@fiado/api-invoker 5.110.0 → 5.111.0

package/bin/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.d.ts

@@ -1,6 +1,6 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
+import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, AuthStartLoginRequest, AuthStartLoginResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
 import { ICognitoBackofficeConnectorApi } from "./interfaces/ICognitoBackofficeConnectorApi.js";
 /**
  * Publisher HTTP del lambda `cognito-backoffice-connector` (componente 05 SureKeep Fase 0).
@@ -40,6 +40,7 @@ export default class CognitoBackofficeConnectorApi implements ICognitoBackoffice
     resetUserMfa(cognitoSub: string, input: MfaResetRequest): Promise<ApiGatewayResponse<void>>;
     authInitiate(input: InitiateAuthRequest): Promise<ApiGatewayResponse<InitiateAuthResponse>>;
     authVerifyPassword(input: VerifyPasswordRequest): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
+    authStartLogin(input: AuthStartLoginRequest): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
     introspect(input: IntrospectRequest): Promise<ApiGatewayResponse<IntrospectResponse>>;
     authRespondChallenge(input: RespondToChallengeRequest): Promise<ApiGatewayResponse<RespondToChallengeResponse>>;
     authRefreshTokens(input: RefreshTokensRequest): Promise<ApiGatewayResponse<RefreshTokensResponse>>;

package/bin/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.js

@@ -97,6 +97,10 @@ let CognitoBackofficeConnectorApi = class CognitoBackofficeConnectorApi {
         const url = `${this.baseUrl}/auth/verify-password`;
         return await this.httpRequest.post(url, input);
     }
+    async authStartLogin(input) {
+        const url = `${this.baseUrl}/auth/start-login`;
+        return await this.httpRequest.post(url, input);
+    }
     async introspect(input) {
         const url = `${this.baseUrl}/auth/introspect`;
         return await this.httpRequest.post(url, input);

package/bin/cognitoBackofficeConnector/api/interfaces/ICognitoBackofficeConnectorApi.d.ts

@@ -1,5 +1,5 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
+import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, AuthStartLoginRequest, AuthStartLoginResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
 /**
  * Contrato del publisher HTTP del lambda `cognito-backoffice-connector` (componente 05 SureKeep Fase 0).
  *
@@ -58,6 +58,14 @@ export interface ICognitoBackofficeConnectorApi {
      * solo un veredicto `{ valid }`. El caller (rbac) NO conoce el mecanismo.
      */
     authVerifyPassword(input: VerifyPasswordRequest): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
+    /**
+     * POST /auth/start-login — login de un solo flujo (SRP dentro de CUSTOM_AUTH).
+     * El connector hace InitiateAuth(CUSTOM_AUTH, SRP_A) y responde PASSWORD_VERIFIER
+     * firmado en una sola operacion; la contraseña nunca viaja en claro. Devuelve
+     * tokens (2FA apagado) o el challenge pendiente (NEW_PASSWORD_REQUIRED / el
+     * CUSTOM_CHALLENGE del 2do factor). El caller (rbac) decide por que rama sigue.
+     */
+    authStartLogin(input: AuthStartLoginRequest): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
     /**
      * POST /auth/introspect — valida un token (firma + exp + iss + client_id +
      * token_use) y devuelve `{ valid, cognitoSub?, reason? }`. El connector es

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.110.0",
+  "version": "5.111.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -31,10 +31,10 @@
   "license": "ISC",
   "dependencies": {
     "@aws-sdk/client-sqs": "^3.919.0",
-    "@fiado/gateway-adapter": "^3.9.0",
+    "@fiado/gateway-adapter": "^3.14.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.497.0",
+    "@fiado/type-kit": "^3.500.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.ts

@@ -38,6 +38,8 @@ import {
     HealthcheckResponse,
     VerifyPasswordRequest,
     VerifyPasswordResponse,
+    AuthStartLoginRequest,
+    AuthStartLoginResponse,
     IntrospectRequest,
     IntrospectResponse,
 } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
@@ -190,6 +192,13 @@ export default class CognitoBackofficeConnectorApi implements ICognitoBackoffice
         return await this.httpRequest.post(url, input);
     }
 
+    async authStartLogin(
+        input: AuthStartLoginRequest,
+    ): Promise<ApiGatewayResponse<AuthStartLoginResponse>> {
+        const url = `${this.baseUrl}/auth/start-login`;
+        return await this.httpRequest.post(url, input);
+    }
+
     async introspect(
         input: IntrospectRequest,
     ): Promise<ApiGatewayResponse<IntrospectResponse>> {

package/src/cognitoBackofficeConnector/api/interfaces/ICognitoBackofficeConnectorApi.ts

@@ -36,6 +36,8 @@ import {
     HealthcheckResponse,
     VerifyPasswordRequest,
     VerifyPasswordResponse,
+    AuthStartLoginRequest,
+    AuthStartLoginResponse,
     IntrospectRequest,
     IntrospectResponse,
 } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
@@ -141,6 +143,17 @@ export interface ICognitoBackofficeConnectorApi {
         input: VerifyPasswordRequest,
     ): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
 
+    /**
+     * POST /auth/start-login — login de un solo flujo (SRP dentro de CUSTOM_AUTH).
+     * El connector hace InitiateAuth(CUSTOM_AUTH, SRP_A) y responde PASSWORD_VERIFIER
+     * firmado en una sola operacion; la contraseña nunca viaja en claro. Devuelve
+     * tokens (2FA apagado) o el challenge pendiente (NEW_PASSWORD_REQUIRED / el
+     * CUSTOM_CHALLENGE del 2do factor). El caller (rbac) decide por que rama sigue.
+     */
+    authStartLogin(
+        input: AuthStartLoginRequest,
+    ): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
+
     /**
      * POST /auth/introspect — valida un token (firma + exp + iss + client_id +
      * token_use) y devuelve `{ valid, cognitoSub?, reason? }`. El connector es