@aws-amplify/auth 5.6.4-user-agent-backup.c6dfb36.0 → 5.6.4

package/lib/internals/InternalAuth.js

@@ -1,2630 +0,0 @@
-"use strict";
-// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
-// SPDX-License-Identifier: Apache-2.0
-Object.defineProperty(exports, "__esModule", { value: true });
-var tslib_1 = require("tslib");
-var types_1 = require("../types");
-var core_1 = require("@aws-amplify/core");
-var amazon_cognito_identity_js_1 = require("amazon-cognito-identity-js");
-var internals_1 = require("amazon-cognito-identity-js/internals");
-var url_1 = require("url");
-var OAuth_1 = tslib_1.__importDefault(require("../OAuth/OAuth"));
-var urlListener_1 = tslib_1.__importDefault(require("../urlListener"));
-var Errors_1 = require("../Errors");
-var Auth_1 = require("../types/Auth");
-var utils_1 = require("../utils");
-var logger = new core_1.ConsoleLogger('AuthClass');
-var USER_ADMIN_SCOPE = 'aws.cognito.signin.user.admin';
-// 10 sec, following this guide https://www.nngroup.com/articles/response-times-3-important-limits/
-var OAUTH_FLOW_MS_TIMEOUT = 10 * 1000;
-var AMPLIFY_SYMBOL = (typeof Symbol !== 'undefined' && typeof Symbol.for === 'function'
-    ? Symbol.for('amplify_default')
-    : '@@amplify_default');
-var dispatchAuthEvent = function (event, data, message) {
-    core_1.Hub.dispatch('auth', { event: event, data: data, message: message }, 'Auth', AMPLIFY_SYMBOL);
-};
-// Cognito Documentation for max device
-// tslint:disable-next-line:max-line-length
-// https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListDevices.html#API_ListDevices_RequestSyntax
-var MAX_DEVICES = 60;
-var MAX_AUTOSIGNIN_POLLING_MS = 3 * 60 * 1000;
-/**
- * Provide authentication steps
- */
-var InternalAuthClass = /** @class */ (function () {
-    /**
-     * Initialize Auth with AWS configurations
-     * @param {Object} config - Configuration of the Auth
-     */
-    function InternalAuthClass(config) {
-        var _this = this;
-        this.userPool = null;
-        this.user = null;
-        this.oAuthFlowInProgress = false;
-        this.autoSignInInitiated = false;
-        this.inflightSessionPromise = null;
-        this.inflightSessionPromiseCounter = 0;
-        this.Credentials = core_1.Credentials;
-        this.wrapRefreshSessionCallback = function (callback) {
-            var wrapped = function (error, data) {
-                if (data) {
-                    dispatchAuthEvent('tokenRefresh', undefined, "New token retrieved");
-                }
-                else {
-                    dispatchAuthEvent('tokenRefresh_failure', error, "Failed to retrieve new token");
-                }
-                return callback(error, data);
-            };
-            return wrapped;
-        }; // prettier-ignore
-        this.configure(config);
-        this.currentCredentials = this.currentCredentials.bind(this);
-        this.currentUserCredentials = this.currentUserCredentials.bind(this);
-        core_1.Hub.listen('auth', function (_a) {
-            var payload = _a.payload;
-            var event = payload.event;
-            switch (event) {
-                case 'verify':
-                case 'signIn':
-                    _this._storage.setItem('amplify-signin-with-hostedUI', 'false');
-                    break;
-                case 'signOut':
-                    _this._storage.removeItem('amplify-signin-with-hostedUI');
-                    break;
-                case 'cognitoHostedUI':
-                    _this._storage.setItem('amplify-signin-with-hostedUI', 'true');
-                    break;
-            }
-        });
-        internals_1.addAuthCategoryToCognitoUserAgent();
-        internals_1.addFrameworkToCognitoUserAgent(core_1.Platform.framework);
-        core_1.Platform.observeFrameworkChanges(function () {
-            internals_1.addFrameworkToCognitoUserAgent(core_1.Platform.framework);
-        });
-    }
-    InternalAuthClass.prototype.getModuleName = function () {
-        return 'InternalAuth';
-    };
-    InternalAuthClass.prototype.configure = function (config) {
-        var _this = this;
-        if (!config)
-            return this._config || {};
-        logger.debug('configure Auth');
-        var conf = Object.assign({}, this._config, core_1.parseAWSExports(config).Auth, config);
-        this._config = conf;
-        var _a = this._config, userPoolId = _a.userPoolId, userPoolWebClientId = _a.userPoolWebClientId, cookieStorage = _a.cookieStorage, oauth = _a.oauth, region = _a.region, identityPoolId = _a.identityPoolId, mandatorySignIn = _a.mandatorySignIn, refreshHandlers = _a.refreshHandlers, identityPoolRegion = _a.identityPoolRegion, clientMetadata = _a.clientMetadata, endpoint = _a.endpoint, storage = _a.storage;
-        if (!storage) {
-            // backward compatability
-            if (cookieStorage)
-                this._storage = new amazon_cognito_identity_js_1.CookieStorage(cookieStorage);
-            else {
-                this._storage = config.ssr
-                    ? new core_1.UniversalStorage()
-                    : new core_1.StorageHelper().getStorage();
-            }
-        }
-        else {
-            if (!this._isValidAuthStorage(storage)) {
-                logger.error('The storage in the Auth config is not valid!');
-                throw new Error('Empty storage object');
-            }
-            this._storage = storage;
-        }
-        this._storageSync = Promise.resolve();
-        if (typeof this._storage['sync'] === 'function') {
-            this._storageSync = this._storage['sync']();
-        }
-        if (userPoolId) {
-            var userPoolData = {
-                UserPoolId: userPoolId,
-                ClientId: userPoolWebClientId,
-                endpoint: endpoint,
-            };
-            userPoolData.Storage = this._storage;
-            this.userPool = new internals_1.InternalCognitoUserPool(userPoolData, this.wrapRefreshSessionCallback);
-        }
-        this.Credentials.configure({
-            mandatorySignIn: mandatorySignIn,
-            region: region,
-            userPoolId: userPoolId,
-            identityPoolId: identityPoolId,
-            refreshHandlers: refreshHandlers,
-            storage: this._storage,
-            identityPoolRegion: identityPoolRegion,
-        });
-        // initialize cognitoauth client if hosted ui options provided
-        // to keep backward compatibility:
-        var cognitoHostedUIConfig = oauth
-            ? types_1.isCognitoHostedOpts(this._config.oauth)
-                ? oauth
-                : oauth.awsCognito
-            : undefined;
-        if (cognitoHostedUIConfig) {
-            var cognitoAuthParams = Object.assign({
-                cognitoClientId: userPoolWebClientId,
-                UserPoolId: userPoolId,
-                domain: cognitoHostedUIConfig['domain'],
-                scopes: cognitoHostedUIConfig['scope'],
-                redirectSignIn: cognitoHostedUIConfig['redirectSignIn'],
-                redirectSignOut: cognitoHostedUIConfig['redirectSignOut'],
-                responseType: cognitoHostedUIConfig['responseType'],
-                Storage: this._storage,
-                urlOpener: cognitoHostedUIConfig['urlOpener'],
-                clientMetadata: clientMetadata,
-            }, cognitoHostedUIConfig['options']);
-            this._oAuthHandler = new OAuth_1.default({
-                scopes: cognitoAuthParams.scopes,
-                config: cognitoAuthParams,
-                cognitoClientId: cognitoAuthParams.cognitoClientId,
-            });
-            // **NOTE** - Remove this in a future major release as it is a breaking change
-            // Prevents _handleAuthResponse from being called multiple times in Expo
-            // See https://github.com/aws-amplify/amplify-js/issues/4388
-            var usedResponseUrls_1 = {};
-            // Only register urlListener once
-            if (this.getModuleName() === 'Auth') {
-                urlListener_1.default(function (_a) {
-                    var url = _a.url;
-                    if (usedResponseUrls_1[url]) {
-                        return;
-                    }
-                    usedResponseUrls_1[url] = true;
-                    _this._handleAuthResponse(url);
-                });
-            }
-        }
-        dispatchAuthEvent('configured', null, "The Auth category has been configured successfully");
-        if (!this.autoSignInInitiated &&
-            typeof this._storage['getItem'] === 'function') {
-            var pollingInitiated = this.isTrueStorageValue('amplify-polling-started');
-            if (pollingInitiated) {
-                dispatchAuthEvent('autoSignIn_failure', null, Auth_1.AuthErrorTypes.AutoSignInError);
-                this._storage.removeItem('amplify-auto-sign-in');
-            }
-            this._storage.removeItem('amplify-polling-started');
-        }
-        return this._config;
-    };
-    InternalAuthClass.prototype.signUp = function (params, restOfAttrs, customUserAgentDetails) {
-        var _this = this;
-        var _a, _b, _c;
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        var username = null;
-        var password = null;
-        var attributes = [];
-        var validationData = null;
-        var clientMetadata;
-        var autoSignIn = { enabled: false };
-        var autoSignInValidationData = {};
-        var autoSignInClientMetaData = {};
-        if (params && typeof params === 'string') {
-            username = params;
-            password = restOfAttrs ? restOfAttrs[0] : null;
-            var email = restOfAttrs ? restOfAttrs[1] : null;
-            var phone_number = restOfAttrs ? restOfAttrs[2] : null;
-            if (email)
-                attributes.push(new amazon_cognito_identity_js_1.CognitoUserAttribute({ Name: 'email', Value: email }));
-            if (phone_number)
-                attributes.push(new amazon_cognito_identity_js_1.CognitoUserAttribute({
-                    Name: 'phone_number',
-                    Value: phone_number,
-                }));
-        }
-        else if (params && typeof params === 'object') {
-            username = params['username'];
-            password = params['password'];
-            if (params && params.clientMetadata) {
-                clientMetadata = params.clientMetadata;
-            }
-            else if (this._config.clientMetadata) {
-                clientMetadata = this._config.clientMetadata;
-            }
-            var attrs_1 = params['attributes'];
-            if (attrs_1) {
-                Object.keys(attrs_1).map(function (key) {
-                    attributes.push(new amazon_cognito_identity_js_1.CognitoUserAttribute({ Name: key, Value: attrs_1[key] }));
-                });
-            }
-            var validationDataObject_1 = params['validationData'];
-            if (validationDataObject_1) {
-                validationData = [];
-                Object.keys(validationDataObject_1).map(function (key) {
-                    validationData.push(new amazon_cognito_identity_js_1.CognitoUserAttribute({
-                        Name: key,
-                        Value: validationDataObject_1[key],
-                    }));
-                });
-            }
-            autoSignIn = (_a = params.autoSignIn) !== null && _a !== void 0 ? _a : { enabled: false };
-            if (autoSignIn.enabled) {
-                this._storage.setItem('amplify-auto-sign-in', 'true');
-                autoSignInValidationData = (_b = autoSignIn.validationData) !== null && _b !== void 0 ? _b : {};
-                autoSignInClientMetaData = (_c = autoSignIn.clientMetaData) !== null && _c !== void 0 ? _c : {};
-            }
-        }
-        else {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.SignUpError);
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        if (!password) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyPassword);
-        }
-        logger.debug('signUp attrs:', attributes);
-        logger.debug('signUp validation data:', validationData);
-        return new Promise(function (resolve, reject) {
-            var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.SignUp, customUserAgentDetails);
-            _this.userPool.signUp(username, password, attributes, validationData, function (err, data) {
-                if (err) {
-                    dispatchAuthEvent('signUp_failure', err, username + " failed to signup");
-                    reject(err);
-                }
-                else {
-                    dispatchAuthEvent('signUp', data, username + " has signed up successfully");
-                    if (autoSignIn.enabled) {
-                        _this.handleAutoSignIn(username, password, autoSignInValidationData, autoSignInClientMetaData, data, userAgentDetails);
-                    }
-                    resolve(data);
-                }
-            }, clientMetadata, core_1.getAmplifyUserAgent(userAgentDetails));
-        });
-    };
-    InternalAuthClass.prototype.handleAutoSignIn = function (username, password, validationData, clientMetadata, data, customUserAgentDetails) {
-        this.autoSignInInitiated = true;
-        var authDetails = new amazon_cognito_identity_js_1.AuthenticationDetails({
-            Username: username,
-            Password: password,
-            ValidationData: validationData,
-            ClientMetadata: clientMetadata,
-        });
-        if (data.userConfirmed) {
-            this.signInAfterUserConfirmed(authDetails, customUserAgentDetails);
-        }
-        else if (this._config.signUpVerificationMethod === 'link') {
-            this.handleLinkAutoSignIn(authDetails, customUserAgentDetails);
-        }
-        else {
-            this.handleCodeAutoSignIn(authDetails, customUserAgentDetails);
-        }
-    };
-    InternalAuthClass.prototype.handleCodeAutoSignIn = function (authDetails, customUserAgentDetails) {
-        var _this = this;
-        var listenEvent = function (_a) {
-            var payload = _a.payload;
-            if (payload.event === 'confirmSignUp') {
-                _this.signInAfterUserConfirmed(authDetails, customUserAgentDetails, listenEvent);
-            }
-        };
-        core_1.Hub.listen('auth', listenEvent);
-    };
-    InternalAuthClass.prototype.handleLinkAutoSignIn = function (authDetails, customUserAgentDetails) {
-        var _this = this;
-        this._storage.setItem('amplify-polling-started', 'true');
-        var start = Date.now();
-        var autoSignInPollingIntervalId = setInterval(function () {
-            if (Date.now() - start > MAX_AUTOSIGNIN_POLLING_MS) {
-                clearInterval(autoSignInPollingIntervalId);
-                dispatchAuthEvent('autoSignIn_failure', null, 'Please confirm your account and use your credentials to sign in.');
-                _this._storage.removeItem('amplify-auto-sign-in');
-            }
-            else {
-                _this.signInAfterUserConfirmed(authDetails, customUserAgentDetails, undefined, autoSignInPollingIntervalId);
-            }
-        }, 5000);
-    };
-    InternalAuthClass.prototype.signInAfterUserConfirmed = function (authDetails, customUserAgentDetails, listenEvent, autoSignInPollingIntervalId) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var user, error_1;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        user = this.createCognitoUser(authDetails.getUsername());
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, user.authenticateUser(authDetails, this.authCallbacks(user, function (value) {
-                                dispatchAuthEvent('autoSignIn', value, authDetails.getUsername() + " has signed in successfully");
-                                if (listenEvent) {
-                                    core_1.Hub.remove('auth', listenEvent);
-                                }
-                                if (autoSignInPollingIntervalId) {
-                                    clearInterval(autoSignInPollingIntervalId);
-                                    _this._storage.removeItem('amplify-polling-started');
-                                }
-                                _this._storage.removeItem('amplify-auto-sign-in');
-                            }, function (error) {
-                                logger.error(error);
-                                _this._storage.removeItem('amplify-auto-sign-in');
-                            }, customUserAgentDetails), core_1.getAmplifyUserAgent(customUserAgentDetails))];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_1 = _a.sent();
-                        logger.error(error_1);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Send the verification code to confirm sign up
-     * @param {String} username - The username to be confirmed
-     * @param {String} code - The verification code
-     * @param {ConfirmSignUpOptions} options - other options for confirm signup
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves callback data if success
-     */
-    InternalAuthClass.prototype.confirmSignUp = function (username, code, options, customUserAgentDetails) {
-        var _this = this;
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        if (!code) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyCode);
-        }
-        var user = this.createCognitoUser(username);
-        var forceAliasCreation = options && typeof options.forceAliasCreation === 'boolean'
-            ? options.forceAliasCreation
-            : true;
-        var clientMetadata;
-        if (options && options.clientMetadata) {
-            clientMetadata = options.clientMetadata;
-        }
-        else if (this._config.clientMetadata) {
-            clientMetadata = this._config.clientMetadata;
-        }
-        return new Promise(function (resolve, reject) {
-            user.confirmRegistration(code, forceAliasCreation, function (err, data) {
-                if (err) {
-                    reject(err);
-                }
-                else {
-                    dispatchAuthEvent('confirmSignUp', data, username + " has been confirmed successfully");
-                    var autoSignIn = _this.isTrueStorageValue('amplify-auto-sign-in');
-                    if (autoSignIn && !_this.autoSignInInitiated) {
-                        dispatchAuthEvent('autoSignIn_failure', null, Auth_1.AuthErrorTypes.AutoSignInError);
-                        _this._storage.removeItem('amplify-auto-sign-in');
-                    }
-                    resolve(data);
-                }
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.ConfirmSignUp, customUserAgentDetails));
-        });
-    };
-    InternalAuthClass.prototype.isTrueStorageValue = function (value) {
-        var item = this._storage.getItem(value);
-        return item ? item === 'true' : false;
-    };
-    /**
-     * Resend the verification code
-     * @param {String} username - The username to be confirmed
-     * @param {ClientMetadata} clientMetadata - Metadata to be passed to Cognito Lambda triggers
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves code delivery details if successful
-     */
-    InternalAuthClass.prototype.resendSignUp = function (username, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        var user = this.createCognitoUser(username);
-        return new Promise(function (resolve, reject) {
-            user.resendConfirmationCode(function (err, data) {
-                if (err) {
-                    reject(err);
-                }
-                else {
-                    resolve(data);
-                }
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.ResendSignUp, customUserAgentDetails));
-        });
-    };
-    /**
-     * Sign in
-     * @param {String | SignInOpts} usernameOrSignInOpts - The username to be signed in or the sign in options
-     * @param {String} pw - The password of the username
-     * @param {ClientMetaData} clientMetadata - Client metadata for custom workflows
-     * @return - A promise resolves the CognitoUser
-     */
-    InternalAuthClass.prototype.signIn = function (usernameOrSignInOpts, pw, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        var username = null;
-        var password = null;
-        var validationData = {};
-        // for backward compatibility
-        if (typeof usernameOrSignInOpts === 'string') {
-            username = usernameOrSignInOpts;
-            password = pw;
-        }
-        else if (types_1.isUsernamePasswordOpts(usernameOrSignInOpts)) {
-            if (typeof pw !== 'undefined') {
-                logger.warn('The password should be defined under the first parameter object!');
-            }
-            username = usernameOrSignInOpts.username;
-            password = usernameOrSignInOpts.password;
-            validationData = usernameOrSignInOpts.validationData;
-        }
-        else {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.InvalidUsername);
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        var authDetails = new amazon_cognito_identity_js_1.AuthenticationDetails({
-            Username: username,
-            Password: password,
-            ValidationData: validationData,
-            ClientMetadata: clientMetadata,
-        });
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.SignIn, customUserAgentDetails);
-        if (password) {
-            return this.signInWithPassword(authDetails, userAgentDetails);
-        }
-        else {
-            return this.signInWithoutPassword(authDetails, userAgentDetails);
-        }
-    };
-    /**
-     * Return an object with the authentication callbacks
-     * @param {InternalCognitoUser} user - the cognito user object
-     * @param {} resolve - function called when resolving the current step
-     * @param {} reject - function called when rejecting the current step
-     * @return - an object with the callback methods for user authentication
-     */
-    InternalAuthClass.prototype.authCallbacks = function (user, resolve, reject, customUserAgentDetails) {
-        var _this = this;
-        var that = this;
-        return {
-            onSuccess: function (session) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                var cred, e_1, currentUser, e_2;
-                return tslib_1.__generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            logger.debug(session);
-                            delete user['challengeName'];
-                            delete user['challengeParam'];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 4, 5, 9]);
-                            return [4 /*yield*/, this.Credentials.clear()];
-                        case 2:
-                            _a.sent();
-                            return [4 /*yield*/, this.Credentials.set(session, 'session')];
-                        case 3:
-                            cred = _a.sent();
-                            logger.debug('succeed to get cognito credentials', cred);
-                            return [3 /*break*/, 9];
-                        case 4:
-                            e_1 = _a.sent();
-                            logger.debug('cannot get cognito credentials', e_1);
-                            return [3 /*break*/, 9];
-                        case 5:
-                            _a.trys.push([5, 7, , 8]);
-                            return [4 /*yield*/, this._currentUserPoolUser(undefined, customUserAgentDetails)];
-                        case 6:
-                            currentUser = _a.sent();
-                            that.user = currentUser;
-                            dispatchAuthEvent('signIn', currentUser, "A user " + user.getUsername() + " has been signed in");
-                            resolve(currentUser);
-                            return [3 /*break*/, 8];
-                        case 7:
-                            e_2 = _a.sent();
-                            logger.error('Failed to get the signed in user', e_2);
-                            reject(e_2);
-                            return [3 /*break*/, 8];
-                        case 8: return [7 /*endfinally*/];
-                        case 9: return [2 /*return*/];
-                    }
-                });
-            }); },
-            onFailure: function (err) {
-                logger.debug('signIn failure', err);
-                dispatchAuthEvent('signIn_failure', err, user.getUsername() + " failed to signin");
-                reject(err);
-            },
-            customChallenge: function (challengeParam) {
-                logger.debug('signIn custom challenge answer required');
-                user['challengeName'] = 'CUSTOM_CHALLENGE';
-                user['challengeParam'] = challengeParam;
-                resolve(user);
-            },
-            mfaRequired: function (challengeName, challengeParam) {
-                logger.debug('signIn MFA required');
-                user['challengeName'] = challengeName;
-                user['challengeParam'] = challengeParam;
-                resolve(user);
-            },
-            mfaSetup: function (challengeName, challengeParam) {
-                logger.debug('signIn mfa setup', challengeName);
-                user['challengeName'] = challengeName;
-                user['challengeParam'] = challengeParam;
-                resolve(user);
-            },
-            newPasswordRequired: function (userAttributes, requiredAttributes) {
-                logger.debug('signIn new password');
-                user['challengeName'] = 'NEW_PASSWORD_REQUIRED';
-                user['challengeParam'] = {
-                    userAttributes: userAttributes,
-                    requiredAttributes: requiredAttributes,
-                };
-                resolve(user);
-            },
-            totpRequired: function (challengeName, challengeParam) {
-                logger.debug('signIn totpRequired');
-                user['challengeName'] = challengeName;
-                user['challengeParam'] = challengeParam;
-                resolve(user);
-            },
-            selectMFAType: function (challengeName, challengeParam) {
-                logger.debug('signIn selectMFAType', challengeName);
-                user['challengeName'] = challengeName;
-                user['challengeParam'] = challengeParam;
-                resolve(user);
-            },
-        };
-    };
-    /**
-     * Sign in with a password
-     * @private
-     * @param {AuthenticationDetails} authDetails - the user sign in data
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves the CognitoUser object if success or mfa required
-     */
-    InternalAuthClass.prototype.signInWithPassword = function (authDetails, customUserAgentDetails) {
-        var _this = this;
-        if (this.pendingSignIn) {
-            throw new Error('Pending sign-in attempt already in progress');
-        }
-        var user = this.createCognitoUser(authDetails.getUsername());
-        this.pendingSignIn = new Promise(function (resolve, reject) {
-            user.authenticateUser(authDetails, _this.authCallbacks(user, function (value) {
-                _this.pendingSignIn = null;
-                resolve(value);
-            }, function (error) {
-                _this.pendingSignIn = null;
-                reject(error);
-            }, customUserAgentDetails), core_1.getAmplifyUserAgent(customUserAgentDetails));
-        });
-        return this.pendingSignIn;
-    };
-    /**
-     * Sign in without a password
-     * @private
-     * @param {AuthenticationDetails} authDetails - the user sign in data
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves the InternalCognitoUser object if success or mfa required
-     */
-    InternalAuthClass.prototype.signInWithoutPassword = function (authDetails, customUserAgentDetails) {
-        var _this = this;
-        var user = this.createCognitoUser(authDetails.getUsername());
-        user.setAuthenticationFlowType('CUSTOM_AUTH');
-        return new Promise(function (resolve, reject) {
-            user.initiateAuth(authDetails, _this.authCallbacks(user, resolve, reject, customUserAgentDetails), core_1.getAmplifyUserAgent(customUserAgentDetails));
-        });
-    };
-    /**
-     * This was previously used by an authenticated user to get MFAOptions,
-     * but no longer returns a meaningful response. Refer to the documentation for
-     * how to setup and use MFA: https://docs.amplify.aws/lib/auth/mfa/q/platform/js
-     * @deprecated
-     * @param {CognitoUser} user - the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves the current preferred mfa option if success
-     */
-    InternalAuthClass.prototype.getMFAOptions = function (user, customUserAgentDetails) {
-        var internalUser = user;
-        return new Promise(function (res, rej) {
-            internalUser.getMFAOptions(function (err, mfaOptions) {
-                if (err) {
-                    logger.debug('get MFA Options failed', err);
-                    rej(err);
-                    return;
-                }
-                logger.debug('get MFA options success', mfaOptions);
-                res(mfaOptions);
-                return;
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.GetMFAOptions, customUserAgentDetails));
-        });
-    };
-    /**
-     * get preferred mfa method
-     * @param {CognitoUser} user - the current cognito user
-     * @param {GetPreferredMFAOpts} params - options for getting the current user preferred MFA
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     */
-    InternalAuthClass.prototype.getPreferredMFA = function (user, params, customUserAgentDetails) {
-        var _this = this;
-        var internalUser = user;
-        var that = this;
-        return new Promise(function (res, rej) {
-            var clientMetadata = _this._config.clientMetadata; // TODO: verify behavior if this is override during signIn
-            var bypassCache = params ? params.bypassCache : false;
-            var userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.GetPreferredMFA, customUserAgentDetails);
-            internalUser.getUserData(function (err, data) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                var cleanUpError_1, mfaType;
-                return tslib_1.__generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            if (!err) return [3 /*break*/, 5];
-                            logger.debug('getting preferred mfa failed', err);
-                            if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.cleanUpInvalidSession(user, userAgentValue)];
-                        case 2:
-                            _a.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            cleanUpError_1 = _a.sent();
-                            rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_1.message));
-                            return [2 /*return*/];
-                        case 4:
-                            rej(err);
-                            return [2 /*return*/];
-                        case 5:
-                            mfaType = that._getMfaTypeFromUserData(data);
-                            if (!mfaType) {
-                                rej('invalid MFA Type');
-                                return [2 /*return*/];
-                            }
-                            else {
-                                res(mfaType);
-                                return [2 /*return*/];
-                            }
-                            return [2 /*return*/];
-                    }
-                });
-            }); }, { bypassCache: bypassCache, clientMetadata: clientMetadata }, userAgentValue);
-        });
-    };
-    InternalAuthClass.prototype._getMfaTypeFromUserData = function (data) {
-        var ret = null;
-        var preferredMFA = data.PreferredMfaSetting;
-        // if the user has used Auth.setPreferredMFA() to setup the mfa type
-        // then the "PreferredMfaSetting" would exist in the response
-        if (preferredMFA) {
-            ret = preferredMFA;
-        }
-        else {
-            // if mfaList exists but empty, then its noMFA
-            var mfaList = data.UserMFASettingList;
-            if (!mfaList) {
-                // if SMS was enabled by using Auth.enableSMS(),
-                // the response would contain MFAOptions
-                // as for now Cognito only supports for SMS, so we will say it is 'SMS_MFA'
-                // if it does not exist, then it should be NOMFA
-                var MFAOptions = data.MFAOptions;
-                if (MFAOptions) {
-                    ret = 'SMS_MFA';
-                }
-                else {
-                    ret = 'NOMFA';
-                }
-            }
-            else if (mfaList.length === 0) {
-                ret = 'NOMFA';
-            }
-            else {
-                logger.debug('invalid case for getPreferredMFA', data);
-            }
-        }
-        return ret;
-    };
-    InternalAuthClass.prototype._getUserData = function (user, params, userAgentValue) {
-        var _this = this;
-        return new Promise(function (res, rej) {
-            user.getUserData(function (err, data) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                var cleanUpError_2;
-                return tslib_1.__generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            if (!err) return [3 /*break*/, 5];
-                            logger.debug('getting user data failed', err);
-                            if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.cleanUpInvalidSession(user, userAgentValue)];
-                        case 2:
-                            _a.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            cleanUpError_2 = _a.sent();
-                            rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_2.message));
-                            return [2 /*return*/];
-                        case 4:
-                            rej(err);
-                            return [2 /*return*/];
-                        case 5:
-                            res(data);
-                            _a.label = 6;
-                        case 6: return [2 /*return*/];
-                    }
-                });
-            }); }, params, userAgentValue);
-        });
-    };
-    /**
-     * set preferred MFA method
-     * @param {CognitoUser} user - the current Cognito user
-     * @param {string} mfaMethod - preferred mfa method
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolve if success
-     */
-    InternalAuthClass.prototype.setPreferredMFA = function (user, mfaMethod, customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var internalUser, userAgentValue, clientMetadata, userData, smsMfaSettings, totpMfaSettings, _a, mfaList, currentMFAType, that;
-            var _this = this;
-            return tslib_1.__generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        internalUser = user;
-                        userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.SetPreferredMFA, customUserAgentDetails);
-                        clientMetadata = this._config.clientMetadata;
-                        return [4 /*yield*/, this._getUserData(user, {
-                                bypassCache: true,
-                                clientMetadata: clientMetadata,
-                            }, userAgentValue)];
-                    case 1:
-                        userData = _b.sent();
-                        smsMfaSettings = null;
-                        totpMfaSettings = null;
-                        _a = mfaMethod;
-                        switch (_a) {
-                            case 'TOTP': return [3 /*break*/, 2];
-                            case 'SOFTWARE_TOKEN_MFA': return [3 /*break*/, 2];
-                            case 'SMS': return [3 /*break*/, 3];
-                            case 'SMS_MFA': return [3 /*break*/, 3];
-                            case 'NOMFA': return [3 /*break*/, 4];
-                        }
-                        return [3 /*break*/, 6];
-                    case 2:
-                        totpMfaSettings = {
-                            PreferredMfa: true,
-                            Enabled: true,
-                        };
-                        return [3 /*break*/, 7];
-                    case 3:
-                        smsMfaSettings = {
-                            PreferredMfa: true,
-                            Enabled: true,
-                        };
-                        return [3 /*break*/, 7];
-                    case 4:
-                        mfaList = userData['UserMFASettingList'];
-                        return [4 /*yield*/, this._getMfaTypeFromUserData(userData)];
-                    case 5:
-                        currentMFAType = _b.sent();
-                        if (currentMFAType === 'NOMFA') {
-                            return [2 /*return*/, Promise.resolve('No change for mfa type')];
-                        }
-                        else if (currentMFAType === 'SMS_MFA') {
-                            smsMfaSettings = {
-                                PreferredMfa: false,
-                                Enabled: false,
-                            };
-                        }
-                        else if (currentMFAType === 'SOFTWARE_TOKEN_MFA') {
-                            totpMfaSettings = {
-                                PreferredMfa: false,
-                                Enabled: false,
-                            };
-                        }
-                        else {
-                            return [2 /*return*/, this.rejectAuthError(Auth_1.AuthErrorTypes.InvalidMFA)];
-                        }
-                        // if there is a UserMFASettingList in the response
-                        // we need to disable every mfa type in that list
-                        if (mfaList && mfaList.length !== 0) {
-                            // to disable SMS or TOTP if exists in that list
-                            mfaList.forEach(function (mfaType) {
-                                if (mfaType === 'SMS_MFA') {
-                                    smsMfaSettings = {
-                                        PreferredMfa: false,
-                                        Enabled: false,
-                                    };
-                                }
-                                else if (mfaType === 'SOFTWARE_TOKEN_MFA') {
-                                    totpMfaSettings = {
-                                        PreferredMfa: false,
-                                        Enabled: false,
-                                    };
-                                }
-                            });
-                        }
-                        return [3 /*break*/, 7];
-                    case 6:
-                        logger.debug('no validmfa method provided');
-                        return [2 /*return*/, this.rejectAuthError(Auth_1.AuthErrorTypes.NoMFA)];
-                    case 7:
-                        that = this;
-                        return [2 /*return*/, new Promise(function (res, rej) {
-                                internalUser.setUserMfaPreference(smsMfaSettings, totpMfaSettings, function (err, result) {
-                                    if (err) {
-                                        logger.debug('Set user mfa preference error', err);
-                                        return rej(err);
-                                    }
-                                    logger.debug('Set user mfa success', result);
-                                    logger.debug('Caching the latest user data into local');
-                                    // cache the latest result into user data
-                                    internalUser.getUserData(function (err, data) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                        var cleanUpError_3;
-                                        return tslib_1.__generator(this, function (_a) {
-                                            switch (_a.label) {
-                                                case 0:
-                                                    if (!err) return [3 /*break*/, 5];
-                                                    logger.debug('getting user data failed', err);
-                                                    if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                                                    _a.label = 1;
-                                                case 1:
-                                                    _a.trys.push([1, 3, , 4]);
-                                                    return [4 /*yield*/, this.cleanUpInvalidSession(user, userAgentValue)];
-                                                case 2:
-                                                    _a.sent();
-                                                    return [3 /*break*/, 4];
-                                                case 3:
-                                                    cleanUpError_3 = _a.sent();
-                                                    rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_3.message));
-                                                    return [2 /*return*/];
-                                                case 4: return [2 /*return*/, rej(err)];
-                                                case 5: return [2 /*return*/, res(result)];
-                                            }
-                                        });
-                                    }); }, {
-                                        bypassCache: true,
-                                        clientMetadata: clientMetadata,
-                                    }, userAgentValue);
-                                }, userAgentValue);
-                            })];
-                }
-            });
-        });
-    };
-    /**
-     * disable SMS
-     * @deprecated
-     * @param {CognitoUser} user - the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves is success
-     */
-    InternalAuthClass.prototype.disableSMS = function (user, customUserAgentDetails) {
-        var internalUser = user;
-        return new Promise(function (res, rej) {
-            internalUser.disableMFA(function (err, data) {
-                if (err) {
-                    logger.debug('disable mfa failed', err);
-                    rej(err);
-                    return;
-                }
-                logger.debug('disable mfa succeed', data);
-                res(data);
-                return;
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.DisableSMS, customUserAgentDetails));
-        });
-    };
-    /**
-     * enable SMS
-     * @deprecated
-     * @param {CognitoUser} user - the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves is success
-     */
-    InternalAuthClass.prototype.enableSMS = function (user, customUserAgentDetails) {
-        var internalUser = user;
-        return new Promise(function (res, rej) {
-            internalUser.enableMFA(function (err, data) {
-                if (err) {
-                    logger.debug('enable mfa failed', err);
-                    rej(err);
-                    return;
-                }
-                logger.debug('enable mfa succeed', data);
-                res(data);
-                return;
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.EnableSMS, customUserAgentDetails));
-        });
-    };
-    /**
-     * Setup TOTP
-     * @param {CognitoUser} user - the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves with the secret code if success
-     */
-    InternalAuthClass.prototype.setupTOTP = function (user, customUserAgentDetails) {
-        var internalUser = user;
-        return new Promise(function (res, rej) {
-            internalUser.associateSoftwareToken({
-                onFailure: function (err) {
-                    logger.debug('associateSoftwareToken failed', err);
-                    rej(err);
-                    return;
-                },
-                associateSecretCode: function (secretCode) {
-                    logger.debug('associateSoftwareToken success', secretCode);
-                    res(secretCode);
-                    return;
-                },
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.SetupTOTP, customUserAgentDetails));
-        });
-    };
-    /**
-     * verify TOTP setup
-     * @param {CognitoUser} user - the current user
-     * @param {string} challengeAnswer - challenge answer
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves is success
-     */
-    InternalAuthClass.prototype.verifyTotpToken = function (user, challengeAnswer, customUserAgentDetails) {
-        logger.debug('verification totp token', user, challengeAnswer);
-        var internalUser = user;
-        var signInUserSession;
-        if (internalUser &&
-            typeof internalUser.getSignInUserSession === 'function') {
-            signInUserSession = user.getSignInUserSession();
-        }
-        var isLoggedIn = signInUserSession === null || signInUserSession === void 0 ? void 0 : signInUserSession.isValid();
-        return new Promise(function (res, rej) {
-            internalUser.verifySoftwareToken(challengeAnswer, 'My TOTP device', {
-                onFailure: function (err) {
-                    logger.debug('verifyTotpToken failed', err);
-                    rej(err);
-                    return;
-                },
-                onSuccess: function (data) {
-                    if (!isLoggedIn) {
-                        dispatchAuthEvent('signIn', internalUser, "A user " + internalUser.getUsername() + " has been signed in");
-                    }
-                    dispatchAuthEvent('verify', internalUser, "A user " + internalUser.getUsername() + " has been verified");
-                    logger.debug('verifyTotpToken success', data);
-                    res(data);
-                    return;
-                },
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.VerifyTotpToken, customUserAgentDetails));
-        });
-    };
-    /**
-     * Send MFA code to confirm sign in
-     * @param {Object} user - The CognitoUser object
-     * @param {String} code - The confirmation code
-     * @param {string} mfaType - optional mfaType: 'SMS_MFA' | 'SOFTWARE_TOKEN_MFA'
-     * @param {ClientMetaData} clientMetadata - optional client metadata defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     */
-    InternalAuthClass.prototype.confirmSignIn = function (user, code, mfaType, clientMetadata, customUserAgentDetails) {
-        var _this = this;
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        if (!code) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyCode);
-        }
-        var that = this;
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.ConfirmSignIn, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            internalUser.sendMFACode(code, {
-                onSuccess: function (session) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                    var cred, e_3, currentUser, e_4;
-                    return tslib_1.__generator(this, function (_a) {
-                        switch (_a.label) {
-                            case 0:
-                                logger.debug(session);
-                                _a.label = 1;
-                            case 1:
-                                _a.trys.push([1, 4, 5, 10]);
-                                return [4 /*yield*/, this.Credentials.clear()];
-                            case 2:
-                                _a.sent();
-                                return [4 /*yield*/, this.Credentials.set(session, 'session')];
-                            case 3:
-                                cred = _a.sent();
-                                logger.debug('succeed to get cognito credentials', cred);
-                                return [3 /*break*/, 10];
-                            case 4:
-                                e_3 = _a.sent();
-                                logger.debug('cannot get cognito credentials', e_3);
-                                return [3 /*break*/, 10];
-                            case 5:
-                                that.user = internalUser;
-                                _a.label = 6;
-                            case 6:
-                                _a.trys.push([6, 8, , 9]);
-                                return [4 /*yield*/, this._currentUserPoolUser(undefined, userAgentDetails)];
-                            case 7:
-                                currentUser = _a.sent();
-                                Object.assign(internalUser, {
-                                    attributes: currentUser.attributes,
-                                });
-                                return [3 /*break*/, 9];
-                            case 8:
-                                e_4 = _a.sent();
-                                logger.debug('cannot get updated Cognito User', e_4);
-                                return [3 /*break*/, 9];
-                            case 9:
-                                dispatchAuthEvent('signIn', internalUser, "A user " + internalUser.getUsername() + " has been signed in");
-                                resolve(internalUser);
-                                return [7 /*endfinally*/];
-                            case 10: return [2 /*return*/];
-                        }
-                    });
-                }); },
-                onFailure: function (err) {
-                    logger.debug('confirm signIn failure', err);
-                    reject(err);
-                },
-            }, mfaType, clientMetadata, core_1.getAmplifyUserAgent(userAgentDetails));
-        });
-    };
-    InternalAuthClass.prototype.completeNewPassword = function (user, password, requiredAttributes, clientMetadata, customUserAgentDetails) {
-        var _this = this;
-        if (requiredAttributes === void 0) { requiredAttributes = {}; }
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        if (!password) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyPassword);
-        }
-        var that = this;
-        return new Promise(function (resolve, reject) {
-            internalUser.completeNewPasswordChallenge(password, requiredAttributes, {
-                onSuccess: function (session) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                    var cred, e_5;
-                    return tslib_1.__generator(this, function (_a) {
-                        switch (_a.label) {
-                            case 0:
-                                logger.debug(session);
-                                _a.label = 1;
-                            case 1:
-                                _a.trys.push([1, 4, 5, 6]);
-                                return [4 /*yield*/, this.Credentials.clear()];
-                            case 2:
-                                _a.sent();
-                                return [4 /*yield*/, this.Credentials.set(session, 'session')];
-                            case 3:
-                                cred = _a.sent();
-                                logger.debug('succeed to get cognito credentials', cred);
-                                return [3 /*break*/, 6];
-                            case 4:
-                                e_5 = _a.sent();
-                                logger.debug('cannot get cognito credentials', e_5);
-                                return [3 /*break*/, 6];
-                            case 5:
-                                that.user = internalUser;
-                                dispatchAuthEvent('signIn', internalUser, "A user " + internalUser.getUsername() + " has been signed in");
-                                resolve(internalUser);
-                                return [7 /*endfinally*/];
-                            case 6: return [2 /*return*/];
-                        }
-                    });
-                }); },
-                onFailure: function (err) {
-                    logger.debug('completeNewPassword failure', err);
-                    dispatchAuthEvent('completeNewPassword_failure', err, _this.user + " failed to complete the new password flow");
-                    reject(err);
-                },
-                mfaRequired: function (challengeName, challengeParam) {
-                    logger.debug('signIn MFA required');
-                    internalUser['challengeName'] = challengeName;
-                    internalUser['challengeParam'] = challengeParam;
-                    resolve(internalUser);
-                },
-                mfaSetup: function (challengeName, challengeParam) {
-                    logger.debug('signIn mfa setup', challengeName);
-                    internalUser['challengeName'] = challengeName;
-                    internalUser['challengeParam'] = challengeParam;
-                    resolve(internalUser);
-                },
-                totpRequired: function (challengeName, challengeParam) {
-                    logger.debug('signIn mfa setup', challengeName);
-                    internalUser['challengeName'] = challengeName;
-                    internalUser['challengeParam'] = challengeParam;
-                    resolve(internalUser);
-                },
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.CompleteNewPassword, customUserAgentDetails));
-        });
-    };
-    /**
-     * Send the answer to a custom challenge
-     * @param {CognitoUser} user - The CognitoUser object
-     * @param {String} challengeResponses - The confirmation code
-     * @param {ClientMetaData} clientMetadata - optional client metadata defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     *
-     */
-    InternalAuthClass.prototype.sendCustomChallengeAnswer = function (user, challengeResponses, clientMetadata, customUserAgentDetails) {
-        var _this = this;
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        if (!challengeResponses) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyChallengeResponse);
-        }
-        var that = this;
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.SendCustomChallengeAnswer, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            internalUser.sendCustomChallengeAnswer(challengeResponses, _this.authCallbacks(internalUser, resolve, reject, userAgentDetails), clientMetadata, core_1.getAmplifyUserAgent(userAgentDetails));
-        });
-    };
-    /**
-     * Delete an authenticated users' attributes
-     * @param {CognitoUser} user - The currently logged in user object
-     * @param {string[]} attributeNames - Attributes to delete
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return {Promise}
-     **/
-    InternalAuthClass.prototype.deleteUserAttributes = function (user, attributeNames, customUserAgentDetails) {
-        var internalUser = user;
-        var that = this;
-        var userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.DeleteUserAttributes, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            that._userSession(userAgentValue, internalUser).then(function (session) {
-                internalUser.deleteAttributes(attributeNames, function (err, result) {
-                    if (err) {
-                        return reject(err);
-                    }
-                    else {
-                        return resolve(result);
-                    }
-                }, userAgentValue);
-            });
-        });
-    };
-    /**
-     * Delete the current authenticated user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return {Promise}
-     **/
-    // TODO: Check return type void
-    InternalAuthClass.prototype.deleteUser = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var e_6, isSignedInHostedUI;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this._storageSync];
-                    case 1:
-                        _a.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        e_6 = _a.sent();
-                        logger.debug('Failed to sync cache info into memory', e_6);
-                        throw new Error(e_6);
-                    case 3:
-                        isSignedInHostedUI = this._oAuthHandler &&
-                            this._storage.getItem('amplify-signin-with-hostedUI') === 'true';
-                        return [2 /*return*/, new Promise(function (res, rej) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                var internalUser_1, userAgentValue_1;
-                                var _this = this;
-                                return tslib_1.__generator(this, function (_a) {
-                                    if (this.userPool) {
-                                        internalUser_1 = this.userPool.getCurrentUser();
-                                        if (!internalUser_1) {
-                                            logger.debug('Failed to get user from user pool');
-                                            return [2 /*return*/, rej(new Error('No current user.'))];
-                                        }
-                                        else {
-                                            userAgentValue_1 = utils_1.getAuthUserAgentValue(core_1.AuthAction.DeleteUser, customUserAgentDetails);
-                                            internalUser_1.getSession(function (err, session) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                                var cleanUpError_4;
-                                                var _this = this;
-                                                return tslib_1.__generator(this, function (_a) {
-                                                    switch (_a.label) {
-                                                        case 0:
-                                                            if (!err) return [3 /*break*/, 5];
-                                                            logger.debug('Failed to get the user session', err);
-                                                            if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                                                            _a.label = 1;
-                                                        case 1:
-                                                            _a.trys.push([1, 3, , 4]);
-                                                            return [4 /*yield*/, this.cleanUpInvalidSession(internalUser_1, userAgentValue_1)];
-                                                        case 2:
-                                                            _a.sent();
-                                                            return [3 /*break*/, 4];
-                                                        case 3:
-                                                            cleanUpError_4 = _a.sent();
-                                                            rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_4.message));
-                                                            return [2 /*return*/];
-                                                        case 4: return [2 /*return*/, rej(err)];
-                                                        case 5:
-                                                            internalUser_1.deleteUser(function (err, result) {
-                                                                if (err) {
-                                                                    rej(err);
-                                                                }
-                                                                else {
-                                                                    dispatchAuthEvent('userDeleted', result, 'The authenticated user has been deleted.');
-                                                                    internalUser_1.signOut(undefined, userAgentValue_1);
-                                                                    _this.user = null;
-                                                                    try {
-                                                                        _this.cleanCachedItems(); // clean aws credentials
-                                                                    }
-                                                                    catch (e) {
-                                                                        // TODO: change to rejects in refactor
-                                                                        logger.debug('failed to clear cached items');
-                                                                    }
-                                                                    if (isSignedInHostedUI) {
-                                                                        _this.oAuthSignOutRedirect(res, rej);
-                                                                    }
-                                                                    else {
-                                                                        dispatchAuthEvent('signOut', _this.user, "A user has been signed out");
-                                                                        res(result);
-                                                                    }
-                                                                }
-                                                            }, undefined, userAgentValue_1);
-                                                            _a.label = 6;
-                                                        case 6: return [2 /*return*/];
-                                                    }
-                                                });
-                                            }); });
-                                        }
-                                    }
-                                    else {
-                                        logger.debug('no Congito User pool');
-                                        rej(new Error('Cognito User pool does not exist'));
-                                    }
-                                    return [2 /*return*/];
-                                });
-                            }); })];
-                }
-            });
-        });
-    };
-    /**
-     * Update an authenticated users' attributes
-     * @param {CognitoUser} user - The currently logged in user object
-     * @param {object} attributes - attributes to update
-     * @param {ClientMetaData} clientMetadata - optional client metadata, defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return {Promise}
-     **/
-    InternalAuthClass.prototype.updateUserAttributes = function (user, attributes, clientMetadata, customUserAgentDetails) {
-        var _this = this;
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        var attributeList = [];
-        var that = this;
-        var userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.UpdateUserAttributes, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            that._userSession(userAgentValue, internalUser).then(function (session) {
-                for (var key in attributes) {
-                    if (key !== 'sub' && key.indexOf('_verified') < 0) {
-                        var attr = {
-                            Name: key,
-                            Value: attributes[key],
-                        };
-                        attributeList.push(attr);
-                    }
-                }
-                internalUser.updateAttributes(attributeList, function (err, result, details) {
-                    if (err) {
-                        dispatchAuthEvent('updateUserAttributes_failure', err, 'Failed to update attributes');
-                        return reject(err);
-                    }
-                    else {
-                        var attrs = _this.createUpdateAttributesResultList(attributes, details === null || details === void 0 ? void 0 : details.CodeDeliveryDetailsList);
-                        dispatchAuthEvent('updateUserAttributes', attrs, 'Attributes successfully updated');
-                        return resolve(result);
-                    }
-                }, clientMetadata, userAgentValue);
-            });
-        });
-    };
-    InternalAuthClass.prototype.createUpdateAttributesResultList = function (attributes, codeDeliveryDetailsList) {
-        var attrs = {};
-        Object.keys(attributes).forEach(function (key) {
-            attrs[key] = {
-                isUpdated: true,
-            };
-            var codeDeliveryDetails = codeDeliveryDetailsList === null || codeDeliveryDetailsList === void 0 ? void 0 : codeDeliveryDetailsList.find(function (value) { return value.AttributeName === key; });
-            if (codeDeliveryDetails) {
-                attrs[key].isUpdated = false;
-                attrs[key].codeDeliveryDetails = codeDeliveryDetails;
-            }
-        });
-        return attrs;
-    };
-    /**
-     * Return user attributes
-     * @param {Object} user - The CognitoUser object
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to user attributes if success
-     */
-    InternalAuthClass.prototype.userAttributes = function (user, customUserAgentDetails) {
-        return this._userAttributes(user, customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._userAttributes = function (user, customUserAgentDetails) {
-        var _this = this;
-        var internalUser = user;
-        var userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.UserAttributes, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            _this._userSession(userAgentValue, internalUser).then(function (session) {
-                internalUser.getUserAttributes(function (err, attributes) {
-                    if (err) {
-                        reject(err);
-                    }
-                    else {
-                        resolve(attributes);
-                    }
-                }, userAgentValue);
-            });
-        });
-    };
-    InternalAuthClass.prototype.verifiedContact = function (user, customUserAgentDetails) {
-        var that = this;
-        return this._userAttributes(user, utils_1.getAuthUserAgentDetails(core_1.AuthAction.VerifiedContact, customUserAgentDetails)).then(function (attributes) {
-            var attrs = that.attributesToObject(attributes);
-            var unverified = {};
-            var verified = {};
-            if (attrs['email']) {
-                if (attrs['email_verified']) {
-                    verified['email'] = attrs['email'];
-                }
-                else {
-                    unverified['email'] = attrs['email'];
-                }
-            }
-            if (attrs['phone_number']) {
-                if (attrs['phone_number_verified']) {
-                    verified['phone_number'] = attrs['phone_number'];
-                }
-                else {
-                    unverified['phone_number'] = attrs['phone_number'];
-                }
-            }
-            return {
-                verified: verified,
-                unverified: unverified,
-            };
-        });
-    };
-    InternalAuthClass.prototype.isErrorWithMessage = function (err) {
-        return (typeof err === 'object' &&
-            Object.prototype.hasOwnProperty.call(err, 'message'));
-    };
-    // Session revoked by another app
-    InternalAuthClass.prototype.isTokenRevokedError = function (err) {
-        return (this.isErrorWithMessage(err) &&
-            err.message === 'Access Token has been revoked');
-    };
-    InternalAuthClass.prototype.isRefreshTokenRevokedError = function (err) {
-        return (this.isErrorWithMessage(err) &&
-            err.message === 'Refresh Token has been revoked');
-    };
-    InternalAuthClass.prototype.isUserDisabledError = function (err) {
-        return this.isErrorWithMessage(err) && err.message === 'User is disabled.';
-    };
-    InternalAuthClass.prototype.isUserDoesNotExistError = function (err) {
-        return (this.isErrorWithMessage(err) && err.message === 'User does not exist.');
-    };
-    InternalAuthClass.prototype.isRefreshTokenExpiredError = function (err) {
-        return (this.isErrorWithMessage(err) &&
-            err.message === 'Refresh Token has expired');
-    };
-    InternalAuthClass.prototype.isPasswordResetRequiredError = function (err) {
-        return (this.isErrorWithMessage(err) &&
-            err.message === 'Password reset required for the user');
-    };
-    InternalAuthClass.prototype.isSignedInHostedUI = function () {
-        return (this._oAuthHandler &&
-            this._storage.getItem('amplify-signin-with-hostedUI') === 'true');
-    };
-    InternalAuthClass.prototype.isSessionInvalid = function (err) {
-        return (this.isUserDisabledError(err) ||
-            this.isUserDoesNotExistError(err) ||
-            this.isTokenRevokedError(err) ||
-            this.isRefreshTokenRevokedError(err) ||
-            this.isRefreshTokenExpiredError(err) ||
-            this.isPasswordResetRequiredError(err));
-    };
-    InternalAuthClass.prototype.cleanUpInvalidSession = function (internalUser, userAgentValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var e_7;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalUser.signOut(undefined, userAgentValue);
-                        this.user = null;
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.cleanCachedItems()];
-                    case 2:
-                        _a.sent(); // clean aws credentials
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_7 = _a.sent();
-                        logger.debug('failed to clear cached items');
-                        return [3 /*break*/, 4];
-                    case 4:
-                        if (this.isSignedInHostedUI()) {
-                            return [2 /*return*/, new Promise(function (res, rej) {
-                                    _this.oAuthSignOutRedirect(res, rej);
-                                })];
-                        }
-                        else {
-                            dispatchAuthEvent('signOut', this.user, "A user has been signed out");
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Get current authenticated user
-     * @param {CurrentUserOpts} params - options for getting the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to current authenticated CognitoUser if success
-     */
-    InternalAuthClass.prototype.currentUserPoolUser = function (params, customUserAgentDetails) {
-        return this._currentUserPoolUser(params, customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._currentUserPoolUser = function (params, customUserAgentDetails) {
-        var _this = this;
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        return new Promise(function (res, rej) {
-            _this._storageSync
-                .then(function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                var internalUser, userAgentValue_2, session, bypassCache, clientMetadata, _a, scope, err_1;
-                var _this = this;
-                return tslib_1.__generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (!this.isOAuthInProgress()) return [3 /*break*/, 2];
-                            logger.debug('OAuth signIn in progress, waiting for resolution...');
-                            return [4 /*yield*/, new Promise(function (res) {
-                                    var timeoutId = setTimeout(function () {
-                                        logger.debug('OAuth signIn in progress timeout');
-                                        core_1.Hub.remove('auth', hostedUISignCallback);
-                                        res();
-                                    }, OAUTH_FLOW_MS_TIMEOUT);
-                                    core_1.Hub.listen('auth', hostedUISignCallback);
-                                    function hostedUISignCallback(_a) {
-                                        var payload = _a.payload;
-                                        var event = payload.event;
-                                        if (event === 'cognitoHostedUI' ||
-                                            event === 'cognitoHostedUI_failure') {
-                                            logger.debug("OAuth signIn resolved: " + event);
-                                            clearTimeout(timeoutId);
-                                            core_1.Hub.remove('auth', hostedUISignCallback);
-                                            res();
-                                        }
-                                    }
-                                })];
-                        case 1:
-                            _b.sent();
-                            _b.label = 2;
-                        case 2:
-                            internalUser = this.userPool.getCurrentUser();
-                            if (!internalUser) {
-                                logger.debug('Failed to get user from user pool');
-                                rej('No current user');
-                                return [2 /*return*/];
-                            }
-                            _b.label = 3;
-                        case 3:
-                            _b.trys.push([3, 7, , 8]);
-                            userAgentValue_2 = utils_1.getAuthUserAgentValue(core_1.AuthAction.CurrentUserPoolUser, customUserAgentDetails);
-                            return [4 /*yield*/, this._userSession(userAgentValue_2, internalUser)];
-                        case 4:
-                            session = _b.sent();
-                            bypassCache = params ? params.bypassCache : false;
-                            if (!bypassCache) return [3 /*break*/, 6];
-                            return [4 /*yield*/, this.Credentials.clear()];
-                        case 5:
-                            _b.sent();
-                            _b.label = 6;
-                        case 6:
-                            clientMetadata = this._config.clientMetadata;
-                            _a = session.getAccessToken().decodePayload().scope, scope = _a === void 0 ? '' : _a;
-                            if (scope.split(' ').includes(USER_ADMIN_SCOPE)) {
-                                internalUser.getUserData(function (err, data) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                    var cleanUpError_5, preferredMFA, attributeList, i, attribute, userAttribute, attributes;
-                                    return tslib_1.__generator(this, function (_a) {
-                                        switch (_a.label) {
-                                            case 0:
-                                                if (!err) return [3 /*break*/, 7];
-                                                logger.debug('getting user data failed', err);
-                                                if (!this.isSessionInvalid(err)) return [3 /*break*/, 5];
-                                                _a.label = 1;
-                                            case 1:
-                                                _a.trys.push([1, 3, , 4]);
-                                                return [4 /*yield*/, this.cleanUpInvalidSession(internalUser, userAgentValue_2)];
-                                            case 2:
-                                                _a.sent();
-                                                return [3 /*break*/, 4];
-                                            case 3:
-                                                cleanUpError_5 = _a.sent();
-                                                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_5.message));
-                                                return [2 /*return*/];
-                                            case 4:
-                                                rej(err);
-                                                return [3 /*break*/, 6];
-                                            case 5:
-                                                res(internalUser);
-                                                _a.label = 6;
-                                            case 6: return [2 /*return*/];
-                                            case 7:
-                                                preferredMFA = data.PreferredMfaSetting || 'NOMFA';
-                                                attributeList = [];
-                                                for (i = 0; i < data.UserAttributes.length; i++) {
-                                                    attribute = {
-                                                        Name: data.UserAttributes[i].Name,
-                                                        Value: data.UserAttributes[i].Value,
-                                                    };
-                                                    userAttribute = new amazon_cognito_identity_js_1.CognitoUserAttribute(attribute);
-                                                    attributeList.push(userAttribute);
-                                                }
-                                                attributes = this.attributesToObject(attributeList);
-                                                Object.assign(internalUser, { attributes: attributes, preferredMFA: preferredMFA });
-                                                return [2 /*return*/, res(internalUser)];
-                                        }
-                                    });
-                                }); }, { bypassCache: bypassCache, clientMetadata: clientMetadata }, userAgentValue_2);
-                            }
-                            else {
-                                logger.debug("Unable to get the user data because the " + USER_ADMIN_SCOPE + " " +
-                                    "is not in the scopes of the access token");
-                                return [2 /*return*/, res(internalUser)];
-                            }
-                            return [3 /*break*/, 8];
-                        case 7:
-                            err_1 = _b.sent();
-                            rej(err_1);
-                            return [3 /*break*/, 8];
-                        case 8: return [2 /*return*/];
-                    }
-                });
-            }); })
-                .catch(function (e) {
-                logger.debug('Failed to sync cache info into memory', e);
-                return rej(e);
-            });
-        });
-    };
-    InternalAuthClass.prototype.isOAuthInProgress = function () {
-        return this.oAuthFlowInProgress;
-    };
-    /**
-     * Get current authenticated user
-     * @param {CurrentUserOpts} - options for getting the current user
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to current authenticated CognitoUser if success
-     */
-    InternalAuthClass.prototype.currentAuthenticatedUser = function (params, customUserAgentDetails) {
-        return this._currentAuthenticatedUser(params, customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._currentAuthenticatedUser = function (params, customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var federatedUser, e_8, federatedInfo, user, e_9;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        logger.debug('getting current authenticated user');
-                        federatedUser = null;
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this._storageSync];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_8 = _a.sent();
-                        logger.debug('Failed to sync cache info into memory', e_8);
-                        throw e_8;
-                    case 4:
-                        try {
-                            federatedInfo = JSON.parse(this._storage.getItem('aws-amplify-federatedInfo'));
-                            if (federatedInfo) {
-                                federatedUser = tslib_1.__assign(tslib_1.__assign({}, federatedInfo.user), { token: federatedInfo.token });
-                            }
-                        }
-                        catch (e) {
-                            logger.debug('cannot load federated user from auth storage');
-                        }
-                        if (!federatedUser) return [3 /*break*/, 5];
-                        this.user = federatedUser;
-                        logger.debug('get current authenticated federated user', this.user);
-                        return [2 /*return*/, this.user];
-                    case 5:
-                        logger.debug('get current authenticated userpool user');
-                        user = null;
-                        _a.label = 6;
-                    case 6:
-                        _a.trys.push([6, 8, , 9]);
-                        return [4 /*yield*/, this._currentUserPoolUser(params, utils_1.getAuthUserAgentDetails(core_1.AuthAction.CurrentAuthenticatedUser, customUserAgentDetails))];
-                    case 7:
-                        user = _a.sent();
-                        return [3 /*break*/, 9];
-                    case 8:
-                        e_9 = _a.sent();
-                        if (e_9 === 'No userPool') {
-                            logger.error('Cannot get the current user because the user pool is missing. ' +
-                                'Please make sure the Auth module is configured with a valid Cognito User Pool ID');
-                        }
-                        logger.debug('The user is not authenticated by the error', e_9);
-                        return [2 /*return*/, Promise.reject('The user is not authenticated')];
-                    case 9:
-                        this.user = user;
-                        return [2 /*return*/, this.user];
-                }
-            });
-        });
-    };
-    /**
-     * Get current user's session
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to session object if success
-     */
-    InternalAuthClass.prototype.currentSession = function (customUserAgentDetails) {
-        return this._currentSession(customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._currentSession = function (customUserAgentDetails) {
-        var that = this;
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.CurrentSession, customUserAgentDetails);
-        logger.debug('Getting current session');
-        // Purposely not calling the reject method here because we don't need a console error
-        if (!this.userPool) {
-            return Promise.reject(new Error('No User Pool in the configuration.'));
-        }
-        return new Promise(function (res, rej) {
-            that
-                ._currentUserPoolUser(undefined, userAgentDetails)
-                .then(function (user) {
-                that
-                    ._userSession(core_1.getAmplifyUserAgent(userAgentDetails), user)
-                    .then(function (session) {
-                    res(session);
-                    return;
-                })
-                    .catch(function (e) {
-                    logger.debug('Failed to get the current session', e);
-                    rej(e);
-                    return;
-                });
-            })
-                .catch(function (e) {
-                logger.debug('Failed to get the current user', e);
-                rej(e);
-                return;
-            });
-        });
-    };
-    InternalAuthClass.prototype._userSession = function (userAgentValue, internalUser) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var clientMetadata, userSession;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!internalUser) {
-                            logger.debug('the user is null');
-                            return [2 /*return*/, this.rejectAuthError(Auth_1.AuthErrorTypes.NoUserSession)];
-                        }
-                        clientMetadata = this._config.clientMetadata;
-                        // Debouncing the concurrent userSession calls by caching the promise.
-                        // This solution assumes users will always call this function with the same CognitoUser instance.
-                        if (this.inflightSessionPromiseCounter === 0) {
-                            this.inflightSessionPromise = new Promise(function (res, rej) {
-                                internalUser.getSession(function (err, session) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                    var cleanUpError_6;
-                                    return tslib_1.__generator(this, function (_a) {
-                                        switch (_a.label) {
-                                            case 0:
-                                                if (!err) return [3 /*break*/, 5];
-                                                logger.debug('Failed to get the session from user', internalUser);
-                                                if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                                                _a.label = 1;
-                                            case 1:
-                                                _a.trys.push([1, 3, , 4]);
-                                                return [4 /*yield*/, this.cleanUpInvalidSession(internalUser, userAgentValue)];
-                                            case 2:
-                                                _a.sent();
-                                                return [3 /*break*/, 4];
-                                            case 3:
-                                                cleanUpError_6 = _a.sent();
-                                                rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_6.message));
-                                                return [2 /*return*/];
-                                            case 4:
-                                                rej(err);
-                                                return [2 /*return*/];
-                                            case 5:
-                                                logger.debug('Succeed to get the user session', session);
-                                                res(session);
-                                                return [2 /*return*/];
-                                        }
-                                    });
-                                }); }, { clientMetadata: clientMetadata }, userAgentValue);
-                            });
-                        }
-                        this.inflightSessionPromiseCounter++;
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, , 3, 4]);
-                        return [4 /*yield*/, this.inflightSessionPromise];
-                    case 2:
-                        userSession = _a.sent();
-                        // Set private member. Avoid user.setSignInUserSession() to prevent excessive localstorage refresh.
-                        // @ts-ignore
-                        internalUser.signInUserSession = userSession;
-                        return [2 /*return*/, userSession];
-                    case 3:
-                        this.inflightSessionPromiseCounter--;
-                        return [7 /*endfinally*/];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Get the corresponding user session
-     * @param {Object} user - The CognitoUser object
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to the session
-     */
-    InternalAuthClass.prototype.userSession = function (user, customUserAgentDetails) {
-        return this._userSession(utils_1.getAuthUserAgentValue(core_1.AuthAction.UserSession, customUserAgentDetails), user);
-    };
-    /**
-     * Get authenticated credentials of current user.
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to be current user's credentials
-     */
-    InternalAuthClass.prototype.currentUserCredentials = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var e_10, federatedInfo;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        logger.debug('Getting current user credentials');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this._storageSync];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_10 = _a.sent();
-                        logger.debug('Failed to sync cache info into memory', e_10);
-                        throw e_10;
-                    case 4:
-                        federatedInfo = null;
-                        try {
-                            federatedInfo = JSON.parse(this._storage.getItem('aws-amplify-federatedInfo'));
-                        }
-                        catch (e) {
-                            logger.debug('failed to get or parse item aws-amplify-federatedInfo', e);
-                        }
-                        if (federatedInfo) {
-                            // refresh the jwt token here if necessary
-                            return [2 /*return*/, this.Credentials.refreshFederatedToken(federatedInfo)];
-                        }
-                        else {
-                            return [2 /*return*/, this._currentSession(utils_1.getAuthUserAgentDetails(core_1.AuthAction.CurrentUserCredentials, customUserAgentDetails))
-                                    .then(function (session) {
-                                    logger.debug('getting session success', session);
-                                    return _this.Credentials.set(session, 'session');
-                                })
-                                    .catch(function () {
-                                    logger.debug('getting guest credentials');
-                                    return _this.Credentials.set(null, 'guest');
-                                })];
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.currentCredentials = function (customUserAgentDetails) {
-        logger.debug('getting current credentials');
-        return this.Credentials.get();
-    };
-    /**
-     * Initiate an attribute confirmation request
-     * @param {Object} user - The CognitoUser
-     * @param {Object} attr - The attributes to be verified
-     * @param {ClientMetaData} clientMetadata - optional client metadata, defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to callback data if success
-     */
-    InternalAuthClass.prototype.verifyUserAttribute = function (user, attr, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        return this._verifyUserAttribute(user, attr, clientMetadata, customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._verifyUserAttribute = function (user, attr, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        return new Promise(function (resolve, reject) {
-            internalUser.getAttributeVerificationCode(attr, {
-                onSuccess: function (success) {
-                    return resolve(success);
-                },
-                onFailure: function (err) {
-                    return reject(err);
-                },
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.VerifyUserAttribute, customUserAgentDetails));
-        });
-    };
-    /**
-     * Confirm an attribute using a confirmation code
-     * @param {Object} user - The CognitoUser
-     * @param {Object} attr - The attribute to be verified
-     * @param {String} code - The confirmation code
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to callback data if success
-     */
-    InternalAuthClass.prototype.verifyUserAttributeSubmit = function (user, attr, code, customUserAgentDetails) {
-        return this._verifyUserAttributeSubmit(user, attr, code, customUserAgentDetails);
-    };
-    InternalAuthClass.prototype._verifyUserAttributeSubmit = function (user, attr, code, customUserAgentDetails) {
-        if (!code) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyCode);
-        }
-        var internalUser = user;
-        return new Promise(function (resolve, reject) {
-            internalUser.verifyAttribute(attr, code, {
-                onSuccess: function (data) {
-                    resolve(data);
-                    return;
-                },
-                onFailure: function (err) {
-                    reject(err);
-                    return;
-                },
-            }, utils_1.getAuthUserAgentValue(core_1.AuthAction.VerifyUserAttributeSubmit, customUserAgentDetails));
-        });
-    };
-    InternalAuthClass.prototype.verifyCurrentUserAttribute = function (attr, customUserAgentDetails) {
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.VerifyCurrentUserAttribute, customUserAgentDetails);
-        var that = this;
-        return that
-            ._currentUserPoolUser(undefined, userAgentDetails)
-            .then(function (user) {
-            return that._verifyUserAttribute(user, attr, undefined, userAgentDetails);
-        });
-    };
-    /**
-     * Confirm current user's attribute using a confirmation code
-     * @param {Object} attr - The attribute to be verified
-     * @param {String} code - The confirmation code
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves to callback data if success
-     */
-    InternalAuthClass.prototype.verifyCurrentUserAttributeSubmit = function (attr, code, customUserAgentDetails) {
-        var userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.VerifyCurrentUserAttributeSubmit, customUserAgentDetails);
-        var that = this;
-        return that
-            ._currentUserPoolUser(undefined, userAgentDetails)
-            .then(function (user) {
-            return that._verifyUserAttributeSubmit(user, attr, code, userAgentDetails);
-        });
-    };
-    InternalAuthClass.prototype.cognitoIdentitySignOut = function (opts, internalUser, userAgentValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var e_11, isSignedInHostedUI;
-            var _this = this;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this._storageSync];
-                    case 1:
-                        _a.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        e_11 = _a.sent();
-                        logger.debug('Failed to sync cache info into memory', e_11);
-                        throw e_11;
-                    case 3:
-                        isSignedInHostedUI = this._oAuthHandler &&
-                            this._storage.getItem('amplify-signin-with-hostedUI') === 'true';
-                        return [2 /*return*/, new Promise(function (res, rej) {
-                                if (opts && opts.global) {
-                                    logger.debug('user global sign out', internalUser);
-                                    // in order to use global signout
-                                    // we must validate the user as an authenticated user by using getSession
-                                    var clientMetadata = _this._config.clientMetadata; // TODO: verify behavior if this is override during signIn
-                                    internalUser.getSession(function (err, result) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-                                        var cleanUpError_7;
-                                        var _this = this;
-                                        return tslib_1.__generator(this, function (_a) {
-                                            switch (_a.label) {
-                                                case 0:
-                                                    if (!err) return [3 /*break*/, 5];
-                                                    logger.debug('failed to get the user session', err);
-                                                    if (!this.isSessionInvalid(err)) return [3 /*break*/, 4];
-                                                    _a.label = 1;
-                                                case 1:
-                                                    _a.trys.push([1, 3, , 4]);
-                                                    return [4 /*yield*/, this.cleanUpInvalidSession(internalUser, userAgentValue)];
-                                                case 2:
-                                                    _a.sent();
-                                                    return [3 /*break*/, 4];
-                                                case 3:
-                                                    cleanUpError_7 = _a.sent();
-                                                    rej(new Error("Session is invalid due to: " + err.message + " and failed to clean up invalid session: " + cleanUpError_7.message));
-                                                    return [2 /*return*/];
-                                                case 4: return [2 /*return*/, rej(err)];
-                                                case 5:
-                                                    internalUser.globalSignOut({
-                                                        onSuccess: function (data) {
-                                                            logger.debug('global sign out success');
-                                                            if (isSignedInHostedUI) {
-                                                                _this.oAuthSignOutRedirect(res, rej);
-                                                            }
-                                                            else {
-                                                                return res();
-                                                            }
-                                                        },
-                                                        onFailure: function (err) {
-                                                            logger.debug('global sign out failed', err);
-                                                            return rej(err);
-                                                        },
-                                                    }, userAgentValue);
-                                                    return [2 /*return*/];
-                                            }
-                                        });
-                                    }); }, { clientMetadata: clientMetadata }, userAgentValue);
-                                }
-                                else {
-                                    logger.debug('user sign out', internalUser);
-                                    internalUser.signOut(function () {
-                                        if (isSignedInHostedUI) {
-                                            _this.oAuthSignOutRedirect(res, rej);
-                                        }
-                                        else {
-                                            return res();
-                                        }
-                                    }, userAgentValue);
-                                }
-                            })];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.oAuthSignOutRedirect = function (resolve, reject) {
-        var isBrowser = core_1.browserOrNode().isBrowser;
-        if (isBrowser) {
-            this.oAuthSignOutRedirectOrReject(reject);
-        }
-        else {
-            this.oAuthSignOutAndResolve(resolve);
-        }
-    };
-    InternalAuthClass.prototype.oAuthSignOutAndResolve = function (resolve) {
-        this._oAuthHandler.signOut();
-        resolve();
-    };
-    InternalAuthClass.prototype.oAuthSignOutRedirectOrReject = function (reject) {
-        this._oAuthHandler.signOut(); // this method redirects url
-        // App should be redirected to another url otherwise it will reject
-        setTimeout(function () { return reject(Error('Signout timeout fail')); }, 3000);
-    };
-    /**
-     * Sign out method
-     * @param {SignOutOpts} opts - options for sign out
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolved if success
-     */
-    InternalAuthClass.prototype.signOut = function (opts, customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var e_12, internalUser;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.cleanCachedItems()];
-                    case 1:
-                        _a.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        e_12 = _a.sent();
-                        logger.debug('failed to clear cached items');
-                        return [3 /*break*/, 3];
-                    case 3:
-                        if (!this.userPool) return [3 /*break*/, 7];
-                        internalUser = this.userPool.getCurrentUser();
-                        if (!internalUser) return [3 /*break*/, 5];
-                        return [4 /*yield*/, this.cognitoIdentitySignOut(opts, internalUser, utils_1.getAuthUserAgentValue(core_1.AuthAction.SignOut, customUserAgentDetails))];
-                    case 4:
-                        _a.sent();
-                        return [3 /*break*/, 6];
-                    case 5:
-                        logger.debug('no current Cognito user');
-                        _a.label = 6;
-                    case 6: return [3 /*break*/, 8];
-                    case 7:
-                        logger.debug('no Cognito User pool');
-                        _a.label = 8;
-                    case 8:
-                        /**
-                         * Note for future refactor - no reliable way to get username with
-                         * Cognito User Pools vs Identity when federating with Social Providers
-                         * This is why we need a well structured session object that can be inspected
-                         * and information passed back in the message below for Hub dispatch
-                         */
-                        dispatchAuthEvent('signOut', this.user, "A user has been signed out");
-                        this.user = null;
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.cleanCachedItems = function () {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: 
-                    // clear cognito cached item
-                    return [4 /*yield*/, this.Credentials.clear()];
-                    case 1:
-                        // clear cognito cached item
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Change a password for an authenticated user
-     * @param {Object} user - The CognitoUser object
-     * @param {String} oldPassword - the current password
-     * @param {String} newPassword - the requested new password
-     * @param {ClientMetaData} clientMetadata - optional client metadata, defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves if success
-     */
-    InternalAuthClass.prototype.changePassword = function (user, oldPassword, newPassword, clientMetadata, customUserAgentDetails) {
-        var _this = this;
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        var internalUser = user;
-        var userAgentValue = utils_1.getAuthUserAgentValue(core_1.AuthAction.ChangePassword, customUserAgentDetails);
-        return new Promise(function (resolve, reject) {
-            _this._userSession(userAgentValue, internalUser).then(function (session) {
-                internalUser.changePassword(oldPassword, newPassword, function (err, data) {
-                    if (err) {
-                        logger.debug('change password failure', err);
-                        return reject(err);
-                    }
-                    else {
-                        return resolve(data);
-                    }
-                }, clientMetadata, userAgentValue);
-            });
-        });
-    };
-    /**
-     * Initiate a forgot password request
-     * @param {String} username - the username to change password
-     * @param {ClientMetaData} clientMetadata - optional client metadata, defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise resolves if success
-     */
-    InternalAuthClass.prototype.forgotPassword = function (username, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        var internalUser = this.createCognitoUser(username);
-        return new Promise(function (resolve, reject) {
-            internalUser.forgotPassword({
-                onSuccess: function () {
-                    resolve();
-                    return;
-                },
-                onFailure: function (err) {
-                    logger.debug('forgot password failure', err);
-                    dispatchAuthEvent('forgotPassword_failure', err, username + " forgotPassword failed");
-                    reject(err);
-                    return;
-                },
-                inputVerificationCode: function (data) {
-                    dispatchAuthEvent('forgotPassword', internalUser, username + " has initiated forgot password flow");
-                    resolve(data);
-                    return;
-                },
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.ForgotPassword, customUserAgentDetails));
-        });
-    };
-    /**
-     * Confirm a new password using a confirmation Code
-     * @param {String} username - The username
-     * @param {String} code - The confirmation code
-     * @param {String} password - The new password
-     * @param {ClientMetaData} clientMetadata - optional client metadata, defaults to config
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return - A promise that resolves if success
-     */
-    InternalAuthClass.prototype.forgotPasswordSubmit = function (username, code, password, clientMetadata, customUserAgentDetails) {
-        if (clientMetadata === void 0) { clientMetadata = this._config.clientMetadata; }
-        if (!this.userPool) {
-            return this.rejectNoUserPool();
-        }
-        if (!username) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyUsername);
-        }
-        if (!code) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyCode);
-        }
-        if (!password) {
-            return this.rejectAuthError(Auth_1.AuthErrorTypes.EmptyPassword);
-        }
-        var internalUser = this.createCognitoUser(username);
-        return new Promise(function (resolve, reject) {
-            internalUser.confirmPassword(code, password, {
-                onSuccess: function (success) {
-                    dispatchAuthEvent('forgotPasswordSubmit', internalUser, username + " forgotPasswordSubmit successful");
-                    resolve(success);
-                    return;
-                },
-                onFailure: function (err) {
-                    dispatchAuthEvent('forgotPasswordSubmit_failure', err, username + " forgotPasswordSubmit failed");
-                    reject(err);
-                    return;
-                },
-            }, clientMetadata, utils_1.getAuthUserAgentValue(core_1.AuthAction.ForgotPasswordSubmit, customUserAgentDetails));
-        });
-    };
-    /**
-     * Get user information
-     * @async
-     * @param {CustomUserAgentDetails} customUserAgentDetails - Optional parameter to send user agent details
-     * @return {Object }- current User's information
-     */
-    InternalAuthClass.prototype.currentUserInfo = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var source, userAgentDetails, internalUser, attributes, userAttrs, credentials, e_13, info, err_2, user;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        source = this.Credentials.getCredSource();
-                        userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.CurrentUserInfo, customUserAgentDetails);
-                        if (!(!source || source === 'aws' || source === 'userPool')) return [3 /*break*/, 9];
-                        return [4 /*yield*/, this._currentUserPoolUser(undefined, userAgentDetails).catch(function (err) { return logger.error(err); })];
-                    case 1:
-                        internalUser = _a.sent();
-                        if (!internalUser) {
-                            return [2 /*return*/, null];
-                        }
-                        _a.label = 2;
-                    case 2:
-                        _a.trys.push([2, 8, , 9]);
-                        return [4 /*yield*/, this._userAttributes(internalUser, userAgentDetails)];
-                    case 3:
-                        attributes = _a.sent();
-                        userAttrs = this.attributesToObject(attributes);
-                        credentials = null;
-                        _a.label = 4;
-                    case 4:
-                        _a.trys.push([4, 6, , 7]);
-                        return [4 /*yield*/, this.currentCredentials()];
-                    case 5:
-                        credentials = _a.sent();
-                        return [3 /*break*/, 7];
-                    case 6:
-                        e_13 = _a.sent();
-                        logger.debug('Failed to retrieve credentials while getting current user info', e_13);
-                        return [3 /*break*/, 7];
-                    case 7:
-                        info = {
-                            id: credentials ? credentials.identityId : undefined,
-                            username: internalUser.getUsername(),
-                            attributes: userAttrs,
-                        };
-                        return [2 /*return*/, info];
-                    case 8:
-                        err_2 = _a.sent();
-                        logger.error('currentUserInfo error', err_2);
-                        return [2 /*return*/, {}];
-                    case 9:
-                        if (source === 'federated') {
-                            user = this.user;
-                            return [2 /*return*/, user ? user : {}];
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.federatedSignIn = function (providerOrOptions, response, user, customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var options, provider, customState, client_id, redirect_uri, provider, loggedInUser, token, identity_id, expires_at, credentials, currentUser;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this._config.identityPoolId && !this._config.userPoolId) {
-                            throw new Error("Federation requires either a User Pool or Identity Pool in config");
-                        }
-                        // Ensure backwards compatability
-                        if (typeof providerOrOptions === 'undefined') {
-                            if (this._config.identityPoolId && !this._config.userPoolId) {
-                                throw new Error("Federation with Identity Pools requires tokens passed as arguments");
-                            }
-                        }
-                        if (!(types_1.isFederatedSignInOptions(providerOrOptions) ||
-                            types_1.isFederatedSignInOptionsCustom(providerOrOptions) ||
-                            types_1.hasCustomState(providerOrOptions) ||
-                            typeof providerOrOptions === 'undefined')) return [3 /*break*/, 1];
-                        options = providerOrOptions || {
-                            provider: Auth_1.CognitoHostedUIIdentityProvider.Cognito,
-                        };
-                        provider = types_1.isFederatedSignInOptions(options)
-                            ? options.provider
-                            : options.customProvider;
-                        customState = types_1.isFederatedSignInOptions(options)
-                            ? options.customState
-                            : options.customState;
-                        if (this._config.userPoolId) {
-                            client_id = types_1.isCognitoHostedOpts(this._config.oauth)
-                                ? this._config.userPoolWebClientId
-                                : this._config.oauth.clientID;
-                            redirect_uri = types_1.isCognitoHostedOpts(this._config.oauth)
-                                ? this._config.oauth.redirectSignIn
-                                : this._config.oauth.redirectUri;
-                            this._storage.setItem('aws-amplify-federatedUserAgent', utils_1.getAuthUserAgentValue(core_1.AuthAction.FederatedSignIn, customUserAgentDetails));
-                            this._oAuthHandler.oauthSignIn(this._config.oauth.responseType, this._config.oauth.domain, redirect_uri, client_id, provider, customState);
-                        }
-                        return [3 /*break*/, 4];
-                    case 1:
-                        provider = providerOrOptions;
-                        // To check if the user is already logged in
-                        try {
-                            loggedInUser = JSON.stringify(JSON.parse(this._storage.getItem('aws-amplify-federatedInfo')).user);
-                            if (loggedInUser) {
-                                logger.warn("There is already a signed in user: " + loggedInUser + " in your app.\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tYou should not call Auth.federatedSignIn method again as it may cause unexpected behavior.");
-                            }
-                        }
-                        catch (e) { }
-                        token = response.token, identity_id = response.identity_id, expires_at = response.expires_at;
-                        return [4 /*yield*/, this.Credentials.set({ provider: provider, token: token, identity_id: identity_id, user: user, expires_at: expires_at }, 'federation')];
-                    case 2:
-                        credentials = _a.sent();
-                        return [4 /*yield*/, this._currentAuthenticatedUser()];
-                    case 3:
-                        currentUser = _a.sent();
-                        dispatchAuthEvent('signIn', currentUser, "A user " + currentUser.username + " has been signed in");
-                        logger.debug('federated sign in credentials', credentials);
-                        return [2 /*return*/, credentials];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Used to complete the OAuth flow with or without the Cognito Hosted UI
-     * @param {String} URL - optional parameter for customers to pass in the response URL
-     */
-    InternalAuthClass.prototype._handleAuthResponse = function (URL) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var currentUrl, hasCodeOrError, hasTokenOrError, userAgentValue, _a, accessToken, idToken, refreshToken, state, session, credentials, isCustomStateIncluded, currentUser, customState, err_3;
-            return tslib_1.__generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        if (this.oAuthFlowInProgress) {
-                            logger.debug("Skipping URL " + URL + " current flow in progress");
-                            return [2 /*return*/];
-                        }
-                        _b.label = 1;
-                    case 1:
-                        _b.trys.push([1, , 8, 9]);
-                        this.oAuthFlowInProgress = true;
-                        if (!this._config.userPoolId) {
-                            throw new Error("OAuth responses require a User Pool defined in config");
-                        }
-                        dispatchAuthEvent('parsingCallbackUrl', { url: URL }, "The callback url is being parsed");
-                        currentUrl = URL || (core_1.browserOrNode().isBrowser ? window.location.href : '');
-                        hasCodeOrError = !!(url_1.parse(currentUrl).query || '')
-                            .split('&')
-                            .map(function (entry) { return entry.split('='); })
-                            .find(function (_a) {
-                            var _b = tslib_1.__read(_a, 1), k = _b[0];
-                            return k === 'code' || k === 'error';
-                        });
-                        hasTokenOrError = !!(url_1.parse(currentUrl).hash || '#')
-                            .substr(1)
-                            .split('&')
-                            .map(function (entry) { return entry.split('='); })
-                            .find(function (_a) {
-                            var _b = tslib_1.__read(_a, 1), k = _b[0];
-                            return k === 'access_token' || k === 'error';
-                        });
-                        if (!(hasCodeOrError || hasTokenOrError)) return [3 /*break*/, 7];
-                        this._storage.setItem('amplify-redirected-from-hosted-ui', 'true');
-                        userAgentValue = this._storage.getItem('aws-amplify-federatedUserAgent') || undefined;
-                        this._storage.removeItem('aws-amplify-federatedUserAgent');
-                        _b.label = 2;
-                    case 2:
-                        _b.trys.push([2, 6, , 7]);
-                        return [4 /*yield*/, this._oAuthHandler.handleAuthResponse(currentUrl, userAgentValue)];
-                    case 3:
-                        _a = _b.sent(), accessToken = _a.accessToken, idToken = _a.idToken, refreshToken = _a.refreshToken, state = _a.state;
-                        session = new amazon_cognito_identity_js_1.CognitoUserSession({
-                            IdToken: new amazon_cognito_identity_js_1.CognitoIdToken({ IdToken: idToken }),
-                            RefreshToken: new amazon_cognito_identity_js_1.CognitoRefreshToken({
-                                RefreshToken: refreshToken,
-                            }),
-                            AccessToken: new amazon_cognito_identity_js_1.CognitoAccessToken({
-                                AccessToken: accessToken,
-                            }),
-                        });
-                        credentials = void 0;
-                        if (!this._config.identityPoolId) return [3 /*break*/, 5];
-                        return [4 /*yield*/, this.Credentials.set(session, 'session')];
-                    case 4:
-                        credentials = _b.sent();
-                        logger.debug('AWS credentials', credentials);
-                        _b.label = 5;
-                    case 5:
-                        isCustomStateIncluded = /-/.test(state);
-                        currentUser = this.createCognitoUser(session.getIdToken().decodePayload()['cognito:username']);
-                        // This calls cacheTokens() in Cognito SDK
-                        currentUser.setSignInUserSession(session);
-                        if (window && typeof window.history !== 'undefined') {
-                            window.history.replaceState({}, null, this._config.oauth.redirectSignIn);
-                        }
-                        dispatchAuthEvent('signIn', currentUser, "A user " + currentUser.getUsername() + " has been signed in");
-                        dispatchAuthEvent('cognitoHostedUI', currentUser, "A user " + currentUser.getUsername() + " has been signed in via Cognito Hosted UI");
-                        if (isCustomStateIncluded) {
-                            customState = state.split('-').splice(1).join('-');
-                            dispatchAuthEvent('customOAuthState', core_1.urlSafeDecode(customState), "State for user " + currentUser.getUsername());
-                        }
-                        //#endregion
-                        return [2 /*return*/, credentials];
-                    case 6:
-                        err_3 = _b.sent();
-                        logger.debug('Error in cognito hosted auth response', err_3);
-                        // Just like a successful handling of `?code`, replace the window history to "dispose" of the `code`.
-                        // Otherwise, reloading the page will throw errors as the `code` has already been spent.
-                        if (window && typeof window.history !== 'undefined') {
-                            window.history.replaceState({}, null, this._config.oauth.redirectSignIn);
-                        }
-                        dispatchAuthEvent('signIn_failure', err_3, "The OAuth response flow failed");
-                        dispatchAuthEvent('cognitoHostedUI_failure', err_3, "A failure occurred when returning to the Cognito Hosted UI");
-                        dispatchAuthEvent('customState_failure', err_3, "A failure occurred when returning state");
-                        return [3 /*break*/, 7];
-                    case 7: return [3 /*break*/, 9];
-                    case 8:
-                        this.oAuthFlowInProgress = false;
-                        return [7 /*endfinally*/];
-                    case 9: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Compact version of credentials
-     * @param {Object} credentials
-     * @return {Object} - Credentials
-     */
-    InternalAuthClass.prototype.essentialCredentials = function (credentials) {
-        return {
-            accessKeyId: credentials.accessKeyId,
-            sessionToken: credentials.sessionToken,
-            secretAccessKey: credentials.secretAccessKey,
-            identityId: credentials.identityId,
-            authenticated: credentials.authenticated,
-        };
-    };
-    InternalAuthClass.prototype.attributesToObject = function (attributes) {
-        var _this = this;
-        var obj = {};
-        if (attributes) {
-            attributes.map(function (attribute) {
-                if (attribute.Name === 'email_verified' ||
-                    attribute.Name === 'phone_number_verified') {
-                    obj[attribute.Name] =
-                        _this.isTruthyString(attribute.Value) || attribute.Value === true;
-                }
-                else {
-                    obj[attribute.Name] = attribute.Value;
-                }
-            });
-        }
-        return obj;
-    };
-    InternalAuthClass.prototype.isTruthyString = function (value) {
-        return (typeof value.toLowerCase === 'function' && value.toLowerCase() === 'true');
-    };
-    InternalAuthClass.prototype.createCognitoUser = function (username) {
-        var userData = {
-            Username: username,
-            Pool: this.userPool,
-        };
-        userData.Storage = this._storage;
-        var authenticationFlowType = this._config.authenticationFlowType;
-        var internalUser = new internals_1.InternalCognitoUser(userData);
-        if (authenticationFlowType) {
-            internalUser.setAuthenticationFlowType(authenticationFlowType);
-        }
-        return internalUser;
-    };
-    InternalAuthClass.prototype._isValidAuthStorage = function (obj) {
-        // We need to check if the obj has the functions of Storage
-        return (!!obj &&
-            typeof obj.getItem === 'function' &&
-            typeof obj.setItem === 'function' &&
-            typeof obj.removeItem === 'function' &&
-            typeof obj.clear === 'function');
-    };
-    InternalAuthClass.prototype.noUserPoolErrorHandler = function (config) {
-        if (config) {
-            if (!config.userPoolId || !config.identityPoolId) {
-                return Auth_1.AuthErrorTypes.MissingAuthConfig;
-            }
-        }
-        return Auth_1.AuthErrorTypes.NoConfig;
-    };
-    InternalAuthClass.prototype.rejectAuthError = function (type) {
-        return Promise.reject(new Errors_1.AuthError(type));
-    };
-    InternalAuthClass.prototype.rejectNoUserPool = function () {
-        var type = this.noUserPoolErrorHandler(this._config);
-        return Promise.reject(new Errors_1.NoUserPoolError(type));
-    };
-    InternalAuthClass.prototype.rememberDevice = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var internalUser, userAgentDetails, error_2;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.RememberDevice, customUserAgentDetails);
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this._currentUserPoolUser(undefined, userAgentDetails)];
-                    case 2:
-                        internalUser = _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_2 = _a.sent();
-                        logger.debug('The user is not authenticated by the error', error_2);
-                        return [2 /*return*/, Promise.reject('The user is not authenticated')];
-                    case 4:
-                        internalUser.getCachedDeviceKeyAndPassword();
-                        return [2 /*return*/, new Promise(function (res, rej) {
-                                internalUser.setDeviceStatusRemembered({
-                                    onSuccess: function (data) {
-                                        res(data);
-                                    },
-                                    onFailure: function (err) {
-                                        if (err.code === 'InvalidParameterException') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.DeviceConfig));
-                                        }
-                                        else if (err.code === 'NetworkError') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.NetworkError));
-                                        }
-                                        else {
-                                            rej(err);
-                                        }
-                                    },
-                                }, core_1.getAmplifyUserAgent(userAgentDetails));
-                            })];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.forgetDevice = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var internalUser, userAgentDetails, error_3;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.ForgetDevice, customUserAgentDetails);
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this._currentUserPoolUser(undefined, userAgentDetails)];
-                    case 2:
-                        internalUser = _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_3 = _a.sent();
-                        logger.debug('The user is not authenticated by the error', error_3);
-                        return [2 /*return*/, Promise.reject('The user is not authenticated')];
-                    case 4:
-                        internalUser.getCachedDeviceKeyAndPassword();
-                        return [2 /*return*/, new Promise(function (res, rej) {
-                                internalUser.forgetDevice({
-                                    onSuccess: function (data) {
-                                        res(data);
-                                    },
-                                    onFailure: function (err) {
-                                        if (err.code === 'InvalidParameterException') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.DeviceConfig));
-                                        }
-                                        else if (err.code === 'NetworkError') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.NetworkError));
-                                        }
-                                        else {
-                                            rej(err);
-                                        }
-                                    },
-                                }, core_1.getAmplifyUserAgent(userAgentDetails));
-                            })];
-                }
-            });
-        });
-    };
-    InternalAuthClass.prototype.fetchDevices = function (customUserAgentDetails) {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var internalUser, userAgentDetails, error_4;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        userAgentDetails = utils_1.getAuthUserAgentDetails(core_1.AuthAction.FetchDevices, customUserAgentDetails);
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this._currentUserPoolUser(undefined, userAgentDetails)];
-                    case 2:
-                        internalUser = _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_4 = _a.sent();
-                        logger.debug('The user is not authenticated by the error', error_4);
-                        throw new Error('The user is not authenticated');
-                    case 4:
-                        internalUser.getCachedDeviceKeyAndPassword();
-                        return [2 /*return*/, new Promise(function (res, rej) {
-                                var cb = {
-                                    onSuccess: function (data) {
-                                        var deviceList = data.Devices.map(function (device) {
-                                            var deviceName = device.DeviceAttributes.find(function (_a) {
-                                                var Name = _a.Name;
-                                                return Name === 'device_name';
-                                            }) || {};
-                                            var deviceInfo = {
-                                                id: device.DeviceKey,
-                                                name: deviceName.Value,
-                                            };
-                                            return deviceInfo;
-                                        });
-                                        res(deviceList);
-                                    },
-                                    onFailure: function (err) {
-                                        if (err.code === 'InvalidParameterException') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.DeviceConfig));
-                                        }
-                                        else if (err.code === 'NetworkError') {
-                                            rej(new Errors_1.AuthError(Auth_1.AuthErrorTypes.NetworkError));
-                                        }
-                                        else {
-                                            rej(err);
-                                        }
-                                    },
-                                };
-                                internalUser.listDevices(MAX_DEVICES, null, cb, core_1.getAmplifyUserAgent(userAgentDetails));
-                            })];
-                }
-            });
-        });
-    };
-    return InternalAuthClass;
-}());
-exports.InternalAuthClass = InternalAuthClass;
-exports.InternalAuth = new InternalAuthClass(null);
-core_1.Amplify.register(exports.InternalAuth);
-//# sourceMappingURL=InternalAuth.js.map