@aws-amplify/auth 6.7.1-unstable.ab33a03.0 → 6.8.0

package/dist/esm/providers/cognito/utils/signUpHelpers.mjs

@@ -3,6 +3,7 @@ import { signIn } from '../apis/signIn.mjs';
 import { AuthError } from '../../../errors/AuthError.mjs';
 import { setAutoSignIn, resetAutoSignIn } from '../apis/autoSignIn.mjs';
 import { AUTO_SIGN_IN_EXCEPTION } from '../../../errors/constants.mjs';
+import { signInWithUserAuth } from '../apis/signInWithUserAuth.mjs';
 
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
@@ -25,7 +26,6 @@ function handleCodeAutoSignIn(signInInput) {
     // This will stop the listener if confirmSignUp is not resolved.
     const timeOutId = setTimeout(() => {
         stopHubListener();
-        setAutoSignInStarted(false);
         clearTimeout(timeOutId);
         resetAutoSignIn();
     }, MAX_AUTOSIGNIN_POLLING_MS);
@@ -49,7 +49,6 @@ function handleAutoSignInWithLink(signInInput, resolve, reject) {
         const maxTime = MAX_AUTOSIGNIN_POLLING_MS;
         if (elapsedTime > maxTime) {
             clearInterval(autoSignInPollingIntervalId);
-            setAutoSignInStarted(false);
             reject(new AuthError({
                 name: AUTO_SIGN_IN_EXCEPTION,
                 message: 'The account was not confirmed on time.',
@@ -63,13 +62,11 @@ function handleAutoSignInWithLink(signInInput, resolve, reject) {
                 if (signInOutput.nextStep.signInStep !== 'CONFIRM_SIGN_UP') {
                     resolve(signInOutput);
                     clearInterval(autoSignInPollingIntervalId);
-                    setAutoSignInStarted(false);
                     resetAutoSignIn();
                 }
             }
             catch (error) {
                 clearInterval(autoSignInPollingIntervalId);
-                setAutoSignInStarted(false);
                 reject(error);
                 resetAutoSignIn();
             }
@@ -78,26 +75,6 @@ function handleAutoSignInWithLink(signInInput, resolve, reject) {
 }
 const debouncedAutoSignInWithLink = debounce(handleAutoSignInWithLink, 300);
 const debouncedAutoSignWithCodeOrUserConfirmed = debounce(handleAutoSignInWithCodeOrUserConfirmed, 300);
-let autoSignInStarted = false;
-let usernameUsedForAutoSignIn;
-function setUsernameUsedForAutoSignIn(username) {
-    usernameUsedForAutoSignIn = username;
-}
-function isAutoSignInUserUsingConfirmSignUp(username) {
-    return usernameUsedForAutoSignIn === username;
-}
-function isAutoSignInStarted() {
-    return autoSignInStarted;
-}
-function setAutoSignInStarted(value) {
-    if (value === false) {
-        setUsernameUsedForAutoSignIn(undefined);
-    }
-    autoSignInStarted = value;
-}
-function isSignUpComplete(output) {
-    return !!output.UserConfirmed;
-}
 function autoSignInWhenUserIsConfirmedWithLink(signInInput) {
     return async () => {
         return new Promise((resolve, reject) => {
@@ -107,7 +84,9 @@ function autoSignInWhenUserIsConfirmedWithLink(signInInput) {
 }
 async function handleAutoSignInWithCodeOrUserConfirmed(signInInput, resolve, reject) {
     try {
-        const output = await signIn(signInInput);
+        const output = signInInput?.options?.authFlowType === 'USER_AUTH'
+            ? await signInWithUserAuth(signInInput)
+            : await signIn(signInInput);
         resolve(output);
         resetAutoSignIn();
     }
@@ -125,5 +104,5 @@ function autoSignInWithCode(signInInput) {
 }
 const autoSignInUserConfirmed = autoSignInWithCode;
 
-export { autoSignInUserConfirmed, autoSignInWhenUserIsConfirmedWithLink, handleCodeAutoSignIn, isAutoSignInStarted, isAutoSignInUserUsingConfirmSignUp, isSignUpComplete, setAutoSignInStarted, setUsernameUsedForAutoSignIn };
+export { autoSignInUserConfirmed, autoSignInWhenUserIsConfirmedWithLink, handleCodeAutoSignIn };
 //# sourceMappingURL=signUpHelpers.mjs.map

package/dist/esm/providers/cognito/utils/signUpHelpers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"signUpHelpers.mjs","sources":["../../../../../src/providers/cognito/utils/signUpHelpers.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { HubInternal } from '@aws-amplify/core/internals/utils';\nimport { signIn } from '../apis/signIn';\nimport { AuthError } from '../../../errors/AuthError';\nimport { resetAutoSignIn, setAutoSignIn } from '../apis/autoSignIn';\nimport { AUTO_SIGN_IN_EXCEPTION } from '../../../errors/constants';\nconst MAX_AUTOSIGNIN_POLLING_MS = 3 * 60 * 1000;\nexport function handleCodeAutoSignIn(signInInput) {\n    const stopHubListener = HubInternal.listen('auth-internal', async ({ payload }) => {\n        switch (payload.event) {\n            case 'confirmSignUp': {\n                const response = payload.data;\n                if (response?.isSignUpComplete) {\n                    HubInternal.dispatch('auth-internal', {\n                        event: 'autoSignIn',\n                    });\n                    setAutoSignIn(autoSignInWithCode(signInInput));\n                    stopHubListener();\n                }\n            }\n        }\n    });\n    // This will stop the listener if confirmSignUp is not resolved.\n    const timeOutId = setTimeout(() => {\n        stopHubListener();\n        setAutoSignInStarted(false);\n        clearTimeout(timeOutId);\n        resetAutoSignIn();\n    }, MAX_AUTOSIGNIN_POLLING_MS);\n}\nfunction debounce(fun, delay) {\n    let timer;\n    return (args) => {\n        if (!timer) {\n            fun(...args);\n        }\n        clearTimeout(timer);\n        timer = setTimeout(() => {\n            timer = undefined;\n        }, delay);\n    };\n}\nfunction handleAutoSignInWithLink(signInInput, resolve, reject) {\n    const start = Date.now();\n    const autoSignInPollingIntervalId = setInterval(async () => {\n        const elapsedTime = Date.now() - start;\n        const maxTime = MAX_AUTOSIGNIN_POLLING_MS;\n        if (elapsedTime > maxTime) {\n            clearInterval(autoSignInPollingIntervalId);\n            setAutoSignInStarted(false);\n            reject(new AuthError({\n                name: AUTO_SIGN_IN_EXCEPTION,\n                message: 'The account was not confirmed on time.',\n                recoverySuggestion: 'Try to verify your account by clicking the link sent your email or phone and then login manually.',\n            }));\n            resetAutoSignIn();\n        }\n        else {\n            try {\n                const signInOutput = await signIn(signInInput);\n                if (signInOutput.nextStep.signInStep !== 'CONFIRM_SIGN_UP') {\n                    resolve(signInOutput);\n                    clearInterval(autoSignInPollingIntervalId);\n                    setAutoSignInStarted(false);\n                    resetAutoSignIn();\n                }\n            }\n            catch (error) {\n                clearInterval(autoSignInPollingIntervalId);\n                setAutoSignInStarted(false);\n                reject(error);\n                resetAutoSignIn();\n            }\n        }\n    }, 5000);\n}\nconst debouncedAutoSignInWithLink = debounce(handleAutoSignInWithLink, 300);\nconst debouncedAutoSignWithCodeOrUserConfirmed = debounce(handleAutoSignInWithCodeOrUserConfirmed, 300);\nlet autoSignInStarted = false;\nlet usernameUsedForAutoSignIn;\nexport function setUsernameUsedForAutoSignIn(username) {\n    usernameUsedForAutoSignIn = username;\n}\nexport function isAutoSignInUserUsingConfirmSignUp(username) {\n    return usernameUsedForAutoSignIn === username;\n}\nexport function isAutoSignInStarted() {\n    return autoSignInStarted;\n}\nexport function setAutoSignInStarted(value) {\n    if (value === false) {\n        setUsernameUsedForAutoSignIn(undefined);\n    }\n    autoSignInStarted = value;\n}\nexport function isSignUpComplete(output) {\n    return !!output.UserConfirmed;\n}\nexport function autoSignInWhenUserIsConfirmedWithLink(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignInWithLink([signInInput, resolve, reject]);\n        });\n    };\n}\nasync function handleAutoSignInWithCodeOrUserConfirmed(signInInput, resolve, reject) {\n    try {\n        const output = await signIn(signInInput);\n        resolve(output);\n        resetAutoSignIn();\n    }\n    catch (error) {\n        reject(error);\n        resetAutoSignIn();\n    }\n}\nfunction autoSignInWithCode(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignWithCodeOrUserConfirmed([signInInput, resolve, reject]);\n        });\n    };\n}\nexport const autoSignInUserConfirmed = autoSignInWithCode;\n"],"names":[],"mappings":";;;;;;AAAA;AACA;AAMA,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,SAAS,oBAAoB,CAAC,WAAW,EAAE;AAClD,IAAI,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK;AACvF,QAAQ,QAAQ,OAAO,CAAC,KAAK;AAC7B,YAAY,KAAK,eAAe,EAAE;AAClC,gBAAgB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;AAC9C,gBAAgB,IAAI,QAAQ,EAAE,gBAAgB,EAAE;AAChD,oBAAoB,WAAW,CAAC,QAAQ,CAAC,eAAe,EAAE;AAC1D,wBAAwB,KAAK,EAAE,YAAY;AAC3C,qBAAqB,CAAC,CAAC;AACvB,oBAAoB,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AACnE,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,SAAS;AACT,KAAK,CAAC,CAAC;AACP;AACA,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM;AACvC,QAAQ,eAAe,EAAE,CAAC;AAC1B,QAAQ,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACpC,QAAQ,YAAY,CAAC,SAAS,CAAC,CAAC;AAChC,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK,EAAE,yBAAyB,CAAC,CAAC;AAClC,CAAC;AACD,SAAS,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE;AAC9B,IAAI,IAAI,KAAK,CAAC;AACd,IAAI,OAAO,CAAC,IAAI,KAAK;AACrB,QAAQ,IAAI,CAAC,KAAK,EAAE;AACpB,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AACzB,SAAS;AACT,QAAQ,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,QAAQ,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,YAAY,KAAK,GAAG,SAAS,CAAC;AAC9B,SAAS,EAAE,KAAK,CAAC,CAAC;AAClB,KAAK,CAAC;AACN,CAAC;AACD,SAAS,wBAAwB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AAChE,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,IAAI,MAAM,2BAA2B,GAAG,WAAW,CAAC,YAAY;AAChE,QAAQ,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,QAAQ,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAClD,QAAQ,IAAI,WAAW,GAAG,OAAO,EAAE;AACnC,YAAY,aAAa,CAAC,2BAA2B,CAAC,CAAC;AACvD,YAAY,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACxC,YAAY,MAAM,CAAC,IAAI,SAAS,CAAC;AACjC,gBAAgB,IAAI,EAAE,sBAAsB;AAC5C,gBAAgB,OAAO,EAAE,wCAAwC;AACjE,gBAAgB,kBAAkB,EAAE,mGAAmG;AACvI,aAAa,CAAC,CAAC,CAAC;AAChB,YAAY,eAAe,EAAE,CAAC;AAC9B,SAAS;AACT,aAAa;AACb,YAAY,IAAI;AAChB,gBAAgB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/D,gBAAgB,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,KAAK,iBAAiB,EAAE;AAC5E,oBAAoB,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1C,oBAAoB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC/D,oBAAoB,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAChD,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,YAAY,OAAO,KAAK,EAAE;AAC1B,gBAAgB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC3D,gBAAgB,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC5C,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,gBAAgB,eAAe,EAAE,CAAC;AAClC,aAAa;AACb,SAAS;AACT,KAAK,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AACD,MAAM,2BAA2B,GAAG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAC5E,MAAM,wCAAwC,GAAG,QAAQ,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;AACxG,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,IAAI,yBAAyB,CAAC;AACvB,SAAS,4BAA4B,CAAC,QAAQ,EAAE;AACvD,IAAI,yBAAyB,GAAG,QAAQ,CAAC;AACzC,CAAC;AACM,SAAS,kCAAkC,CAAC,QAAQ,EAAE;AAC7D,IAAI,OAAO,yBAAyB,KAAK,QAAQ,CAAC;AAClD,CAAC;AACM,SAAS,mBAAmB,GAAG;AACtC,IAAI,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AACM,SAAS,oBAAoB,CAAC,KAAK,EAAE;AAC5C,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE;AACzB,QAAQ,4BAA4B,CAAC,SAAS,CAAC,CAAC;AAChD,KAAK;AACL,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,CAAC;AACM,SAAS,gBAAgB,CAAC,MAAM,EAAE;AACzC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;AAClC,CAAC;AACM,SAAS,qCAAqC,CAAC,WAAW,EAAE;AACnE,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,2BAA2B,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,eAAe,uCAAuC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AACrF,IAAI,IAAI;AACR,QAAQ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;AACjD,QAAQ,OAAO,CAAC,MAAM,CAAC,CAAC;AACxB,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK;AACL,CAAC;AACD,SAAS,kBAAkB,CAAC,WAAW,EAAE;AACzC,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,wCAAwC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACrF,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACW,MAAC,uBAAuB,GAAG;;;;"}
+{"version":3,"file":"signUpHelpers.mjs","sources":["../../../../../src/providers/cognito/utils/signUpHelpers.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { HubInternal } from '@aws-amplify/core/internals/utils';\nimport { signIn } from '../apis/signIn';\nimport { AuthError } from '../../../errors/AuthError';\nimport { resetAutoSignIn, setAutoSignIn } from '../apis/autoSignIn';\nimport { AUTO_SIGN_IN_EXCEPTION } from '../../../errors/constants';\nimport { signInWithUserAuth } from '../apis/signInWithUserAuth';\nconst MAX_AUTOSIGNIN_POLLING_MS = 3 * 60 * 1000;\nexport function handleCodeAutoSignIn(signInInput) {\n    const stopHubListener = HubInternal.listen('auth-internal', async ({ payload }) => {\n        switch (payload.event) {\n            case 'confirmSignUp': {\n                const response = payload.data;\n                if (response?.isSignUpComplete) {\n                    HubInternal.dispatch('auth-internal', {\n                        event: 'autoSignIn',\n                    });\n                    setAutoSignIn(autoSignInWithCode(signInInput));\n                    stopHubListener();\n                }\n            }\n        }\n    });\n    // This will stop the listener if confirmSignUp is not resolved.\n    const timeOutId = setTimeout(() => {\n        stopHubListener();\n        clearTimeout(timeOutId);\n        resetAutoSignIn();\n    }, MAX_AUTOSIGNIN_POLLING_MS);\n}\nfunction debounce(fun, delay) {\n    let timer;\n    return (args) => {\n        if (!timer) {\n            fun(...args);\n        }\n        clearTimeout(timer);\n        timer = setTimeout(() => {\n            timer = undefined;\n        }, delay);\n    };\n}\nfunction handleAutoSignInWithLink(signInInput, resolve, reject) {\n    const start = Date.now();\n    const autoSignInPollingIntervalId = setInterval(async () => {\n        const elapsedTime = Date.now() - start;\n        const maxTime = MAX_AUTOSIGNIN_POLLING_MS;\n        if (elapsedTime > maxTime) {\n            clearInterval(autoSignInPollingIntervalId);\n            reject(new AuthError({\n                name: AUTO_SIGN_IN_EXCEPTION,\n                message: 'The account was not confirmed on time.',\n                recoverySuggestion: 'Try to verify your account by clicking the link sent your email or phone and then login manually.',\n            }));\n            resetAutoSignIn();\n        }\n        else {\n            try {\n                const signInOutput = await signIn(signInInput);\n                if (signInOutput.nextStep.signInStep !== 'CONFIRM_SIGN_UP') {\n                    resolve(signInOutput);\n                    clearInterval(autoSignInPollingIntervalId);\n                    resetAutoSignIn();\n                }\n            }\n            catch (error) {\n                clearInterval(autoSignInPollingIntervalId);\n                reject(error);\n                resetAutoSignIn();\n            }\n        }\n    }, 5000);\n}\nconst debouncedAutoSignInWithLink = debounce(handleAutoSignInWithLink, 300);\nconst debouncedAutoSignWithCodeOrUserConfirmed = debounce(handleAutoSignInWithCodeOrUserConfirmed, 300);\nexport function autoSignInWhenUserIsConfirmedWithLink(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignInWithLink([signInInput, resolve, reject]);\n        });\n    };\n}\nasync function handleAutoSignInWithCodeOrUserConfirmed(signInInput, resolve, reject) {\n    try {\n        const output = signInInput?.options?.authFlowType === 'USER_AUTH'\n            ? await signInWithUserAuth(signInInput)\n            : await signIn(signInInput);\n        resolve(output);\n        resetAutoSignIn();\n    }\n    catch (error) {\n        reject(error);\n        resetAutoSignIn();\n    }\n}\nfunction autoSignInWithCode(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignWithCodeOrUserConfirmed([signInInput, resolve, reject]);\n        });\n    };\n}\nexport const autoSignInUserConfirmed = autoSignInWithCode;\n"],"names":[],"mappings":";;;;;;;AAAA;AACA;AAOA,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,SAAS,oBAAoB,CAAC,WAAW,EAAE;AAClD,IAAI,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK;AACvF,QAAQ,QAAQ,OAAO,CAAC,KAAK;AAC7B,YAAY,KAAK,eAAe,EAAE;AAClC,gBAAgB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;AAC9C,gBAAgB,IAAI,QAAQ,EAAE,gBAAgB,EAAE;AAChD,oBAAoB,WAAW,CAAC,QAAQ,CAAC,eAAe,EAAE;AAC1D,wBAAwB,KAAK,EAAE,YAAY;AAC3C,qBAAqB,CAAC,CAAC;AACvB,oBAAoB,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AACnE,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,SAAS;AACT,KAAK,CAAC,CAAC;AACP;AACA,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM;AACvC,QAAQ,eAAe,EAAE,CAAC;AAC1B,QAAQ,YAAY,CAAC,SAAS,CAAC,CAAC;AAChC,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK,EAAE,yBAAyB,CAAC,CAAC;AAClC,CAAC;AACD,SAAS,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE;AAC9B,IAAI,IAAI,KAAK,CAAC;AACd,IAAI,OAAO,CAAC,IAAI,KAAK;AACrB,QAAQ,IAAI,CAAC,KAAK,EAAE;AACpB,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AACzB,SAAS;AACT,QAAQ,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,QAAQ,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,YAAY,KAAK,GAAG,SAAS,CAAC;AAC9B,SAAS,EAAE,KAAK,CAAC,CAAC;AAClB,KAAK,CAAC;AACN,CAAC;AACD,SAAS,wBAAwB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AAChE,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,IAAI,MAAM,2BAA2B,GAAG,WAAW,CAAC,YAAY;AAChE,QAAQ,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,QAAQ,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAClD,QAAQ,IAAI,WAAW,GAAG,OAAO,EAAE;AACnC,YAAY,aAAa,CAAC,2BAA2B,CAAC,CAAC;AACvD,YAAY,MAAM,CAAC,IAAI,SAAS,CAAC;AACjC,gBAAgB,IAAI,EAAE,sBAAsB;AAC5C,gBAAgB,OAAO,EAAE,wCAAwC;AACjE,gBAAgB,kBAAkB,EAAE,mGAAmG;AACvI,aAAa,CAAC,CAAC,CAAC;AAChB,YAAY,eAAe,EAAE,CAAC;AAC9B,SAAS;AACT,aAAa;AACb,YAAY,IAAI;AAChB,gBAAgB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/D,gBAAgB,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,KAAK,iBAAiB,EAAE;AAC5E,oBAAoB,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1C,oBAAoB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC/D,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,YAAY,OAAO,KAAK,EAAE;AAC1B,gBAAgB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC3D,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,gBAAgB,eAAe,EAAE,CAAC;AAClC,aAAa;AACb,SAAS;AACT,KAAK,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AACD,MAAM,2BAA2B,GAAG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAC5E,MAAM,wCAAwC,GAAG,QAAQ,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;AACjG,SAAS,qCAAqC,CAAC,WAAW,EAAE;AACnE,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,2BAA2B,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,eAAe,uCAAuC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AACrF,IAAI,IAAI;AACR,QAAQ,MAAM,MAAM,GAAG,WAAW,EAAE,OAAO,EAAE,YAAY,KAAK,WAAW;AACzE,cAAc,MAAM,kBAAkB,CAAC,WAAW,CAAC;AACnD,cAAc,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;AACxC,QAAQ,OAAO,CAAC,MAAM,CAAC,CAAC;AACxB,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,QAAQ,eAAe,EAAE,CAAC;AAC1B,KAAK;AACL,CAAC;AACD,SAAS,kBAAkB,CAAC,WAAW,EAAE;AACzC,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,wCAAwC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACrF,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACW,MAAC,uBAAuB,GAAG;;;;"}

package/dist/esm/types/inputs.d.ts

@@ -54,12 +54,12 @@ export interface AuthSignInWithRedirectInput {
  * The parameters for constructing a Sign Up input.
  *
  * @param username - a standard username, potentially an email/phone number
- * @param password - the user's password
+ * @param password - the user's password, may be required depending on your Cognito User Pool configuration
  * @param options - optional parameters for the Sign Up process, including user attributes
  */
 export interface AuthSignUpInput<ServiceOptions extends AuthSignUpOptions<AuthUserAttributeKey> = AuthSignUpOptions<AuthUserAttributeKey>> {
     username: string;
-    password: string;
+    password?: string;
     options?: ServiceOptions;
 }
 /**

package/dist/esm/types/models.d.ts

@@ -1,4 +1,5 @@
 import { AuthStandardAttributeKey } from '@aws-amplify/core/internals/utils';
+import { ChallengeName } from '../foundation/factories/serviceClients/cognitoIdentityProvider/types';
 import { SignInOutput } from '../providers/cognito';
 /**
  * Additional data that may be returned from Auth APIs.
@@ -189,7 +190,14 @@ export interface DoneSignInStep {
      */
     signInStep: 'DONE';
 }
-export type AuthNextSignInStep<UserAttributeKey extends AuthUserAttributeKey = AuthUserAttributeKey> = ConfirmSignInWithCustomChallenge | ContinueSignInWithMFASelection | ConfirmSignInWithNewPasswordRequired<UserAttributeKey> | ConfirmSignInWithSMSCode | ConfirmSignInWithTOTPCode | ConfirmSignInWithEmailCode | ContinueSignInWithTOTPSetup | ContinueSignInWithEmailSetup | ContinueSignInWithMFASetupSelection | ConfirmSignUpStep | ResetPasswordStep | DoneSignInStep;
+export interface ContinueSignInWithFirstFactorSelection {
+    signInStep: 'CONTINUE_SIGN_IN_WITH_FIRST_FACTOR_SELECTION';
+    availableChallenges?: ChallengeName[];
+}
+export interface ConfirmSignInWithPassword {
+    signInStep: 'CONFIRM_SIGN_IN_WITH_PASSWORD';
+}
+export type AuthNextSignInStep<UserAttributeKey extends AuthUserAttributeKey = AuthUserAttributeKey> = ConfirmSignInWithCustomChallenge | ContinueSignInWithMFASelection | ConfirmSignInWithNewPasswordRequired<UserAttributeKey> | ConfirmSignInWithSMSCode | ConfirmSignInWithTOTPCode | ConfirmSignInWithEmailCode | ContinueSignInWithTOTPSetup | ContinueSignInWithEmailSetup | ContinueSignInWithMFASetupSelection | ContinueSignInWithFirstFactorSelection | ConfirmSignInWithPassword | ConfirmSignUpStep | ResetPasswordStep | DoneSignInStep;
 /**
  * Key/value pairs describing a user attributes.
  */

package/package.json

@@ -1,106 +1,106 @@
 {
-  "name": "@aws-amplify/auth",
-  "version": "6.7.1-unstable.ab33a03.0+ab33a03",
-  "description": "Auth category of aws-amplify",
-  "main": "./dist/cjs/index.js",
-  "module": "./dist/esm/index.mjs",
-  "typings": "./dist/esm/index.d.ts",
-  "react-native": "./src/index.ts",
-  "sideEffects": [
-    "./dist/cjs/providers/cognito/apis/signInWithRedirect.js",
-    "./dist/esm/providers/cognito/apis/signInWithRedirect.mjs",
-    "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js",
-    "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "scripts": {
-    "test": "yarn lint --fix && jest -w 1 --coverage --logHeapUsage",
-    "build-with-test": "npm test && npm run build",
-    "build:umd": "webpack && webpack --config ./webpack.config.dev.js",
-    "build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
-    "build:watch": "npm run build:esm-cjs -- --watch",
-    "build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
-    "clean": "npm run clean:size && rimraf lib-esm lib dist",
-    "clean:size": "rimraf dual-publish-tmp tmp*",
-    "format": "echo \"Not implemented\"",
-    "lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
-    "lint:fix": "eslint '**/*.{ts,tsx}' --fix",
-    "ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 91.18"
-  },
-  "typesVersions": {
-    ">=4.2": {
-      "cognito": [
-        "./dist/esm/providers/cognito/index.d.ts"
-      ],
-      "cognito/server": [
-        "./dist/esm/providers/cognito/apis/server/index.d.ts"
-      ],
-      "server": [
-        "./dist/esm/server.d.ts"
-      ]
-    }
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/esm/index.d.ts",
-      "import": "./dist/esm/index.mjs",
-      "require": "./dist/cjs/index.js",
-      "react-native": "./src/index.ts"
-    },
-    "./cognito": {
-      "types": "./dist/esm/providers/cognito/index.d.ts",
-      "import": "./dist/esm/providers/cognito/index.mjs",
-      "require": "./dist/cjs/providers/cognito/index.js",
-      "react-native": "./src/providers/cognito/index.ts"
-    },
-    "./cognito/server": {
-      "types": "./dist/esm/providers/cognito/apis/server/index.d.ts",
-      "import": "./dist/esm/providers/cognito/apis/server/index.mjs",
-      "require": "./dist/cjs/providers/cognito/apis/server/index.js"
-    },
-    "./server": {
-      "types": "./dist/esm/server.d.ts",
-      "import": "./dist/esm/server.mjs",
-      "require": "./dist/cjs/server.js"
-    },
-    "./enable-oauth-listener": {
-      "types": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.d.ts",
-      "import": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs",
-      "require": "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/aws-amplify/amplify-js.git"
-  },
-  "author": "Amazon Web Services",
-  "license": "Apache-2.0",
-  "bugs": {
-    "url": "https://github.com/aws/aws-amplify/issues"
-  },
-  "homepage": "https://aws-amplify.github.io/",
-  "files": [
-    "dist/cjs",
-    "dist/esm",
-    "src",
-    "cognito",
-    "server",
-    "enable-oauth-listener"
-  ],
-  "dependencies": {
-    "tslib": "^2.5.0"
-  },
-  "peerDependencies": {
-    "@aws-amplify/core": "6.6.1-unstable.ab33a03.0+ab33a03"
-  },
-  "devDependencies": {
-    "@aws-amplify/core": "6.6.1-unstable.ab33a03.0+ab33a03",
-    "@aws-amplify/react-native": "1.1.7-unstable.ab33a03.0+ab33a03",
-    "@jest/test-sequencer": "^29.7.0",
-    "typescript": "5.0.2"
-  },
-  "gitHead": "ab33a03c322b6180d64a216d678f13cefbc9fa74"
+	"name": "@aws-amplify/auth",
+	"version": "6.8.0",
+	"description": "Auth category of aws-amplify",
+	"main": "./dist/cjs/index.js",
+	"module": "./dist/esm/index.mjs",
+	"typings": "./dist/esm/index.d.ts",
+	"react-native": "./src/index.ts",
+	"sideEffects": [
+		"./dist/cjs/providers/cognito/apis/signInWithRedirect.js",
+		"./dist/esm/providers/cognito/apis/signInWithRedirect.mjs",
+		"./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js",
+		"./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs"
+	],
+	"publishConfig": {
+		"access": "public"
+	},
+	"scripts": {
+		"test": "yarn lint --fix && jest -w 1 --coverage --logHeapUsage",
+		"build-with-test": "npm test && npm run build",
+		"build:umd": "webpack && webpack --config ./webpack.config.dev.js",
+		"build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
+		"build:watch": "npm run build:esm-cjs -- --watch",
+		"build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
+		"clean": "npm run clean:size && rimraf lib-esm lib dist",
+		"clean:size": "rimraf dual-publish-tmp tmp*",
+		"format": "echo \"Not implemented\"",
+		"lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
+		"lint:fix": "eslint '**/*.{ts,tsx}' --fix",
+		"ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 91.18"
+	},
+	"typesVersions": {
+		">=4.2": {
+			"cognito": [
+				"./dist/esm/providers/cognito/index.d.ts"
+			],
+			"cognito/server": [
+				"./dist/esm/providers/cognito/apis/server/index.d.ts"
+			],
+			"server": [
+				"./dist/esm/server.d.ts"
+			]
+		}
+	},
+	"exports": {
+		".": {
+			"types": "./dist/esm/index.d.ts",
+			"import": "./dist/esm/index.mjs",
+			"require": "./dist/cjs/index.js",
+			"react-native": "./src/index.ts"
+		},
+		"./cognito": {
+			"types": "./dist/esm/providers/cognito/index.d.ts",
+			"import": "./dist/esm/providers/cognito/index.mjs",
+			"require": "./dist/cjs/providers/cognito/index.js",
+			"react-native": "./src/providers/cognito/index.ts"
+		},
+		"./cognito/server": {
+			"types": "./dist/esm/providers/cognito/apis/server/index.d.ts",
+			"import": "./dist/esm/providers/cognito/apis/server/index.mjs",
+			"require": "./dist/cjs/providers/cognito/apis/server/index.js"
+		},
+		"./server": {
+			"types": "./dist/esm/server.d.ts",
+			"import": "./dist/esm/server.mjs",
+			"require": "./dist/cjs/server.js"
+		},
+		"./enable-oauth-listener": {
+			"types": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.d.ts",
+			"import": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs",
+			"require": "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js"
+		},
+		"./package.json": "./package.json"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/aws-amplify/amplify-js.git"
+	},
+	"author": "Amazon Web Services",
+	"license": "Apache-2.0",
+	"bugs": {
+		"url": "https://github.com/aws/aws-amplify/issues"
+	},
+	"homepage": "https://aws-amplify.github.io/",
+	"files": [
+		"dist/cjs",
+		"dist/esm",
+		"src",
+		"cognito",
+		"server",
+		"enable-oauth-listener"
+	],
+	"dependencies": {
+		"tslib": "^2.5.0"
+	},
+	"peerDependencies": {
+		"@aws-amplify/core": "^6.1.0"
+	},
+	"devDependencies": {
+		"@aws-amplify/core": "6.7.0",
+		"@aws-amplify/react-native": "1.1.6",
+		"@jest/test-sequencer": "^29.7.0",
+		"typescript": "5.0.2"
+	},
+	"gitHead": "9fb4fc24621febe0faad226ab2edb696b8a0bc9c"
 }

package/src/client/apis/associateWebAuthnCredential.ts

@@ -0,0 +1,94 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify, fetchAuthSession } from '@aws-amplify/core';
+import {
+	AuthAction,
+	assertTokenProviderConfig,
+} from '@aws-amplify/core/internals/utils';
+
+import {
+	CompleteWebAuthnRegistrationException,
+	StartWebAuthnRegistrationException,
+} from '../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { assertAuthTokens } from '../../providers/cognito/utils/types';
+import { createCognitoUserPoolEndpointResolver } from '../../providers/cognito/factories';
+import { getRegionFromUserPoolId } from '../../foundation/parsers';
+import { getAuthUserAgentValue } from '../../utils';
+import { registerPasskey } from '../utils';
+import {
+	createCompleteWebAuthnRegistrationClient,
+	createStartWebAuthnRegistrationClient,
+} from '../../foundation/factories/serviceClients/cognitoIdentityProvider';
+import { PasskeyError } from '../utils/passkey/errors';
+import { AuthError } from '../../errors/AuthError';
+import { assertValidCredentialCreationOptions } from '../utils/passkey/types';
+
+/**
+ * Registers a new passkey for an authenticated user
+ *
+ * @returns Promise<void>
+ * @throws - {@link PasskeyError}:
+ * - Thrown when intermediate state is invalid
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link StartWebAuthnRegistrationException}
+ * - Thrown due to a service error retrieving WebAuthn registration options
+ * @throws - {@link CompleteWebAuthnRegistrationException}
+ * - Thrown due to a service error when verifying WebAuthn registration result
+ */
+export async function associateWebAuthnCredential(): Promise<void> {
+	const authConfig = Amplify.getConfig().Auth?.Cognito;
+
+	assertTokenProviderConfig(authConfig);
+
+	const { userPoolEndpoint, userPoolId } = authConfig;
+
+	const { tokens } = await fetchAuthSession();
+
+	assertAuthTokens(tokens);
+
+	const startWebAuthnRegistration = createStartWebAuthnRegistrationClient({
+		endpointResolver: createCognitoUserPoolEndpointResolver({
+			endpointOverride: userPoolEndpoint,
+		}),
+	});
+
+	const { CredentialCreationOptions: credentialCreationOptions } =
+		await startWebAuthnRegistration(
+			{
+				region: getRegionFromUserPoolId(userPoolId),
+				userAgentValue: getAuthUserAgentValue(
+					AuthAction.StartWebAuthnRegistration,
+				),
+			},
+			{
+				AccessToken: tokens.accessToken.toString(),
+			},
+		);
+
+	assertValidCredentialCreationOptions(credentialCreationOptions);
+
+	const cred = await registerPasskey(credentialCreationOptions);
+
+	const completeWebAuthnRegistration = createCompleteWebAuthnRegistrationClient(
+		{
+			endpointResolver: createCognitoUserPoolEndpointResolver({
+				endpointOverride: userPoolEndpoint,
+			}),
+		},
+	);
+
+	await completeWebAuthnRegistration(
+		{
+			region: getRegionFromUserPoolId(userPoolId),
+			userAgentValue: getAuthUserAgentValue(
+				AuthAction.CompleteWebAuthnRegistration,
+			),
+		},
+		{
+			AccessToken: tokens.accessToken.toString(),
+			Credential: cred,
+		},
+	);
+}

package/src/client/apis/deleteWebAuthnCredential.ts

@@ -0,0 +1,24 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { DeleteWebAuthnCredentialException } from '../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { DeleteWebAuthnCredentialInput } from '../../foundation/types';
+import { AuthError } from '../../errors/AuthError';
+import { deleteWebAuthnCredential as deleteWebAuthnCredentialFoundation } from '../../foundation/apis';
+
+/**
+ * Delete a registered credential for an authenticated user by credentialId
+ * @param {DeleteWebAuthnCredentialInput} input The delete input parameters including the credentialId
+ * @returns Promise<void>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link DeleteWebAuthnCredentialException}
+ * - Thrown due to a service error when deleting a WebAuthn credential
+ */
+export async function deleteWebAuthnCredential(
+	input: DeleteWebAuthnCredentialInput,
+): Promise<void> {
+	return deleteWebAuthnCredentialFoundation(Amplify, input);
+}

package/src/client/apis/index.ts

@@ -0,0 +1,6 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+export { associateWebAuthnCredential } from './associateWebAuthnCredential';
+export { listWebAuthnCredentials } from './listWebAuthnCredentials';
+export { deleteWebAuthnCredential } from './deleteWebAuthnCredential';

package/src/client/apis/listWebAuthnCredentials.ts

@@ -0,0 +1,28 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Amplify } from '@aws-amplify/core';
+
+import { ListWebAuthnCredentialsException } from '../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import {
+	ListWebAuthnCredentialsInput,
+	ListWebAuthnCredentialsOutput,
+} from '../../foundation/types';
+import { AuthError } from '../../errors/AuthError';
+import { listWebAuthnCredentials as listWebAuthnCredentialsFoundation } from '../../foundation/apis';
+
+/**
+ * Lists registered credentials for an authenticated user
+ *
+ * @param {ListWebAuthnCredentialsInput} input The list input parameters including page size and next token.
+ * @returns Promise<ListWebAuthnCredentialsOutput>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link ListWebAuthnCredentialsException}
+ * - Thrown due to a service error when listing WebAuthn credentials
+ */
+export async function listWebAuthnCredentials(
+	input?: ListWebAuthnCredentialsInput,
+): Promise<ListWebAuthnCredentialsOutput> {
+	return listWebAuthnCredentialsFoundation(Amplify, input);
+}

package/src/client/flows/shared/handlePasswordSRP.ts

@@ -0,0 +1,123 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { AuthAction } from '@aws-amplify/core/internals/utils';
+
+import { getUserContextData } from '../../../providers/cognito/utils/userContextData';
+import { AuthTokenOrchestrator } from '../../../providers/cognito/tokenProvider/types';
+import { AuthFlowType, ClientMetadata } from '../../../providers/cognito/types';
+import {
+	ChallengeParameters,
+	InitiateAuthCommandInput,
+	RespondToAuthChallengeCommandOutput,
+} from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { getAuthenticationHelper } from '../../../providers/cognito/utils/srp';
+import {
+	handlePasswordVerifierChallenge,
+	retryOnResourceNotFoundException,
+	setActiveSignInUsername,
+} from '../../../providers/cognito/utils/signInHelpers';
+import { createInitiateAuthClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';
+import { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers';
+import { getAuthUserAgentValue } from '../../../utils';
+import { AuthFactorType } from '../../../providers/cognito/types/models';
+
+interface HandlePasswordSRPInput {
+	username: string;
+	password: string;
+	clientMetadata: ClientMetadata | undefined;
+	config: CognitoUserPoolConfig;
+	tokenOrchestrator: AuthTokenOrchestrator;
+	authFlow: AuthFlowType;
+	preferredChallenge?: AuthFactorType;
+}
+
+/**
+ * Handles the Password SRP (Secure Remote Password) authentication flow.
+ * This function can be used with both USER_SRP_AUTH and USER_AUTH flows.
+ *
+ * @param {Object} params - The parameters for the Password SRP authentication
+ * @param {string} params.username - The username for authentication
+ * @param {string} params.password - The user's password
+ * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration
+ * @param {AuthTokenOrchestrator} params.tokenOrchestrator - Token orchestrator for managing auth tokens
+ * @param {AuthFlowType} params.authFlow - The type of authentication flow ('USER_SRP_AUTH' or 'USER_AUTH')
+ * @param {AuthFactorType} [params.preferredChallenge] - Optional preferred challenge type when using USER_AUTH flow
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The authentication response
+ */
+export async function handlePasswordSRP({
+	username,
+	password,
+	clientMetadata,
+	config,
+	tokenOrchestrator,
+	authFlow,
+	preferredChallenge,
+}: HandlePasswordSRPInput): Promise<RespondToAuthChallengeCommandOutput> {
+	const { userPoolId, userPoolClientId, userPoolEndpoint } = config;
+	const userPoolName = userPoolId?.split('_')[1] || '';
+	const authenticationHelper = await getAuthenticationHelper(userPoolName);
+
+	const authParameters: Record<string, string> = {
+		USERNAME: username,
+		SRP_A: authenticationHelper.A.toString(16),
+	};
+
+	if (authFlow === 'USER_AUTH' && preferredChallenge) {
+		authParameters.PREFERRED_CHALLENGE = preferredChallenge;
+	}
+
+	const UserContextData = getUserContextData({
+		username,
+		userPoolId,
+		userPoolClientId,
+	});
+
+	const jsonReq: InitiateAuthCommandInput = {
+		AuthFlow: authFlow,
+		AuthParameters: authParameters,
+		ClientMetadata: clientMetadata,
+		ClientId: userPoolClientId,
+		UserContextData,
+	};
+
+	const initiateAuth = createInitiateAuthClient({
+		endpointResolver: createCognitoUserPoolEndpointResolver({
+			endpointOverride: userPoolEndpoint,
+		}),
+	});
+
+	const resp = await initiateAuth(
+		{
+			region: getRegionFromUserPoolId(userPoolId),
+			userAgentValue: getAuthUserAgentValue(AuthAction.SignIn),
+		},
+		jsonReq,
+	);
+
+	const { ChallengeParameters: challengeParameters, Session: session } = resp;
+	const activeUsername = challengeParameters?.USERNAME ?? username;
+	setActiveSignInUsername(activeUsername);
+	if (resp.ChallengeName === 'PASSWORD_VERIFIER') {
+		return retryOnResourceNotFoundException(
+			handlePasswordVerifierChallenge,
+			[
+				password,
+				challengeParameters as ChallengeParameters,
+				clientMetadata,
+				session,
+				authenticationHelper,
+				config,
+				tokenOrchestrator,
+			],
+			activeUsername,
+			tokenOrchestrator,
+		);
+	}
+
+	return resp;
+}