@aws-amplify/auth 6.10.2-unstable.ba025e5.0 → 6.10.2

package/dist/esm/providers/cognito/utils/getNewDeviceMetadata.d.ts

@@ -0,0 +1,17 @@
+import { DeviceMetadata } from '../tokenProvider/types';
+import { NewDeviceMetadataType } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+/**
+ * This function is used to kick off the device management flow.
+ *
+ * If an error is thrown while generating a hash device or calling the `ConfirmDevice`
+ * client, then this API will ignore the error and return undefined. Otherwise the authentication
+ * flow will not complete and the user won't be able to be signed in.
+ *
+ * @returns DeviceMetadata | undefined
+ */
+export declare function getNewDeviceMetadata({ userPoolId, userPoolEndpoint, newDeviceMetadata, accessToken, }: {
+    userPoolId: string;
+    userPoolEndpoint: string | undefined;
+    newDeviceMetadata?: NewDeviceMetadataType;
+    accessToken?: string;
+}): Promise<DeviceMetadata | undefined>;

package/dist/esm/providers/cognito/utils/getNewDeviceMetadata.mjs

@@ -0,0 +1,71 @@
+import { base64Encoder, getDeviceName } from '@aws-amplify/core/internals/utils';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../types/errors.mjs';
+import { createConfirmDeviceClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createConfirmDeviceClient.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import { getAuthenticationHelper } from './srp/getAuthenticationHelper.mjs';
+import { getBytesFromHex } from './srp/getBytesFromHex.mjs';
+import '@aws-crypto/sha256-js';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * This function is used to kick off the device management flow.
+ *
+ * If an error is thrown while generating a hash device or calling the `ConfirmDevice`
+ * client, then this API will ignore the error and return undefined. Otherwise the authentication
+ * flow will not complete and the user won't be able to be signed in.
+ *
+ * @returns DeviceMetadata | undefined
+ */
+async function getNewDeviceMetadata({ userPoolId, userPoolEndpoint, newDeviceMetadata, accessToken, }) {
+    if (!newDeviceMetadata)
+        return undefined;
+    const userPoolName = userPoolId.split('_')[1] || '';
+    const authenticationHelper = await getAuthenticationHelper(userPoolName);
+    const deviceKey = newDeviceMetadata?.DeviceKey;
+    const deviceGroupKey = newDeviceMetadata?.DeviceGroupKey;
+    try {
+        await authenticationHelper.generateHashDevice(deviceGroupKey ?? '', deviceKey ?? '');
+    }
+    catch (errGenHash) {
+        // TODO: log error here
+        return undefined;
+    }
+    const deviceSecretVerifierConfig = {
+        Salt: base64Encoder.convert(getBytesFromHex(authenticationHelper.getSaltToHashDevices())),
+        PasswordVerifier: base64Encoder.convert(getBytesFromHex(authenticationHelper.getVerifierDevices())),
+    };
+    const randomPassword = authenticationHelper.getRandomPassword();
+    try {
+        const confirmDevice = createConfirmDeviceClient({
+            endpointResolver: createCognitoUserPoolEndpointResolver({
+                endpointOverride: userPoolEndpoint,
+            }),
+        });
+        await confirmDevice({ region: getRegionFromUserPoolId(userPoolId) }, {
+            AccessToken: accessToken,
+            DeviceName: await getDeviceName(),
+            DeviceKey: newDeviceMetadata?.DeviceKey,
+            DeviceSecretVerifierConfig: deviceSecretVerifierConfig,
+        });
+        return {
+            deviceKey,
+            deviceGroupKey,
+            randomPassword,
+        };
+    }
+    catch (error) {
+        // TODO: log error here
+        return undefined;
+    }
+}
+
+export { getNewDeviceMetadata };
+//# sourceMappingURL=getNewDeviceMetadata.mjs.map

package/dist/esm/providers/cognito/utils/getNewDeviceMetadata.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getNewDeviceMetadata.mjs","sources":["../../../../../src/providers/cognito/utils/getNewDeviceMetadata.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { base64Encoder, getDeviceName, } from '@aws-amplify/core/internals/utils';\nimport { createConfirmDeviceClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { getAuthenticationHelper, getBytesFromHex } from './srp';\n/**\n * This function is used to kick off the device management flow.\n *\n * If an error is thrown while generating a hash device or calling the `ConfirmDevice`\n * client, then this API will ignore the error and return undefined. Otherwise the authentication\n * flow will not complete and the user won't be able to be signed in.\n *\n * @returns DeviceMetadata | undefined\n */\nexport async function getNewDeviceMetadata({ userPoolId, userPoolEndpoint, newDeviceMetadata, accessToken, }) {\n    if (!newDeviceMetadata)\n        return undefined;\n    const userPoolName = userPoolId.split('_')[1] || '';\n    const authenticationHelper = await getAuthenticationHelper(userPoolName);\n    const deviceKey = newDeviceMetadata?.DeviceKey;\n    const deviceGroupKey = newDeviceMetadata?.DeviceGroupKey;\n    try {\n        await authenticationHelper.generateHashDevice(deviceGroupKey ?? '', deviceKey ?? '');\n    }\n    catch (errGenHash) {\n        // TODO: log error here\n        return undefined;\n    }\n    const deviceSecretVerifierConfig = {\n        Salt: base64Encoder.convert(getBytesFromHex(authenticationHelper.getSaltToHashDevices())),\n        PasswordVerifier: base64Encoder.convert(getBytesFromHex(authenticationHelper.getVerifierDevices())),\n    };\n    const randomPassword = authenticationHelper.getRandomPassword();\n    try {\n        const confirmDevice = createConfirmDeviceClient({\n            endpointResolver: createCognitoUserPoolEndpointResolver({\n                endpointOverride: userPoolEndpoint,\n            }),\n        });\n        await confirmDevice({ region: getRegionFromUserPoolId(userPoolId) }, {\n            AccessToken: accessToken,\n            DeviceName: await getDeviceName(),\n            DeviceKey: newDeviceMetadata?.DeviceKey,\n            DeviceSecretVerifierConfig: deviceSecretVerifierConfig,\n        });\n        return {\n            deviceKey,\n            deviceGroupKey,\n            randomPassword,\n        };\n    }\n    catch (error) {\n        // TODO: log error here\n        return undefined;\n    }\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,oBAAoB,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,GAAG,EAAE;AAC9G,IAAI,IAAI,CAAC,iBAAiB;AAC1B,QAAQ,OAAO,SAAS,CAAC;AACzB,IAAI,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,IAAI,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;AAC7E,IAAI,MAAM,SAAS,GAAG,iBAAiB,EAAE,SAAS,CAAC;AACnD,IAAI,MAAM,cAAc,GAAG,iBAAiB,EAAE,cAAc,CAAC;AAC7D,IAAI,IAAI;AACR,QAAQ,MAAM,oBAAoB,CAAC,kBAAkB,CAAC,cAAc,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;AAC7F,KAAK;AACL,IAAI,OAAO,UAAU,EAAE;AACvB;AACA,QAAQ,OAAO,SAAS,CAAC;AACzB,KAAK;AACL,IAAI,MAAM,0BAA0B,GAAG;AACvC,QAAQ,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,CAAC,CAAC;AACjG,QAAQ,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC3G,KAAK,CAAC;AACN,IAAI,MAAM,cAAc,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,CAAC;AACpE,IAAI,IAAI;AACR,QAAQ,MAAM,aAAa,GAAG,yBAAyB,CAAC;AACxD,YAAY,gBAAgB,EAAE,qCAAqC,CAAC;AACpE,gBAAgB,gBAAgB,EAAE,gBAAgB;AAClD,aAAa,CAAC;AACd,SAAS,CAAC,CAAC;AACX,QAAQ,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,EAAE;AAC7E,YAAY,WAAW,EAAE,WAAW;AACpC,YAAY,UAAU,EAAE,MAAM,aAAa,EAAE;AAC7C,YAAY,SAAS,EAAE,iBAAiB,EAAE,SAAS;AACnD,YAAY,0BAA0B,EAAE,0BAA0B;AAClE,SAAS,CAAC,CAAC;AACX,QAAQ,OAAO;AACf,YAAY,SAAS;AACrB,YAAY,cAAc;AAC1B,YAAY,cAAc;AAC1B,SAAS,CAAC;AACV,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB;AACA,QAAQ,OAAO,SAAS,CAAC;AACzB,KAAK;AACL;;;;"}

package/dist/esm/providers/cognito/utils/handleDeviceSRPAuth.d.ts

@@ -0,0 +1,13 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { ClientMetadata } from '../types';
+import { AuthTokenOrchestrator } from '../tokenProvider/types';
+import { RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+interface HandleDeviceSRPInput {
+    username: string;
+    config: CognitoUserPoolConfig;
+    clientMetadata: ClientMetadata | undefined;
+    session: string | undefined;
+    tokenOrchestrator?: AuthTokenOrchestrator;
+}
+export declare function handleDeviceSRPAuth({ username, config, clientMetadata, session, tokenOrchestrator, }: HandleDeviceSRPInput): Promise<RespondToAuthChallengeCommandOutput>;
+export {};

package/dist/esm/providers/cognito/utils/handleDeviceSRPAuth.mjs

@@ -0,0 +1,97 @@
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '@aws-amplify/core/internals/utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../types/errors.mjs';
+import { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createRespondToAuthChallengeClient.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import { assertDeviceMetadata } from './types.mjs';
+import { getAuthenticationHelper } from './srp/getAuthenticationHelper.mjs';
+import './srp/constants.mjs';
+import { getNowString } from './srp/getNowString.mjs';
+import { getSignatureString } from './srp/getSignatureString.mjs';
+import BigInteger from './srp/BigInteger/BigInteger.mjs';
+import { getUserContextData } from './userContextData.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+async function handleDeviceSRPAuth({ username, config, clientMetadata, session, tokenOrchestrator, }) {
+    const { userPoolId, userPoolEndpoint } = config;
+    const clientId = config.userPoolClientId;
+    const deviceMetadata = await tokenOrchestrator?.getDeviceMetadata(username);
+    assertDeviceMetadata(deviceMetadata);
+    const authenticationHelper = await getAuthenticationHelper(deviceMetadata.deviceGroupKey);
+    const challengeResponses = {
+        USERNAME: username,
+        SRP_A: authenticationHelper.A.toString(16),
+        DEVICE_KEY: deviceMetadata.deviceKey,
+    };
+    const jsonReqResponseChallenge = {
+        ChallengeName: 'DEVICE_SRP_AUTH',
+        ClientId: clientId,
+        ChallengeResponses: challengeResponses,
+        ClientMetadata: clientMetadata,
+        Session: session,
+    };
+    const respondToAuthChallenge = createRespondToAuthChallengeClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    const { ChallengeParameters: respondedChallengeParameters, Session } = await respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);
+    return handleDevicePasswordVerifier(username, respondedChallengeParameters, clientMetadata, Session, authenticationHelper, config, tokenOrchestrator);
+}
+async function handleDevicePasswordVerifier(username, challengeParameters, clientMetadata, session, authenticationHelper, { userPoolId, userPoolClientId, userPoolEndpoint }, tokenOrchestrator) {
+    const deviceMetadata = await tokenOrchestrator?.getDeviceMetadata(username);
+    assertDeviceMetadata(deviceMetadata);
+    const serverBValue = new BigInteger(challengeParameters?.SRP_B, 16);
+    const salt = new BigInteger(challengeParameters?.SALT, 16);
+    const { deviceKey } = deviceMetadata;
+    const { deviceGroupKey } = deviceMetadata;
+    const hkdf = await authenticationHelper.getPasswordAuthenticationKey({
+        username: deviceMetadata.deviceKey,
+        password: deviceMetadata.randomPassword,
+        serverBValue,
+        salt,
+    });
+    const dateNow = getNowString();
+    const challengeResponses = {
+        USERNAME: challengeParameters?.USERNAME ?? username,
+        PASSWORD_CLAIM_SECRET_BLOCK: challengeParameters?.SECRET_BLOCK,
+        TIMESTAMP: dateNow,
+        PASSWORD_CLAIM_SIGNATURE: getSignatureString({
+            username: deviceKey,
+            userPoolName: deviceGroupKey,
+            challengeParameters,
+            dateNow,
+            hkdf,
+        }),
+        DEVICE_KEY: deviceKey,
+    };
+    const UserContextData = getUserContextData({
+        username,
+        userPoolId,
+        userPoolClientId,
+    });
+    const jsonReqResponseChallenge = {
+        ChallengeName: 'DEVICE_PASSWORD_VERIFIER',
+        ClientId: userPoolClientId,
+        ChallengeResponses: challengeResponses,
+        Session: session,
+        ClientMetadata: clientMetadata,
+        UserContextData,
+    };
+    const respondToAuthChallenge = createRespondToAuthChallengeClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    return respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);
+}
+
+export { handleDeviceSRPAuth };
+//# sourceMappingURL=handleDeviceSRPAuth.mjs.map

package/dist/esm/providers/cognito/utils/handleDeviceSRPAuth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleDeviceSRPAuth.mjs","sources":["../../../../../src/providers/cognito/utils/handleDeviceSRPAuth.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { assertDeviceMetadata } from './types';\nimport { getAuthenticationHelper, getNowString, getSignatureString, } from './srp';\nimport { BigInteger } from './srp/BigInteger';\nimport { getUserContextData } from './userContextData';\nexport async function handleDeviceSRPAuth({ username, config, clientMetadata, session, tokenOrchestrator, }) {\n    const { userPoolId, userPoolEndpoint } = config;\n    const clientId = config.userPoolClientId;\n    const deviceMetadata = await tokenOrchestrator?.getDeviceMetadata(username);\n    assertDeviceMetadata(deviceMetadata);\n    const authenticationHelper = await getAuthenticationHelper(deviceMetadata.deviceGroupKey);\n    const challengeResponses = {\n        USERNAME: username,\n        SRP_A: authenticationHelper.A.toString(16),\n        DEVICE_KEY: deviceMetadata.deviceKey,\n    };\n    const jsonReqResponseChallenge = {\n        ChallengeName: 'DEVICE_SRP_AUTH',\n        ClientId: clientId,\n        ChallengeResponses: challengeResponses,\n        ClientMetadata: clientMetadata,\n        Session: session,\n    };\n    const respondToAuthChallenge = createRespondToAuthChallengeClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    const { ChallengeParameters: respondedChallengeParameters, Session } = await respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);\n    return handleDevicePasswordVerifier(username, respondedChallengeParameters, clientMetadata, Session, authenticationHelper, config, tokenOrchestrator);\n}\nasync function handleDevicePasswordVerifier(username, challengeParameters, clientMetadata, session, authenticationHelper, { userPoolId, userPoolClientId, userPoolEndpoint }, tokenOrchestrator) {\n    const deviceMetadata = await tokenOrchestrator?.getDeviceMetadata(username);\n    assertDeviceMetadata(deviceMetadata);\n    const serverBValue = new BigInteger(challengeParameters?.SRP_B, 16);\n    const salt = new BigInteger(challengeParameters?.SALT, 16);\n    const { deviceKey } = deviceMetadata;\n    const { deviceGroupKey } = deviceMetadata;\n    const hkdf = await authenticationHelper.getPasswordAuthenticationKey({\n        username: deviceMetadata.deviceKey,\n        password: deviceMetadata.randomPassword,\n        serverBValue,\n        salt,\n    });\n    const dateNow = getNowString();\n    const challengeResponses = {\n        USERNAME: challengeParameters?.USERNAME ?? username,\n        PASSWORD_CLAIM_SECRET_BLOCK: challengeParameters?.SECRET_BLOCK,\n        TIMESTAMP: dateNow,\n        PASSWORD_CLAIM_SIGNATURE: getSignatureString({\n            username: deviceKey,\n            userPoolName: deviceGroupKey,\n            challengeParameters,\n            dateNow,\n            hkdf,\n        }),\n        DEVICE_KEY: deviceKey,\n    };\n    const UserContextData = getUserContextData({\n        username,\n        userPoolId,\n        userPoolClientId,\n    });\n    const jsonReqResponseChallenge = {\n        ChallengeName: 'DEVICE_PASSWORD_VERIFIER',\n        ClientId: userPoolClientId,\n        ChallengeResponses: challengeResponses,\n        Session: session,\n        ClientMetadata: clientMetadata,\n        UserContextData,\n    };\n    const respondToAuthChallenge = createRespondToAuthChallengeClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    return respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AACA;AAQO,eAAe,mBAAmB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,GAAG,EAAE;AAC7G,IAAI,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;AACpD,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAC7C,IAAI,MAAM,cAAc,GAAG,MAAM,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAChF,IAAI,oBAAoB,CAAC,cAAc,CAAC,CAAC;AACzC,IAAI,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;AAC9F,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClD,QAAQ,UAAU,EAAE,cAAc,CAAC,SAAS;AAC5C,KAAK,CAAC;AACN,IAAI,MAAM,wBAAwB,GAAG;AACrC,QAAQ,aAAa,EAAE,iBAAiB;AACxC,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,kBAAkB,EAAE,kBAAkB;AAC9C,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,OAAO,EAAE,OAAO;AACxB,KAAK,CAAC;AACN,IAAI,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACtE,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,OAAO,EAAE,GAAG,MAAM,sBAAsB,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;AACnL,IAAI,OAAO,4BAA4B,CAAC,QAAQ,EAAE,4BAA4B,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC1J,CAAC;AACD,eAAe,4BAA4B,CAAC,QAAQ,EAAE,mBAAmB,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,EAAE,iBAAiB,EAAE;AACjM,IAAI,MAAM,cAAc,GAAG,MAAM,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAChF,IAAI,oBAAoB,CAAC,cAAc,CAAC,CAAC;AACzC,IAAI,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,mBAAmB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,IAAI,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC/D,IAAI,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC;AACzC,IAAI,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC;AAC9C,IAAI,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,4BAA4B,CAAC;AACzE,QAAQ,QAAQ,EAAE,cAAc,CAAC,SAAS;AAC1C,QAAQ,QAAQ,EAAE,cAAc,CAAC,cAAc;AAC/C,QAAQ,YAAY;AACpB,QAAQ,IAAI;AACZ,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;AACnC,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,IAAI,QAAQ;AAC3D,QAAQ,2BAA2B,EAAE,mBAAmB,EAAE,YAAY;AACtE,QAAQ,SAAS,EAAE,OAAO;AAC1B,QAAQ,wBAAwB,EAAE,kBAAkB,CAAC;AACrD,YAAY,QAAQ,EAAE,SAAS;AAC/B,YAAY,YAAY,EAAE,cAAc;AACxC,YAAY,mBAAmB;AAC/B,YAAY,OAAO;AACnB,YAAY,IAAI;AAChB,SAAS,CAAC;AACV,QAAQ,UAAU,EAAE,SAAS;AAC7B,KAAK,CAAC;AACN,IAAI,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC/C,QAAQ,QAAQ;AAChB,QAAQ,UAAU;AAClB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,wBAAwB,GAAG;AACrC,QAAQ,aAAa,EAAE,0BAA0B;AACjD,QAAQ,QAAQ,EAAE,gBAAgB;AAClC,QAAQ,kBAAkB,EAAE,kBAAkB;AAC9C,QAAQ,OAAO,EAAE,OAAO;AACxB,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,eAAe;AACvB,KAAK,CAAC;AACN,IAAI,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACtE,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,OAAO,sBAAsB,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC7G;;;;"}

package/dist/esm/providers/cognito/utils/handlePasswordVerifierChallenge.d.ts

@@ -0,0 +1,6 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { ClientMetadata } from '../types';
+import { AuthTokenOrchestrator } from '../tokenProvider/types';
+import { ChallengeParameters, RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { AuthenticationHelper } from './srp/AuthenticationHelper';
+export declare function handlePasswordVerifierChallenge(password: string, challengeParameters: ChallengeParameters, clientMetadata: ClientMetadata | undefined, session: string | undefined, authenticationHelper: AuthenticationHelper, config: CognitoUserPoolConfig, tokenOrchestrator: AuthTokenOrchestrator): Promise<RespondToAuthChallengeCommandOutput>;

package/dist/esm/providers/cognito/utils/handlePasswordVerifierChallenge.mjs

@@ -0,0 +1,88 @@
+import { AuthError } from '../../../errors/AuthError.mjs';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '@aws-amplify/core/internals/utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../types/errors.mjs';
+import { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createRespondToAuthChallengeClient.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import BigInteger from './srp/BigInteger/BigInteger.mjs';
+import './srp/constants.mjs';
+import '@aws-crypto/sha256-js';
+import { getNowString } from './srp/getNowString.mjs';
+import { getSignatureString } from './srp/getSignatureString.mjs';
+import { getUserContextData } from './userContextData.mjs';
+import { handleDeviceSRPAuth } from './handleDeviceSRPAuth.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+async function handlePasswordVerifierChallenge(password, challengeParameters, clientMetadata, session, authenticationHelper, config, tokenOrchestrator) {
+    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;
+    const userPoolName = userPoolId?.split('_')[1] || '';
+    const serverBValue = new BigInteger(challengeParameters?.SRP_B, 16);
+    const salt = new BigInteger(challengeParameters?.SALT, 16);
+    const username = challengeParameters?.USER_ID_FOR_SRP;
+    if (!username)
+        throw new AuthError({
+            name: 'EmptyUserIdForSRPException',
+            message: 'USER_ID_FOR_SRP was not found in challengeParameters',
+        });
+    const hkdf = await authenticationHelper.getPasswordAuthenticationKey({
+        username,
+        password,
+        serverBValue,
+        salt,
+    });
+    const dateNow = getNowString();
+    const challengeResponses = {
+        USERNAME: username,
+        PASSWORD_CLAIM_SECRET_BLOCK: challengeParameters?.SECRET_BLOCK,
+        TIMESTAMP: dateNow,
+        PASSWORD_CLAIM_SIGNATURE: getSignatureString({
+            username,
+            userPoolName,
+            challengeParameters,
+            dateNow,
+            hkdf,
+        }),
+    };
+    const deviceMetadata = await tokenOrchestrator.getDeviceMetadata(username);
+    if (deviceMetadata && deviceMetadata.deviceKey) {
+        challengeResponses.DEVICE_KEY = deviceMetadata.deviceKey;
+    }
+    const UserContextData = getUserContextData({
+        username,
+        userPoolId,
+        userPoolClientId,
+    });
+    const jsonReqResponseChallenge = {
+        ChallengeName: 'PASSWORD_VERIFIER',
+        ChallengeResponses: challengeResponses,
+        ClientMetadata: clientMetadata,
+        Session: session,
+        ClientId: userPoolClientId,
+        UserContextData,
+    };
+    const respondToAuthChallenge = createRespondToAuthChallengeClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    const response = await respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);
+    if (response.ChallengeName === 'DEVICE_SRP_AUTH')
+        return handleDeviceSRPAuth({
+            username,
+            config,
+            clientMetadata,
+            session: response.Session,
+            tokenOrchestrator,
+        });
+    return response;
+}
+
+export { handlePasswordVerifierChallenge };
+//# sourceMappingURL=handlePasswordVerifierChallenge.mjs.map

package/dist/esm/providers/cognito/utils/handlePasswordVerifierChallenge.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlePasswordVerifierChallenge.mjs","sources":["../../../../../src/providers/cognito/utils/handlePasswordVerifierChallenge.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AuthError } from '../../../errors/AuthError';\nimport { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { getNowString, getSignatureString } from './srp';\nimport { BigInteger } from './srp/BigInteger';\nimport { getUserContextData } from './userContextData';\nimport { handleDeviceSRPAuth } from './handleDeviceSRPAuth';\nexport async function handlePasswordVerifierChallenge(password, challengeParameters, clientMetadata, session, authenticationHelper, config, tokenOrchestrator) {\n    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;\n    const userPoolName = userPoolId?.split('_')[1] || '';\n    const serverBValue = new BigInteger(challengeParameters?.SRP_B, 16);\n    const salt = new BigInteger(challengeParameters?.SALT, 16);\n    const username = challengeParameters?.USER_ID_FOR_SRP;\n    if (!username)\n        throw new AuthError({\n            name: 'EmptyUserIdForSRPException',\n            message: 'USER_ID_FOR_SRP was not found in challengeParameters',\n        });\n    const hkdf = await authenticationHelper.getPasswordAuthenticationKey({\n        username,\n        password,\n        serverBValue,\n        salt,\n    });\n    const dateNow = getNowString();\n    const challengeResponses = {\n        USERNAME: username,\n        PASSWORD_CLAIM_SECRET_BLOCK: challengeParameters?.SECRET_BLOCK,\n        TIMESTAMP: dateNow,\n        PASSWORD_CLAIM_SIGNATURE: getSignatureString({\n            username,\n            userPoolName,\n            challengeParameters,\n            dateNow,\n            hkdf,\n        }),\n    };\n    const deviceMetadata = await tokenOrchestrator.getDeviceMetadata(username);\n    if (deviceMetadata && deviceMetadata.deviceKey) {\n        challengeResponses.DEVICE_KEY = deviceMetadata.deviceKey;\n    }\n    const UserContextData = getUserContextData({\n        username,\n        userPoolId,\n        userPoolClientId,\n    });\n    const jsonReqResponseChallenge = {\n        ChallengeName: 'PASSWORD_VERIFIER',\n        ChallengeResponses: challengeResponses,\n        ClientMetadata: clientMetadata,\n        Session: session,\n        ClientId: userPoolClientId,\n        UserContextData,\n    };\n    const respondToAuthChallenge = createRespondToAuthChallengeClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    const response = await respondToAuthChallenge({ region: getRegionFromUserPoolId(userPoolId) }, jsonReqResponseChallenge);\n    if (response.ChallengeName === 'DEVICE_SRP_AUTH')\n        return handleDeviceSRPAuth({\n            username,\n            config,\n            clientMetadata,\n            session: response.Session,\n            tokenOrchestrator,\n        });\n    return response;\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AACA;AASO,eAAe,+BAA+B,CAAC,QAAQ,EAAE,mBAAmB,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE;AAC/J,IAAI,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;AACtE,IAAI,MAAM,YAAY,GAAG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzD,IAAI,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,mBAAmB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,IAAI,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC/D,IAAI,MAAM,QAAQ,GAAG,mBAAmB,EAAE,eAAe,CAAC;AAC1D,IAAI,IAAI,CAAC,QAAQ;AACjB,QAAQ,MAAM,IAAI,SAAS,CAAC;AAC5B,YAAY,IAAI,EAAE,4BAA4B;AAC9C,YAAY,OAAO,EAAE,sDAAsD;AAC3E,SAAS,CAAC,CAAC;AACX,IAAI,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,4BAA4B,CAAC;AACzE,QAAQ,QAAQ;AAChB,QAAQ,QAAQ;AAChB,QAAQ,YAAY;AACpB,QAAQ,IAAI;AACZ,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;AACnC,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,2BAA2B,EAAE,mBAAmB,EAAE,YAAY;AACtE,QAAQ,SAAS,EAAE,OAAO;AAC1B,QAAQ,wBAAwB,EAAE,kBAAkB,CAAC;AACrD,YAAY,QAAQ;AACpB,YAAY,YAAY;AACxB,YAAY,mBAAmB;AAC/B,YAAY,OAAO;AACnB,YAAY,IAAI;AAChB,SAAS,CAAC;AACV,KAAK,CAAC;AACN,IAAI,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAC/E,IAAI,IAAI,cAAc,IAAI,cAAc,CAAC,SAAS,EAAE;AACpD,QAAQ,kBAAkB,CAAC,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC;AACjE,KAAK;AACL,IAAI,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC/C,QAAQ,QAAQ;AAChB,QAAQ,UAAU;AAClB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,wBAAwB,GAAG;AACrC,QAAQ,aAAa,EAAE,mBAAmB;AAC1C,QAAQ,kBAAkB,EAAE,kBAAkB;AAC9C,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,OAAO,EAAE,OAAO;AACxB,QAAQ,QAAQ,EAAE,gBAAgB;AAClC,QAAQ,eAAe;AACvB,KAAK,CAAC;AACN,IAAI,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACtE,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC7H,IAAI,IAAI,QAAQ,CAAC,aAAa,KAAK,iBAAiB;AACpD,QAAQ,OAAO,mBAAmB,CAAC;AACnC,YAAY,QAAQ;AACpB,YAAY,MAAM;AAClB,YAAY,cAAc;AAC1B,YAAY,OAAO,EAAE,QAAQ,CAAC,OAAO;AACrC,YAAY,iBAAiB;AAC7B,SAAS,CAAC,CAAC;AACX,IAAI,OAAO,QAAQ,CAAC;AACpB;;;;"}

package/dist/esm/providers/cognito/utils/retryOnResourceNotFoundException.d.ts

@@ -0,0 +1,7 @@
+import { AuthTokenOrchestrator } from '../tokenProvider/types';
+/**
+ * It will retry the function if the error is a `ResourceNotFoundException` and
+ * will clean the device keys stored in the storage mechanism.
+ *
+ */
+export declare function retryOnResourceNotFoundException<F extends (...args: any[]) => any>(func: F, args: Parameters<F>, username: string, tokenOrchestrator: AuthTokenOrchestrator): Promise<ReturnType<F>>;

package/dist/esm/providers/cognito/utils/retryOnResourceNotFoundException.mjs

@@ -0,0 +1,26 @@
+import { AuthError } from '../../../errors/AuthError.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * It will retry the function if the error is a `ResourceNotFoundException` and
+ * will clean the device keys stored in the storage mechanism.
+ *
+ */
+async function retryOnResourceNotFoundException(func, args, username, tokenOrchestrator) {
+    try {
+        return await func(...args);
+    }
+    catch (error) {
+        if (error instanceof AuthError &&
+            error.name === 'ResourceNotFoundException' &&
+            error.message.includes('Device does not exist.')) {
+            await tokenOrchestrator.clearDeviceMetadata(username);
+            return func(...args);
+        }
+        throw error;
+    }
+}
+
+export { retryOnResourceNotFoundException };
+//# sourceMappingURL=retryOnResourceNotFoundException.mjs.map

package/dist/esm/providers/cognito/utils/retryOnResourceNotFoundException.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"retryOnResourceNotFoundException.mjs","sources":["../../../../../src/providers/cognito/utils/retryOnResourceNotFoundException.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AuthError } from '../../../errors/AuthError';\n/**\n * It will retry the function if the error is a `ResourceNotFoundException` and\n * will clean the device keys stored in the storage mechanism.\n *\n */\nexport async function retryOnResourceNotFoundException(func, args, username, tokenOrchestrator) {\n    try {\n        return await func(...args);\n    }\n    catch (error) {\n        if (error instanceof AuthError &&\n            error.name === 'ResourceNotFoundException' &&\n            error.message.includes('Device does not exist.')) {\n            await tokenOrchestrator.clearDeviceMetadata(username);\n            return func(...args);\n        }\n        throw error;\n    }\n}\n"],"names":[],"mappings":";;AAAA;AACA;AAEA;AACA;AACA;AACA;AACA;AACO,eAAe,gCAAgC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE;AAChG,IAAI,IAAI;AACR,QAAQ,OAAO,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACnC,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,IAAI,KAAK,YAAY,SAAS;AACtC,YAAY,KAAK,CAAC,IAAI,KAAK,2BAA2B;AACtD,YAAY,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;AAC9D,YAAY,MAAM,iBAAiB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAClE,YAAY,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACjC,SAAS;AACT,QAAQ,MAAM,KAAK,CAAC;AACpB,KAAK;AACL;;;;"}

package/dist/esm/providers/cognito/utils/setActiveSignInUsername.d.ts

@@ -0,0 +1 @@
+export declare function setActiveSignInUsername(username: string): void;

package/dist/esm/providers/cognito/utils/setActiveSignInUsername.mjs

@@ -0,0 +1,12 @@
+import '../../../client/utils/store/autoSignInStore.mjs';
+import { signInStore } from '../../../client/utils/store/signInStore.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+function setActiveSignInUsername(username) {
+    const { dispatch } = signInStore;
+    dispatch({ type: 'SET_USERNAME', value: username });
+}
+
+export { setActiveSignInUsername };
+//# sourceMappingURL=setActiveSignInUsername.mjs.map

package/dist/esm/providers/cognito/utils/setActiveSignInUsername.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"setActiveSignInUsername.mjs","sources":["../../../../../src/providers/cognito/utils/setActiveSignInUsername.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { signInStore } from '../../../client/utils/store';\nexport function setActiveSignInUsername(username) {\n    const { dispatch } = signInStore;\n    dispatch({ type: 'SET_USERNAME', value: username });\n}\n"],"names":[],"mappings":";;;AAAA;AACA;AAEO,SAAS,uBAAuB,CAAC,QAAQ,EAAE;AAClD,IAAI,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;AACrC,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACxD;;;;"}

package/dist/esm/providers/cognito/utils/signInHelpers.d.ts

@@ -2,9 +2,8 @@ import { CognitoUserPoolConfig } from '@aws-amplify/core';
 import { ClientMetadata, ConfirmSignInOptions } from '../types';
 import { AuthSignInOutput } from '../../../types';
 import { AuthMFAType, AuthTOTPSetupDetails, AuthUserAttributes } from '../../../types/models';
-import { AuthTokenOrchestrator, DeviceMetadata } from '../tokenProvider/types';
-import { ChallengeName, ChallengeParameters, CognitoMFAType, InitiateAuthCommandOutput, NewDeviceMetadataType, RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
-import { AuthenticationHelper } from './srp/AuthenticationHelper';
+import { AuthTokenOrchestrator } from '../tokenProvider/types';
+import { ChallengeName, ChallengeParameters, CognitoMFAType, InitiateAuthCommandOutput, RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
 interface HandleAuthChallengeRequest {
     challengeResponse: string;
     username: string;
@@ -24,7 +23,6 @@ export declare function handleUserPasswordAuthFlow(username: string, password: s
 export declare function handleUserSRPAuthFlow(username: string, password: string, clientMetadata: ClientMetadata | undefined, config: CognitoUserPoolConfig, tokenOrchestrator: AuthTokenOrchestrator): Promise<RespondToAuthChallengeCommandOutput>;
 export declare function handleCustomAuthFlowWithoutSRP(username: string, clientMetadata: ClientMetadata | undefined, config: CognitoUserPoolConfig, tokenOrchestrator: AuthTokenOrchestrator): Promise<InitiateAuthCommandOutput>;
 export declare function handleCustomSRPAuthFlow(username: string, password: string, clientMetadata: ClientMetadata | undefined, config: CognitoUserPoolConfig, tokenOrchestrator: AuthTokenOrchestrator): Promise<RespondToAuthChallengeCommandOutput>;
-export declare function handlePasswordVerifierChallenge(password: string, challengeParameters: ChallengeParameters, clientMetadata: ClientMetadata | undefined, session: string | undefined, authenticationHelper: AuthenticationHelper, config: CognitoUserPoolConfig, tokenOrchestrator: AuthTokenOrchestrator): Promise<RespondToAuthChallengeCommandOutput>;
 export declare function getSignInResult(params: {
     challengeName: ChallengeName;
     challengeParameters: ChallengeParameters;
@@ -41,28 +39,6 @@ export declare function getMFATypes(types?: string[]): AuthMFAType[] | undefined
 export declare function parseMFATypes(mfa?: string): CognitoMFAType[];
 export declare function getAllowedMfaSetupTypes(availableMfaSetupTypes: AuthMFAType[]): AuthMFAType[];
 export declare function assertUserNotAuthenticated(): Promise<void>;
-/**
- * This function is used to kick off the device management flow.
- *
- * If an error is thrown while generating a hash device or calling the `ConfirmDevice`
- * client, then this API will ignore the error and return undefined. Otherwise the authentication
- * flow will not complete and the user won't be able to be signed in.
- *
- * @returns DeviceMetadata | undefined
- */
-export declare function getNewDeviceMetadata({ userPoolId, userPoolEndpoint, newDeviceMetadata, accessToken, }: {
-    userPoolId: string;
-    userPoolEndpoint: string | undefined;
-    newDeviceMetadata?: NewDeviceMetadataType;
-    accessToken?: string;
-}): Promise<DeviceMetadata | undefined>;
-/**
- * It will retry the function if the error is a `ResourceNotFoundException` and
- * will clean the device keys stored in the storage mechanism.
- *
- */
-export declare function retryOnResourceNotFoundException<F extends (...args: any[]) => any>(func: F, args: Parameters<F>, username: string, tokenOrchestrator: AuthTokenOrchestrator): Promise<ReturnType<F>>;
-export declare function setActiveSignInUsername(username: string): void;
 export declare function getActiveSignInUsername(username: string): string;
 export declare function handleMFAChallenge({ challengeName, challengeResponse, clientMetadata, session, username, config, }: HandleAuthChallengeRequest & {
     challengeName: Extract<ChallengeName, 'EMAIL_OTP' | 'SMS_MFA' | 'SOFTWARE_TOKEN_MFA' | 'SMS_OTP'>;