@aws-amplify/adapter-nextjs 1.4.1-server-auth.778c2b6.0 → 1.4.1-server-auth.28fa210.0

package/dist/cjs/api/createServerRunnerForAPI.js

@@ -4,7 +4,7 @@
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createServerRunnerForAPI = void 0;
-const utils_1 = require("@aws-amplify/core/internals/utils");
+const utils_1 = require("aws-amplify/utils");
 const utils_2 = require("../utils");
 const createServerRunnerForAPI = ({ config, }) => {
     const amplifyConfig = (0, utils_1.parseAmplifyConfig)(config);

package/dist/cjs/api/createServerRunnerForAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"createServerRunnerForAPI.js","sources":["../../../src/api/createServerRunnerForAPI.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createServerRunnerForAPI = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst utils_2 = require(\"../utils\");\nconst createServerRunnerForAPI = ({ config, }) => {\n    const amplifyConfig = (0, utils_1.parseAmplifyConfig)(config);\n    return {\n        runWithAmplifyServerContext: (0, utils_2.createRunWithAmplifyServerContext)({\n            config: amplifyConfig,\n        }),\n        resourcesConfig: amplifyConfig,\n    };\n};\nexports.createServerRunnerForAPI = createServerRunnerForAPI;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,wBAAwB,GAAG,KAAK,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,wBAAwB,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK;AAClD,IAAI,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAClE,IAAI,OAAO;AACX,QAAQ,2BAA2B,EAAE,IAAI,OAAO,CAAC,iCAAiC,EAAE;AACpF,YAAY,MAAM,EAAE,aAAa;AACjC,SAAS,CAAC;AACV,QAAQ,eAAe,EAAE,aAAa;AACtC,KAAK,CAAC;AACN,CAAC,CAAC;AACF,OAAO,CAAC,wBAAwB,GAAG,wBAAwB;;"}
+{"version":3,"file":"createServerRunnerForAPI.js","sources":["../../../src/api/createServerRunnerForAPI.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createServerRunnerForAPI = void 0;\nconst utils_1 = require(\"aws-amplify/utils\");\nconst utils_2 = require(\"../utils\");\nconst createServerRunnerForAPI = ({ config, }) => {\n    const amplifyConfig = (0, utils_1.parseAmplifyConfig)(config);\n    return {\n        runWithAmplifyServerContext: (0, utils_2.createRunWithAmplifyServerContext)({\n            config: amplifyConfig,\n        }),\n        resourcesConfig: amplifyConfig,\n    };\n};\nexports.createServerRunnerForAPI = createServerRunnerForAPI;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,wBAAwB,GAAG,KAAK,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,wBAAwB,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK;AAClD,IAAI,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAClE,IAAI,OAAO;AACX,QAAQ,2BAA2B,EAAE,IAAI,OAAO,CAAC,iCAAiC,EAAE;AACpF,YAAY,MAAM,EAAE,aAAa;AACjC,SAAS,CAAC;AACV,QAAQ,eAAe,EAAE,aAAa;AACtC,KAAK,CAAC;AACN,CAAC,CAAC;AACF,OAAO,CAAC,wBAAwB,GAAG,wBAAwB;;"}

package/dist/cjs/api/generateServerClient.js

@@ -4,10 +4,10 @@
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateServerClientUsingReqRes = exports.generateServerClientUsingCookies = void 0;
-const internals_1 = require("@aws-amplify/api/internals");
+const internals_1 = require("aws-amplify/api/internals");
 const server_1 = require("aws-amplify/api/server");
-const adapter_core_1 = require("@aws-amplify/core/internals/adapter-core");
-const utils_1 = require("@aws-amplify/core/internals/utils");
+const internals_2 = require("aws-amplify/adapter-core/internals");
+const utils_1 = require("aws-amplify/utils");
 const createServerRunnerForAPI_1 = require("./createServerRunnerForAPI");
 /**
  * Generates an API client that can be used inside a Next.js Server Component with Dynamic Rendering
@@ -20,7 +20,7 @@ const createServerRunnerForAPI_1 = require("./createServerRunnerForAPI");
  */
 function generateServerClientUsingCookies(options) {
     if (typeof options.cookies !== 'function') {
-        throw new adapter_core_1.AmplifyServerContextError({
+        throw new internals_2.AmplifyServerContextError({
             message: 'generateServerClientUsingCookies is only compatible with the `cookies` Dynamic Function available in Server Components.',
             // TODO: link to docs
             recoverySuggestion: 'use `generateServerClient` inside of `runWithAmplifyServerContext` with the `request` object.',
@@ -32,7 +32,7 @@ function generateServerClientUsingCookies(options) {
     // causing it to always get invoked inside `runWithAmplifyServerContext`
     const getAmplify = (fn) => runWithAmplifyServerContext({
         nextServerContext: { cookies: options.cookies },
-        operation: contextSpec => fn((0, adapter_core_1.getAmplifyServerContext)(contextSpec).amplify),
+        operation: contextSpec => fn((0, internals_2.getAmplifyServerContext)(contextSpec).amplify),
     });
     const { cookies: _cookies, config: _config, ...params } = options;
     return (0, internals_1.generateClientWithAmplifyInstance)({

package/dist/cjs/api/generateServerClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"generateServerClient.js","sources":["../../../src/api/generateServerClient.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.generateServerClientUsingReqRes = exports.generateServerClientUsingCookies = void 0;\nconst internals_1 = require(\"@aws-amplify/api/internals\");\nconst server_1 = require(\"aws-amplify/api/server\");\nconst adapter_core_1 = require(\"@aws-amplify/core/internals/adapter-core\");\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst createServerRunnerForAPI_1 = require(\"./createServerRunnerForAPI\");\n/**\n * Generates an API client that can be used inside a Next.js Server Component with Dynamic Rendering\n *\n * @example\n * import { cookies } from \"next/headers\"\n *\n * const client = generateServerClientUsingCookies({ cookies });\n * const result = await client.graphql({ query: listPosts });\n */\nfunction generateServerClientUsingCookies(options) {\n    if (typeof options.cookies !== 'function') {\n        throw new adapter_core_1.AmplifyServerContextError({\n            message: 'generateServerClientUsingCookies is only compatible with the `cookies` Dynamic Function available in Server Components.',\n            // TODO: link to docs\n            recoverySuggestion: 'use `generateServerClient` inside of `runWithAmplifyServerContext` with the `request` object.',\n        });\n    }\n    const { runWithAmplifyServerContext, resourcesConfig } = (0, createServerRunnerForAPI_1.createServerRunnerForAPI)({ config: options.config });\n    // This function reference gets passed down to InternalGraphQLAPI.ts.graphql\n    // where this._graphql is passed in as the `fn` argument\n    // causing it to always get invoked inside `runWithAmplifyServerContext`\n    const getAmplify = (fn) => runWithAmplifyServerContext({\n        nextServerContext: { cookies: options.cookies },\n        operation: contextSpec => fn((0, adapter_core_1.getAmplifyServerContext)(contextSpec).amplify),\n    });\n    const { cookies: _cookies, config: _config, ...params } = options;\n    return (0, internals_1.generateClientWithAmplifyInstance)({\n        amplify: getAmplify,\n        config: resourcesConfig,\n        ...params,\n    }); // TS can't narrow the type here.\n}\nexports.generateServerClientUsingCookies = generateServerClientUsingCookies;\n/**\n * Generates an API client that can be used with both Pages Router and App Router\n *\n * @example\n * import config from './amplifyconfiguration.json';\n * import { listPosts } from './graphql/queries';\n *\n * const client = generateServerClientUsingReqRes({ config });\n *\n * const result = await runWithAmplifyServerContext({\n *   nextServerContext: { request, response },\n *   operation: (contextSpec) => client.graphql(contextSpec, {\n *     query: listPosts,\n *   }),\n * });\n */\nfunction generateServerClientUsingReqRes(options) {\n    const amplifyConfig = (0, utils_1.parseAmplifyConfig)(options.config);\n    const { config: _config, ...params } = options;\n    return (0, server_1.generateClient)({\n        config: amplifyConfig,\n        ...params,\n    });\n}\nexports.generateServerClientUsingReqRes = generateServerClientUsingReqRes;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,+BAA+B,GAAG,OAAO,CAAC,gCAAgC,GAAG,KAAK,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACnD,MAAM,cAAc,GAAG,OAAO,CAAC,0CAA0C,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,0BAA0B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACzE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gCAAgC,CAAC,OAAO,EAAE;AACnD,IAAI,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE;AAC/C,QAAQ,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC;AAC3D,YAAY,OAAO,EAAE,yHAAyH;AAC9I;AACA,YAAY,kBAAkB,EAAE,+FAA+F;AAC/H,SAAS,CAAC,CAAC;AACX,KAAK;AACL,IAAI,MAAM,EAAE,2BAA2B,EAAE,eAAe,EAAE,GAAG,IAAI,0BAA0B,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAClJ;AACA;AACA;AACA,IAAI,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,2BAA2B,CAAC;AAC3D,QAAQ,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;AACvD,QAAQ,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC,IAAI,cAAc,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC;AACtG,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;AACtE,IAAI,OAAO,IAAI,WAAW,CAAC,iCAAiC,EAAE;AAC9D,QAAQ,OAAO,EAAE,UAAU;AAC3B,QAAQ,MAAM,EAAE,eAAe;AAC/B,QAAQ,GAAG,MAAM;AACjB,KAAK,CAAC,CAAC;AACP,CAAC;AACD,OAAO,CAAC,gCAAgC,GAAG,gCAAgC,CAAC;AAC5E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,+BAA+B,CAAC,OAAO,EAAE;AAClD,IAAI,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1E,IAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;AACnD,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;AACxC,QAAQ,MAAM,EAAE,aAAa;AAC7B,QAAQ,GAAG,MAAM;AACjB,KAAK,CAAC,CAAC;AACP,CAAC;AACD,OAAO,CAAC,+BAA+B,GAAG,+BAA+B;;"}
+{"version":3,"file":"generateServerClient.js","sources":["../../../src/api/generateServerClient.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.generateServerClientUsingReqRes = exports.generateServerClientUsingCookies = void 0;\nconst internals_1 = require(\"aws-amplify/api/internals\");\nconst server_1 = require(\"aws-amplify/api/server\");\nconst internals_2 = require(\"aws-amplify/adapter-core/internals\");\nconst utils_1 = require(\"aws-amplify/utils\");\nconst createServerRunnerForAPI_1 = require(\"./createServerRunnerForAPI\");\n/**\n * Generates an API client that can be used inside a Next.js Server Component with Dynamic Rendering\n *\n * @example\n * import { cookies } from \"next/headers\"\n *\n * const client = generateServerClientUsingCookies({ cookies });\n * const result = await client.graphql({ query: listPosts });\n */\nfunction generateServerClientUsingCookies(options) {\n    if (typeof options.cookies !== 'function') {\n        throw new internals_2.AmplifyServerContextError({\n            message: 'generateServerClientUsingCookies is only compatible with the `cookies` Dynamic Function available in Server Components.',\n            // TODO: link to docs\n            recoverySuggestion: 'use `generateServerClient` inside of `runWithAmplifyServerContext` with the `request` object.',\n        });\n    }\n    const { runWithAmplifyServerContext, resourcesConfig } = (0, createServerRunnerForAPI_1.createServerRunnerForAPI)({ config: options.config });\n    // This function reference gets passed down to InternalGraphQLAPI.ts.graphql\n    // where this._graphql is passed in as the `fn` argument\n    // causing it to always get invoked inside `runWithAmplifyServerContext`\n    const getAmplify = (fn) => runWithAmplifyServerContext({\n        nextServerContext: { cookies: options.cookies },\n        operation: contextSpec => fn((0, internals_2.getAmplifyServerContext)(contextSpec).amplify),\n    });\n    const { cookies: _cookies, config: _config, ...params } = options;\n    return (0, internals_1.generateClientWithAmplifyInstance)({\n        amplify: getAmplify,\n        config: resourcesConfig,\n        ...params,\n    }); // TS can't narrow the type here.\n}\nexports.generateServerClientUsingCookies = generateServerClientUsingCookies;\n/**\n * Generates an API client that can be used with both Pages Router and App Router\n *\n * @example\n * import config from './amplifyconfiguration.json';\n * import { listPosts } from './graphql/queries';\n *\n * const client = generateServerClientUsingReqRes({ config });\n *\n * const result = await runWithAmplifyServerContext({\n *   nextServerContext: { request, response },\n *   operation: (contextSpec) => client.graphql(contextSpec, {\n *     query: listPosts,\n *   }),\n * });\n */\nfunction generateServerClientUsingReqRes(options) {\n    const amplifyConfig = (0, utils_1.parseAmplifyConfig)(options.config);\n    const { config: _config, ...params } = options;\n    return (0, server_1.generateClient)({\n        config: amplifyConfig,\n        ...params,\n    });\n}\nexports.generateServerClientUsingReqRes = generateServerClientUsingReqRes;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,+BAA+B,GAAG,OAAO,CAAC,gCAAgC,GAAG,KAAK,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACnD,MAAM,WAAW,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAClE,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC7C,MAAM,0BAA0B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACzE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gCAAgC,CAAC,OAAO,EAAE;AACnD,IAAI,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE;AAC/C,QAAQ,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC;AACxD,YAAY,OAAO,EAAE,yHAAyH;AAC9I;AACA,YAAY,kBAAkB,EAAE,+FAA+F;AAC/H,SAAS,CAAC,CAAC;AACX,KAAK;AACL,IAAI,MAAM,EAAE,2BAA2B,EAAE,eAAe,EAAE,GAAG,IAAI,0BAA0B,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAClJ;AACA;AACA;AACA,IAAI,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,2BAA2B,CAAC;AAC3D,QAAQ,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;AACvD,QAAQ,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC;AACnG,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;AACtE,IAAI,OAAO,IAAI,WAAW,CAAC,iCAAiC,EAAE;AAC9D,QAAQ,OAAO,EAAE,UAAU;AAC3B,QAAQ,MAAM,EAAE,eAAe;AAC/B,QAAQ,GAAG,MAAM;AACjB,KAAK,CAAC,CAAC;AACP,CAAC;AACD,OAAO,CAAC,gCAAgC,GAAG,gCAAgC,CAAC;AAC5E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,+BAA+B,CAAC,OAAO,EAAE;AAClD,IAAI,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1E,IAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;AACnD,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;AACxC,QAAQ,MAAM,EAAE,aAAa;AAC7B,QAAQ,GAAG,MAAM;AACjB,KAAK,CAAC,CAAC;AACP,CAAC;AACD,OAAO,CAAC,+BAA+B,GAAG,+BAA+B;;"}

package/dist/cjs/auth/constant.js

@@ -3,7 +3,7 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;
+exports.SIGN_IN_TIMEOUT_ERROR_MESSAGE = exports.SIGN_IN_TIMEOUT_ERROR_CODE = exports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;
 exports.SUPPORTED_ROUTES = [
     'sign-in',
     'sign-in-callback',
@@ -20,7 +20,13 @@ exports.COGNITO_IDENTITY_PROVIDERS = {
 exports.PKCE_COOKIE_NAME = 'com.amplify.server_auth.pkce';
 exports.STATE_COOKIE_NAME = 'com.amplify.server_auth.state';
 exports.IS_SIGNING_OUT_COOKIE_NAME = 'com.amplify.server_auth.isSigningOut';
-exports.AUTH_FLOW_PROOF_MAX_AGE = 10 * 60; // 10 mins in seconds
-exports.REMOVE_COOKIE_MAX_AGE = -1; // -1 to remove the cookie immediately (0 ==> session cookie)
+// The 5 minutes is from the Cognito Social Identity Provider settings, see:
+// https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-social-idp.html
+exports.AUTH_FLOW_PROOF_MAX_AGE = 5 * 60;
+// -1 to remove the cookie immediately (0 ==> session cookie as observed)
+exports.REMOVE_COOKIE_MAX_AGE = -1;
+// With server-side auth flow, we don't support the less secure implicit flow
 exports.OAUTH_GRANT_TYPE = 'authorization_code';
+exports.SIGN_IN_TIMEOUT_ERROR_CODE = 'timeout';
+exports.SIGN_IN_TIMEOUT_ERROR_MESSAGE = 'Sign in has to be completed within 5 minutes.';
 //# sourceMappingURL=constant.js.map

package/dist/cjs/auth/constant.js.map

@@ -1 +1 @@
-{"version":3,"file":"constant.js","sources":["../../../src/auth/constant.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;\nexports.SUPPORTED_ROUTES = [\n    'sign-in',\n    'sign-in-callback',\n    'sign-up',\n    'sign-out',\n    'sign-out-callback',\n];\nexports.COGNITO_IDENTITY_PROVIDERS = {\n    Google: 'Google',\n    Facebook: 'Facebook',\n    Amazon: 'LoginWithAmazon',\n    Apple: 'SignInWithApple',\n};\nexports.PKCE_COOKIE_NAME = 'com.amplify.server_auth.pkce';\nexports.STATE_COOKIE_NAME = 'com.amplify.server_auth.state';\nexports.IS_SIGNING_OUT_COOKIE_NAME = 'com.amplify.server_auth.isSigningOut';\nexports.AUTH_FLOW_PROOF_MAX_AGE = 10 * 60; // 10 mins in seconds\nexports.REMOVE_COOKIE_MAX_AGE = -1; // -1 to remove the cookie immediately (0 ==> session cookie)\nexports.OAUTH_GRANT_TYPE = 'authorization_code';\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC;AAChQ,OAAO,CAAC,gBAAgB,GAAG;AAC3B,IAAI,SAAS;AACb,IAAI,kBAAkB;AACtB,IAAI,SAAS;AACb,IAAI,UAAU;AACd,IAAI,mBAAmB;AACvB,CAAC,CAAC;AACF,OAAO,CAAC,0BAA0B,GAAG;AACrC,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,QAAQ,EAAE,UAAU;AACxB,IAAI,MAAM,EAAE,iBAAiB;AAC7B,IAAI,KAAK,EAAE,iBAAiB;AAC5B,CAAC,CAAC;AACF,OAAO,CAAC,gBAAgB,GAAG,8BAA8B,CAAC;AAC1D,OAAO,CAAC,iBAAiB,GAAG,+BAA+B,CAAC;AAC5D,OAAO,CAAC,0BAA0B,GAAG,sCAAsC,CAAC;AAC5E,OAAO,CAAC,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1C,OAAO,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;AACnC,OAAO,CAAC,gBAAgB,GAAG,oBAAoB;;"}
+{"version":3,"file":"constant.js","sources":["../../../src/auth/constant.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.SIGN_IN_TIMEOUT_ERROR_MESSAGE = exports.SIGN_IN_TIMEOUT_ERROR_CODE = exports.OAUTH_GRANT_TYPE = exports.REMOVE_COOKIE_MAX_AGE = exports.AUTH_FLOW_PROOF_MAX_AGE = exports.IS_SIGNING_OUT_COOKIE_NAME = exports.STATE_COOKIE_NAME = exports.PKCE_COOKIE_NAME = exports.COGNITO_IDENTITY_PROVIDERS = exports.SUPPORTED_ROUTES = void 0;\nexports.SUPPORTED_ROUTES = [\n    'sign-in',\n    'sign-in-callback',\n    'sign-up',\n    'sign-out',\n    'sign-out-callback',\n];\nexports.COGNITO_IDENTITY_PROVIDERS = {\n    Google: 'Google',\n    Facebook: 'Facebook',\n    Amazon: 'LoginWithAmazon',\n    Apple: 'SignInWithApple',\n};\nexports.PKCE_COOKIE_NAME = 'com.amplify.server_auth.pkce';\nexports.STATE_COOKIE_NAME = 'com.amplify.server_auth.state';\nexports.IS_SIGNING_OUT_COOKIE_NAME = 'com.amplify.server_auth.isSigningOut';\n// The 5 minutes is from the Cognito Social Identity Provider settings, see:\n// https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-social-idp.html\nexports.AUTH_FLOW_PROOF_MAX_AGE = 5 * 60;\n// -1 to remove the cookie immediately (0 ==> session cookie as observed)\nexports.REMOVE_COOKIE_MAX_AGE = -1;\n// With server-side auth flow, we don't support the less secure implicit flow\nexports.OAUTH_GRANT_TYPE = 'authorization_code';\nexports.SIGN_IN_TIMEOUT_ERROR_CODE = 'timeout';\nexports.SIGN_IN_TIMEOUT_ERROR_MESSAGE = 'Sign in has to be completed within 5 minutes.';\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,6BAA6B,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC;AAC7U,OAAO,CAAC,gBAAgB,GAAG;AAC3B,IAAI,SAAS;AACb,IAAI,kBAAkB;AACtB,IAAI,SAAS;AACb,IAAI,UAAU;AACd,IAAI,mBAAmB;AACvB,CAAC,CAAC;AACF,OAAO,CAAC,0BAA0B,GAAG;AACrC,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,QAAQ,EAAE,UAAU;AACxB,IAAI,MAAM,EAAE,iBAAiB;AAC7B,IAAI,KAAK,EAAE,iBAAiB;AAC5B,CAAC,CAAC;AACF,OAAO,CAAC,gBAAgB,GAAG,8BAA8B,CAAC;AAC1D,OAAO,CAAC,iBAAiB,GAAG,+BAA+B,CAAC;AAC5D,OAAO,CAAC,0BAA0B,GAAG,sCAAsC,CAAC;AAC5E;AACA;AACA,OAAO,CAAC,uBAAuB,GAAG,CAAC,GAAG,EAAE,CAAC;AACzC;AACA,OAAO,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;AACnC;AACA,OAAO,CAAC,gBAAgB,GAAG,oBAAoB,CAAC;AAChD,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;AAC/C,OAAO,CAAC,6BAA6B,GAAG,+CAA+C;;"}

package/dist/cjs/auth/createAuthRouteHandlersFactory.js

@@ -4,14 +4,13 @@
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAuthRouteHandlersFactory = void 0;
-const utils_1 = require("@aws-amplify/core/internals/utils");
-const adapter_core_1 = require("@aws-amplify/core/internals/adapter-core");
-const utils_2 = require("./utils");
+const internals_1 = require("aws-amplify/adapter-core/internals");
+const utils_1 = require("./utils");
 const handleAuthApiRouteRequestForAppRouter_1 = require("./handleAuthApiRouteRequestForAppRouter");
 const handleAuthApiRouteRequestForPagesRouter_1 = require("./handleAuthApiRouteRequestForPagesRouter");
 const createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOptions = {}, amplifyAppOrigin, runWithAmplifyServerContext, }) => {
     const handleRequest = async ({ request, contextOrResponse, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
-        if ((0, utils_2.isNextApiRequest)(request) && (0, utils_2.isNextApiResponse)(contextOrResponse)) {
+        if ((0, utils_1.isNextApiRequest)(request) && (0, utils_1.isNextApiResponse)(contextOrResponse)) {
             // In pages router the response is sent via calling `response.end()` or
             // `response.send()`. The response is not returned from the handler.
             // To ensure these two methods are called before the handler returns,
@@ -29,8 +28,8 @@ const createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOption
             // In the Pages Router, the final response is handled by contextOrResponse
             return;
         }
-        if ((0, utils_2.isNextRequest)(request) &&
-            (0, utils_2.isAuthRoutesHandlersContext)(contextOrResponse)) {
+        if ((0, utils_1.isNextRequest)(request) &&
+            (0, utils_1.isAuthRoutesHandlersContext)(contextOrResponse)) {
             // In the App Router, the final response is constructed and returned
             return (0, handleAuthApiRouteRequestForAppRouter_1.handleAuthApiRouteRequestForAppRouter)({
                 request,
@@ -50,21 +49,21 @@ const createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOption
         // origin validation should happen when createAuthRouteHandlers is being called to create
         // Auth API routes.
         if (!amplifyAppOrigin) {
-            throw new adapter_core_1.AmplifyServerContextError({
+            throw new internals_1.AmplifyServerContextError({
                 message: 'Could not find the AMPLIFY_APP_ORIGIN environment variable.',
                 recoverySuggestion: 'Add the AMPLIFY_APP_ORIGIN environment variable to the `.env` file of your Next.js project.',
             });
         }
-        if (!(0, utils_2.isValidOrigin)(amplifyAppOrigin)) {
-            throw new adapter_core_1.AmplifyServerContextError({
+        if (!(0, utils_1.isValidOrigin)(amplifyAppOrigin)) {
+            throw new internals_1.AmplifyServerContextError({
                 message: 'AMPLIFY_APP_ORIGIN environment variable contains an invalid origin string.',
                 recoverySuggestion: 'Ensure the AMPLIFY_APP_ORIGIN environment variable is a valid origin string.',
             });
         }
         // OAuth config validation should happen when createAuthRouteHandlers is being called to create
         // Auth API routes.
-        (0, utils_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);
-        (0, utils_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);
+        (0, internals_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);
+        (0, internals_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);
         const { userPoolClientId } = resourcesConfig.Auth.Cognito;
         const { oauth: oAuthConfig } = resourcesConfig.Auth.Cognito.loginWith;
         const { cookies: setCookieOptions = {} } = runtimeOptions;

package/dist/cjs/auth/createAuthRouteHandlersFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthRouteHandlersFactory.js","sources":["../../../src/auth/createAuthRouteHandlersFactory.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createAuthRouteHandlersFactory = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst adapter_core_1 = require(\"@aws-amplify/core/internals/adapter-core\");\nconst utils_2 = require(\"./utils\");\nconst handleAuthApiRouteRequestForAppRouter_1 = require(\"./handleAuthApiRouteRequestForAppRouter\");\nconst handleAuthApiRouteRequestForPagesRouter_1 = require(\"./handleAuthApiRouteRequestForPagesRouter\");\nconst createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOptions = {}, amplifyAppOrigin, runWithAmplifyServerContext, }) => {\n    const handleRequest = async ({ request, contextOrResponse, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n        if ((0, utils_2.isNextApiRequest)(request) && (0, utils_2.isNextApiResponse)(contextOrResponse)) {\n            // In pages router the response is sent via calling `response.end()` or\n            // `response.send()`. The response is not returned from the handler.\n            // To ensure these two methods are called before the handler returns,\n            // we use `await` here.\n            await (0, handleAuthApiRouteRequestForPagesRouter_1.handleAuthApiRouteRequestForPagesRouter)({\n                request,\n                response: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n            // In the Pages Router, the final response is handled by contextOrResponse\n            return;\n        }\n        if ((0, utils_2.isNextRequest)(request) &&\n            (0, utils_2.isAuthRoutesHandlersContext)(contextOrResponse)) {\n            // In the App Router, the final response is constructed and returned\n            return (0, handleAuthApiRouteRequestForAppRouter_1.handleAuthApiRouteRequestForAppRouter)({\n                request,\n                handlerContext: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n        }\n        // this should not be happening\n        throw new Error('Invalid request and context/response combination. The request cannot be handled.');\n    };\n    return (createAuthRoutesHandlersInput = {}) => {\n        // origin validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        if (!amplifyAppOrigin) {\n            throw new adapter_core_1.AmplifyServerContextError({\n                message: 'Could not find the AMPLIFY_APP_ORIGIN environment variable.',\n                recoverySuggestion: 'Add the AMPLIFY_APP_ORIGIN environment variable to the `.env` file of your Next.js project.',\n            });\n        }\n        if (!(0, utils_2.isValidOrigin)(amplifyAppOrigin)) {\n            throw new adapter_core_1.AmplifyServerContextError({\n                message: 'AMPLIFY_APP_ORIGIN environment variable contains an invalid origin string.',\n                recoverySuggestion: 'Ensure the AMPLIFY_APP_ORIGIN environment variable is a valid origin string.',\n            });\n        }\n        // OAuth config validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        (0, utils_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);\n        (0, utils_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);\n        const { userPoolClientId } = resourcesConfig.Auth.Cognito;\n        const { oauth: oAuthConfig } = resourcesConfig.Auth.Cognito.loginWith;\n        const { cookies: setCookieOptions = {} } = runtimeOptions;\n        // The call-site of this returned function is the Next.js API route file\n        return (request, contextOrResponse) => handleRequest({\n            request,\n            contextOrResponse,\n            handlerInput: createAuthRoutesHandlersInput,\n            userPoolClientId,\n            oAuthConfig,\n            setCookieOptions,\n            origin: amplifyAppOrigin,\n        });\n    };\n};\nexports.createAuthRouteHandlersFactory = createAuthRouteHandlersFactory;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,8BAA8B,GAAG,KAAK,CAAC,CAAC;AAChD,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,0CAA0C,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,uCAAuC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AACnG,MAAM,yCAAyC,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACvG,MAAM,8BAA8B,GAAG,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,GAAG,EAAE,EAAE,gBAAgB,EAAE,2BAA2B,GAAG,KAAK;AAC7I,IAAI,MAAM,aAAa,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC5I,QAAQ,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE;AACzG;AACA;AACA;AACA;AACA,YAAY,MAAM,IAAI,yCAAyC,CAAC,uCAAuC,EAAE;AACzG,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ,EAAE,iBAAiB;AAC3C,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf;AACA,YAAY,OAAO;AACnB,SAAS;AACT,QAAQ,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC;AAC/C,YAAY,IAAI,OAAO,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,EAAE;AACzE;AACA,YAAY,OAAO,IAAI,uCAAuC,CAAC,qCAAqC,EAAE;AACtG,gBAAgB,OAAO;AACvB,gBAAgB,cAAc,EAAE,iBAAiB;AACjD,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;AAC5G,KAAK,CAAC;AACN,IAAI,OAAO,CAAC,6BAA6B,GAAG,EAAE,KAAK;AACnD;AACA;AACA,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC;AAC/D,gBAAgB,OAAO,EAAE,6DAA6D;AACtF,gBAAgB,kBAAkB,EAAE,6FAA6F;AACjI,aAAa,CAAC,CAAC;AACf,SAAS;AACT,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE;AAC3D,YAAY,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC;AAC/D,gBAAgB,OAAO,EAAE,4EAA4E;AACrG,gBAAgB,kBAAkB,EAAE,8EAA8E;AAClH,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA;AACA,QAAQ,IAAI,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9E,QAAQ,IAAI,OAAO,CAAC,iBAAiB,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrE,QAAQ,MAAM,EAAE,gBAAgB,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;AAClE,QAAQ,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;AAC9E,QAAQ,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC;AAClE;AACA,QAAQ,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,aAAa,CAAC;AAC7D,YAAY,OAAO;AACnB,YAAY,iBAAiB;AAC7B,YAAY,YAAY,EAAE,6BAA6B;AACvD,YAAY,gBAAgB;AAC5B,YAAY,WAAW;AACvB,YAAY,gBAAgB;AAC5B,YAAY,MAAM,EAAE,gBAAgB;AACpC,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC,CAAC;AACF,OAAO,CAAC,8BAA8B,GAAG,8BAA8B;;"}
+{"version":3,"file":"createAuthRouteHandlersFactory.js","sources":["../../../src/auth/createAuthRouteHandlersFactory.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createAuthRouteHandlersFactory = void 0;\nconst internals_1 = require(\"aws-amplify/adapter-core/internals\");\nconst utils_1 = require(\"./utils\");\nconst handleAuthApiRouteRequestForAppRouter_1 = require(\"./handleAuthApiRouteRequestForAppRouter\");\nconst handleAuthApiRouteRequestForPagesRouter_1 = require(\"./handleAuthApiRouteRequestForPagesRouter\");\nconst createAuthRouteHandlersFactory = ({ config: resourcesConfig, runtimeOptions = {}, amplifyAppOrigin, runWithAmplifyServerContext, }) => {\n    const handleRequest = async ({ request, contextOrResponse, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n        if ((0, utils_1.isNextApiRequest)(request) && (0, utils_1.isNextApiResponse)(contextOrResponse)) {\n            // In pages router the response is sent via calling `response.end()` or\n            // `response.send()`. The response is not returned from the handler.\n            // To ensure these two methods are called before the handler returns,\n            // we use `await` here.\n            await (0, handleAuthApiRouteRequestForPagesRouter_1.handleAuthApiRouteRequestForPagesRouter)({\n                request,\n                response: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n            // In the Pages Router, the final response is handled by contextOrResponse\n            return;\n        }\n        if ((0, utils_1.isNextRequest)(request) &&\n            (0, utils_1.isAuthRoutesHandlersContext)(contextOrResponse)) {\n            // In the App Router, the final response is constructed and returned\n            return (0, handleAuthApiRouteRequestForAppRouter_1.handleAuthApiRouteRequestForAppRouter)({\n                request,\n                handlerContext: contextOrResponse,\n                handlerInput,\n                userPoolClientId,\n                oAuthConfig,\n                setCookieOptions,\n                origin,\n                runWithAmplifyServerContext,\n            });\n        }\n        // this should not be happening\n        throw new Error('Invalid request and context/response combination. The request cannot be handled.');\n    };\n    return (createAuthRoutesHandlersInput = {}) => {\n        // origin validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        if (!amplifyAppOrigin) {\n            throw new internals_1.AmplifyServerContextError({\n                message: 'Could not find the AMPLIFY_APP_ORIGIN environment variable.',\n                recoverySuggestion: 'Add the AMPLIFY_APP_ORIGIN environment variable to the `.env` file of your Next.js project.',\n            });\n        }\n        if (!(0, utils_1.isValidOrigin)(amplifyAppOrigin)) {\n            throw new internals_1.AmplifyServerContextError({\n                message: 'AMPLIFY_APP_ORIGIN environment variable contains an invalid origin string.',\n                recoverySuggestion: 'Ensure the AMPLIFY_APP_ORIGIN environment variable is a valid origin string.',\n            });\n        }\n        // OAuth config validation should happen when createAuthRouteHandlers is being called to create\n        // Auth API routes.\n        (0, internals_1.assertTokenProviderConfig)(resourcesConfig.Auth?.Cognito);\n        (0, internals_1.assertOAuthConfig)(resourcesConfig.Auth.Cognito);\n        const { userPoolClientId } = resourcesConfig.Auth.Cognito;\n        const { oauth: oAuthConfig } = resourcesConfig.Auth.Cognito.loginWith;\n        const { cookies: setCookieOptions = {} } = runtimeOptions;\n        // The call-site of this returned function is the Next.js API route file\n        return (request, contextOrResponse) => handleRequest({\n            request,\n            contextOrResponse,\n            handlerInput: createAuthRoutesHandlersInput,\n            userPoolClientId,\n            oAuthConfig,\n            setCookieOptions,\n            origin: amplifyAppOrigin,\n        });\n    };\n};\nexports.createAuthRouteHandlersFactory = createAuthRouteHandlersFactory;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,8BAA8B,GAAG,KAAK,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAClE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,uCAAuC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAC;AACnG,MAAM,yCAAyC,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACvG,MAAM,8BAA8B,GAAG,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,GAAG,EAAE,EAAE,gBAAgB,EAAE,2BAA2B,GAAG,KAAK;AAC7I,IAAI,MAAM,aAAa,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC5I,QAAQ,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,EAAE;AACzG;AACA;AACA;AACA;AACA,YAAY,MAAM,IAAI,yCAAyC,CAAC,uCAAuC,EAAE;AACzG,gBAAgB,OAAO;AACvB,gBAAgB,QAAQ,EAAE,iBAAiB;AAC3C,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf;AACA,YAAY,OAAO;AACnB,SAAS;AACT,QAAQ,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC;AAC/C,YAAY,IAAI,OAAO,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,EAAE;AACzE;AACA,YAAY,OAAO,IAAI,uCAAuC,CAAC,qCAAqC,EAAE;AACtG,gBAAgB,OAAO;AACvB,gBAAgB,cAAc,EAAE,iBAAiB;AACjD,gBAAgB,YAAY;AAC5B,gBAAgB,gBAAgB;AAChC,gBAAgB,WAAW;AAC3B,gBAAgB,gBAAgB;AAChC,gBAAgB,MAAM;AACtB,gBAAgB,2BAA2B;AAC3C,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;AAC5G,KAAK,CAAC;AACN,IAAI,OAAO,CAAC,6BAA6B,GAAG,EAAE,KAAK;AACnD;AACA;AACA,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC;AAC5D,gBAAgB,OAAO,EAAE,6DAA6D;AACtF,gBAAgB,kBAAkB,EAAE,6FAA6F;AACjI,aAAa,CAAC,CAAC;AACf,SAAS;AACT,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE;AAC3D,YAAY,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC;AAC5D,gBAAgB,OAAO,EAAE,4EAA4E;AACrG,gBAAgB,kBAAkB,EAAE,8EAA8E;AAClH,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA;AACA,QAAQ,IAAI,WAAW,CAAC,yBAAyB,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClF,QAAQ,IAAI,WAAW,CAAC,iBAAiB,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzE,QAAQ,MAAM,EAAE,gBAAgB,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;AAClE,QAAQ,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;AAC9E,QAAQ,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC;AAClE;AACA,QAAQ,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,aAAa,CAAC;AAC7D,YAAY,OAAO;AACnB,YAAY,iBAAiB;AAC7B,YAAY,YAAY,EAAE,6BAA6B;AACvD,YAAY,gBAAgB;AAC5B,YAAY,WAAW;AACvB,YAAY,gBAAgB;AAC5B,YAAY,MAAM,EAAE,gBAAgB;AACpC,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC,CAAC;AACF,OAAO,CAAC,8BAA8B,GAAG,8BAA8B;;"}

package/dist/cjs/auth/handlers/handleSignInCallbackRequest.js

@@ -7,12 +7,38 @@ exports.handleSignInCallbackRequest = void 0;
 const constant_1 = require("../constant");
 const utils_1 = require("../utils");
 const handleSignInCallbackRequest = async ({ request, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
-    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);
+    const { code, state, error, errorDescription } = (0, utils_1.parseSignInCallbackUrl)(request.url);
+    if (errorDescription || error) {
+        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({
+            error,
+            errorDescription,
+        });
+        return new Response(null, {
+            status: 302,
+            headers: new Headers({
+                location: `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`,
+            }),
+        });
+    }
     if (!code || !state) {
         return new Response(null, { status: 400 });
     }
     const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromRequest)(request, [constant_1.PKCE_COOKIE_NAME, constant_1.STATE_COOKIE_NAME]);
-    if (!clientState || clientState !== state || !clientPkce) {
+    // The state and pkce cookies are removed from cookie store after 5 minutes
+    if (!clientState || !clientPkce) {
+        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({
+            error: constant_1.SIGN_IN_TIMEOUT_ERROR_CODE,
+            errorDescription: constant_1.SIGN_IN_TIMEOUT_ERROR_MESSAGE,
+        });
+        return new Response(null, {
+            status: 302,
+            headers: new Headers({
+                location: `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`,
+            }),
+        });
+    }
+    // Most likely the cookie has been tampered
+    if (clientState !== state) {
         return new Response(null, { status: 400 });
     }
     const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({

package/dist/cjs/auth/handlers/handleSignInCallbackRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"handleSignInCallbackRequest.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequest.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequest = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequest = async ({ request, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);\n    if (!code || !state) {\n        return new Response(null, { status: 400 });\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromRequest)(request, [constant_1.PKCE_COOKIE_NAME, constant_1.STATE_COOKIE_NAME]);\n    if (!clientState || clientState !== state || !clientPkce) {\n        return new Response(null, { status: 400 });\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        return new Response(tokensPayload.error, { status: 500 });\n    }\n    const headers = new Headers();\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    headers.set('Content-Type', 'text/html');\n    return new Response((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }), {\n        status: 200,\n        headers,\n    });\n};\nexports.handleSignInCallbackRequest = handleSignInCallbackRequest;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,2BAA2B,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AACnI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACjF,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACrN,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,IAAI,CAAC,UAAU,EAAE;AAC9D,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,KAAK;AACL,IAAI,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACjF,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7L;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAC7C,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AAChF,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,EAAE;AACR,QAAQ,MAAM,EAAE,GAAG;AACnB,QAAQ,OAAO;AACf,KAAK,CAAC,CAAC;AACP,CAAC,CAAC;AACF,OAAO,CAAC,2BAA2B,GAAG,2BAA2B;;"}
+{"version":3,"file":"handleSignInCallbackRequest.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequest.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequest = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequest = async ({ request, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state, error, errorDescription } = (0, utils_1.parseSignInCallbackUrl)(request.url);\n    if (errorDescription || error) {\n        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({\n            error,\n            errorDescription,\n        });\n        return new Response(null, {\n            status: 302,\n            headers: new Headers({\n                location: `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`,\n            }),\n        });\n    }\n    if (!code || !state) {\n        return new Response(null, { status: 400 });\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromRequest)(request, [constant_1.PKCE_COOKIE_NAME, constant_1.STATE_COOKIE_NAME]);\n    // The state and pkce cookies are removed from cookie store after 5 minutes\n    if (!clientState || !clientPkce) {\n        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({\n            error: constant_1.SIGN_IN_TIMEOUT_ERROR_CODE,\n            errorDescription: constant_1.SIGN_IN_TIMEOUT_ERROR_MESSAGE,\n        });\n        return new Response(null, {\n            status: 302,\n            headers: new Headers({\n                location: `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`,\n            }),\n        });\n    }\n    // Most likely the cookie has been tampered\n    if (clientState !== state) {\n        return new Response(null, { status: 400 });\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        return new Response(tokensPayload.error, { status: 500 });\n    }\n    const headers = new Headers();\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeaders)(headers, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    headers.set('Content-Type', 'text/html');\n    return new Response((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }), {\n        status: 200,\n        headers,\n    });\n};\nexports.handleSignInCallbackRequest = handleSignInCallbackRequest;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,2BAA2B,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AACnI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACtG,IAAI,IAAI,gBAAgB,IAAI,KAAK,EAAE;AACnC,QAAQ,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,6BAA6B,EAAE;AAC9E,YAAY,KAAK;AACjB,YAAY,gBAAgB;AAC5B,SAAS,CAAC,CAAC;AACX,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAClC,YAAY,MAAM,EAAE,GAAG;AACvB,YAAY,OAAO,EAAE,IAAI,OAAO,CAAC;AACjC,gBAAgB,QAAQ,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC9H,aAAa,CAAC;AACd,SAAS,CAAC,CAAC;AACX,KAAK;AACL,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACrN;AACA,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE;AACrC,QAAQ,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,6BAA6B,EAAE;AAC9E,YAAY,KAAK,EAAE,UAAU,CAAC,0BAA0B;AACxD,YAAY,gBAAgB,EAAE,UAAU,CAAC,6BAA6B;AACtE,SAAS,CAAC,CAAC;AACX,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAClC,YAAY,MAAM,EAAE,GAAG;AACvB,YAAY,OAAO,EAAE,IAAI,OAAO,CAAC;AACjC,gBAAgB,QAAQ,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC9H,aAAa,CAAC;AACd,SAAS,CAAC,CAAC;AACX,KAAK;AACL;AACA,IAAI,IAAI,WAAW,KAAK,KAAK,EAAE;AAC/B,QAAQ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,KAAK;AACL,IAAI,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACjF,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7L;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAC7C,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AAChF,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,EAAE;AACR,QAAQ,MAAM,EAAE,GAAG;AACnB,QAAQ,OAAO;AACf,KAAK,CAAC,CAAC;AACP,CAAC,CAAC;AACF,OAAO,CAAC,2BAA2B,GAAG,2BAA2B;;"}

package/dist/cjs/auth/handlers/handleSignInCallbackRequestForPagesRouter.js

@@ -7,7 +7,15 @@ exports.handleSignInCallbackRequestForPagesRouter = void 0;
 const constant_1 = require("../constant");
 const utils_1 = require("../utils");
 const handleSignInCallbackRequestForPagesRouter = async ({ request, response, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {
-    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);
+    const { code, state, error, errorDescription } = (0, utils_1.parseSignInCallbackUrl)(request.url);
+    if (errorDescription || error) {
+        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({
+            error,
+            errorDescription,
+        });
+        response.redirect(302, `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`);
+        return;
+    }
     if (!code || !state) {
         response.status(400).end();
         return;
@@ -16,7 +24,17 @@ const handleSignInCallbackRequestForPagesRouter = async ({ request, response, ha
         constant_1.PKCE_COOKIE_NAME,
         constant_1.STATE_COOKIE_NAME,
     ]);
-    if (!clientState || clientState !== state || !clientPkce) {
+    // The state and pkce cookies are removed from cookie store after 5 minutes
+    if (!clientState || !clientPkce) {
+        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({
+            error: constant_1.SIGN_IN_TIMEOUT_ERROR_CODE,
+            errorDescription: constant_1.SIGN_IN_TIMEOUT_ERROR_MESSAGE,
+        });
+        response.redirect(302, `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`);
+        return;
+    }
+    // Most likely the cookie has been tampered
+    if (clientState !== state) {
         response.status(400).end();
         return;
     }

package/dist/cjs/auth/handlers/handleSignInCallbackRequestForPagesRouter.js.map

@@ -1 +1 @@
-{"version":3,"file":"handleSignInCallbackRequestForPagesRouter.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequestForPagesRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequestForPagesRouter = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequestForPagesRouter = async ({ request, response, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state } = (0, utils_1.resolveCodeAndStateFromUrl)(request.url);\n    if (!code || !state) {\n        response.status(400).end();\n        return;\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromNextApiRequest)(request, [\n        constant_1.PKCE_COOKIE_NAME,\n        constant_1.STATE_COOKIE_NAME,\n    ]);\n    if (!clientState || clientState !== state || !clientPkce) {\n        response.status(400).end();\n        return;\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        response.status(500).send(tokensPayload.error);\n        return;\n    }\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    response\n        .appendHeader('Content-Type', 'text/html')\n        .status(200)\n        .send((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }));\n};\nexports.handleSignInCallbackRequestForPagesRouter = handleSignInCallbackRequestForPagesRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,yCAAyC,GAAG,KAAK,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,yCAAyC,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC3J,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACjF,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,iCAAiC,EAAE,OAAO,EAAE;AAC/J,QAAQ,UAAU,CAAC,gBAAgB;AACnC,QAAQ,UAAU,CAAC,iBAAiB;AACpC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,IAAI,CAAC,UAAU,EAAE;AAC9D,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACvD,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACnG,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC/M;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,QAAQ;AACZ,SAAS,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC;AAClD,SAAS,MAAM,CAAC,GAAG,CAAC;AACpB,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AACtE,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AACF,OAAO,CAAC,yCAAyC,GAAG,yCAAyC;;"}
+{"version":3,"file":"handleSignInCallbackRequestForPagesRouter.js","sources":["../../../../src/auth/handlers/handleSignInCallbackRequestForPagesRouter.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleSignInCallbackRequestForPagesRouter = void 0;\nconst constant_1 = require(\"../constant\");\nconst utils_1 = require(\"../utils\");\nconst handleSignInCallbackRequestForPagesRouter = async ({ request, response, handlerInput, userPoolClientId, oAuthConfig, setCookieOptions, origin, }) => {\n    const { code, state, error, errorDescription } = (0, utils_1.parseSignInCallbackUrl)(request.url);\n    if (errorDescription || error) {\n        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({\n            error,\n            errorDescription,\n        });\n        response.redirect(302, `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`);\n        return;\n    }\n    if (!code || !state) {\n        response.status(400).end();\n        return;\n    }\n    const { [constant_1.PKCE_COOKIE_NAME]: clientPkce, [constant_1.STATE_COOKIE_NAME]: clientState } = (0, utils_1.getCookieValuesFromNextApiRequest)(request, [\n        constant_1.PKCE_COOKIE_NAME,\n        constant_1.STATE_COOKIE_NAME,\n    ]);\n    // The state and pkce cookies are removed from cookie store after 5 minutes\n    if (!clientState || !clientPkce) {\n        const searchParamsString = (0, utils_1.createErrorSearchParamsString)({\n            error: constant_1.SIGN_IN_TIMEOUT_ERROR_CODE,\n            errorDescription: constant_1.SIGN_IN_TIMEOUT_ERROR_MESSAGE,\n        });\n        response.redirect(302, `${(0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignOutComplete)}?${searchParamsString}`);\n        return;\n    }\n    // Most likely the cookie has been tampered\n    if (clientState !== state) {\n        response.status(400).end();\n        return;\n    }\n    const tokensPayload = await (0, utils_1.exchangeAuthNTokens)({\n        redirectUri: (0, utils_1.resolveRedirectSignInUrl)(origin, oAuthConfig),\n        userPoolClientId,\n        oAuthConfig,\n        code,\n        codeVerifier: clientPkce,\n    });\n    if ('error' in tokensPayload) {\n        response.status(500).send(tokensPayload.error);\n        return;\n    }\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createTokenCookies)({\n        tokensPayload,\n        userPoolClientId,\n    }), (0, utils_1.createTokenCookiesSetOptions)(setCookieOptions));\n    (0, utils_1.appendSetCookieHeadersToNextApiResponse)(response, (0, utils_1.createSignInFlowProofCookies)({ state: '', pkce: '' }), (0, utils_1.createAuthFlowProofCookiesRemoveOptions)(setCookieOptions));\n    // When Cognito redirects back to `/sign-in-callback`, the referer is Cognito\n    // endpoint. If redirect end user to `redirectOnSignInComplete` from this point,\n    // the referer remains the same.\n    // When authN token cookies set as `sameSite: 'strict'`, this may cause the\n    // authN tokens cookies set with the redirect response not to be sent to the\n    // server. Hence, sending a html page with status 200 to the client, and perform\n    // the redirection on the client side.\n    response\n        .appendHeader('Content-Type', 'text/html')\n        .status(200)\n        .send((0, utils_1.createOnSignInCompleteRedirectIntermediate)({\n        redirectOnSignInComplete: (0, utils_1.getRedirectOrDefault)(handlerInput.redirectOnSignInComplete),\n    }));\n};\nexports.handleSignInCallbackRequestForPagesRouter = handleSignInCallbackRequestForPagesRouter;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,yCAAyC,GAAG,KAAK,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,MAAM,yCAAyC,GAAG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK;AAC3J,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,IAAI,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACtG,IAAI,IAAI,gBAAgB,IAAI,KAAK,EAAE;AACnC,QAAQ,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,6BAA6B,EAAE;AAC9E,YAAY,KAAK;AACjB,YAAY,gBAAgB;AAC5B,SAAS,CAAC,CAAC;AACX,QAAQ,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACrI,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AACzB,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,iBAAiB,GAAG,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,iCAAiC,EAAE,OAAO,EAAE;AAC/J,QAAQ,UAAU,CAAC,gBAAgB;AACnC,QAAQ,UAAU,CAAC,iBAAiB;AACpC,KAAK,CAAC,CAAC;AACP;AACA,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE;AACrC,QAAQ,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,6BAA6B,EAAE;AAC9E,YAAY,KAAK,EAAE,UAAU,CAAC,0BAA0B;AACxD,YAAY,gBAAgB,EAAE,UAAU,CAAC,6BAA6B;AACtE,SAAS,CAAC,CAAC;AACX,QAAQ,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACrI,QAAQ,OAAO;AACf,KAAK;AACL;AACA,IAAI,IAAI,WAAW,KAAK,KAAK,EAAE;AAC/B,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACnC,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE;AACjE,QAAQ,WAAW,EAAE,IAAI,OAAO,CAAC,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC;AAC/E,QAAQ,gBAAgB;AACxB,QAAQ,WAAW;AACnB,QAAQ,IAAI;AACZ,QAAQ,YAAY,EAAE,UAAU;AAChC,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,IAAI,aAAa,EAAE;AAClC,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACvD,QAAQ,OAAO;AACf,KAAK;AACL,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,kBAAkB,EAAE;AACnG,QAAQ,aAAa;AACrB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,OAAO,CAAC,uCAAuC,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC/M;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,QAAQ;AACZ,SAAS,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC;AAClD,SAAS,MAAM,CAAC,GAAG,CAAC;AACpB,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,0CAA0C,EAAE;AACtE,QAAQ,wBAAwB,EAAE,IAAI,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,wBAAwB,CAAC;AAC1G,KAAK,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AACF,OAAO,CAAC,yCAAyC,GAAG,yCAAyC;;"}

package/dist/cjs/auth/utils/createAuthFlowProofs.js

@@ -4,13 +4,13 @@
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAuthFlowProofs = void 0;
-const utils_1 = require("@aws-amplify/core/internals/utils");
+const internals_1 = require("aws-amplify/adapter-core/internals");
 const adapter_core_1 = require("aws-amplify/adapter-core");
 const createAuthFlowProofs = ({ customState, }) => {
     const codeVerifier = (0, adapter_core_1.generateCodeVerifier)(128);
     const randomState = (0, adapter_core_1.generateState)();
     const state = customState
-        ? `${randomState}-${(0, utils_1.urlSafeEncode)(customState)}`
+        ? `${randomState}-${(0, internals_1.urlSafeEncode)(customState)}`
         : randomState;
     return { codeVerifier, state };
 };

package/dist/cjs/auth/utils/createAuthFlowProofs.js.map

@@ -1 +1 @@
-{"version":3,"file":"createAuthFlowProofs.js","sources":["../../../../src/auth/utils/createAuthFlowProofs.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createAuthFlowProofs = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst adapter_core_1 = require(\"aws-amplify/adapter-core\");\nconst createAuthFlowProofs = ({ customState, }) => {\n    const codeVerifier = (0, adapter_core_1.generateCodeVerifier)(128);\n    const randomState = (0, adapter_core_1.generateState)();\n    const state = customState\n        ? `${randomState}-${(0, utils_1.urlSafeEncode)(customState)}`\n        : randomState;\n    return { codeVerifier, state };\n};\nexports.createAuthFlowProofs = createAuthFlowProofs;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,CAAC;AACtC,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAC3D,MAAM,oBAAoB,GAAG,CAAC,EAAE,WAAW,GAAG,KAAK;AACnD,IAAI,MAAM,YAAY,GAAG,IAAI,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AACvE,IAAI,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC,aAAa,GAAG,CAAC;AAC5D,IAAI,MAAM,KAAK,GAAG,WAAW;AAC7B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACrE,UAAU,WAAW,CAAC;AACtB,IAAI,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC,CAAC;AACF,OAAO,CAAC,oBAAoB,GAAG,oBAAoB;;"}
+{"version":3,"file":"createAuthFlowProofs.js","sources":["../../../../src/auth/utils/createAuthFlowProofs.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createAuthFlowProofs = void 0;\nconst internals_1 = require(\"aws-amplify/adapter-core/internals\");\nconst adapter_core_1 = require(\"aws-amplify/adapter-core\");\nconst createAuthFlowProofs = ({ customState, }) => {\n    const codeVerifier = (0, adapter_core_1.generateCodeVerifier)(128);\n    const randomState = (0, adapter_core_1.generateState)();\n    const state = customState\n        ? `${randomState}-${(0, internals_1.urlSafeEncode)(customState)}`\n        : randomState;\n    return { codeVerifier, state };\n};\nexports.createAuthFlowProofs = createAuthFlowProofs;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,CAAC;AACtC,MAAM,WAAW,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAClE,MAAM,cAAc,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAC3D,MAAM,oBAAoB,GAAG,CAAC,EAAE,WAAW,GAAG,KAAK;AACnD,IAAI,MAAM,YAAY,GAAG,IAAI,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AACvE,IAAI,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC,aAAa,GAAG,CAAC;AAC5D,IAAI,MAAM,KAAK,GAAG,WAAW;AAC7B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,WAAW,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACzE,UAAU,WAAW,CAAC;AACtB,IAAI,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC,CAAC;AACF,OAAO,CAAC,oBAAoB,GAAG,oBAAoB;;"}

package/dist/cjs/auth/utils/createErrorSearchParamsString.js

@@ -0,0 +1,18 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createErrorSearchParamsString = void 0;
+const createErrorSearchParamsString = ({ error, errorDescription, }) => {
+    const errorParams = new URLSearchParams();
+    if (error) {
+        errorParams.set('error', error);
+    }
+    if (errorDescription) {
+        errorParams.set('error_description', errorDescription);
+    }
+    return errorParams.toString();
+};
+exports.createErrorSearchParamsString = createErrorSearchParamsString;
+//# sourceMappingURL=createErrorSearchParamsString.js.map

package/dist/cjs/auth/utils/createErrorSearchParamsString.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createErrorSearchParamsString.js","sources":["../../../../src/auth/utils/createErrorSearchParamsString.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createErrorSearchParamsString = void 0;\nconst createErrorSearchParamsString = ({ error, errorDescription, }) => {\n    const errorParams = new URLSearchParams();\n    if (error) {\n        errorParams.set('error', error);\n    }\n    if (errorDescription) {\n        errorParams.set('error_description', errorDescription);\n    }\n    return errorParams.toString();\n};\nexports.createErrorSearchParamsString = createErrorSearchParamsString;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,6BAA6B,GAAG,KAAK,CAAC,CAAC;AAC/C,MAAM,6BAA6B,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,GAAG,KAAK;AACxE,IAAI,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;AAC9C,IAAI,IAAI,KAAK,EAAE;AACf,QAAQ,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxC,KAAK;AACL,IAAI,IAAI,gBAAgB,EAAE;AAC1B,QAAQ,WAAW,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAC/D,KAAK;AACL,IAAI,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;AAClC,CAAC,CAAC;AACF,OAAO,CAAC,6BAA6B,GAAG,6BAA6B;;"}

package/dist/cjs/auth/utils/getAccessTokenUsername.js

@@ -4,7 +4,7 @@
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAccessTokenUsername = void 0;
-const core_1 = require("@aws-amplify/core");
-const getAccessTokenUsername = (accessToken) => (0, core_1.decodeJWT)(accessToken).payload.username;
+const internals_1 = require("aws-amplify/adapter-core/internals");
+const getAccessTokenUsername = (accessToken) => (0, internals_1.decodeJWT)(accessToken).payload.username;
 exports.getAccessTokenUsername = getAccessTokenUsername;
 //# sourceMappingURL=getAccessTokenUsername.js.map

package/dist/cjs/auth/utils/getAccessTokenUsername.js.map

@@ -1 +1 @@
-{"version":3,"file":"getAccessTokenUsername.js","sources":["../../../../src/auth/utils/getAccessTokenUsername.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getAccessTokenUsername = void 0;\nconst core_1 = require(\"@aws-amplify/core\");\nconst getAccessTokenUsername = (accessToken) => (0, core_1.decodeJWT)(accessToken).payload.username;\nexports.getAccessTokenUsername = getAccessTokenUsername;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC;AACxC,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC5C,MAAM,sBAAsB,GAAG,CAAC,WAAW,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;AACpG,OAAO,CAAC,sBAAsB,GAAG,sBAAsB;;"}
+{"version":3,"file":"getAccessTokenUsername.js","sources":["../../../../src/auth/utils/getAccessTokenUsername.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getAccessTokenUsername = void 0;\nconst internals_1 = require(\"aws-amplify/adapter-core/internals\");\nconst getAccessTokenUsername = (accessToken) => (0, internals_1.decodeJWT)(accessToken).payload.username;\nexports.getAccessTokenUsername = getAccessTokenUsername;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC;AACxC,MAAM,WAAW,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAClE,MAAM,sBAAsB,GAAG,CAAC,WAAW,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzG,OAAO,CAAC,sBAAsB,GAAG,sBAAsB;;"}

package/dist/cjs/auth/utils/index.js

@@ -3,7 +3,7 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createTokenCookiesRemoveOptions = exports.createTokenCookiesSetOptions = exports.createTokenRemoveCookies = exports.createTokenCookies = exports.resolveRedirectSignOutUrl = exports.resolveRedirectSignInUrl = exports.resolveIdentityProviderFromUrl = exports.resolveCodeAndStateFromUrl = exports.isSSLOrigin = exports.isValidOrigin = exports.isSupportedAuthApiRoutePath = exports.hasActiveUserSessionWithPagesRouter = exports.hasActiveUserSessionWithAppRouter = exports.isNextRequest = exports.isNextApiResponse = exports.isNextApiRequest = exports.isAuthRoutesHandlersContext = exports.getRedirectOrDefault = exports.getCookieValuesFromRequest = exports.getCookieValuesFromNextApiRequest = exports.getAccessTokenUsername = exports.createRevokeEndpoint = exports.createTokenEndpoint = exports.createLogoutEndpoint = exports.createSignUpEndpoint = exports.createAuthorizeEndpoint = exports.createUrlSearchParamsForSignInSignUp = exports.createOnSignInCompleteRedirectIntermediate = exports.createAuthFlowProofs = exports.createAuthFlowProofCookiesRemoveOptions = exports.createAuthFlowProofCookiesSetOptions = exports.createSignOutFlowProofCookies = exports.createSignInFlowProofCookies = exports.appendSetCookieHeadersToNextApiResponse = exports.revokeAuthNTokens = exports.exchangeAuthNTokens = exports.appendSetCookieHeaders = void 0;
+exports.createTokenCookiesRemoveOptions = exports.createTokenCookiesSetOptions = exports.createTokenRemoveCookies = exports.createTokenCookies = exports.resolveRedirectSignOutUrl = exports.resolveRedirectSignInUrl = exports.resolveIdentityProviderFromUrl = exports.parseSignInCallbackUrl = exports.isSSLOrigin = exports.isValidOrigin = exports.isSupportedAuthApiRoutePath = exports.hasActiveUserSessionWithPagesRouter = exports.hasActiveUserSessionWithAppRouter = exports.isNextRequest = exports.isNextApiResponse = exports.isNextApiRequest = exports.isAuthRoutesHandlersContext = exports.getRedirectOrDefault = exports.getCookieValuesFromRequest = exports.getCookieValuesFromNextApiRequest = exports.getAccessTokenUsername = exports.createRevokeEndpoint = exports.createTokenEndpoint = exports.createLogoutEndpoint = exports.createSignUpEndpoint = exports.createAuthorizeEndpoint = exports.createUrlSearchParamsForSignInSignUp = exports.createOnSignInCompleteRedirectIntermediate = exports.createErrorSearchParamsString = exports.createAuthFlowProofs = exports.createAuthFlowProofCookiesRemoveOptions = exports.createAuthFlowProofCookiesSetOptions = exports.createSignOutFlowProofCookies = exports.createSignInFlowProofCookies = exports.appendSetCookieHeadersToNextApiResponse = exports.revokeAuthNTokens = exports.exchangeAuthNTokens = exports.appendSetCookieHeaders = void 0;
 var appendSetCookieHeaders_1 = require("./appendSetCookieHeaders");
 Object.defineProperty(exports, "appendSetCookieHeaders", { enumerable: true, get: function () { return appendSetCookieHeaders_1.appendSetCookieHeaders; } });
 var authNTokens_1 = require("./authNTokens");
@@ -18,6 +18,8 @@ Object.defineProperty(exports, "createAuthFlowProofCookiesSetOptions", { enumera
 Object.defineProperty(exports, "createAuthFlowProofCookiesRemoveOptions", { enumerable: true, get: function () { return authFlowProofCookies_1.createAuthFlowProofCookiesRemoveOptions; } });
 var createAuthFlowProofs_1 = require("./createAuthFlowProofs");
 Object.defineProperty(exports, "createAuthFlowProofs", { enumerable: true, get: function () { return createAuthFlowProofs_1.createAuthFlowProofs; } });
+var createErrorSearchParamsString_1 = require("./createErrorSearchParamsString");
+Object.defineProperty(exports, "createErrorSearchParamsString", { enumerable: true, get: function () { return createErrorSearchParamsString_1.createErrorSearchParamsString; } });
 var createOnSignInCompleteRedirectIntermediate_1 = require("./createOnSignInCompleteRedirectIntermediate");
 Object.defineProperty(exports, "createOnSignInCompleteRedirectIntermediate", { enumerable: true, get: function () { return createOnSignInCompleteRedirectIntermediate_1.createOnSignInCompleteRedirectIntermediate; } });
 var createUrlSearchParams_1 = require("./createUrlSearchParams");
@@ -49,8 +51,8 @@ Object.defineProperty(exports, "isSupportedAuthApiRoutePath", { enumerable: true
 var origin_1 = require("./origin");
 Object.defineProperty(exports, "isValidOrigin", { enumerable: true, get: function () { return origin_1.isValidOrigin; } });
 Object.defineProperty(exports, "isSSLOrigin", { enumerable: true, get: function () { return origin_1.isSSLOrigin; } });
-var resolveCodeAndStateFromUrl_1 = require("./resolveCodeAndStateFromUrl");
-Object.defineProperty(exports, "resolveCodeAndStateFromUrl", { enumerable: true, get: function () { return resolveCodeAndStateFromUrl_1.resolveCodeAndStateFromUrl; } });
+var parseSignInCallbackUrl_1 = require("./parseSignInCallbackUrl");
+Object.defineProperty(exports, "parseSignInCallbackUrl", { enumerable: true, get: function () { return parseSignInCallbackUrl_1.parseSignInCallbackUrl; } });
 var resolveIdentityProviderFromUrl_1 = require("./resolveIdentityProviderFromUrl");
 Object.defineProperty(exports, "resolveIdentityProviderFromUrl", { enumerable: true, get: function () { return resolveIdentityProviderFromUrl_1.resolveIdentityProviderFromUrl; } });
 var resolveRedirectUrl_1 = require("./resolveRedirectUrl");

package/dist/cjs/auth/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../src/auth/utils/index.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createTokenCookiesRemoveOptions = exports.createTokenCookiesSetOptions = exports.createTokenRemoveCookies = exports.createTokenCookies = exports.resolveRedirectSignOutUrl = exports.resolveRedirectSignInUrl = exports.resolveIdentityProviderFromUrl = exports.resolveCodeAndStateFromUrl = exports.isSSLOrigin = exports.isValidOrigin = exports.isSupportedAuthApiRoutePath = exports.hasActiveUserSessionWithPagesRouter = exports.hasActiveUserSessionWithAppRouter = exports.isNextRequest = exports.isNextApiResponse = exports.isNextApiRequest = exports.isAuthRoutesHandlersContext = exports.getRedirectOrDefault = exports.getCookieValuesFromRequest = exports.getCookieValuesFromNextApiRequest = exports.getAccessTokenUsername = exports.createRevokeEndpoint = exports.createTokenEndpoint = exports.createLogoutEndpoint = exports.createSignUpEndpoint = exports.createAuthorizeEndpoint = exports.createUrlSearchParamsForSignInSignUp = exports.createOnSignInCompleteRedirectIntermediate = exports.createAuthFlowProofs = exports.createAuthFlowProofCookiesRemoveOptions = exports.createAuthFlowProofCookiesSetOptions = exports.createSignOutFlowProofCookies = exports.createSignInFlowProofCookies = exports.appendSetCookieHeadersToNextApiResponse = exports.revokeAuthNTokens = exports.exchangeAuthNTokens = exports.appendSetCookieHeaders = void 0;\nvar appendSetCookieHeaders_1 = require(\"./appendSetCookieHeaders\");\nObject.defineProperty(exports, \"appendSetCookieHeaders\", { enumerable: true, get: function () { return appendSetCookieHeaders_1.appendSetCookieHeaders; } });\nvar authNTokens_1 = require(\"./authNTokens\");\nObject.defineProperty(exports, \"exchangeAuthNTokens\", { enumerable: true, get: function () { return authNTokens_1.exchangeAuthNTokens; } });\nObject.defineProperty(exports, \"revokeAuthNTokens\", { enumerable: true, get: function () { return authNTokens_1.revokeAuthNTokens; } });\nvar appendSetCookieHeadersToNextApiResponse_1 = require(\"./appendSetCookieHeadersToNextApiResponse\");\nObject.defineProperty(exports, \"appendSetCookieHeadersToNextApiResponse\", { enumerable: true, get: function () { return appendSetCookieHeadersToNextApiResponse_1.appendSetCookieHeadersToNextApiResponse; } });\nvar authFlowProofCookies_1 = require(\"./authFlowProofCookies\");\nObject.defineProperty(exports, \"createSignInFlowProofCookies\", { enumerable: true, get: function () { return authFlowProofCookies_1.createSignInFlowProofCookies; } });\nObject.defineProperty(exports, \"createSignOutFlowProofCookies\", { enumerable: true, get: function () { return authFlowProofCookies_1.createSignOutFlowProofCookies; } });\nObject.defineProperty(exports, \"createAuthFlowProofCookiesSetOptions\", { enumerable: true, get: function () { return authFlowProofCookies_1.createAuthFlowProofCookiesSetOptions; } });\nObject.defineProperty(exports, \"createAuthFlowProofCookiesRemoveOptions\", { enumerable: true, get: function () { return authFlowProofCookies_1.createAuthFlowProofCookiesRemoveOptions; } });\nvar createAuthFlowProofs_1 = require(\"./createAuthFlowProofs\");\nObject.defineProperty(exports, \"createAuthFlowProofs\", { enumerable: true, get: function () { return createAuthFlowProofs_1.createAuthFlowProofs; } });\nvar createOnSignInCompleteRedirectIntermediate_1 = require(\"./createOnSignInCompleteRedirectIntermediate\");\nObject.defineProperty(exports, \"createOnSignInCompleteRedirectIntermediate\", { enumerable: true, get: function () { return createOnSignInCompleteRedirectIntermediate_1.createOnSignInCompleteRedirectIntermediate; } });\nvar createUrlSearchParams_1 = require(\"./createUrlSearchParams\");\nObject.defineProperty(exports, \"createUrlSearchParamsForSignInSignUp\", { enumerable: true, get: function () { return createUrlSearchParams_1.createUrlSearchParamsForSignInSignUp; } });\nvar cognitoHostedUIEndpoints_1 = require(\"./cognitoHostedUIEndpoints\");\nObject.defineProperty(exports, \"createAuthorizeEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createAuthorizeEndpoint; } });\nObject.defineProperty(exports, \"createSignUpEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createSignUpEndpoint; } });\nObject.defineProperty(exports, \"createLogoutEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createLogoutEndpoint; } });\nObject.defineProperty(exports, \"createTokenEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createTokenEndpoint; } });\nObject.defineProperty(exports, \"createRevokeEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createRevokeEndpoint; } });\nvar getAccessTokenUsername_1 = require(\"./getAccessTokenUsername\");\nObject.defineProperty(exports, \"getAccessTokenUsername\", { enumerable: true, get: function () { return getAccessTokenUsername_1.getAccessTokenUsername; } });\nvar getCookieValuesFromNextApiRequest_1 = require(\"./getCookieValuesFromNextApiRequest\");\nObject.defineProperty(exports, \"getCookieValuesFromNextApiRequest\", { enumerable: true, get: function () { return getCookieValuesFromNextApiRequest_1.getCookieValuesFromNextApiRequest; } });\nvar getCookieValuesFromRequest_1 = require(\"./getCookieValuesFromRequest\");\nObject.defineProperty(exports, \"getCookieValuesFromRequest\", { enumerable: true, get: function () { return getCookieValuesFromRequest_1.getCookieValuesFromRequest; } });\nvar getRedirectOrDefault_1 = require(\"./getRedirectOrDefault\");\nObject.defineProperty(exports, \"getRedirectOrDefault\", { enumerable: true, get: function () { return getRedirectOrDefault_1.getRedirectOrDefault; } });\nvar predicates_1 = require(\"./predicates\");\nObject.defineProperty(exports, \"isAuthRoutesHandlersContext\", { enumerable: true, get: function () { return predicates_1.isAuthRoutesHandlersContext; } });\nObject.defineProperty(exports, \"isNextApiRequest\", { enumerable: true, get: function () { return predicates_1.isNextApiRequest; } });\nObject.defineProperty(exports, \"isNextApiResponse\", { enumerable: true, get: function () { return predicates_1.isNextApiResponse; } });\nObject.defineProperty(exports, \"isNextRequest\", { enumerable: true, get: function () { return predicates_1.isNextRequest; } });\nvar hasActiveUserSession_1 = require(\"./hasActiveUserSession\");\nObject.defineProperty(exports, \"hasActiveUserSessionWithAppRouter\", { enumerable: true, get: function () { return hasActiveUserSession_1.hasActiveUserSessionWithAppRouter; } });\nObject.defineProperty(exports, \"hasActiveUserSessionWithPagesRouter\", { enumerable: true, get: function () { return hasActiveUserSession_1.hasActiveUserSessionWithPagesRouter; } });\nvar isSupportedAuthApiRoutePath_1 = require(\"./isSupportedAuthApiRoutePath\");\nObject.defineProperty(exports, \"isSupportedAuthApiRoutePath\", { enumerable: true, get: function () { return isSupportedAuthApiRoutePath_1.isSupportedAuthApiRoutePath; } });\nvar origin_1 = require(\"./origin\");\nObject.defineProperty(exports, \"isValidOrigin\", { enumerable: true, get: function () { return origin_1.isValidOrigin; } });\nObject.defineProperty(exports, \"isSSLOrigin\", { enumerable: true, get: function () { return origin_1.isSSLOrigin; } });\nvar resolveCodeAndStateFromUrl_1 = require(\"./resolveCodeAndStateFromUrl\");\nObject.defineProperty(exports, \"resolveCodeAndStateFromUrl\", { enumerable: true, get: function () { return resolveCodeAndStateFromUrl_1.resolveCodeAndStateFromUrl; } });\nvar resolveIdentityProviderFromUrl_1 = require(\"./resolveIdentityProviderFromUrl\");\nObject.defineProperty(exports, \"resolveIdentityProviderFromUrl\", { enumerable: true, get: function () { return resolveIdentityProviderFromUrl_1.resolveIdentityProviderFromUrl; } });\nvar resolveRedirectUrl_1 = require(\"./resolveRedirectUrl\");\nObject.defineProperty(exports, \"resolveRedirectSignInUrl\", { enumerable: true, get: function () { return resolveRedirectUrl_1.resolveRedirectSignInUrl; } });\nObject.defineProperty(exports, \"resolveRedirectSignOutUrl\", { enumerable: true, get: function () { return resolveRedirectUrl_1.resolveRedirectSignOutUrl; } });\nvar tokenCookies_1 = require(\"./tokenCookies\");\nObject.defineProperty(exports, \"createTokenCookies\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookies; } });\nObject.defineProperty(exports, \"createTokenRemoveCookies\", { enumerable: true, get: function () { return tokenCookies_1.createTokenRemoveCookies; } });\nObject.defineProperty(exports, \"createTokenCookiesSetOptions\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookiesSetOptions; } });\nObject.defineProperty(exports, \"createTokenCookiesRemoveOptions\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookiesRemoveOptions; } });\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,+BAA+B,GAAG,OAAO,CAAC,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,GAAG,OAAO,CAAC,8BAA8B,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,2BAA2B,GAAG,OAAO,CAAC,mCAAmC,GAAG,OAAO,CAAC,iCAAiC,GAAG,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,2BAA2B,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,iCAAiC,GAAG,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,oCAAoC,GAAG,OAAO,CAAC,0CAA0C,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uCAAuC,GAAG,OAAO,CAAC,oCAAoC,GAAG,OAAO,CAAC,6BAA6B,GAAG,OAAO,CAAC,4BAA4B,GAAG,OAAO,CAAC,uCAAuC,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC;AAC9zC,IAAI,wBAAwB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,IAAI,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,aAAa,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5I,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;AACxI,IAAI,yCAAyC,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACrG,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yCAAyC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,yCAAyC,CAAC,uCAAuC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChN,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC;AACvK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,EAAE,CAAC,CAAC;AACzK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sCAAsC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvL,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yCAAyC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,uCAAuC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7L,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,IAAI,4CAA4C,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAC3G,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,4CAA4C,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,4CAA4C,CAAC,0CAA0C,CAAC,EAAE,EAAE,CAAC,CAAC;AACzN,IAAI,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACjE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sCAAsC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,uBAAuB,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxL,IAAI,0BAA0B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACvE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC;AACjK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;AACzJ,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,IAAI,wBAAwB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,IAAI,mCAAmC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAC;AACzF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mCAAmC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,mCAAmC,CAAC,iCAAiC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9L,IAAI,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,4BAA4B,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;AACzK,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,IAAI,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;AACrI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/H,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mCAAmC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjL,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qCAAqC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrL,IAAI,6BAA6B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAC7E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,6BAA6B,CAAC,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5K,IAAI,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACnC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3H,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;AACvH,IAAI,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,4BAA4B,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;AACzK,IAAI,gCAAgC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACnF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,gCAAgC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,gCAAgC,CAAC,8BAA8B,CAAC,EAAE,EAAE,CAAC,CAAC;AACrL,IAAI,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC3D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,oBAAoB,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,oBAAoB,CAAC,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/J,IAAI,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3I,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iCAAiC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,+BAA+B,CAAC,EAAE,EAAE,CAAC;;"}
+{"version":3,"file":"index.js","sources":["../../../../src/auth/utils/index.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createTokenCookiesRemoveOptions = exports.createTokenCookiesSetOptions = exports.createTokenRemoveCookies = exports.createTokenCookies = exports.resolveRedirectSignOutUrl = exports.resolveRedirectSignInUrl = exports.resolveIdentityProviderFromUrl = exports.parseSignInCallbackUrl = exports.isSSLOrigin = exports.isValidOrigin = exports.isSupportedAuthApiRoutePath = exports.hasActiveUserSessionWithPagesRouter = exports.hasActiveUserSessionWithAppRouter = exports.isNextRequest = exports.isNextApiResponse = exports.isNextApiRequest = exports.isAuthRoutesHandlersContext = exports.getRedirectOrDefault = exports.getCookieValuesFromRequest = exports.getCookieValuesFromNextApiRequest = exports.getAccessTokenUsername = exports.createRevokeEndpoint = exports.createTokenEndpoint = exports.createLogoutEndpoint = exports.createSignUpEndpoint = exports.createAuthorizeEndpoint = exports.createUrlSearchParamsForSignInSignUp = exports.createOnSignInCompleteRedirectIntermediate = exports.createErrorSearchParamsString = exports.createAuthFlowProofs = exports.createAuthFlowProofCookiesRemoveOptions = exports.createAuthFlowProofCookiesSetOptions = exports.createSignOutFlowProofCookies = exports.createSignInFlowProofCookies = exports.appendSetCookieHeadersToNextApiResponse = exports.revokeAuthNTokens = exports.exchangeAuthNTokens = exports.appendSetCookieHeaders = void 0;\nvar appendSetCookieHeaders_1 = require(\"./appendSetCookieHeaders\");\nObject.defineProperty(exports, \"appendSetCookieHeaders\", { enumerable: true, get: function () { return appendSetCookieHeaders_1.appendSetCookieHeaders; } });\nvar authNTokens_1 = require(\"./authNTokens\");\nObject.defineProperty(exports, \"exchangeAuthNTokens\", { enumerable: true, get: function () { return authNTokens_1.exchangeAuthNTokens; } });\nObject.defineProperty(exports, \"revokeAuthNTokens\", { enumerable: true, get: function () { return authNTokens_1.revokeAuthNTokens; } });\nvar appendSetCookieHeadersToNextApiResponse_1 = require(\"./appendSetCookieHeadersToNextApiResponse\");\nObject.defineProperty(exports, \"appendSetCookieHeadersToNextApiResponse\", { enumerable: true, get: function () { return appendSetCookieHeadersToNextApiResponse_1.appendSetCookieHeadersToNextApiResponse; } });\nvar authFlowProofCookies_1 = require(\"./authFlowProofCookies\");\nObject.defineProperty(exports, \"createSignInFlowProofCookies\", { enumerable: true, get: function () { return authFlowProofCookies_1.createSignInFlowProofCookies; } });\nObject.defineProperty(exports, \"createSignOutFlowProofCookies\", { enumerable: true, get: function () { return authFlowProofCookies_1.createSignOutFlowProofCookies; } });\nObject.defineProperty(exports, \"createAuthFlowProofCookiesSetOptions\", { enumerable: true, get: function () { return authFlowProofCookies_1.createAuthFlowProofCookiesSetOptions; } });\nObject.defineProperty(exports, \"createAuthFlowProofCookiesRemoveOptions\", { enumerable: true, get: function () { return authFlowProofCookies_1.createAuthFlowProofCookiesRemoveOptions; } });\nvar createAuthFlowProofs_1 = require(\"./createAuthFlowProofs\");\nObject.defineProperty(exports, \"createAuthFlowProofs\", { enumerable: true, get: function () { return createAuthFlowProofs_1.createAuthFlowProofs; } });\nvar createErrorSearchParamsString_1 = require(\"./createErrorSearchParamsString\");\nObject.defineProperty(exports, \"createErrorSearchParamsString\", { enumerable: true, get: function () { return createErrorSearchParamsString_1.createErrorSearchParamsString; } });\nvar createOnSignInCompleteRedirectIntermediate_1 = require(\"./createOnSignInCompleteRedirectIntermediate\");\nObject.defineProperty(exports, \"createOnSignInCompleteRedirectIntermediate\", { enumerable: true, get: function () { return createOnSignInCompleteRedirectIntermediate_1.createOnSignInCompleteRedirectIntermediate; } });\nvar createUrlSearchParams_1 = require(\"./createUrlSearchParams\");\nObject.defineProperty(exports, \"createUrlSearchParamsForSignInSignUp\", { enumerable: true, get: function () { return createUrlSearchParams_1.createUrlSearchParamsForSignInSignUp; } });\nvar cognitoHostedUIEndpoints_1 = require(\"./cognitoHostedUIEndpoints\");\nObject.defineProperty(exports, \"createAuthorizeEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createAuthorizeEndpoint; } });\nObject.defineProperty(exports, \"createSignUpEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createSignUpEndpoint; } });\nObject.defineProperty(exports, \"createLogoutEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createLogoutEndpoint; } });\nObject.defineProperty(exports, \"createTokenEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createTokenEndpoint; } });\nObject.defineProperty(exports, \"createRevokeEndpoint\", { enumerable: true, get: function () { return cognitoHostedUIEndpoints_1.createRevokeEndpoint; } });\nvar getAccessTokenUsername_1 = require(\"./getAccessTokenUsername\");\nObject.defineProperty(exports, \"getAccessTokenUsername\", { enumerable: true, get: function () { return getAccessTokenUsername_1.getAccessTokenUsername; } });\nvar getCookieValuesFromNextApiRequest_1 = require(\"./getCookieValuesFromNextApiRequest\");\nObject.defineProperty(exports, \"getCookieValuesFromNextApiRequest\", { enumerable: true, get: function () { return getCookieValuesFromNextApiRequest_1.getCookieValuesFromNextApiRequest; } });\nvar getCookieValuesFromRequest_1 = require(\"./getCookieValuesFromRequest\");\nObject.defineProperty(exports, \"getCookieValuesFromRequest\", { enumerable: true, get: function () { return getCookieValuesFromRequest_1.getCookieValuesFromRequest; } });\nvar getRedirectOrDefault_1 = require(\"./getRedirectOrDefault\");\nObject.defineProperty(exports, \"getRedirectOrDefault\", { enumerable: true, get: function () { return getRedirectOrDefault_1.getRedirectOrDefault; } });\nvar predicates_1 = require(\"./predicates\");\nObject.defineProperty(exports, \"isAuthRoutesHandlersContext\", { enumerable: true, get: function () { return predicates_1.isAuthRoutesHandlersContext; } });\nObject.defineProperty(exports, \"isNextApiRequest\", { enumerable: true, get: function () { return predicates_1.isNextApiRequest; } });\nObject.defineProperty(exports, \"isNextApiResponse\", { enumerable: true, get: function () { return predicates_1.isNextApiResponse; } });\nObject.defineProperty(exports, \"isNextRequest\", { enumerable: true, get: function () { return predicates_1.isNextRequest; } });\nvar hasActiveUserSession_1 = require(\"./hasActiveUserSession\");\nObject.defineProperty(exports, \"hasActiveUserSessionWithAppRouter\", { enumerable: true, get: function () { return hasActiveUserSession_1.hasActiveUserSessionWithAppRouter; } });\nObject.defineProperty(exports, \"hasActiveUserSessionWithPagesRouter\", { enumerable: true, get: function () { return hasActiveUserSession_1.hasActiveUserSessionWithPagesRouter; } });\nvar isSupportedAuthApiRoutePath_1 = require(\"./isSupportedAuthApiRoutePath\");\nObject.defineProperty(exports, \"isSupportedAuthApiRoutePath\", { enumerable: true, get: function () { return isSupportedAuthApiRoutePath_1.isSupportedAuthApiRoutePath; } });\nvar origin_1 = require(\"./origin\");\nObject.defineProperty(exports, \"isValidOrigin\", { enumerable: true, get: function () { return origin_1.isValidOrigin; } });\nObject.defineProperty(exports, \"isSSLOrigin\", { enumerable: true, get: function () { return origin_1.isSSLOrigin; } });\nvar parseSignInCallbackUrl_1 = require(\"./parseSignInCallbackUrl\");\nObject.defineProperty(exports, \"parseSignInCallbackUrl\", { enumerable: true, get: function () { return parseSignInCallbackUrl_1.parseSignInCallbackUrl; } });\nvar resolveIdentityProviderFromUrl_1 = require(\"./resolveIdentityProviderFromUrl\");\nObject.defineProperty(exports, \"resolveIdentityProviderFromUrl\", { enumerable: true, get: function () { return resolveIdentityProviderFromUrl_1.resolveIdentityProviderFromUrl; } });\nvar resolveRedirectUrl_1 = require(\"./resolveRedirectUrl\");\nObject.defineProperty(exports, \"resolveRedirectSignInUrl\", { enumerable: true, get: function () { return resolveRedirectUrl_1.resolveRedirectSignInUrl; } });\nObject.defineProperty(exports, \"resolveRedirectSignOutUrl\", { enumerable: true, get: function () { return resolveRedirectUrl_1.resolveRedirectSignOutUrl; } });\nvar tokenCookies_1 = require(\"./tokenCookies\");\nObject.defineProperty(exports, \"createTokenCookies\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookies; } });\nObject.defineProperty(exports, \"createTokenRemoveCookies\", { enumerable: true, get: function () { return tokenCookies_1.createTokenRemoveCookies; } });\nObject.defineProperty(exports, \"createTokenCookiesSetOptions\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookiesSetOptions; } });\nObject.defineProperty(exports, \"createTokenCookiesRemoveOptions\", { enumerable: true, get: function () { return tokenCookies_1.createTokenCookiesRemoveOptions; } });\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,+BAA+B,GAAG,OAAO,CAAC,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,GAAG,OAAO,CAAC,8BAA8B,GAAG,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,2BAA2B,GAAG,OAAO,CAAC,mCAAmC,GAAG,OAAO,CAAC,iCAAiC,GAAG,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,2BAA2B,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,GAAG,OAAO,CAAC,iCAAiC,GAAG,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,oCAAoC,GAAG,OAAO,CAAC,0CAA0C,GAAG,OAAO,CAAC,6BAA6B,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uCAAuC,GAAG,OAAO,CAAC,oCAAoC,GAAG,OAAO,CAAC,6BAA6B,GAAG,OAAO,CAAC,4BAA4B,GAAG,OAAO,CAAC,uCAAuC,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC;AACl2C,IAAI,wBAAwB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,IAAI,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,aAAa,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5I,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;AACxI,IAAI,yCAAyC,GAAG,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACrG,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yCAAyC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,yCAAyC,CAAC,uCAAuC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChN,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC;AACvK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,6BAA6B,CAAC,EAAE,EAAE,CAAC,CAAC;AACzK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sCAAsC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvL,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yCAAyC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,uCAAuC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7L,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,IAAI,+BAA+B,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;AACjF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,+BAA+B,CAAC,6BAA6B,CAAC,EAAE,EAAE,CAAC,CAAC;AAClL,IAAI,4CAA4C,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAC3G,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,4CAA4C,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,4CAA4C,CAAC,0CAA0C,CAAC,EAAE,EAAE,CAAC,CAAC;AACzN,IAAI,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACjE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sCAAsC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,uBAAuB,CAAC,oCAAoC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxL,IAAI,0BAA0B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACvE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC;AACjK,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;AACzJ,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,0BAA0B,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,IAAI,wBAAwB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,IAAI,mCAAmC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAC;AACzF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mCAAmC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,mCAAmC,CAAC,iCAAiC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9L,IAAI,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,4BAA4B,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;AACzK,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,IAAI,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;AACrI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/H,IAAI,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mCAAmC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,iCAAiC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjL,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qCAAqC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,sBAAsB,CAAC,mCAAmC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrL,IAAI,6BAA6B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAC7E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,6BAA6B,CAAC,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5K,IAAI,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACnC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3H,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;AACvH,IAAI,wBAAwB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,IAAI,gCAAgC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACnF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,gCAAgC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,gCAAgC,CAAC,8BAA8B,CAAC,EAAE,EAAE,CAAC,CAAC;AACrL,IAAI,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC3D,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,oBAAoB,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,oBAAoB,CAAC,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/J,IAAI,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3I,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC;AACvJ,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/J,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iCAAiC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,cAAc,CAAC,+BAA+B,CAAC,EAAE,EAAE,CAAC;;"}

package/dist/cjs/auth/utils/origin.js

@@ -9,6 +9,9 @@ const originRegex = /^(http:\/\/localhost(:\d{1,5})?)|(https?:\/\/[a-z0-9-]+(\.[
 const isValidOrigin = (origin) => {
     try {
         const url = new URL(origin);
+        if (url.protocol === 'http:' && url.hostname !== 'localhost') {
+            console.warn('HTTP origin detected. This is insecure and should only be used for local development.');
+        }
         return ((url.protocol === 'http:' || url.protocol === 'https:') &&
             originRegex.test(origin));
     }

package/dist/cjs/auth/utils/origin.js.map

@@ -1 +1 @@
-{"version":3,"file":"origin.js","sources":["../../../../src/auth/utils/origin.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.isSSLOrigin = exports.isValidOrigin = void 0;\n// a regular expression that validates the origin string to be any valid origin, and allowing local development localhost\nconst originRegex = /^(http:\\/\\/localhost(:\\d{1,5})?)|(https?:\\/\\/[a-z0-9-]+(\\.[a-z0-9-]+)*(:\\d{1,5})?)$/;\nconst isValidOrigin = (origin) => {\n    try {\n        const url = new URL(origin);\n        return ((url.protocol === 'http:' || url.protocol === 'https:') &&\n            originRegex.test(origin));\n    }\n    catch {\n        return false;\n    }\n};\nexports.isValidOrigin = isValidOrigin;\nconst isSSLOrigin = (origin) => {\n    if ((0, exports.isValidOrigin)(origin)) {\n        return origin.startsWith('https://');\n    }\n    return false;\n};\nexports.isSSLOrigin = isSSLOrigin;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;AACrD;AACA,MAAM,WAAW,GAAG,qFAAqF,CAAC;AAC1G,MAAM,aAAa,GAAG,CAAC,MAAM,KAAK;AAClC,IAAI,IAAI;AACR,QAAQ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,QAAQ,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;AACtE,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;AACtC,KAAK;AACL,IAAI,MAAM;AACV,QAAQ,OAAO,KAAK,CAAC;AACrB,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;AACtC,MAAM,WAAW,GAAG,CAAC,MAAM,KAAK;AAChC,IAAI,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;AAC5C,QAAQ,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC7C,KAAK;AACL,IAAI,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AACF,OAAO,CAAC,WAAW,GAAG,WAAW;;"}
+{"version":3,"file":"origin.js","sources":["../../../../src/auth/utils/origin.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.isSSLOrigin = exports.isValidOrigin = void 0;\n// a regular expression that validates the origin string to be any valid origin, and allowing local development localhost\nconst originRegex = /^(http:\\/\\/localhost(:\\d{1,5})?)|(https?:\\/\\/[a-z0-9-]+(\\.[a-z0-9-]+)*(:\\d{1,5})?)$/;\nconst isValidOrigin = (origin) => {\n    try {\n        const url = new URL(origin);\n        if (url.protocol === 'http:' && url.hostname !== 'localhost') {\n            console.warn('HTTP origin detected. This is insecure and should only be used for local development.');\n        }\n        return ((url.protocol === 'http:' || url.protocol === 'https:') &&\n            originRegex.test(origin));\n    }\n    catch {\n        return false;\n    }\n};\nexports.isValidOrigin = isValidOrigin;\nconst isSSLOrigin = (origin) => {\n    if ((0, exports.isValidOrigin)(origin)) {\n        return origin.startsWith('https://');\n    }\n    return false;\n};\nexports.isSSLOrigin = isSSLOrigin;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;AACrD;AACA,MAAM,WAAW,GAAG,qFAAqF,CAAC;AAC1G,MAAM,aAAa,GAAG,CAAC,MAAM,KAAK;AAClC,IAAI,IAAI;AACR,QAAQ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE;AACtE,YAAY,OAAO,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;AAClH,SAAS;AACT,QAAQ,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;AACtE,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;AACtC,KAAK;AACL,IAAI,MAAM;AACV,QAAQ,OAAO,KAAK,CAAC;AACrB,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;AACtC,MAAM,WAAW,GAAG,CAAC,MAAM,KAAK;AAChC,IAAI,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;AAC5C,QAAQ,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC7C,KAAK;AACL,IAAI,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AACF,OAAO,CAAC,WAAW,GAAG,WAAW;;"}