@fy-stack/auth-construct 0.0.1

package/README.md

@@ -0,0 +1,7 @@
+# auth-construct
+
+This library was generated with [Nx](https://nx.dev).
+
+## Building
+
+Run `nx build auth-construct` to build the library.

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { AuthConstruct } from './lib/auth-construct';
+export type { AuthConstructProps } from './lib/types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthConstruct = void 0;
+var auth_construct_1 = require("./lib/auth-construct");
+Object.defineProperty(exports, "AuthConstruct", { enumerable: true, get: function () { return auth_construct_1.AuthConstruct; } });

package/dist/lib/auth-construct.d.ts

@@ -0,0 +1,20 @@
+import { Attachable, Grantable } from '@fy-stack/types';
+import * as cognito from 'aws-cdk-lib/aws-cognito';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import { Construct } from 'constructs';
+import { AuthConstructProps } from './types';
+export declare class AuthConstruct extends Construct implements Attachable, Grantable {
+    userPool: cognito.UserPool;
+    domain: cognito.UserPoolDomain;
+    client: cognito.UserPoolClient;
+    constructor(scope: Construct, id: string, props: AuthConstructProps);
+    attachable(): {
+        arn: string;
+        id: string;
+        domainName: string;
+        clientId: string;
+        clientSecret: string;
+    };
+    grantable(grant: iam.IGrantable): void;
+}
+//# sourceMappingURL=auth-construct.d.ts.map

package/dist/lib/auth-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-construct.d.ts","sourceRoot":"","sources":["../../src/lib/auth-construct.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C,qBAAa,aAAc,SAAQ,SAAU,YAAW,UAAU,EAAE,SAAS;IACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;gBAE1B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;IAyCnE,UAAU;;;;;;;IAUV,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU;CAQhC"}

package/dist/lib/auth-construct.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthConstruct = void 0;
+const tslib_1 = require("tslib");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const cognito = tslib_1.__importStar(require("aws-cdk-lib/aws-cognito"));
+const iam = tslib_1.__importStar(require("aws-cdk-lib/aws-iam"));
+const constructs_1 = require("constructs");
+class AuthConstruct extends constructs_1.Construct {
+    userPool;
+    domain;
+    client;
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.userPool = new cognito.UserPool(this, 'UserPool', {
+            deletionProtection: true,
+            selfSignUpEnabled: true,
+            signInCaseSensitive: false,
+        });
+        this.domain = new cognito.UserPoolDomain(this, 'UserPoolDomain', {
+            userPool: this.userPool,
+            cognitoDomain: { domainPrefix: id.toLowerCase() },
+        });
+        this.client = new cognito.UserPoolClient(this, 'WebClient', {
+            userPool: this.userPool,
+            authFlows: {
+                userPassword: true,
+                userSrp: true,
+                adminUserPassword: true,
+            },
+            accessTokenValidity: aws_cdk_lib_1.Duration.hours(props.token?.accessTokenValidity ?? 24),
+            refreshTokenValidity: aws_cdk_lib_1.Duration.hours(props.token?.refreshTokenValidity ?? 720),
+            generateSecret: true,
+        });
+        if (props.groups?.length) {
+            for (const i in props.groups) {
+                new cognito.CfnUserPoolGroup(this, `${props.groups[i]}Group`, {
+                    userPoolId: this.userPool.userPoolId,
+                    precedence: Number(i) + 1,
+                    groupName: props.groups[i],
+                });
+            }
+        }
+    }
+    attachable() {
+        return {
+            arn: this?.userPool.userPoolArn,
+            id: this?.userPool.userPoolId,
+            domainName: this.domain.domainName,
+            clientId: this?.client.userPoolClientId,
+            clientSecret: this?.client.userPoolClientSecret.unsafeUnwrap(),
+        };
+    }
+    grantable(grant) {
+        new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['cognito-idp:*', 'cognito-identity:*'],
+            resources: [this.userPool.userPoolArn],
+            principals: [grant.grantPrincipal],
+        });
+    }
+}
+exports.AuthConstruct = AuthConstruct;

package/dist/lib/types.d.ts

@@ -0,0 +1,14 @@
+export interface AuthConstructProps {
+    /** User pool group names */
+    groups?: string[];
+    /**
+     * Token options
+     * */
+    token?: {
+        /** Access token validity in hours */
+        accessTokenValidity?: number;
+        /** Refresh token validity in hours */
+        refreshTokenValidity?: number;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;SAEK;IACL,KAAK,CAAC,EAAE;QACN,qCAAqC;QACrC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,sCAAsC;QACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH"}

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@fy-stack/auth-construct",
+  "version": "0.0.1",
+  "dependencies": {
+    "tslib": "^2.3.0"
+  },
+  "peerDependencies": {
+    "aws-cdk-lib": "2.164.1",
+    "constructs": "10.4.2",
+    "@fy-stack/types": "0.0.1"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "typings": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "!**/*.tsbuildinfo"
+  ],
+  "nx": {
+    "name": "auth-construct"
+  }
+}