@aws-amplify/auth 6.7.1-unstable.ab33a03.0 → 6.8.0

package/dist/cjs/providers/cognito/utils/signUpHelpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"signUpHelpers.js","sources":["../../../../../src/providers/cognito/utils/signUpHelpers.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.autoSignInUserConfirmed = exports.autoSignInWhenUserIsConfirmedWithLink = exports.isSignUpComplete = exports.setAutoSignInStarted = exports.isAutoSignInStarted = exports.isAutoSignInUserUsingConfirmSignUp = exports.setUsernameUsedForAutoSignIn = exports.handleCodeAutoSignIn = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst signIn_1 = require(\"../apis/signIn\");\nconst AuthError_1 = require(\"../../../errors/AuthError\");\nconst autoSignIn_1 = require(\"../apis/autoSignIn\");\nconst constants_1 = require(\"../../../errors/constants\");\nconst MAX_AUTOSIGNIN_POLLING_MS = 3 * 60 * 1000;\nfunction handleCodeAutoSignIn(signInInput) {\n    const stopHubListener = utils_1.HubInternal.listen('auth-internal', async ({ payload }) => {\n        switch (payload.event) {\n            case 'confirmSignUp': {\n                const response = payload.data;\n                if (response?.isSignUpComplete) {\n                    utils_1.HubInternal.dispatch('auth-internal', {\n                        event: 'autoSignIn',\n                    });\n                    (0, autoSignIn_1.setAutoSignIn)(autoSignInWithCode(signInInput));\n                    stopHubListener();\n                }\n            }\n        }\n    });\n    // This will stop the listener if confirmSignUp is not resolved.\n    const timeOutId = setTimeout(() => {\n        stopHubListener();\n        setAutoSignInStarted(false);\n        clearTimeout(timeOutId);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }, MAX_AUTOSIGNIN_POLLING_MS);\n}\nexports.handleCodeAutoSignIn = handleCodeAutoSignIn;\nfunction debounce(fun, delay) {\n    let timer;\n    return (args) => {\n        if (!timer) {\n            fun(...args);\n        }\n        clearTimeout(timer);\n        timer = setTimeout(() => {\n            timer = undefined;\n        }, delay);\n    };\n}\nfunction handleAutoSignInWithLink(signInInput, resolve, reject) {\n    const start = Date.now();\n    const autoSignInPollingIntervalId = setInterval(async () => {\n        const elapsedTime = Date.now() - start;\n        const maxTime = MAX_AUTOSIGNIN_POLLING_MS;\n        if (elapsedTime > maxTime) {\n            clearInterval(autoSignInPollingIntervalId);\n            setAutoSignInStarted(false);\n            reject(new AuthError_1.AuthError({\n                name: constants_1.AUTO_SIGN_IN_EXCEPTION,\n                message: 'The account was not confirmed on time.',\n                recoverySuggestion: 'Try to verify your account by clicking the link sent your email or phone and then login manually.',\n            }));\n            (0, autoSignIn_1.resetAutoSignIn)();\n        }\n        else {\n            try {\n                const signInOutput = await (0, signIn_1.signIn)(signInInput);\n                if (signInOutput.nextStep.signInStep !== 'CONFIRM_SIGN_UP') {\n                    resolve(signInOutput);\n                    clearInterval(autoSignInPollingIntervalId);\n                    setAutoSignInStarted(false);\n                    (0, autoSignIn_1.resetAutoSignIn)();\n                }\n            }\n            catch (error) {\n                clearInterval(autoSignInPollingIntervalId);\n                setAutoSignInStarted(false);\n                reject(error);\n                (0, autoSignIn_1.resetAutoSignIn)();\n            }\n        }\n    }, 5000);\n}\nconst debouncedAutoSignInWithLink = debounce(handleAutoSignInWithLink, 300);\nconst debouncedAutoSignWithCodeOrUserConfirmed = debounce(handleAutoSignInWithCodeOrUserConfirmed, 300);\nlet autoSignInStarted = false;\nlet usernameUsedForAutoSignIn;\nfunction setUsernameUsedForAutoSignIn(username) {\n    usernameUsedForAutoSignIn = username;\n}\nexports.setUsernameUsedForAutoSignIn = setUsernameUsedForAutoSignIn;\nfunction isAutoSignInUserUsingConfirmSignUp(username) {\n    return usernameUsedForAutoSignIn === username;\n}\nexports.isAutoSignInUserUsingConfirmSignUp = isAutoSignInUserUsingConfirmSignUp;\nfunction isAutoSignInStarted() {\n    return autoSignInStarted;\n}\nexports.isAutoSignInStarted = isAutoSignInStarted;\nfunction setAutoSignInStarted(value) {\n    if (value === false) {\n        setUsernameUsedForAutoSignIn(undefined);\n    }\n    autoSignInStarted = value;\n}\nexports.setAutoSignInStarted = setAutoSignInStarted;\nfunction isSignUpComplete(output) {\n    return !!output.UserConfirmed;\n}\nexports.isSignUpComplete = isSignUpComplete;\nfunction autoSignInWhenUserIsConfirmedWithLink(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignInWithLink([signInInput, resolve, reject]);\n        });\n    };\n}\nexports.autoSignInWhenUserIsConfirmedWithLink = autoSignInWhenUserIsConfirmedWithLink;\nasync function handleAutoSignInWithCodeOrUserConfirmed(signInInput, resolve, reject) {\n    try {\n        const output = await (0, signIn_1.signIn)(signInInput);\n        resolve(output);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }\n    catch (error) {\n        reject(error);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }\n}\nfunction autoSignInWithCode(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignWithCodeOrUserConfirmed([signInInput, resolve, reject]);\n        });\n    };\n}\nexports.autoSignInUserConfirmed = autoSignInWithCode;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,qCAAqC,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,CAAC;AACpS,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACnD,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,SAAS,oBAAoB,CAAC,WAAW,EAAE;AAC3C,IAAI,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK;AAC/F,QAAQ,QAAQ,OAAO,CAAC,KAAK;AAC7B,YAAY,KAAK,eAAe,EAAE;AAClC,gBAAgB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;AAC9C,gBAAgB,IAAI,QAAQ,EAAE,gBAAgB,EAAE;AAChD,oBAAoB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,EAAE;AAClE,wBAAwB,KAAK,EAAE,YAAY;AAC3C,qBAAqB,CAAC,CAAC;AACvB,oBAAoB,IAAI,YAAY,CAAC,aAAa,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AACrF,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,SAAS;AACT,KAAK,CAAC,CAAC;AACP;AACA,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM;AACvC,QAAQ,eAAe,EAAE,CAAC;AAC1B,QAAQ,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACpC,QAAQ,YAAY,CAAC,SAAS,CAAC,CAAC;AAChC,QAAQ,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK,EAAE,yBAAyB,CAAC,CAAC;AAClC,CAAC;AACD,OAAO,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;AACpD,SAAS,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE;AAC9B,IAAI,IAAI,KAAK,CAAC;AACd,IAAI,OAAO,CAAC,IAAI,KAAK;AACrB,QAAQ,IAAI,CAAC,KAAK,EAAE;AACpB,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AACzB,SAAS;AACT,QAAQ,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,QAAQ,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,YAAY,KAAK,GAAG,SAAS,CAAC;AAC9B,SAAS,EAAE,KAAK,CAAC,CAAC;AAClB,KAAK,CAAC;AACN,CAAC;AACD,SAAS,wBAAwB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AAChE,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,IAAI,MAAM,2BAA2B,GAAG,WAAW,CAAC,YAAY;AAChE,QAAQ,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,QAAQ,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAClD,QAAQ,IAAI,WAAW,GAAG,OAAO,EAAE;AACnC,YAAY,aAAa,CAAC,2BAA2B,CAAC,CAAC;AACvD,YAAY,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACxC,YAAY,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC;AAC7C,gBAAgB,IAAI,EAAE,WAAW,CAAC,sBAAsB;AACxD,gBAAgB,OAAO,EAAE,wCAAwC;AACjE,gBAAgB,kBAAkB,EAAE,mGAAmG;AACvI,aAAa,CAAC,CAAC,CAAC;AAChB,YAAY,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAChD,SAAS;AACT,aAAa;AACb,YAAY,IAAI;AAChB,gBAAgB,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7E,gBAAgB,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,KAAK,iBAAiB,EAAE;AAC5E,oBAAoB,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1C,oBAAoB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC/D,oBAAoB,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAChD,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC,eAAe,GAAG,CAAC;AACxD,iBAAiB;AACjB,aAAa;AACb,YAAY,OAAO,KAAK,EAAE;AAC1B,gBAAgB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC3D,gBAAgB,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC5C,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,gBAAgB,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AACpD,aAAa;AACb,SAAS;AACT,KAAK,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AACD,MAAM,2BAA2B,GAAG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAC5E,MAAM,wCAAwC,GAAG,QAAQ,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;AACxG,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,IAAI,yBAAyB,CAAC;AAC9B,SAAS,4BAA4B,CAAC,QAAQ,EAAE;AAChD,IAAI,yBAAyB,GAAG,QAAQ,CAAC;AACzC,CAAC;AACD,OAAO,CAAC,4BAA4B,GAAG,4BAA4B,CAAC;AACpE,SAAS,kCAAkC,CAAC,QAAQ,EAAE;AACtD,IAAI,OAAO,yBAAyB,KAAK,QAAQ,CAAC;AAClD,CAAC;AACD,OAAO,CAAC,kCAAkC,GAAG,kCAAkC,CAAC;AAChF,SAAS,mBAAmB,GAAG;AAC/B,IAAI,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AACD,OAAO,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;AAClD,SAAS,oBAAoB,CAAC,KAAK,EAAE;AACrC,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE;AACzB,QAAQ,4BAA4B,CAAC,SAAS,CAAC,CAAC;AAChD,KAAK;AACL,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,CAAC;AACD,OAAO,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;AACpD,SAAS,gBAAgB,CAAC,MAAM,EAAE;AAClC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;AAClC,CAAC;AACD,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;AAC5C,SAAS,qCAAqC,CAAC,WAAW,EAAE;AAC5D,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,2BAA2B,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,OAAO,CAAC,qCAAqC,GAAG,qCAAqC,CAAC;AACtF,eAAe,uCAAuC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AACrF,IAAI,IAAI;AACR,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC/D,QAAQ,OAAO,CAAC,MAAM,CAAC,CAAC;AACxB,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,QAAQ,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK;AACL,CAAC;AACD,SAAS,kBAAkB,CAAC,WAAW,EAAE;AACzC,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,wCAAwC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACrF,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,OAAO,CAAC,uBAAuB,GAAG,kBAAkB;;"}
+{"version":3,"file":"signUpHelpers.js","sources":["../../../../../src/providers/cognito/utils/signUpHelpers.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.autoSignInUserConfirmed = exports.autoSignInWhenUserIsConfirmedWithLink = exports.handleCodeAutoSignIn = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst signIn_1 = require(\"../apis/signIn\");\nconst AuthError_1 = require(\"../../../errors/AuthError\");\nconst autoSignIn_1 = require(\"../apis/autoSignIn\");\nconst constants_1 = require(\"../../../errors/constants\");\nconst signInWithUserAuth_1 = require(\"../apis/signInWithUserAuth\");\nconst MAX_AUTOSIGNIN_POLLING_MS = 3 * 60 * 1000;\nfunction handleCodeAutoSignIn(signInInput) {\n    const stopHubListener = utils_1.HubInternal.listen('auth-internal', async ({ payload }) => {\n        switch (payload.event) {\n            case 'confirmSignUp': {\n                const response = payload.data;\n                if (response?.isSignUpComplete) {\n                    utils_1.HubInternal.dispatch('auth-internal', {\n                        event: 'autoSignIn',\n                    });\n                    (0, autoSignIn_1.setAutoSignIn)(autoSignInWithCode(signInInput));\n                    stopHubListener();\n                }\n            }\n        }\n    });\n    // This will stop the listener if confirmSignUp is not resolved.\n    const timeOutId = setTimeout(() => {\n        stopHubListener();\n        clearTimeout(timeOutId);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }, MAX_AUTOSIGNIN_POLLING_MS);\n}\nexports.handleCodeAutoSignIn = handleCodeAutoSignIn;\nfunction debounce(fun, delay) {\n    let timer;\n    return (args) => {\n        if (!timer) {\n            fun(...args);\n        }\n        clearTimeout(timer);\n        timer = setTimeout(() => {\n            timer = undefined;\n        }, delay);\n    };\n}\nfunction handleAutoSignInWithLink(signInInput, resolve, reject) {\n    const start = Date.now();\n    const autoSignInPollingIntervalId = setInterval(async () => {\n        const elapsedTime = Date.now() - start;\n        const maxTime = MAX_AUTOSIGNIN_POLLING_MS;\n        if (elapsedTime > maxTime) {\n            clearInterval(autoSignInPollingIntervalId);\n            reject(new AuthError_1.AuthError({\n                name: constants_1.AUTO_SIGN_IN_EXCEPTION,\n                message: 'The account was not confirmed on time.',\n                recoverySuggestion: 'Try to verify your account by clicking the link sent your email or phone and then login manually.',\n            }));\n            (0, autoSignIn_1.resetAutoSignIn)();\n        }\n        else {\n            try {\n                const signInOutput = await (0, signIn_1.signIn)(signInInput);\n                if (signInOutput.nextStep.signInStep !== 'CONFIRM_SIGN_UP') {\n                    resolve(signInOutput);\n                    clearInterval(autoSignInPollingIntervalId);\n                    (0, autoSignIn_1.resetAutoSignIn)();\n                }\n            }\n            catch (error) {\n                clearInterval(autoSignInPollingIntervalId);\n                reject(error);\n                (0, autoSignIn_1.resetAutoSignIn)();\n            }\n        }\n    }, 5000);\n}\nconst debouncedAutoSignInWithLink = debounce(handleAutoSignInWithLink, 300);\nconst debouncedAutoSignWithCodeOrUserConfirmed = debounce(handleAutoSignInWithCodeOrUserConfirmed, 300);\nfunction autoSignInWhenUserIsConfirmedWithLink(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignInWithLink([signInInput, resolve, reject]);\n        });\n    };\n}\nexports.autoSignInWhenUserIsConfirmedWithLink = autoSignInWhenUserIsConfirmedWithLink;\nasync function handleAutoSignInWithCodeOrUserConfirmed(signInInput, resolve, reject) {\n    try {\n        const output = signInInput?.options?.authFlowType === 'USER_AUTH'\n            ? await (0, signInWithUserAuth_1.signInWithUserAuth)(signInInput)\n            : await (0, signIn_1.signIn)(signInInput);\n        resolve(output);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }\n    catch (error) {\n        reject(error);\n        (0, autoSignIn_1.resetAutoSignIn)();\n    }\n}\nfunction autoSignInWithCode(signInInput) {\n    return async () => {\n        return new Promise((resolve, reject) => {\n            debouncedAutoSignWithCodeOrUserConfirmed([signInInput, resolve, reject]);\n        });\n    };\n}\nexports.autoSignInUserConfirmed = autoSignInWithCode;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,uBAAuB,GAAG,OAAO,CAAC,qCAAqC,GAAG,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,CAAC;AACxH,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACnD,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,MAAM,oBAAoB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACnE,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,SAAS,oBAAoB,CAAC,WAAW,EAAE;AAC3C,IAAI,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK;AAC/F,QAAQ,QAAQ,OAAO,CAAC,KAAK;AAC7B,YAAY,KAAK,eAAe,EAAE;AAClC,gBAAgB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;AAC9C,gBAAgB,IAAI,QAAQ,EAAE,gBAAgB,EAAE;AAChD,oBAAoB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,EAAE;AAClE,wBAAwB,KAAK,EAAE,YAAY;AAC3C,qBAAqB,CAAC,CAAC;AACvB,oBAAoB,IAAI,YAAY,CAAC,aAAa,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AACrF,oBAAoB,eAAe,EAAE,CAAC;AACtC,iBAAiB;AACjB,aAAa;AACb,SAAS;AACT,KAAK,CAAC,CAAC;AACP;AACA,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM;AACvC,QAAQ,eAAe,EAAE,CAAC;AAC1B,QAAQ,YAAY,CAAC,SAAS,CAAC,CAAC;AAChC,QAAQ,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK,EAAE,yBAAyB,CAAC,CAAC;AAClC,CAAC;AACD,OAAO,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;AACpD,SAAS,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE;AAC9B,IAAI,IAAI,KAAK,CAAC;AACd,IAAI,OAAO,CAAC,IAAI,KAAK;AACrB,QAAQ,IAAI,CAAC,KAAK,EAAE;AACpB,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AACzB,SAAS;AACT,QAAQ,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,QAAQ,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,YAAY,KAAK,GAAG,SAAS,CAAC;AAC9B,SAAS,EAAE,KAAK,CAAC,CAAC;AAClB,KAAK,CAAC;AACN,CAAC;AACD,SAAS,wBAAwB,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AAChE,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC7B,IAAI,MAAM,2BAA2B,GAAG,WAAW,CAAC,YAAY;AAChE,QAAQ,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,QAAQ,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAClD,QAAQ,IAAI,WAAW,GAAG,OAAO,EAAE;AACnC,YAAY,aAAa,CAAC,2BAA2B,CAAC,CAAC;AACvD,YAAY,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC;AAC7C,gBAAgB,IAAI,EAAE,WAAW,CAAC,sBAAsB;AACxD,gBAAgB,OAAO,EAAE,wCAAwC;AACjE,gBAAgB,kBAAkB,EAAE,mGAAmG;AACvI,aAAa,CAAC,CAAC,CAAC;AAChB,YAAY,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAChD,SAAS;AACT,aAAa;AACb,YAAY,IAAI;AAChB,gBAAgB,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7E,gBAAgB,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,KAAK,iBAAiB,EAAE;AAC5E,oBAAoB,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1C,oBAAoB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC/D,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC,eAAe,GAAG,CAAC;AACxD,iBAAiB;AACjB,aAAa;AACb,YAAY,OAAO,KAAK,EAAE;AAC1B,gBAAgB,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC3D,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,gBAAgB,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AACpD,aAAa;AACb,SAAS;AACT,KAAK,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AACD,MAAM,2BAA2B,GAAG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAC5E,MAAM,wCAAwC,GAAG,QAAQ,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;AACxG,SAAS,qCAAqC,CAAC,WAAW,EAAE;AAC5D,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,2BAA2B,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,OAAO,CAAC,qCAAqC,GAAG,qCAAqC,CAAC;AACtF,eAAe,uCAAuC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;AACrF,IAAI,IAAI;AACR,QAAQ,MAAM,MAAM,GAAG,WAAW,EAAE,OAAO,EAAE,YAAY,KAAK,WAAW;AACzE,cAAc,MAAM,CAAC,CAAC,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;AAC7E,cAAc,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtD,QAAQ,OAAO,CAAC,MAAM,CAAC,CAAC;AACxB,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,QAAQ,IAAI,YAAY,CAAC,eAAe,GAAG,CAAC;AAC5C,KAAK;AACL,CAAC;AACD,SAAS,kBAAkB,CAAC,WAAW,EAAE;AACzC,IAAI,OAAO,YAAY;AACvB,QAAQ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAChD,YAAY,wCAAwC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACrF,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN,CAAC;AACD,OAAO,CAAC,uBAAuB,GAAG,kBAAkB;;"}

package/dist/esm/client/apis/associateWebAuthnCredential.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Registers a new passkey for an authenticated user
+ *
+ * @returns Promise<void>
+ * @throws - {@link PasskeyError}:
+ * - Thrown when intermediate state is invalid
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link StartWebAuthnRegistrationException}
+ * - Thrown due to a service error retrieving WebAuthn registration options
+ * @throws - {@link CompleteWebAuthnRegistrationException}
+ * - Thrown due to a service error when verifying WebAuthn registration result
+ */
+export declare function associateWebAuthnCredential(): Promise<void>;

package/dist/esm/client/apis/associateWebAuthnCredential.mjs

@@ -0,0 +1,69 @@
+import { Amplify, fetchAuthSession } from '@aws-amplify/core';
+import { assertTokenProviderConfig, AuthAction } from '@aws-amplify/core/internals/utils';
+import { assertAuthTokens } from '../../providers/cognito/utils/types.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../../providers/cognito/factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../foundation/parsers/regionParsers.mjs';
+import { getAuthUserAgentValue } from '../../utils/getAuthUserAgentValue.mjs';
+import { registerPasskey } from '../utils/passkey/registerPasskey.mjs';
+import '../utils/passkey/errors.mjs';
+import { assertValidCredentialCreationOptions } from '../utils/passkey/types/shared.mjs';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../common/AuthErrorStrings.mjs';
+import '../../errors/types/validation.mjs';
+import '../../providers/cognito/types/errors.mjs';
+import { createStartWebAuthnRegistrationClient } from '../../foundation/factories/serviceClients/cognitoIdentityProvider/createStartWebAuthnRegistrationClient.mjs';
+import { createCompleteWebAuthnRegistrationClient } from '../../foundation/factories/serviceClients/cognitoIdentityProvider/createCompleteWebAuthnRegistrationClient.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Registers a new passkey for an authenticated user
+ *
+ * @returns Promise<void>
+ * @throws - {@link PasskeyError}:
+ * - Thrown when intermediate state is invalid
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link StartWebAuthnRegistrationException}
+ * - Thrown due to a service error retrieving WebAuthn registration options
+ * @throws - {@link CompleteWebAuthnRegistrationException}
+ * - Thrown due to a service error when verifying WebAuthn registration result
+ */
+async function associateWebAuthnCredential() {
+    const authConfig = Amplify.getConfig().Auth?.Cognito;
+    assertTokenProviderConfig(authConfig);
+    const { userPoolEndpoint, userPoolId } = authConfig;
+    const { tokens } = await fetchAuthSession();
+    assertAuthTokens(tokens);
+    const startWebAuthnRegistration = createStartWebAuthnRegistrationClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    const { CredentialCreationOptions: credentialCreationOptions } = await startWebAuthnRegistration({
+        region: getRegionFromUserPoolId(userPoolId),
+        userAgentValue: getAuthUserAgentValue(AuthAction.StartWebAuthnRegistration),
+    }, {
+        AccessToken: tokens.accessToken.toString(),
+    });
+    assertValidCredentialCreationOptions(credentialCreationOptions);
+    const cred = await registerPasskey(credentialCreationOptions);
+    const completeWebAuthnRegistration = createCompleteWebAuthnRegistrationClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    await completeWebAuthnRegistration({
+        region: getRegionFromUserPoolId(userPoolId),
+        userAgentValue: getAuthUserAgentValue(AuthAction.CompleteWebAuthnRegistration),
+    }, {
+        AccessToken: tokens.accessToken.toString(),
+        Credential: cred,
+    });
+}
+
+export { associateWebAuthnCredential };
+//# sourceMappingURL=associateWebAuthnCredential.mjs.map

package/dist/esm/client/apis/associateWebAuthnCredential.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"associateWebAuthnCredential.mjs","sources":["../../../../src/client/apis/associateWebAuthnCredential.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { Amplify, fetchAuthSession } from '@aws-amplify/core';\nimport { AuthAction, assertTokenProviderConfig, } from '@aws-amplify/core/internals/utils';\nimport { assertAuthTokens } from '../../providers/cognito/utils/types';\nimport { createCognitoUserPoolEndpointResolver } from '../../providers/cognito/factories';\nimport { getRegionFromUserPoolId } from '../../foundation/parsers';\nimport { getAuthUserAgentValue } from '../../utils';\nimport { registerPasskey } from '../utils';\nimport { createCompleteWebAuthnRegistrationClient, createStartWebAuthnRegistrationClient, } from '../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { assertValidCredentialCreationOptions } from '../utils/passkey/types';\n/**\n * Registers a new passkey for an authenticated user\n *\n * @returns Promise<void>\n * @throws - {@link PasskeyError}:\n * - Thrown when intermediate state is invalid\n * @throws - {@link AuthError}:\n * - Thrown when user is unauthenticated\n * @throws - {@link StartWebAuthnRegistrationException}\n * - Thrown due to a service error retrieving WebAuthn registration options\n * @throws - {@link CompleteWebAuthnRegistrationException}\n * - Thrown due to a service error when verifying WebAuthn registration result\n */\nexport async function associateWebAuthnCredential() {\n    const authConfig = Amplify.getConfig().Auth?.Cognito;\n    assertTokenProviderConfig(authConfig);\n    const { userPoolEndpoint, userPoolId } = authConfig;\n    const { tokens } = await fetchAuthSession();\n    assertAuthTokens(tokens);\n    const startWebAuthnRegistration = createStartWebAuthnRegistrationClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    const { CredentialCreationOptions: credentialCreationOptions } = await startWebAuthnRegistration({\n        region: getRegionFromUserPoolId(userPoolId),\n        userAgentValue: getAuthUserAgentValue(AuthAction.StartWebAuthnRegistration),\n    }, {\n        AccessToken: tokens.accessToken.toString(),\n    });\n    assertValidCredentialCreationOptions(credentialCreationOptions);\n    const cred = await registerPasskey(credentialCreationOptions);\n    const completeWebAuthnRegistration = createCompleteWebAuthnRegistrationClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    await completeWebAuthnRegistration({\n        region: getRegionFromUserPoolId(userPoolId),\n        userAgentValue: getAuthUserAgentValue(AuthAction.CompleteWebAuthnRegistration),\n    }, {\n        AccessToken: tokens.accessToken.toString(),\n        Credential: cred,\n    });\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AACA;AAUA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,2BAA2B,GAAG;AACpD,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;AACzD,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC;AAC1C,IAAI,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;AACxD,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;AAChD,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC7B,IAAI,MAAM,yBAAyB,GAAG,qCAAqC,CAAC;AAC5E,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,GAAG,MAAM,yBAAyB,CAAC;AACrG,QAAQ,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC;AACnD,QAAQ,cAAc,EAAE,qBAAqB,CAAC,UAAU,CAAC,yBAAyB,CAAC;AACnF,KAAK,EAAE;AACP,QAAQ,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;AAClD,KAAK,CAAC,CAAC;AACP,IAAI,oCAAoC,CAAC,yBAAyB,CAAC,CAAC;AACpE,IAAI,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,yBAAyB,CAAC,CAAC;AAClE,IAAI,MAAM,4BAA4B,GAAG,wCAAwC,CAAC;AAClF,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,4BAA4B,CAAC;AACvC,QAAQ,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC;AACnD,QAAQ,cAAc,EAAE,qBAAqB,CAAC,UAAU,CAAC,4BAA4B,CAAC;AACtF,KAAK,EAAE;AACP,QAAQ,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;AAClD,QAAQ,UAAU,EAAE,IAAI;AACxB,KAAK,CAAC,CAAC;AACP;;;;"}

package/dist/esm/client/apis/deleteWebAuthnCredential.d.ts

@@ -0,0 +1,11 @@
+import { DeleteWebAuthnCredentialInput } from '../../foundation/types';
+/**
+ * Delete a registered credential for an authenticated user by credentialId
+ * @param {DeleteWebAuthnCredentialInput} input The delete input parameters including the credentialId
+ * @returns Promise<void>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link DeleteWebAuthnCredentialException}
+ * - Thrown due to a service error when deleting a WebAuthn credential
+ */
+export declare function deleteWebAuthnCredential(input: DeleteWebAuthnCredentialInput): Promise<void>;

package/dist/esm/client/apis/deleteWebAuthnCredential.mjs

@@ -0,0 +1,29 @@
+import { Amplify } from '@aws-amplify/core';
+import '@aws-amplify/core/internals/utils';
+import '../../providers/cognito/utils/types.mjs';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../common/AuthErrorStrings.mjs';
+import '../../errors/types/validation.mjs';
+import '../../providers/cognito/types/errors.mjs';
+import { deleteWebAuthnCredential as deleteWebAuthnCredential$1 } from '../../foundation/apis/deleteWebAuthnCredential.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Delete a registered credential for an authenticated user by credentialId
+ * @param {DeleteWebAuthnCredentialInput} input The delete input parameters including the credentialId
+ * @returns Promise<void>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link DeleteWebAuthnCredentialException}
+ * - Thrown due to a service error when deleting a WebAuthn credential
+ */
+async function deleteWebAuthnCredential(input) {
+    return deleteWebAuthnCredential$1(Amplify, input);
+}
+
+export { deleteWebAuthnCredential };
+//# sourceMappingURL=deleteWebAuthnCredential.mjs.map

package/dist/esm/client/apis/deleteWebAuthnCredential.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteWebAuthnCredential.mjs","sources":["../../../../src/client/apis/deleteWebAuthnCredential.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { Amplify } from '@aws-amplify/core';\nimport { deleteWebAuthnCredential as deleteWebAuthnCredentialFoundation } from '../../foundation/apis';\n/**\n * Delete a registered credential for an authenticated user by credentialId\n * @param {DeleteWebAuthnCredentialInput} input The delete input parameters including the credentialId\n * @returns Promise<void>\n * @throws - {@link AuthError}:\n * - Thrown when user is unauthenticated\n * @throws - {@link DeleteWebAuthnCredentialException}\n * - Thrown due to a service error when deleting a WebAuthn credential\n */\nexport async function deleteWebAuthnCredential(input) {\n    return deleteWebAuthnCredentialFoundation(Amplify, input);\n}\n"],"names":["deleteWebAuthnCredentialFoundation"],"mappings":";;;;;;;;;;;;AAAA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,wBAAwB,CAAC,KAAK,EAAE;AACtD,IAAI,OAAOA,0BAAkC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9D;;;;"}

package/dist/esm/client/apis/index.d.ts

@@ -0,0 +1,3 @@
+export { associateWebAuthnCredential } from './associateWebAuthnCredential';
+export { listWebAuthnCredentials } from './listWebAuthnCredentials';
+export { deleteWebAuthnCredential } from './deleteWebAuthnCredential';

package/dist/esm/client/apis/index.mjs

@@ -0,0 +1,4 @@
+export { associateWebAuthnCredential } from './associateWebAuthnCredential.mjs';
+export { listWebAuthnCredentials } from './listWebAuthnCredentials.mjs';
+export { deleteWebAuthnCredential } from './deleteWebAuthnCredential.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/esm/client/apis/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}

package/dist/esm/client/apis/listWebAuthnCredentials.d.ts

@@ -0,0 +1,12 @@
+import { ListWebAuthnCredentialsInput, ListWebAuthnCredentialsOutput } from '../../foundation/types';
+/**
+ * Lists registered credentials for an authenticated user
+ *
+ * @param {ListWebAuthnCredentialsInput} input The list input parameters including page size and next token.
+ * @returns Promise<ListWebAuthnCredentialsOutput>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link ListWebAuthnCredentialsException}
+ * - Thrown due to a service error when listing WebAuthn credentials
+ */
+export declare function listWebAuthnCredentials(input?: ListWebAuthnCredentialsInput): Promise<ListWebAuthnCredentialsOutput>;

package/dist/esm/client/apis/listWebAuthnCredentials.mjs

@@ -0,0 +1,30 @@
+import { Amplify } from '@aws-amplify/core';
+import { listWebAuthnCredentials as listWebAuthnCredentials$1 } from '../../foundation/apis/listWebAuthnCredentials.mjs';
+import '@aws-amplify/core/internals/utils';
+import '../../providers/cognito/utils/types.mjs';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../common/AuthErrorStrings.mjs';
+import '../../errors/types/validation.mjs';
+import '../../providers/cognito/types/errors.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Lists registered credentials for an authenticated user
+ *
+ * @param {ListWebAuthnCredentialsInput} input The list input parameters including page size and next token.
+ * @returns Promise<ListWebAuthnCredentialsOutput>
+ * @throws - {@link AuthError}:
+ * - Thrown when user is unauthenticated
+ * @throws - {@link ListWebAuthnCredentialsException}
+ * - Thrown due to a service error when listing WebAuthn credentials
+ */
+async function listWebAuthnCredentials(input) {
+    return listWebAuthnCredentials$1(Amplify, input);
+}
+
+export { listWebAuthnCredentials };
+//# sourceMappingURL=listWebAuthnCredentials.mjs.map

package/dist/esm/client/apis/listWebAuthnCredentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"listWebAuthnCredentials.mjs","sources":["../../../../src/client/apis/listWebAuthnCredentials.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { Amplify } from '@aws-amplify/core';\nimport { listWebAuthnCredentials as listWebAuthnCredentialsFoundation } from '../../foundation/apis';\n/**\n * Lists registered credentials for an authenticated user\n *\n * @param {ListWebAuthnCredentialsInput} input The list input parameters including page size and next token.\n * @returns Promise<ListWebAuthnCredentialsOutput>\n * @throws - {@link AuthError}:\n * - Thrown when user is unauthenticated\n * @throws - {@link ListWebAuthnCredentialsException}\n * - Thrown due to a service error when listing WebAuthn credentials\n */\nexport async function listWebAuthnCredentials(input) {\n    return listWebAuthnCredentialsFoundation(Amplify, input);\n}\n"],"names":["listWebAuthnCredentialsFoundation"],"mappings":";;;;;;;;;;;;AAAA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,uBAAuB,CAAC,KAAK,EAAE;AACrD,IAAI,OAAOA,yBAAiC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC7D;;;;"}

package/dist/esm/client/flows/shared/handlePasswordSRP.d.ts

@@ -0,0 +1,31 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { AuthTokenOrchestrator } from '../../../providers/cognito/tokenProvider/types';
+import { AuthFlowType, ClientMetadata } from '../../../providers/cognito/types';
+import { RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { AuthFactorType } from '../../../providers/cognito/types/models';
+interface HandlePasswordSRPInput {
+    username: string;
+    password: string;
+    clientMetadata: ClientMetadata | undefined;
+    config: CognitoUserPoolConfig;
+    tokenOrchestrator: AuthTokenOrchestrator;
+    authFlow: AuthFlowType;
+    preferredChallenge?: AuthFactorType;
+}
+/**
+ * Handles the Password SRP (Secure Remote Password) authentication flow.
+ * This function can be used with both USER_SRP_AUTH and USER_AUTH flows.
+ *
+ * @param {Object} params - The parameters for the Password SRP authentication
+ * @param {string} params.username - The username for authentication
+ * @param {string} params.password - The user's password
+ * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration
+ * @param {AuthTokenOrchestrator} params.tokenOrchestrator - Token orchestrator for managing auth tokens
+ * @param {AuthFlowType} params.authFlow - The type of authentication flow ('USER_SRP_AUTH' or 'USER_AUTH')
+ * @param {AuthFactorType} [params.preferredChallenge] - Optional preferred challenge type when using USER_AUTH flow
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The authentication response
+ */
+export declare function handlePasswordSRP({ username, password, clientMetadata, config, tokenOrchestrator, authFlow, preferredChallenge, }: HandlePasswordSRPInput): Promise<RespondToAuthChallengeCommandOutput>;
+export {};

package/dist/esm/client/flows/shared/handlePasswordSRP.mjs

@@ -0,0 +1,86 @@
+import { AuthAction } from '@aws-amplify/core/internals/utils';
+import { getUserContextData } from '../../../providers/cognito/utils/userContextData.mjs';
+import { getAuthenticationHelper } from '../../../providers/cognito/utils/srp/getAuthenticationHelper.mjs';
+import '../../../providers/cognito/utils/srp/constants.mjs';
+import '@aws-crypto/sha256-js';
+import { setActiveSignInUsername, retryOnResourceNotFoundException, handlePasswordVerifierChallenge } from '../../../providers/cognito/utils/signInHelpers.mjs';
+import { createInitiateAuthClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createInitiateAuthClient.mjs';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../../../providers/cognito/types/errors.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import { getAuthUserAgentValue } from '../../../utils/getAuthUserAgentValue.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Handles the Password SRP (Secure Remote Password) authentication flow.
+ * This function can be used with both USER_SRP_AUTH and USER_AUTH flows.
+ *
+ * @param {Object} params - The parameters for the Password SRP authentication
+ * @param {string} params.username - The username for authentication
+ * @param {string} params.password - The user's password
+ * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration
+ * @param {AuthTokenOrchestrator} params.tokenOrchestrator - Token orchestrator for managing auth tokens
+ * @param {AuthFlowType} params.authFlow - The type of authentication flow ('USER_SRP_AUTH' or 'USER_AUTH')
+ * @param {AuthFactorType} [params.preferredChallenge] - Optional preferred challenge type when using USER_AUTH flow
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The authentication response
+ */
+async function handlePasswordSRP({ username, password, clientMetadata, config, tokenOrchestrator, authFlow, preferredChallenge, }) {
+    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;
+    const userPoolName = userPoolId?.split('_')[1] || '';
+    const authenticationHelper = await getAuthenticationHelper(userPoolName);
+    const authParameters = {
+        USERNAME: username,
+        SRP_A: authenticationHelper.A.toString(16),
+    };
+    if (authFlow === 'USER_AUTH' && preferredChallenge) {
+        authParameters.PREFERRED_CHALLENGE = preferredChallenge;
+    }
+    const UserContextData = getUserContextData({
+        username,
+        userPoolId,
+        userPoolClientId,
+    });
+    const jsonReq = {
+        AuthFlow: authFlow,
+        AuthParameters: authParameters,
+        ClientMetadata: clientMetadata,
+        ClientId: userPoolClientId,
+        UserContextData,
+    };
+    const initiateAuth = createInitiateAuthClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    const resp = await initiateAuth({
+        region: getRegionFromUserPoolId(userPoolId),
+        userAgentValue: getAuthUserAgentValue(AuthAction.SignIn),
+    }, jsonReq);
+    const { ChallengeParameters: challengeParameters, Session: session } = resp;
+    const activeUsername = challengeParameters?.USERNAME ?? username;
+    setActiveSignInUsername(activeUsername);
+    if (resp.ChallengeName === 'PASSWORD_VERIFIER') {
+        return retryOnResourceNotFoundException(handlePasswordVerifierChallenge, [
+            password,
+            challengeParameters,
+            clientMetadata,
+            session,
+            authenticationHelper,
+            config,
+            tokenOrchestrator,
+        ], activeUsername, tokenOrchestrator);
+    }
+    return resp;
+}
+
+export { handlePasswordSRP };
+//# sourceMappingURL=handlePasswordSRP.mjs.map

package/dist/esm/client/flows/shared/handlePasswordSRP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlePasswordSRP.mjs","sources":["../../../../../src/client/flows/shared/handlePasswordSRP.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AuthAction } from '@aws-amplify/core/internals/utils';\nimport { getUserContextData } from '../../../providers/cognito/utils/userContextData';\nimport { getAuthenticationHelper } from '../../../providers/cognito/utils/srp';\nimport { handlePasswordVerifierChallenge, retryOnResourceNotFoundException, setActiveSignInUsername, } from '../../../providers/cognito/utils/signInHelpers';\nimport { createInitiateAuthClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { getAuthUserAgentValue } from '../../../utils';\n/**\n * Handles the Password SRP (Secure Remote Password) authentication flow.\n * This function can be used with both USER_SRP_AUTH and USER_AUTH flows.\n *\n * @param {Object} params - The parameters for the Password SRP authentication\n * @param {string} params.username - The username for authentication\n * @param {string} params.password - The user's password\n * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests\n * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration\n * @param {AuthTokenOrchestrator} params.tokenOrchestrator - Token orchestrator for managing auth tokens\n * @param {AuthFlowType} params.authFlow - The type of authentication flow ('USER_SRP_AUTH' or 'USER_AUTH')\n * @param {AuthFactorType} [params.preferredChallenge] - Optional preferred challenge type when using USER_AUTH flow\n *\n * @returns {Promise<RespondToAuthChallengeCommandOutput>} The authentication response\n */\nexport async function handlePasswordSRP({ username, password, clientMetadata, config, tokenOrchestrator, authFlow, preferredChallenge, }) {\n    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;\n    const userPoolName = userPoolId?.split('_')[1] || '';\n    const authenticationHelper = await getAuthenticationHelper(userPoolName);\n    const authParameters = {\n        USERNAME: username,\n        SRP_A: authenticationHelper.A.toString(16),\n    };\n    if (authFlow === 'USER_AUTH' && preferredChallenge) {\n        authParameters.PREFERRED_CHALLENGE = preferredChallenge;\n    }\n    const UserContextData = getUserContextData({\n        username,\n        userPoolId,\n        userPoolClientId,\n    });\n    const jsonReq = {\n        AuthFlow: authFlow,\n        AuthParameters: authParameters,\n        ClientMetadata: clientMetadata,\n        ClientId: userPoolClientId,\n        UserContextData,\n    };\n    const initiateAuth = createInitiateAuthClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    const resp = await initiateAuth({\n        region: getRegionFromUserPoolId(userPoolId),\n        userAgentValue: getAuthUserAgentValue(AuthAction.SignIn),\n    }, jsonReq);\n    const { ChallengeParameters: challengeParameters, Session: session } = resp;\n    const activeUsername = challengeParameters?.USERNAME ?? username;\n    setActiveSignInUsername(activeUsername);\n    if (resp.ChallengeName === 'PASSWORD_VERIFIER') {\n        return retryOnResourceNotFoundException(handlePasswordVerifierChallenge, [\n            password,\n            challengeParameters,\n            clientMetadata,\n            session,\n            authenticationHelper,\n            config,\n            tokenOrchestrator,\n        ], activeUsername, tokenOrchestrator);\n    }\n    return resp;\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AACA;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,EAAE;AAC1I,IAAI,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;AACtE,IAAI,MAAM,YAAY,GAAG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzD,IAAI,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;AAC7E,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClD,KAAK,CAAC;AACN,IAAI,IAAI,QAAQ,KAAK,WAAW,IAAI,kBAAkB,EAAE;AACxD,QAAQ,cAAc,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;AAChE,KAAK;AACL,IAAI,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC/C,QAAQ,QAAQ;AAChB,QAAQ,UAAU;AAClB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,QAAQ,EAAE,gBAAgB;AAClC,QAAQ,eAAe;AACvB,KAAK,CAAC;AACN,IAAI,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAClD,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC;AACpC,QAAQ,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC;AACnD,QAAQ,cAAc,EAAE,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC;AAChE,KAAK,EAAE,OAAO,CAAC,CAAC;AAChB,IAAI,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;AAChF,IAAI,MAAM,cAAc,GAAG,mBAAmB,EAAE,QAAQ,IAAI,QAAQ,CAAC;AACrE,IAAI,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC5C,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,mBAAmB,EAAE;AACpD,QAAQ,OAAO,gCAAgC,CAAC,+BAA+B,EAAE;AACjF,YAAY,QAAQ;AACpB,YAAY,mBAAmB;AAC/B,YAAY,cAAc;AAC1B,YAAY,OAAO;AACnB,YAAY,oBAAoB;AAChC,YAAY,MAAM;AAClB,YAAY,iBAAiB;AAC7B,SAAS,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;AAC9C,KAAK;AACL,IAAI,OAAO,IAAI,CAAC;AAChB;;;;"}

package/dist/esm/client/flows/userAuth/handleSelectChallenge.d.ts

@@ -0,0 +1,23 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { ClientMetadata } from '../../../providers/cognito/types';
+import { RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+/**
+ * Handles the SELECT_CHALLENGE response for authentication.
+ * Initiates the selected authentication challenge based on user choice.
+ *
+ * @param {Object} params - The parameters for handling the selected challenge
+ * @param {string} params.username - The username for authentication
+ * @param {string} params.session - The current authentication session token
+ * @param {string} params.selectedChallenge - The challenge type selected by the user
+ * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration
+ * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response
+ */
+export declare function initiateSelectedChallenge({ username, session, selectedChallenge, config, clientMetadata, }: {
+    username: string;
+    session: string;
+    selectedChallenge: string;
+    config: CognitoUserPoolConfig;
+    clientMetadata?: ClientMetadata;
+}): Promise<RespondToAuthChallengeCommandOutput>;

package/dist/esm/client/flows/userAuth/handleSelectChallenge.mjs

@@ -0,0 +1,51 @@
+import { AuthAction } from '@aws-amplify/core/internals/utils';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../../../providers/cognito/types/errors.mjs';
+import { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createRespondToAuthChallengeClient.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import { getAuthUserAgentValue } from '../../../utils/getAuthUserAgentValue.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Handles the SELECT_CHALLENGE response for authentication.
+ * Initiates the selected authentication challenge based on user choice.
+ *
+ * @param {Object} params - The parameters for handling the selected challenge
+ * @param {string} params.username - The username for authentication
+ * @param {string} params.session - The current authentication session token
+ * @param {string} params.selectedChallenge - The challenge type selected by the user
+ * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration
+ * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response
+ */
+async function initiateSelectedChallenge({ username, session, selectedChallenge, config, clientMetadata, }) {
+    const respondToAuthChallenge = createRespondToAuthChallengeClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: config.userPoolEndpoint,
+        }),
+    });
+    return respondToAuthChallenge({
+        region: getRegionFromUserPoolId(config.userPoolId),
+        userAgentValue: getAuthUserAgentValue(AuthAction.ConfirmSignIn),
+    }, {
+        ChallengeName: 'SELECT_CHALLENGE',
+        ChallengeResponses: {
+            USERNAME: username,
+            ANSWER: selectedChallenge,
+        },
+        ClientId: config.userPoolClientId,
+        Session: session,
+        ClientMetadata: clientMetadata,
+    });
+}
+
+export { initiateSelectedChallenge };
+//# sourceMappingURL=handleSelectChallenge.mjs.map

package/dist/esm/client/flows/userAuth/handleSelectChallenge.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSelectChallenge.mjs","sources":["../../../../../src/client/flows/userAuth/handleSelectChallenge.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AuthAction } from '@aws-amplify/core/internals/utils';\nimport { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { getAuthUserAgentValue } from '../../../utils';\n/**\n * Handles the SELECT_CHALLENGE response for authentication.\n * Initiates the selected authentication challenge based on user choice.\n *\n * @param {Object} params - The parameters for handling the selected challenge\n * @param {string} params.username - The username for authentication\n * @param {string} params.session - The current authentication session token\n * @param {string} params.selectedChallenge - The challenge type selected by the user\n * @param {CognitoUserPoolConfig} params.config - Cognito User Pool configuration\n * @param {ClientMetadata} [params.clientMetadata] - Optional metadata to be sent with auth requests\n *\n * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response\n */\nexport async function initiateSelectedChallenge({ username, session, selectedChallenge, config, clientMetadata, }) {\n    const respondToAuthChallenge = createRespondToAuthChallengeClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: config.userPoolEndpoint,\n        }),\n    });\n    return respondToAuthChallenge({\n        region: getRegionFromUserPoolId(config.userPoolId),\n        userAgentValue: getAuthUserAgentValue(AuthAction.ConfirmSignIn),\n    }, {\n        ChallengeName: 'SELECT_CHALLENGE',\n        ChallengeResponses: {\n            USERNAME: username,\n            ANSWER: selectedChallenge,\n        },\n        ClientId: config.userPoolClientId,\n        Session: session,\n        ClientMetadata: clientMetadata,\n    });\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;AAAA;AACA;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,yBAAyB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,cAAc,GAAG,EAAE;AACnH,IAAI,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACtE,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACrD,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,OAAO,sBAAsB,CAAC;AAClC,QAAQ,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC;AAC1D,QAAQ,cAAc,EAAE,qBAAqB,CAAC,UAAU,CAAC,aAAa,CAAC;AACvE,KAAK,EAAE;AACP,QAAQ,aAAa,EAAE,kBAAkB;AACzC,QAAQ,kBAAkB,EAAE;AAC5B,YAAY,QAAQ,EAAE,QAAQ;AAC9B,YAAY,MAAM,EAAE,iBAAiB;AACrC,SAAS;AACT,QAAQ,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACzC,QAAQ,OAAO,EAAE,OAAO;AACxB,QAAQ,cAAc,EAAE,cAAc;AACtC,KAAK,CAAC,CAAC;AACP;;;;"}

package/dist/esm/client/flows/userAuth/handleSelectChallengeWithPassword.d.ts

@@ -0,0 +1,16 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { ClientMetadata } from '../../../providers/cognito/types';
+import { RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+/**
+ * Handles the SELECT_CHALLENGE response specifically for Password authentication.
+ * This function combines the SELECT_CHALLENGE flow with standard password authentication.
+ *
+ * @param {string} username - The username for authentication
+ * @param {string} password - The user's password
+ * @param {ClientMetadata} [clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} config - Cognito User Pool configuration
+ * @param {string} session - The current authentication session token
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response
+ */
+export declare function handleSelectChallengeWithPassword(username: string, password: string, clientMetadata: ClientMetadata | undefined, config: CognitoUserPoolConfig, session: string): Promise<RespondToAuthChallengeCommandOutput>;

package/dist/esm/client/flows/userAuth/handleSelectChallengeWithPassword.mjs

@@ -0,0 +1,64 @@
+import { AuthAction } from '@aws-amplify/core/internals/utils';
+import '@aws-amplify/core/internals/aws-client-utils/composers';
+import '@aws-amplify/core/internals/aws-client-utils';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/shared/handler/cognitoUserPoolTransferHandler.mjs';
+import '../../../foundation/factories/serviceClients/cognitoIdentityProvider/constants.mjs';
+import '../../../common/AuthErrorStrings.mjs';
+import '../../../errors/types/validation.mjs';
+import '../../../providers/cognito/types/errors.mjs';
+import { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/createRespondToAuthChallengeClient.mjs';
+import { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories/createCognitoUserPoolEndpointResolver.mjs';
+import { getRegionFromUserPoolId } from '../../../foundation/parsers/regionParsers.mjs';
+import { getAuthUserAgentValue } from '../../../utils/getAuthUserAgentValue.mjs';
+import { getUserContextData } from '../../../providers/cognito/utils/userContextData.mjs';
+import { setActiveSignInUsername } from '../../../providers/cognito/utils/signInHelpers.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Handles the SELECT_CHALLENGE response specifically for Password authentication.
+ * This function combines the SELECT_CHALLENGE flow with standard password authentication.
+ *
+ * @param {string} username - The username for authentication
+ * @param {string} password - The user's password
+ * @param {ClientMetadata} [clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} config - Cognito User Pool configuration
+ * @param {string} session - The current authentication session token
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response
+ */
+async function handleSelectChallengeWithPassword(username, password, clientMetadata, config, session) {
+    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;
+    const authParameters = {
+        ANSWER: 'PASSWORD',
+        USERNAME: username,
+        PASSWORD: password,
+    };
+    const userContextData = getUserContextData({
+        username,
+        userPoolId,
+        userPoolClientId,
+    });
+    const respondToAuthChallenge = createRespondToAuthChallengeClient({
+        endpointResolver: createCognitoUserPoolEndpointResolver({
+            endpointOverride: userPoolEndpoint,
+        }),
+    });
+    const response = await respondToAuthChallenge({
+        region: getRegionFromUserPoolId(userPoolId),
+        userAgentValue: getAuthUserAgentValue(AuthAction.ConfirmSignIn),
+    }, {
+        ChallengeName: 'SELECT_CHALLENGE',
+        ChallengeResponses: authParameters,
+        ClientId: userPoolClientId,
+        ClientMetadata: clientMetadata,
+        Session: session,
+        UserContextData: userContextData,
+    });
+    const activeUsername = response.ChallengeParameters?.USERNAME ?? username;
+    setActiveSignInUsername(activeUsername);
+    return response;
+}
+
+export { handleSelectChallengeWithPassword };
+//# sourceMappingURL=handleSelectChallengeWithPassword.mjs.map

package/dist/esm/client/flows/userAuth/handleSelectChallengeWithPassword.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleSelectChallengeWithPassword.mjs","sources":["../../../../../src/client/flows/userAuth/handleSelectChallengeWithPassword.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AuthAction } from '@aws-amplify/core/internals/utils';\nimport { createRespondToAuthChallengeClient } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider';\nimport { createCognitoUserPoolEndpointResolver } from '../../../providers/cognito/factories';\nimport { getRegionFromUserPoolId } from '../../../foundation/parsers';\nimport { getAuthUserAgentValue } from '../../../utils';\nimport { getUserContextData } from '../../../providers/cognito/utils/userContextData';\nimport { setActiveSignInUsername } from '../../../providers/cognito/utils/signInHelpers';\n/**\n * Handles the SELECT_CHALLENGE response specifically for Password authentication.\n * This function combines the SELECT_CHALLENGE flow with standard password authentication.\n *\n * @param {string} username - The username for authentication\n * @param {string} password - The user's password\n * @param {ClientMetadata} [clientMetadata] - Optional metadata to be sent with auth requests\n * @param {CognitoUserPoolConfig} config - Cognito User Pool configuration\n * @param {string} session - The current authentication session token\n *\n * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response\n */\nexport async function handleSelectChallengeWithPassword(username, password, clientMetadata, config, session) {\n    const { userPoolId, userPoolClientId, userPoolEndpoint } = config;\n    const authParameters = {\n        ANSWER: 'PASSWORD',\n        USERNAME: username,\n        PASSWORD: password,\n    };\n    const userContextData = getUserContextData({\n        username,\n        userPoolId,\n        userPoolClientId,\n    });\n    const respondToAuthChallenge = createRespondToAuthChallengeClient({\n        endpointResolver: createCognitoUserPoolEndpointResolver({\n            endpointOverride: userPoolEndpoint,\n        }),\n    });\n    const response = await respondToAuthChallenge({\n        region: getRegionFromUserPoolId(userPoolId),\n        userAgentValue: getAuthUserAgentValue(AuthAction.ConfirmSignIn),\n    }, {\n        ChallengeName: 'SELECT_CHALLENGE',\n        ChallengeResponses: authParameters,\n        ClientId: userPoolClientId,\n        ClientMetadata: clientMetadata,\n        Session: session,\n        UserContextData: userContextData,\n    });\n    const activeUsername = response.ChallengeParameters?.USERNAME ?? username;\n    setActiveSignInUsername(activeUsername);\n    return response;\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,iCAAiC,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;AAC7G,IAAI,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;AACtE,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,UAAU;AAC1B,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,QAAQ,QAAQ,EAAE,QAAQ;AAC1B,KAAK,CAAC;AACN,IAAI,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC/C,QAAQ,QAAQ;AAChB,QAAQ,UAAU;AAClB,QAAQ,gBAAgB;AACxB,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACtE,QAAQ,gBAAgB,EAAE,qCAAqC,CAAC;AAChE,YAAY,gBAAgB,EAAE,gBAAgB;AAC9C,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;AAClD,QAAQ,MAAM,EAAE,uBAAuB,CAAC,UAAU,CAAC;AACnD,QAAQ,cAAc,EAAE,qBAAqB,CAAC,UAAU,CAAC,aAAa,CAAC;AACvE,KAAK,EAAE;AACP,QAAQ,aAAa,EAAE,kBAAkB;AACzC,QAAQ,kBAAkB,EAAE,cAAc;AAC1C,QAAQ,QAAQ,EAAE,gBAAgB;AAClC,QAAQ,cAAc,EAAE,cAAc;AACtC,QAAQ,OAAO,EAAE,OAAO;AACxB,QAAQ,eAAe,EAAE,eAAe;AACxC,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,cAAc,GAAG,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,IAAI,QAAQ,CAAC;AAC9E,IAAI,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC5C,IAAI,OAAO,QAAQ,CAAC;AACpB;;;;"}

package/dist/esm/client/flows/userAuth/handleSelectChallengeWithPasswordSRP.d.ts

@@ -0,0 +1,18 @@
+import { CognitoUserPoolConfig } from '@aws-amplify/core';
+import { AuthTokenOrchestrator } from '../../../providers/cognito/tokenProvider/types';
+import { RespondToAuthChallengeCommandOutput } from '../../../foundation/factories/serviceClients/cognitoIdentityProvider/types';
+import { ClientMetadata } from '../../../providers/cognito/types';
+/**
+ * Handles the SELECT_CHALLENGE response specifically for Password SRP authentication.
+ * This function combines the SELECT_CHALLENGE flow with Password SRP protocol.
+ *
+ * @param {string} username - The username for authentication
+ * @param {string} password - The user's password
+ * @param {ClientMetadata} [clientMetadata] - Optional metadata to be sent with auth requests
+ * @param {CognitoUserPoolConfig} config - Cognito User Pool configuration
+ * @param {string} session - The current authentication session token
+ * @param {AuthTokenOrchestrator} tokenOrchestrator - Token orchestrator for managing auth tokens
+ *
+ * @returns {Promise<RespondToAuthChallengeCommandOutput>} The challenge response
+ */
+export declare function handleSelectChallengeWithPasswordSRP(username: string, password: string, clientMetadata: ClientMetadata | undefined, config: CognitoUserPoolConfig, session: string, tokenOrchestrator: AuthTokenOrchestrator): Promise<RespondToAuthChallengeCommandOutput>;