensPayload.error, { status: 500 });
+    }
+    const headers = new Headers();
+    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createTokenCookies)({
+        tokensPayload,
+        userPoolClientId,
+    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));
+    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));
+    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito
+    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,
+    // the referer remains the same.
+    // When authN token cookies set as `sameSite: 'strict'`, this may cause the
+    // authN tokens cookies set with the redirect response not to be sent to the
+    // server. Hence, sending a html page with status 200 to the client, and perform
+    // the redirection on the client side.
+    headers.set('Content-Type', 'text/html');
+    return new Response((0, utils_1.createOnSignInCompleteRedirectIntermediate)({
+        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),
+    }), {
+        status: 200,
+        headers,
+    });
+};
+exports.handleSignInCallbackRequest = handleSignInCallbackRequest;
+//# sourceMappingURL=handleSignInCallbackRequest.js.map

package/dist/cjs/auth/handlers/handleSignInCallbackRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSignInCallbackRequest.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequest.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequest = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequest = async ({ request, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);\n    if (!code || !state) {\n        return new Response(null, { status: 400 });\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromRequest)(request, [constant_1.PKCE_COOKIE_NAME, constant_1.STATE_COOKIE_NAME]);\n    if (!clientState || clientState !== state || !clientPkce) {\n        return new Response(null, { status: 400 });\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        return new Response(tokensPayload.error, { status: 500 });\n    }\n    const headers = new Headers();\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    headers.set('Content-Type', 'text/html');\n    return new Response((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }), {\n        status: 200,\n        headers,\n    });\n};\nexports.handleSignInCallbackRequest = handleSignInCallbackRequest;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,2BAA2B,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AACnI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACjF,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACrN,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,IAAI,CAAC,UAAU,EAAE;AAC9D,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,KAAK;AACL,IAAI,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACjF,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7L;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAC7C,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AAChF,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,EAAE;AACR,QAAQ,MAAM,EAAE,GAAG;AACnB,QAAQ,OAAO;AACf,KAAK,CAAC,CAAC;AACP,CAAC,CAAC;AACF,OAAO,CAAC,2BAA2B,GAAG,2BAA2B;;"}

package/dist/cjs/auth/handlers/handleSignInCallbackRequestForPagesRouter.js

@@ -0,0 +1,54 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSignInCallbackRequestForPagesRouter = void 0;
+const constant_1 = require("../constant");
+const utils_1 = require("../utils");
+const handleSignInCallbackRequestForPagesRouter = async ({ request, response, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
+    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);
+    if (!code || !state) {
+        response.status(400).end();
+        return;
+    }
+    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromNextApiRequest)(request, [
+        constant_1.PKCE_COOKIE_NAME,
+        constant_1.STATE_COOKIE_NAME,
+    ]);
+    if (!clientState || clientState !== state || !clientPkce) {
+        response.status(400).end();
+        return;
+    }
+    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({
+        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),
+        userPoolClientId,
+        oAuthConfig,
+        code,
+        codeVerifier: clientPkce,
+    });
+    if ('error' in tokensPayload) {
+        response.status(500).send(tokensPayload.error);
+        return;
+    }
+    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createTokenCookies)({
+        tokensPayload,
+        userPoolClientId,
+    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));
+    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));
+    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito
+    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,
+    // the referer remains the same.
+    // When authN token cookies set as `sameSite: 'strict'`, this may cause the
+    // authN tokens cookies set with the redirect response not to be sent to the
+    // server. Hence, sending a html page with status 200 to the client, and perform
+    // the redirection on the client side.
+    response
+        .appendHeader('Content-Type', 'text/html')
+        .status(200)
+        .send((0, utils_1.createOnSignInCompleteRedirectIntermediate)({
+        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),
+    }));
+};
+exports.handleSignInCallbackRequestForPagesRouter = handleSignInCallbackRequestForPagesRouter;
+//# sourceMappingURL=handleSignInCallbackRequestForPagesRouter.js.map

package/dist/cjs/auth/handlers/handleSignInCallbackRequestForPagesRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSignInCallbackRequestForPagesRouter.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequestForPagesRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequestForPagesRouter = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequestForPagesRouter = async ({ request, response, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);\n    if (!code || !state) {\n        response.status(400).end();\n        return;\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromNextApiRequest)(request, [\n        constant_1.PKCE_COOKIE_NAME,\n        constant_1.STATE_COOKIE_NAME,\n    ]);\n    if (!clientState || clientState !== state || !clientPkce) {\n        response.status(400).end();\n        return;\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        response.status(500).send(tokensPayload.error);\n        return;\n    }\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    response\n        .appendHeader('Content-Type', 'text/html')\n        .status(200)\n        .send((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }));\n};\nexports.handleSignInCallbackRequestForPagesRouter = handleSignInCallbackRequestForPagesRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,yCAAyC,GAAG,KAAK,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,yCAAyC,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC3J,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACjF,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,iCAAiC,EAAE,OAAO,EAAE;AAC/J,QAAQ,UAAU,CAAC,gBAAgB;AACnC,QAAQ,UAAU,CAAC,iBAAiB;AACpC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,IAAI,CAAC,UAAU,EAAE;AAC9D,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACvD,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACnG,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC/M;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,QAAQ;AACZ,SAAS,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC;AAClD,SAAS,MAAM,CAAC,GAAG,CAAC;AACpB,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AACtE,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AACF,OAAO,CAAC,yCAAyC,GAAG,yCAAyC;;"}

package/dist/cjs/auth/handlers/handleSignInSignUpRequest.js

@@ -0,0 +1,31 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSignInSignUpRequest = void 0;
+const utils_1 = require("../utils");
+const handleSignInSignUpRequest = ({ request, userPoolClientId, oAuthConfig, customState, origin, setCookieOptions, type, }) => {
+    const { codeVerifier, state } = (0, utils_1.createAuthFlowProofs)({ customState });
+    const redirectUrlSearchParams = (0, utils_1.createUrlSearchParamsForSignInSignUp)({
+        url: request.url,
+        oAuthConfig,
+        userPoolClientId,
+        state,
+        origin,
+        codeVerifier,
+    });
+    const headers = new Headers();
+    headers.set('Location', type === 'signIn'
+        ? (0, utils_1.createAuthorizeEndpoint)(oAuthConfig.domain, redirectUrlSearchParams)
+        : (0, utils_1.createSignUpEndpoint)(oAuthConfig.domain, redirectUrlSearchParams));
+    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state, pkce: codeVerifier.value }), (0, utils_1.createAuthFlowProofCookiesSetOptions)(setCookieOptions, {
+        secure: (0, utils_1.isSSLOrigin)(origin),
+    }));
+    return new Response(null, {
+        status: 302,
+        headers,
+    });
+};
+exports.handleSignInSignUpRequest = handleSignInSignUpRequest;
+//# sourceMappingURL=handleSignInSignUpRequest.js.map

package/dist/cjs/auth/handlers/handleSignInSignUpRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSignInSignUpRequest.js","sources":["../../../../src/auth/handlers/handleSignInSignUpRequest.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInSignUpRequest = void 0;\nconst utils_1 = require(\"../utils\");\nconst handleSignInSignUpRequest = ({ request, userPoolClientId, oAuthConfig, customState, origin, setCookieOptions, type, }) => {\n    const { codeVerifier, state } = (0, utils_1.createAuthFlowProofs)({ customState });\n    const redirectUrlSearchParams = (0, utils_1.createUrlSearchParamsForSignInSignUp)({\n        url: request.url,\n        oAuthConfig,\n        userPoolClientId,\n        state,\n        origin,\n        codeVerifier,\n    });\n    const headers = new Headers();\n    headers.set('Location', type === 'signIn'\n        ? (0, utils_1.createAuthorizeEndpoint)(oAuthConfig.domain, redirectUrlSearchParams)\n        : (0, utils_1.createSignUpEndpoint)(oAuthConfig.domain, redirectUrlSearchParams));\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state, pkce: codeVerifier.value }), (0, utils_1.createAuthFlowProofCookiesSetOptions)(setCookieOptions, {\n        secure: (0, utils_1.isSSLOrigin)(origin),\n    }));\n    return new Response(null, {\n        status: 302,\n        headers,\n    });\n};\nexports.handleSignInSignUpRequest = handleSignInSignUpRequest;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,yBAAyB,GAAG,KAAK,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,yBAAyB,GAAG,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,GAAG,KAAK;AAChI,IAAI,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AACvF,IAAI,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,oCAAoC,EAAE;AACtF,QAAQ,GAAG,EAAE,OAAO,CAAC,GAAG;AACxB,QAAQ,WAAW;AACnB,QAAQ,gBAAgB;AACxB,QAAQ,KAAK;AACb,QAAQ,MAAM;AACd,QAAQ,YAAY;AACpB,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ;AAC7C,UAAU,IAAI,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC;AAC3F,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAC1F,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oCAAoC,EAAE,gBAAgB,EAAE;AACrM,QAAQ,MAAM,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;AAChD,KAAK,CAAC,CAAC,CAAC;AACR,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAC9B,QAAQ,MAAM,EAAE,GAAG;AACnB,QAAQ,OAAO;AACf,KAAK,CAAC,CAAC;AACP,CAAC,CAAC;AACF,OAAO,CAAC,yBAAyB,GAAG,yBAAyB;;"}

package/dist/cjs/auth/handlers/handleSignInSignUpRequestForPagesRouter.js

@@ -0,0 +1,27 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSignInSignUpRequestForPagesRouter = void 0;
+const utils_1 = require("../utils");
+const handleSignInSignUpRequestForPagesRouter = ({ request, response, customState, oAuthConfig, userPoolClientId, origin, setCookieOptions, type, }) => {
+    const { codeVerifier, state } = (0, utils_1.createAuthFlowProofs)({ customState });
+    const redirectUrlSearchParams = (0, utils_1.createUrlSearchParamsForSignInSignUp)({
+        url: request.url,
+        oAuthConfig,
+        userPoolClientId,
+        state,
+        origin,
+        codeVerifier,
+    });
+    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state, pkce: codeVerifier.value }), (0, utils_1.createAuthFlowProofCookiesSetOptions)(setCookieOptions, {
+        secure: (0, utils_1.isSSLOrigin)(origin),
+    }));
+    const redirectUrl = type === 'signIn'
+        ? (0, utils_1.createAuthorizeEndpoint)(oAuthConfig.domain, redirectUrlSearchParams)
+        : (0, utils_1.createSignUpEndpoint)(oAuthConfig.domain, redirectUrlSearchParams);
+    response.redirect(302, redirectUrl);
+};
+exports.handleSignInSignUpRequestForPagesRouter = handleSignInSignUpRequestForPagesRouter;
+//# sourceMappingURL=handleSignInSignUpRequestForPagesRouter.js.map

package/dist/cjs/auth/handlers/handleSignInSignUpRequestForPagesRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSignInSignUpRequestForPagesRouter.js","sources":["../../../../src/auth/handlers/handleSignInSignUpRequestForPagesRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInSignUpRequestForPagesRouter = void 0;\nconst utils_1 = require(\"../utils\");\nconst handleSignInSignUpRequestForPagesRouter = ({ request, response, customState, oAuthConfig, userPoolClientId, origin, setCookieOptions, type, }) => {\n    const { codeVerifier, state } = (0, utils_1.createAuthFlowProofs)({ customState });\n    const redirectUrlSearchParams = (0, utils_1.createUrlSearchParamsForSignInSignUp)({\n        url: request.url,\n        oAuthConfig,\n        userPoolClientId,\n        state,\n        origin,\n        codeVerifier,\n    });\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state, pkce: codeVerifier.value }), (0, utils_1.createAuthFlowProofCookiesSetOptions)(setCookieOptions, {\n        secure: (0, utils_1.isSSLOrigin)(origin),\n    }));\n    const redirectUrl = type === 'signIn'\n        ? (0, utils_1.createAuthorizeEndpoint)(oAuthConfig.domain, redirectUrlSearchParams)\n        : (0, utils_1.createSignUpEndpoint)(oAuthConfig.domain, redirectUrlSearchParams);\n    response.redirect(302, redirectUrl);\n};\nexports.handleSignInSignUpRequestForPagesRouter = handleSignInSignUpRequestForPagesRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,uCAAuC,GAAG,KAAK,CAAC,CAAC;AACzD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,uCAAuC,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,GAAG,KAAK;AACxJ,IAAI,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AACvF,IAAI,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,oCAAoC,EAAE;AACtF,QAAQ,GAAG,EAAE,OAAO,CAAC,GAAG;AACxB,QAAQ,WAAW;AACnB,QAAQ,gBAAgB;AACxB,QAAQ,KAAK;AACb,QAAQ,MAAM;AACd,QAAQ,YAAY;AACpB,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oCAAoC,EAAE,gBAAgB,EAAE;AACvN,QAAQ,MAAM,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;AAChD,KAAK,CAAC,CAAC,CAAC;AACR,IAAI,MAAM,WAAW,GAAG,IAAI,KAAK,QAAQ;AACzC,UAAU,IAAI,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC;AAC3F,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AACzF,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC,CAAC;AACF,OAAO,CAAC,uCAAuC,GAAG,uCAAuC;;"}