@aws-amplify/auth 4.4.3-cloud-logging.7 → 4.4.3-cloud-logging.8

package/dist/aws-amplify-auth.js

@@ -3964,20 +3964,8 @@ module.exports = function(module) {
 __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return AuthenticationDetails; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 /** @class */
@@ -4077,20 +4065,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _utils_WordArray__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(/*! ./utils/WordArray */ "../amazon-cognito-identity-js/es/utils/WordArray.js");
 /* harmony import */ var _BigInteger__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(/*! ./BigInteger */ "../amazon-cognito-identity-js/es/BigInteger.js");
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -5727,21 +5703,9 @@ function _setPrototypeOf(o, p) {
 
   return _setPrototypeOf(o, p);
 }
-/*
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -5797,20 +5761,8 @@ function _setPrototypeOf(o, p) {
   return _setPrototypeOf(o, p);
 }
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -5852,20 +5804,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var buffer__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! buffer */ "../../node_modules/buffer/index.js");
 /* harmony import */ var buffer__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(buffer__WEBPACK_IMPORTED_MODULE_0__);
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 /** @class */
@@ -5939,20 +5879,8 @@ var CognitoJwtToken = /*#__PURE__*/function () {
 __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return CognitoRefreshToken; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 /** @class */
@@ -6016,20 +5944,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _CognitoUserAttribute__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(/*! ./CognitoUserAttribute */ "../amazon-cognito-identity-js/es/CognitoUserAttribute.js");
 /* harmony import */ var _StorageHelper__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(/*! ./StorageHelper */ "../amazon-cognito-identity-js/es/StorageHelper.js");
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -8137,20 +8053,8 @@ var CognitoUser = /*#__PURE__*/function () {
 __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return CognitoUserAttribute; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 /** @class */
@@ -8249,20 +8153,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _CognitoUser__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ./CognitoUser */ "../amazon-cognito-identity-js/es/CognitoUser.js");
 /* harmony import */ var _StorageHelper__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! ./StorageHelper */ "../amazon-cognito-identity-js/es/StorageHelper.js");
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -8463,20 +8355,8 @@ var CognitoUserPool = /*#__PURE__*/function () {
 __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return CognitoUserSession; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 /** @class */
@@ -8725,20 +8605,8 @@ var CookieStorage = /*#__PURE__*/function () {
 __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return DateHelper; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 var monthNames = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
 var weekNames = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
@@ -8800,17 +8668,9 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "Platform", function() { return Platform; });
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "getUserAgent", function() { return getUserAgent; });
 /* harmony import */ var _version__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ./version */ "../amazon-cognito-identity-js/es/Platform/version.js");
-/*
- * Copyright 2017-2017 Amazon.com, Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with
- * the License. A copy of the License is located at
- *
- *     http://aws.amazon.com/apache2.0/
- *
- * or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions
- * and limitations under the License.
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 var BASE_USER_AGENT = "aws-amplify/" + _version__WEBPACK_IMPORTED_MODULE_0__["version"];
@@ -8876,20 +8736,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "MemoryStorage", function() { return MemoryStorage; });
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "default", function() { return StorageHelper; });
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 var dataMemory = {};
 /** @class */
@@ -9061,20 +8909,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "WordArray", function() { return _utils_WordArray__WEBPACK_IMPORTED_MODULE_12__["default"]; });
 
 /*!
- * Copyright 2016 Amazon.com,
- * Inc. or its affiliates. All Rights Reserved.
- *
- * Licensed under the Amazon Software License (the "License").
- * You may not use this file except in compliance with the
- * License. A copy of the License is located at
- *
- *     http://aws.amazon.com/asl/
- *
- * or in the "license" file accompanying this file. This file is
- * distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
- * CONDITIONS OF ANY KIND, express or implied. See the License
- * for the specific language governing permissions and
- * limitations under the License.
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
  */
 
 
@@ -11487,21 +11323,68 @@ function () {
 
       var bypassCache = params ? params.bypassCache : false;
       user.getUserData(function (err, data) {
-        if (err) {
-          logger.debug('getting preferred mfa failed', err);
-          rej(err);
-          return;
-        }
+        return __awaiter(_this, void 0, void 0, function () {
+          var cleanUpError_1, mfaType;
+          return __generator(this, function (_a) {
+            switch (_a.label) {
+              case 0:
+                if (!err) return [3
+                /*break*/
+                , 5];
+                logger.debug('getting preferred mfa failed', err);
+                if (!this.isSessionInvalid(err)) return [3
+                /*break*/
+                , 4];
+                _a.label = 1;
 
-        var mfaType = that._getMfaTypeFromUserData(data);
+              case 1:
+                _a.trys.push([1, 3,, 4]);
 
-        if (!mfaType) {
-          rej('invalid MFA Type');
-          return;
-        } else {
-          res(mfaType);
-          return;
-        }
+                return [4
+                /*yield*/
+                , this.cleanUpInvalidSession(user)];
+
+              case 2:
+                _a.sent();
+
+                return [3
+                /*break*/
+                , 4];
+
+              case 3:
+                cleanUpError_1 = _a.sent();
+                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_1.message));
+                return [2
+                /*return*/
+                ];
+
+              case 4:
+                rej(err);
+                return [2
+                /*return*/
+                ];
+
+              case 5:
+                mfaType = that._getMfaTypeFromUserData(data);
+
+                if (!mfaType) {
+                  rej('invalid MFA Type');
+                  return [2
+                  /*return*/
+                  ];
+                } else {
+                  res(mfaType);
+                  return [2
+                  /*return*/
+                  ];
+                }
+
+                return [2
+                /*return*/
+                ];
+            }
+          });
+        });
       }, {
         bypassCache: bypassCache,
         clientMetadata: clientMetadata
@@ -11543,16 +11426,62 @@ function () {
   };
 
   AuthClass.prototype._getUserData = function (user, params) {
+    var _this = this;
+
     return new Promise(function (res, rej) {
       user.getUserData(function (err, data) {
-        if (err) {
-          logger.debug('getting user data failed', err);
-          rej(err);
-          return;
-        } else {
-          res(data);
-          return;
-        }
+        return __awaiter(_this, void 0, void 0, function () {
+          var cleanUpError_2;
+          return __generator(this, function (_a) {
+            switch (_a.label) {
+              case 0:
+                if (!err) return [3
+                /*break*/
+                , 5];
+                logger.debug('getting user data failed', err);
+                if (!this.isSessionInvalid(err)) return [3
+                /*break*/
+                , 4];
+                _a.label = 1;
+
+              case 1:
+                _a.trys.push([1, 3,, 4]);
+
+                return [4
+                /*yield*/
+                , this.cleanUpInvalidSession(user)];
+
+              case 2:
+                _a.sent();
+
+                return [3
+                /*break*/
+                , 4];
+
+              case 3:
+                cleanUpError_2 = _a.sent();
+                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_2.message));
+                return [2
+                /*return*/
+                ];
+
+              case 4:
+                rej(err);
+                return [2
+                /*return*/
+                ];
+
+              case 5:
+                res(data);
+                _a.label = 6;
+
+              case 6:
+                return [2
+                /*return*/
+                ];
+            }
+          });
+        });
       }, params);
     });
   };
@@ -11568,6 +11497,8 @@ function () {
     return __awaiter(this, void 0, void 0, function () {
       var clientMetadata, userData, smsMfaSettings, totpMfaSettings, _a, mfaList, currentMFAType, that;
 
+      var _this = this;
+
       return __generator(this, function (_b) {
         switch (_b.label) {
           case 0:
@@ -11707,12 +11638,53 @@ function () {
                 logger.debug('Caching the latest user data into local'); // cache the latest result into user data
 
                 user.getUserData(function (err, data) {
-                  if (err) {
-                    logger.debug('getting user data failed', err);
-                    return rej(err);
-                  } else {
-                    return res(result);
-                  }
+                  return __awaiter(_this, void 0, void 0, function () {
+                    var cleanUpError_3;
+                    return __generator(this, function (_a) {
+                      switch (_a.label) {
+                        case 0:
+                          if (!err) return [3
+                          /*break*/
+                          , 5];
+                          logger.debug('getting user data failed', err);
+                          if (!this.isSessionInvalid(err)) return [3
+                          /*break*/
+                          , 4];
+                          _a.label = 1;
+
+                        case 1:
+                          _a.trys.push([1, 3,, 4]);
+
+                          return [4
+                          /*yield*/
+                          , this.cleanUpInvalidSession(user)];
+
+                        case 2:
+                          _a.sent();
+
+                          return [3
+                          /*break*/
+                          , 4];
+
+                        case 3:
+                          cleanUpError_3 = _a.sent();
+                          rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_3.message));
+                          return [2
+                          /*return*/
+                          ];
+
+                        case 4:
+                          return [2
+                          /*return*/
+                          , rej(err)];
+
+                        case 5:
+                          return [2
+                          /*return*/
+                          , res(result)];
+                      }
+                    });
+                  });
                 }, {
                   bypassCache: true,
                   clientMetadata: clientMetadata
@@ -12101,44 +12073,80 @@ function () {
                     } else {
                       user_1.getSession(function (err, session) {
                         return __awaiter(_this, void 0, void 0, function () {
+                          var cleanUpError_4;
+
                           var _this = this;
 
                           return __generator(this, function (_a) {
-                            if (err) {
-                              logger.debug('Failed to get the user session', err);
-                              return [2
-                              /*return*/
-                              , rej(err)];
-                            } else {
-                              user_1.deleteUser(function (err, result) {
-                                if (err) {
-                                  rej(err);
-                                } else {
-                                  dispatchAuthEvent('userDeleted', result, 'The authenticated user has been deleted.');
-                                  user_1.signOut();
-                                  _this.user = null;
-
-                                  try {
-                                    _this.cleanCachedItems(); // clean aws credentials
-
-                                  } catch (e) {
-                                    // TODO: change to rejects in refactor
-                                    logger.debug('failed to clear cached items');
-                                  }
-
-                                  if (isSignedInHostedUI) {
-                                    _this.oAuthSignOutRedirect(res, rej);
+                            switch (_a.label) {
+                              case 0:
+                                if (!err) return [3
+                                /*break*/
+                                , 5];
+                                logger.debug('Failed to get the user session', err);
+                                if (!this.isSessionInvalid(err)) return [3
+                                /*break*/
+                                , 4];
+                                _a.label = 1;
+
+                              case 1:
+                                _a.trys.push([1, 3,, 4]);
+
+                                return [4
+                                /*yield*/
+                                , this.cleanUpInvalidSession(user_1)];
+
+                              case 2:
+                                _a.sent();
+
+                                return [3
+                                /*break*/
+                                , 4];
+
+                              case 3:
+                                cleanUpError_4 = _a.sent();
+                                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_4.message));
+                                return [2
+                                /*return*/
+                                ];
+
+                              case 4:
+                                return [2
+                                /*return*/
+                                , rej(err)];
+
+                              case 5:
+                                user_1.deleteUser(function (err, result) {
+                                  if (err) {
+                                    rej(err);
                                   } else {
-                                    dispatchAuthEvent('signOut', _this.user, "A user has been signed out");
-                                    res(result);
+                                    dispatchAuthEvent('userDeleted', result, 'The authenticated user has been deleted.');
+                                    user_1.signOut();
+                                    _this.user = null;
+
+                                    try {
+                                      _this.cleanCachedItems(); // clean aws credentials
+
+                                    } catch (e) {
+                                      // TODO: change to rejects in refactor
+                                      logger.debug('failed to clear cached items');
+                                    }
+
+                                    if (isSignedInHostedUI) {
+                                      _this.oAuthSignOutRedirect(res, rej);
+                                    } else {
+                                      dispatchAuthEvent('signOut', _this.user, "A user has been signed out");
+                                      res(result);
+                                    }
                                   }
-                                }
-                              });
-                            }
+                                });
+                                _a.label = 6;
 
-                            return [2
-                            /*return*/
-                            ];
+                              case 6:
+                                return [2
+                                /*return*/
+                                ];
+                            }
                           });
                         });
                       });
@@ -12246,6 +12254,93 @@ function () {
       };
     });
   };
+
+  AuthClass.prototype.isErrorWithMessage = function (err) {
+    return _typeof(err) === 'object' && Object.prototype.hasOwnProperty.call(err, 'message');
+  }; // Session revoked by another app
+
+
+  AuthClass.prototype.isTokenRevokedError = function (err) {
+    return this.isErrorWithMessage(err) && err.message === 'Access Token has been revoked';
+  };
+
+  AuthClass.prototype.isRefreshTokenRevokedError = function (err) {
+    return this.isErrorWithMessage(err) && err.message === 'Refresh Token has been revoked';
+  };
+
+  AuthClass.prototype.isUserDisabledError = function (err) {
+    return this.isErrorWithMessage(err) && err.message === 'User is disabled.';
+  };
+
+  AuthClass.prototype.isUserDoesNotExistError = function (err) {
+    return this.isErrorWithMessage(err) && err.message === 'User does not exist.';
+  };
+
+  AuthClass.prototype.isRefreshTokenExpiredError = function (err) {
+    return this.isErrorWithMessage(err) && err.message === 'Refresh Token has expired';
+  };
+
+  AuthClass.prototype.isSignedInHostedUI = function () {
+    return this._oAuthHandler && this._storage.getItem('amplify-signin-with-hostedUI') === 'true';
+  };
+
+  AuthClass.prototype.isSessionInvalid = function (err) {
+    return this.isUserDisabledError(err) || this.isUserDoesNotExistError(err) || this.isTokenRevokedError(err) || this.isRefreshTokenRevokedError(err) || this.isRefreshTokenExpiredError(err);
+  };
+
+  AuthClass.prototype.cleanUpInvalidSession = function (user) {
+    return __awaiter(this, void 0, void 0, function () {
+      var e_6;
+
+      var _this = this;
+
+      return __generator(this, function (_a) {
+        switch (_a.label) {
+          case 0:
+            user.signOut();
+            this.user = null;
+            _a.label = 1;
+
+          case 1:
+            _a.trys.push([1, 3,, 4]);
+
+            return [4
+            /*yield*/
+            , this.cleanCachedItems()];
+
+          case 2:
+            _a.sent(); // clean aws credentials
+
+
+            return [3
+            /*break*/
+            , 4];
+
+          case 3:
+            e_6 = _a.sent();
+            logger.debug('failed to clear cached items');
+            return [3
+            /*break*/
+            , 4];
+
+          case 4:
+            if (this.isSignedInHostedUI()) {
+              return [2
+              /*return*/
+              , new Promise(function (res, rej) {
+                _this.oAuthSignOutRedirect(res, rej);
+              })];
+            } else {
+              dispatchAuthEvent('signOut', this.user, "A user has been signed out");
+            }
+
+            return [2
+            /*return*/
+            ];
+        }
+      });
+    });
+  };
   /**
    * Get current authenticated user
    * @return - A promise resolves to current authenticated CognitoUser if success
@@ -12316,74 +12411,143 @@ function () {
 
                 user.getSession(function (err, session) {
                   return __awaiter(_this, void 0, void 0, function () {
-                    var bypassCache, clientMetadata, _a, scope;
+                    var cleanUpError_5, bypassCache, clientMetadata, _a, scope;
 
                     var _this = this;
 
                     return __generator(this, function (_b) {
                       switch (_b.label) {
                         case 0:
-                          if (err) {
-                            logger.debug('Failed to get the user session', err);
-                            rej(err);
-                            return [2
-                            /*return*/
-                            ];
-                          }
+                          if (!err) return [3
+                          /*break*/
+                          , 5];
+                          logger.debug('Failed to get the user session', err);
+                          if (!this.isSessionInvalid(err)) return [3
+                          /*break*/
+                          , 4];
+                          _b.label = 1;
+
+                        case 1:
+                          _b.trys.push([1, 3,, 4]);
+
+                          return [4
+                          /*yield*/
+                          , this.cleanUpInvalidSession(user)];
+
+                        case 2:
+                          _b.sent();
+
+                          return [3
+                          /*break*/
+                          , 4];
+
+                        case 3:
+                          cleanUpError_5 = _b.sent();
+                          rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_5.message));
+                          return [2
+                          /*return*/
+                          ];
+
+                        case 4:
+                          rej(err);
+                          return [2
+                          /*return*/
+                          ];
 
+                        case 5:
                           bypassCache = params ? params.bypassCache : false;
                           if (!bypassCache) return [3
                           /*break*/
-                          , 2];
+                          , 7];
                           return [4
                           /*yield*/
                           , this.Credentials.clear()];
 
-                        case 1:
+                        case 6:
                           _b.sent();
 
-                          _b.label = 2;
+                          _b.label = 7;
 
-                        case 2:
+                        case 7:
                           clientMetadata = this._config.clientMetadata;
                           _a = session.getAccessToken().decodePayload().scope, scope = _a === void 0 ? '' : _a;
 
                           if (scope.split(' ').includes(USER_ADMIN_SCOPE)) {
                             user.getUserData(function (err, data) {
-                              if (err) {
-                                logger.debug('getting user data failed', err); // Make sure the user is still valid
-
-                                if (err.message === 'User is disabled.' || err.message === 'User does not exist.' || err.message === 'Access Token has been revoked' // Session revoked by another app
-                                ) {
-                                  rej(err);
-                                } else {
-                                  // the error may also be thrown when lack of permissions to get user info etc
-                                  // in that case we just bypass the error
-                                  res(user);
-                                }
-
-                                return;
-                              }
-
-                              var preferredMFA = data.PreferredMfaSetting || 'NOMFA';
-                              var attributeList = [];
-
-                              for (var i = 0; i < data.UserAttributes.length; i++) {
-                                var attribute = {
-                                  Name: data.UserAttributes[i].Name,
-                                  Value: data.UserAttributes[i].Value
-                                };
-                                var userAttribute = new amazon_cognito_identity_js__WEBPACK_IMPORTED_MODULE_2__["CognitoUserAttribute"](attribute);
-                                attributeList.push(userAttribute);
-                              }
-
-                              var attributes = _this.attributesToObject(attributeList);
-
-                              Object.assign(user, {
-                                attributes: attributes,
-                                preferredMFA: preferredMFA
+                              return __awaiter(_this, void 0, void 0, function () {
+                                var cleanUpError_6, preferredMFA, attributeList, i, attribute, userAttribute, attributes;
+                                return __generator(this, function (_a) {
+                                  switch (_a.label) {
+                                    case 0:
+                                      if (!err) return [3
+                                      /*break*/
+                                      , 7];
+                                      logger.debug('getting user data failed', err);
+                                      if (!this.isSessionInvalid(err)) return [3
+                                      /*break*/
+                                      , 5];
+                                      _a.label = 1;
+
+                                    case 1:
+                                      _a.trys.push([1, 3,, 4]);
+
+                                      return [4
+                                      /*yield*/
+                                      , this.cleanUpInvalidSession(user)];
+
+                                    case 2:
+                                      _a.sent();
+
+                                      return [3
+                                      /*break*/
+                                      , 4];
+
+                                    case 3:
+                                      cleanUpError_6 = _a.sent();
+                                      rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_6.message));
+                                      return [2
+                                      /*return*/
+                                      ];
+
+                                    case 4:
+                                      rej(err);
+                                      return [3
+                                      /*break*/
+                                      , 6];
+
+                                    case 5:
+                                      res(user);
+                                      _a.label = 6;
+
+                                    case 6:
+                                      return [2
+                                      /*return*/
+                                      ];
+
+                                    case 7:
+                                      preferredMFA = data.PreferredMfaSetting || 'NOMFA';
+                                      attributeList = [];
+
+                                      for (i = 0; i < data.UserAttributes.length; i++) {
+                                        attribute = {
+                                          Name: data.UserAttributes[i].Name,
+                                          Value: data.UserAttributes[i].Value
+                                        };
+                                        userAttribute = new amazon_cognito_identity_js__WEBPACK_IMPORTED_MODULE_2__["CognitoUserAttribute"](attribute);
+                                        attributeList.push(userAttribute);
+                                      }
+
+                                      attributes = this.attributesToObject(attributeList);
+                                      Object.assign(user, {
+                                        attributes: attributes,
+                                        preferredMFA: preferredMFA
+                                      });
+                                      return [2
+                                      /*return*/
+                                      , res(user)];
+                                  }
+                                });
                               });
-                              return res(user);
                             }, {
                               bypassCache: bypassCache,
                               clientMetadata: clientMetadata
@@ -12429,7 +12593,7 @@ function () {
 
   AuthClass.prototype.currentAuthenticatedUser = function (params) {
     return __awaiter(this, void 0, void 0, function () {
-      var federatedUser, e_6, federatedInfo, user, e_7;
+      var federatedUser, e_7, federatedInfo, user, e_8;
       return __generator(this, function (_a) {
         switch (_a.label) {
           case 0:
@@ -12452,9 +12616,9 @@ function () {
             , 4];
 
           case 3:
-            e_6 = _a.sent();
-            logger.debug('Failed to sync cache info into memory', e_6);
-            throw e_6;
+            e_7 = _a.sent();
+            logger.debug('Failed to sync cache info into memory', e_7);
+            throw e_7;
 
           case 4:
             try {
@@ -12497,13 +12661,13 @@ function () {
             , 9];
 
           case 8:
-            e_7 = _a.sent();
+            e_8 = _a.sent();
 
-            if (e_7 === 'No userPool') {
+            if (e_8 === 'No userPool') {
               logger.error('Cannot get the current user because the user pool is missing. ' + 'Please make sure the Auth module is configured with a valid Cognito User Pool ID');
             }
 
-            logger.debug('The user is not authenticated by the error', e_7);
+            logger.debug('The user is not authenticated by the error', e_8);
             return [2
             /*return*/
             , Promise.reject('The user is not authenticated')];
@@ -12528,7 +12692,7 @@ function () {
     logger.debug('Getting current session'); // Purposely not calling the reject method here because we don't need a console error
 
     if (!this.userPool) {
-      return Promise.reject();
+      return this.rejectNoUserPool();
     }
 
     return new Promise(function (res, rej) {
@@ -12556,6 +12720,8 @@ function () {
 
 
   AuthClass.prototype.userSession = function (user) {
+    var _this = this;
+
     if (!user) {
       logger.debug('the user is null');
       return this.rejectAuthError(_types_Auth__WEBPACK_IMPORTED_MODULE_7__["AuthErrorTypes"].NoUserSession);
@@ -12563,18 +12729,59 @@ function () {
 
     var clientMetadata = this._config.clientMetadata; // TODO: verify behavior if this is override during signIn
 
-    return new Promise(function (resolve, reject) {
+    return new Promise(function (res, rej) {
       logger.debug('Getting the session from this user:', user);
       user.getSession(function (err, session) {
-        if (err) {
-          logger.debug('Failed to get the session from user', user);
-          reject(err);
-          return;
-        } else {
-          logger.debug('Succeed to get the user session', session);
-          resolve(session);
-          return;
-        }
+        return __awaiter(_this, void 0, void 0, function () {
+          var cleanUpError_7;
+          return __generator(this, function (_a) {
+            switch (_a.label) {
+              case 0:
+                if (!err) return [3
+                /*break*/
+                , 5];
+                logger.debug('Failed to get the session from user', user);
+                if (!this.isSessionInvalid(err)) return [3
+                /*break*/
+                , 4];
+                _a.label = 1;
+
+              case 1:
+                _a.trys.push([1, 3,, 4]);
+
+                return [4
+                /*yield*/
+                , this.cleanUpInvalidSession(user)];
+
+              case 2:
+                _a.sent();
+
+                return [3
+                /*break*/
+                , 4];
+
+              case 3:
+                cleanUpError_7 = _a.sent();
+                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_7.message));
+                return [2
+                /*return*/
+                ];
+
+              case 4:
+                rej(err);
+                return [2
+                /*return*/
+                ];
+
+              case 5:
+                logger.debug('Succeed to get the user session', session);
+                res(session);
+                return [2
+                /*return*/
+                ];
+            }
+          });
+        });
       }, {
         clientMetadata: clientMetadata
       });
@@ -12588,7 +12795,7 @@ function () {
 
   AuthClass.prototype.currentUserCredentials = function () {
     return __awaiter(this, void 0, void 0, function () {
-      var e_8, federatedInfo;
+      var e_9, federatedInfo;
 
       var _this = this;
 
@@ -12613,9 +12820,9 @@ function () {
             , 4];
 
           case 3:
-            e_8 = _a.sent();
-            logger.debug('Failed to sync cache info into memory', e_8);
-            throw e_8;
+            e_9 = _a.sent();
+            logger.debug('Failed to sync cache info into memory', e_9);
+            throw e_9;
 
           case 4:
             federatedInfo = null;
@@ -12637,8 +12844,8 @@ function () {
               , this.currentSession().then(function (session) {
                 logger.debug('getting session success', session);
                 return _this.Credentials.set(session, 'session');
-              })["catch"](function (error) {
-                logger.debug('getting session failed', error);
+              })["catch"](function () {
+                logger.debug('getting guest credentials');
                 return _this.Credentials.set(null, 'guest');
               })];
             }
@@ -12730,7 +12937,7 @@ function () {
 
   AuthClass.prototype.cognitoIdentitySignOut = function (opts, user) {
     return __awaiter(this, void 0, void 0, function () {
-      var e_9, isSignedInHostedUI;
+      var e_10, isSignedInHostedUI;
 
       var _this = this;
 
@@ -12751,9 +12958,9 @@ function () {
             , 3];
 
           case 2:
-            e_9 = _a.sent();
-            logger.debug('Failed to sync cache info into memory', e_9);
-            throw e_9;
+            e_10 = _a.sent();
+            logger.debug('Failed to sync cache info into memory', e_10);
+            throw e_10;
 
           case 3:
             isSignedInHostedUI = this._oAuthHandler && this._storage.getItem('amplify-signin-with-hostedUI') === 'true';
@@ -12767,25 +12974,70 @@ function () {
                 var clientMetadata = _this._config.clientMetadata; // TODO: verify behavior if this is override during signIn
 
                 user.getSession(function (err, result) {
-                  if (err) {
-                    logger.debug('failed to get the user session', err);
-                    return rej(err);
-                  }
+                  return __awaiter(_this, void 0, void 0, function () {
+                    var cleanUpError_8;
+
+                    var _this = this;
+
+                    return __generator(this, function (_a) {
+                      switch (_a.label) {
+                        case 0:
+                          if (!err) return [3
+                          /*break*/
+                          , 5];
+                          logger.debug('failed to get the user session', err);
+                          if (!this.isSessionInvalid(err)) return [3
+                          /*break*/
+                          , 4];
+                          _a.label = 1;
+
+                        case 1:
+                          _a.trys.push([1, 3,, 4]);
+
+                          return [4
+                          /*yield*/
+                          , this.cleanUpInvalidSession(user)];
+
+                        case 2:
+                          _a.sent();
+
+                          return [3
+                          /*break*/
+                          , 4];
+
+                        case 3:
+                          cleanUpError_8 = _a.sent();
+                          rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_8.message));
+                          return [2
+                          /*return*/
+                          ];
+
+                        case 4:
+                          return [2
+                          /*return*/
+                          , rej(err)];
 
-                  user.globalSignOut({
-                    onSuccess: function onSuccess(data) {
-                      logger.debug('global sign out success');
+                        case 5:
+                          user.globalSignOut({
+                            onSuccess: function onSuccess(data) {
+                              logger.debug('global sign out success');
 
-                      if (isSignedInHostedUI) {
-                        _this.oAuthSignOutRedirect(res, rej);
-                      } else {
-                        return res();
+                              if (isSignedInHostedUI) {
+                                _this.oAuthSignOutRedirect(res, rej);
+                              } else {
+                                return res();
+                              }
+                            },
+                            onFailure: function onFailure(err) {
+                              logger.debug('global sign out failed', err);
+                              return rej(err);
+                            }
+                          });
+                          return [2
+                          /*return*/
+                          ];
                       }
-                    },
-                    onFailure: function onFailure(err) {
-                      logger.debug('global sign out failed', err);
-                      return rej(err);
-                    }
+                    });
                   });
                 }, {
                   clientMetadata: clientMetadata
@@ -12828,7 +13080,7 @@ function () {
 
 
     setTimeout(function () {
-      return reject('Signout timeout fail');
+      return reject(Error('Signout timeout fail'));
     }, 3000);
   };
   /**
@@ -12840,7 +13092,7 @@ function () {
 
   AuthClass.prototype.signOut = function (opts) {
     return __awaiter(this, void 0, void 0, function () {
-      var e_10, user;
+      var e_11, user;
       return __generator(this, function (_a) {
         switch (_a.label) {
           case 0:
@@ -12858,7 +13110,7 @@ function () {
             , 3];
 
           case 2:
-            e_10 = _a.sent();
+            e_11 = _a.sent();
             logger.debug('failed to clear cached items');
             return [3
             /*break*/
@@ -12893,7 +13145,7 @@ function () {
             , 8];
 
           case 7:
-            logger.debug('no Congito User pool');
+            logger.debug('no Cognito User pool');
             _a.label = 8;
 
           case 8:
@@ -13059,7 +13311,7 @@ function () {
 
   AuthClass.prototype.currentUserInfo = function () {
     return __awaiter(this, void 0, void 0, function () {
-      var source, user, attributes, userAttrs, credentials, e_11, info, err_1, user;
+      var source, user, attributes, userAttrs, credentials, e_12, info, err_1, user;
       return __generator(this, function (_a) {
         switch (_a.label) {
           case 0:
@@ -13111,8 +13363,8 @@ function () {
             , 7];
 
           case 6:
-            e_11 = _a.sent();
-            logger.debug('Failed to retrieve credentials while getting current user info', e_11);
+            e_12 = _a.sent();
+            logger.debug('Failed to retrieve credentials while getting current user info', e_12);
             return [3
             /*break*/
             , 7];
@@ -14512,7 +14764,7 @@ var AuthErrorStrings;
 /*!**************************!*\
   !*** ./lib-esm/index.js ***!
   \**************************/
-/*! exports provided: default, Auth, CognitoUser, CookieStorage, CognitoHostedUIIdentityProvider, appendToCognitoUserAgent, AuthErrorStrings */
+/*! exports provided: default, Auth, CognitoUser, CookieStorage, CognitoHostedUIIdentityProvider, appendToCognitoUserAgent, AuthErrorStrings, GRAPHQL_AUTH_MODE */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -14523,6 +14775,8 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony import */ var _types_Auth__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/*! ./types/Auth */ "./lib-esm/types/Auth.js");
 /* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "CognitoHostedUIIdentityProvider", function() { return _types_Auth__WEBPACK_IMPORTED_MODULE_1__["CognitoHostedUIIdentityProvider"]; });
 
+/* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "GRAPHQL_AUTH_MODE", function() { return _types_Auth__WEBPACK_IMPORTED_MODULE_1__["GRAPHQL_AUTH_MODE"]; });
+
 /* harmony import */ var amazon_cognito_identity_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(/*! amazon-cognito-identity-js */ "../amazon-cognito-identity-js/es/index.js");
 /* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "CognitoUser", function() { return amazon_cognito_identity_js__WEBPACK_IMPORTED_MODULE_2__["CognitoUser"]; });
 
@@ -14562,7 +14816,7 @@ __webpack_require__.r(__webpack_exports__);
 /*!*******************************!*\
   !*** ./lib-esm/types/Auth.js ***!
   \*******************************/
-/*! exports provided: CognitoHostedUIIdentityProvider, isFederatedSignInOptions, isFederatedSignInOptionsCustom, hasCustomState, isCognitoHostedOpts, AuthErrorTypes, isUsernamePasswordOpts */
+/*! exports provided: CognitoHostedUIIdentityProvider, isFederatedSignInOptions, isFederatedSignInOptionsCustom, hasCustomState, isCognitoHostedOpts, AuthErrorTypes, isUsernamePasswordOpts, GRAPHQL_AUTH_MODE */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -14574,6 +14828,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "isCognitoHostedOpts", function() { return isCognitoHostedOpts; });
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "AuthErrorTypes", function() { return AuthErrorTypes; });
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "isUsernamePasswordOpts", function() { return isUsernamePasswordOpts; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "GRAPHQL_AUTH_MODE", function() { return GRAPHQL_AUTH_MODE; });
 /*
  * Copyright 2017-2017 Amazon.com, Inc. or its affiliates. All Rights Reserved.
  *
@@ -14639,6 +14894,15 @@ var AuthErrorTypes;
 function isUsernamePasswordOpts(obj) {
   return !!obj.username;
 }
+var GRAPHQL_AUTH_MODE;
+
+(function (GRAPHQL_AUTH_MODE) {
+  GRAPHQL_AUTH_MODE["API_KEY"] = "API_KEY";
+  GRAPHQL_AUTH_MODE["AWS_IAM"] = "AWS_IAM";
+  GRAPHQL_AUTH_MODE["OPENID_CONNECT"] = "OPENID_CONNECT";
+  GRAPHQL_AUTH_MODE["AMAZON_COGNITO_USER_POOLS"] = "AMAZON_COGNITO_USER_POOLS";
+  GRAPHQL_AUTH_MODE["AWS_LAMBDA"] = "AWS_LAMBDA";
+})(GRAPHQL_AUTH_MODE || (GRAPHQL_AUTH_MODE = {}));
 
 /***/ }),
 
@@ -14646,7 +14910,7 @@ function isUsernamePasswordOpts(obj) {
 /*!********************************!*\
   !*** ./lib-esm/types/index.js ***!
   \********************************/
-/*! exports provided: CognitoHostedUIIdentityProvider, isFederatedSignInOptions, isFederatedSignInOptionsCustom, hasCustomState, isCognitoHostedOpts, AuthErrorTypes, isUsernamePasswordOpts */
+/*! exports provided: CognitoHostedUIIdentityProvider, isFederatedSignInOptions, isFederatedSignInOptionsCustom, hasCustomState, isCognitoHostedOpts, AuthErrorTypes, isUsernamePasswordOpts, GRAPHQL_AUTH_MODE */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -14666,6 +14930,8 @@ __webpack_require__.r(__webpack_exports__);
 
 /* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "isUsernamePasswordOpts", function() { return _Auth__WEBPACK_IMPORTED_MODULE_0__["isUsernamePasswordOpts"]; });
 
+/* harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "GRAPHQL_AUTH_MODE", function() { return _Auth__WEBPACK_IMPORTED_MODULE_0__["GRAPHQL_AUTH_MODE"]; });
+
 /*
  * Copyright 2017-2017 Amazon.com, Inc. or its affiliates. All Rights Reserved.
  *