@gemeentenijmegen/webapp 0.0.1

package/lib/webapp/OIDCConnectionProfile.d.ts

@@ -0,0 +1,40 @@
+export interface OpenIdConnectConnectionProfile {
+    /**
+     * The name of this profile must be unique
+     */
+    readonly name: string;
+    /**
+     * The title to render for this proble
+     */
+    readonly title: string;
+    /**
+     * The CSS class appended to the rendered href.
+     */
+    readonly cssClass: string;
+    /**
+     * OIDC client ID
+     */
+    readonly clientId: string;
+    /**
+     * OIDC client secret arn of the secretsmanager secret.
+     */
+    readonly clientSecretArn: string;
+    /**
+     * The base URL of the application, used to build the redirect url
+     */
+    readonly applicationBaseUrl: string;
+    /**
+     * The base URL of the authentication provider
+     */
+    readonly authenticationBaseUrl: string;
+    /**
+     * The scopes this profile requests and allows
+     * Scopes are separated using spaces
+     */
+    readonly scope: string;
+    /**
+     * Do not render the HTML page but redirect to this authentication
+     * provider immediately.
+     */
+    readonly immediateRedirect: boolean;
+}

package/lib/webapp/OIDCConnectionProfile.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/SessionsTable.d.ts

@@ -0,0 +1,10 @@
+import { aws_dynamodb as DynamoDB, aws_kms as KMS, StackProps } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+export interface SessionsTableProps extends StackProps {
+    name?: string;
+    key?: KMS.Key;
+}
+export declare class SessionsTable extends Construct {
+    table: DynamoDB.Table;
+    constructor(scope: Construct, id: string, props?: SessionsTableProps);
+}

package/lib/webapp/SessionsTable.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionsTable = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_dynamodb_1 = require("aws-cdk-lib/aws-dynamodb");
+const constructs_1 = require("constructs");
+class SessionsTable extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.table = new aws_cdk_lib_1.aws_dynamodb.Table(this, 'sessions-table', {
+            partitionKey: { name: 'sessionid', type: aws_cdk_lib_1.aws_dynamodb.AttributeType.STRING },
+            billingMode: aws_cdk_lib_1.aws_dynamodb.BillingMode.PAY_PER_REQUEST,
+            tableName: props?.name,
+            timeToLiveAttribute: 'ttl',
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.RETAIN,
+            encryptionKey: props?.key,
+            encryption: aws_dynamodb_1.TableEncryption.CUSTOMER_MANAGED,
+        });
+    }
+}
+exports.SessionsTable = SessionsTable;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/Webapp.d.ts

@@ -0,0 +1,20 @@
+import { HttpMethod } from 'aws-cdk-lib/aws-apigatewayv2';
+import { IGrantable, IPrincipal } from 'aws-cdk-lib/aws-iam';
+import { Construct } from 'constructs';
+import { WebappOptions } from './WebappOptions';
+import { Webpage } from './Webpage';
+export declare class Webapp extends Construct implements IGrantable {
+    private readonly api;
+    private readonly cloudfront;
+    private readonly sessions;
+    constructor(scope: Construct, id: string, props: WebappOptions);
+    get grantPrincipal(): IPrincipal;
+    /**
+     * Add another page to the webapp
+     * @param id
+     * @param path
+     * @param methods
+     * @param handler
+     */
+    addPage(id: string, handler: Webpage, path: string, methods?: HttpMethod[]): void;
+}

package/lib/webapp/Webapp.js

@@ -0,0 +1,57 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webapp = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_apigatewayv2_1 = require("aws-cdk-lib/aws-apigatewayv2");
+const constructs_1 = require("constructs");
+const Api_1 = require("./Api");
+const Cloudfront_1 = require("./Cloudfront");
+const SessionsTable_1 = require("./SessionsTable");
+class Webapp extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        // Defaults
+        props = {
+            sessionLifetime: props.sessionLifetime ?? 15,
+            ...props,
+        };
+        // Sessions
+        this.sessions = new SessionsTable_1.SessionsTable(this, 'sessions', {
+            name: `${props.applicationName}-sessions-table`,
+        });
+        // API gateway
+        this.api = new Api_1.Api(this, 'api', {
+            webappOptions: props,
+            sessionsTable: this.sessions,
+        });
+        this.api.node.addDependency(this.sessions);
+        // Cloudfront distribution
+        this.cloudfront = new Cloudfront_1.Cloudfront(this, 'cloudfront', {
+            webappOptions: props,
+            apiGatewayDomain: this.api.domain(),
+        });
+        this.cloudfront.node.addDependency(this.api);
+        // Post process login function
+        if (props.postLoginProcessor) {
+            this.addPage('post-login', props.postLoginProcessor, '/post-login');
+        }
+    }
+    get grantPrincipal() {
+        return this.api.role;
+    }
+    /**
+     * Add another page to the webapp
+     * @param id
+     * @param path
+     * @param methods
+     * @param handler
+     */
+    addPage(id, handler, path, methods = [aws_apigatewayv2_1.HttpMethod.GET]) {
+        this.api.addRoute(id, handler, path, methods);
+    }
+}
+exports.Webapp = Webapp;
+_a = JSII_RTTI_SYMBOL_1;
+Webapp[_a] = { fqn: "@gemeentenijmegen/webapp.Webapp", version: "0.0.1" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/WebappOptions.d.ts

@@ -0,0 +1,69 @@
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { IHostedZone } from 'aws-cdk-lib/aws-route53';
+import { OpenIdConnectConnectionProfile } from './OIDCConnectionProfile';
+import { Webpage } from './Webpage';
+export interface WebappConfigurable {
+    readonly webappOptions: WebappOptions;
+}
+export interface WebappOptions {
+    /**
+     * The name of the application, can only contain alphanumeric and hypens.
+     */
+    readonly applicationName: string;
+    /**
+     * A own lambda to handle project specific logic for handling
+     * the login e.g. validating claims, updating the session.
+     * note: you are reponsible for redirecting the user to the home page after post login processing.
+     * @default none
+     */
+    readonly postLoginProcessor?: Webpage;
+    /**
+     * The certificate to use for the cloudfront distribution
+     * (should be in us-east-1)
+     */
+    readonly cloudFrontCertificate: ICertificate;
+    /**
+     * The domain name used by this webapp
+     * This is used for creating redirect urls in the lambdas.
+     */
+    readonly domainName: string;
+    /**
+     * Optional alternative domain names
+     * Note: certificate provided must be valid for all alternative domain names!
+     * @defualt none
+     */
+    readonly alternativeDomainNames?: string[];
+    /**
+     * Relative path to a directroy that contains files that need to be packed into the lambda
+     * e.g. header.mustache, footer.mustache
+     */
+    readonly additionalSourceFilesDir: string;
+    /**
+     * The hosted zone in which to add A and AAAA records
+     * for the cloudfront distribution
+     */
+    readonly hostedZone: IHostedZone;
+    /**
+     * The directory with static resources that are made available through
+     * CloudFront under the /statics and /.well-knonw path.
+     */
+    readonly staticResourcesDirectory: string;
+    /**
+     * Default url path the user is send to.
+     * Note: responsibility of creating the lambda lies by the user of this construct.
+     */
+    readonly defaultPath: string;
+    /**
+     * OpenID Connect connection profiles
+     */
+    readonly oidcProfiles: OpenIdConnectConnectionProfile[];
+    /**
+     * Session lifetime in minutes
+     * @default 15
+     */
+    readonly sessionLifetime?: number;
+    /**
+     * Overwrites the default CSP header value
+     */
+    readonly cspHeaderValue?: string;
+}

package/lib/webapp/WebappOptions.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiV2ViYXBwT3B0aW9ucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy93ZWJhcHAvV2ViYXBwT3B0aW9ucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgSUNlcnRpZmljYXRlIH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLWNlcnRpZmljYXRlbWFuYWdlcic7XG5pbXBvcnQgeyBJSG9zdGVkWm9uZSB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1yb3V0ZTUzJztcbmltcG9ydCB7IE9wZW5JZENvbm5lY3RDb25uZWN0aW9uUHJvZmlsZSB9IGZyb20gJy4vT0lEQ0Nvbm5lY3Rpb25Qcm9maWxlJztcbmltcG9ydCB7IFdlYnBhZ2UgfSBmcm9tICcuL1dlYnBhZ2UnO1xuXG5leHBvcnQgaW50ZXJmYWNlIFdlYmFwcENvbmZpZ3VyYWJsZSB7XG4gIHJlYWRvbmx5IHdlYmFwcE9wdGlvbnM6IFdlYmFwcE9wdGlvbnM7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgV2ViYXBwT3B0aW9ucyB7XG4gIC8qKlxuICAgKiBUaGUgbmFtZSBvZiB0aGUgYXBwbGljYXRpb24sIGNhbiBvbmx5IGNvbnRhaW4gYWxwaGFudW1lcmljIGFuZCBoeXBlbnMuXG4gICAqL1xuICByZWFkb25seSBhcHBsaWNhdGlvbk5hbWU6IHN0cmluZztcblxuICAvKipcbiAgICogQSBvd24gbGFtYmRhIHRvIGhhbmRsZSBwcm9qZWN0IHNwZWNpZmljIGxvZ2ljIGZvciBoYW5kbGluZ1xuICAgKiB0aGUgbG9naW4gZS5nLiB2YWxpZGF0aW5nIGNsYWltcywgdXBkYXRpbmcgdGhlIHNlc3Npb24uXG4gICAqIG5vdGU6IHlvdSBhcmUgcmVwb25zaWJsZSBmb3IgcmVkaXJlY3RpbmcgdGhlIHVzZXIgdG8gdGhlIGhvbWUgcGFnZSBhZnRlciBwb3N0IGxvZ2luIHByb2Nlc3NpbmcuXG4gICAqIEBkZWZhdWx0IG5vbmVcbiAgICovXG4gIHJlYWRvbmx5IHBvc3RMb2dpblByb2Nlc3Nvcj86IFdlYnBhZ2U7XG5cbiAgLyoqXG4gICAqIFRoZSBjZXJ0aWZpY2F0ZSB0byB1c2UgZm9yIHRoZSBjbG91ZGZyb250IGRpc3RyaWJ1dGlvblxuICAgKiAoc2hvdWxkIGJlIGluIHVzLWVhc3QtMSlcbiAgICovXG4gIHJlYWRvbmx5IGNsb3VkRnJvbnRDZXJ0aWZpY2F0ZTogSUNlcnRpZmljYXRlO1xuXG4gIC8qKlxuICAgKiBUaGUgZG9tYWluIG5hbWUgdXNlZCBieSB0aGlzIHdlYmFwcFxuICAgKiBUaGlzIGlzIHVzZWQgZm9yIGNyZWF0aW5nIHJlZGlyZWN0IHVybHMgaW4gdGhlIGxhbWJkYXMuXG4gICAqL1xuICByZWFkb25seSBkb21haW5OYW1lOiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIE9wdGlvbmFsIGFsdGVybmF0aXZlIGRvbWFpbiBuYW1lc1xuICAgKiBOb3RlOiBjZXJ0aWZpY2F0ZSBwcm92aWRlZCBtdXN0IGJlIHZhbGlkIGZvciBhbGwgYWx0ZXJuYXRpdmUgZG9tYWluIG5hbWVzIVxuICAgKiBAZGVmdWFsdCBub25lXG4gICAqL1xuICByZWFkb25seSBhbHRlcm5hdGl2ZURvbWFpbk5hbWVzPzogc3RyaW5nW107XG5cbiAgLyoqXG4gICAqIFJlbGF0aXZlIHBhdGggdG8gYSBkaXJlY3Ryb3kgdGhhdCBjb250YWlucyBmaWxlcyB0aGF0IG5lZWQgdG8gYmUgcGFja2VkIGludG8gdGhlIGxhbWJkYVxuICAgKiBlLmcuIGhlYWRlci5tdXN0YWNoZSwgZm9vdGVyLm11c3RhY2hlXG4gICAqL1xuICByZWFkb25seSBhZGRpdGlvbmFsU291cmNlRmlsZXNEaXI6IHN0cmluZztcblxuICAvKipcbiAgICogVGhlIGhvc3RlZCB6b25lIGluIHdoaWNoIHRvIGFkZCBBIGFuZCBBQUFBIHJlY29yZHNcbiAgICogZm9yIHRoZSBjbG91ZGZyb250IGRpc3RyaWJ1dGlvblxuICAgKi9cbiAgcmVhZG9ubHkgaG9zdGVkWm9uZTogSUhvc3RlZFpvbmU7XG5cbiAgLyoqXG4gICAqIFRoZSBkaXJlY3Rvcnkgd2l0aCBzdGF0aWMgcmVzb3VyY2VzIHRoYXQgYXJlIG1hZGUgYXZhaWxhYmxlIHRocm91Z2hcbiAgICogQ2xvdWRGcm9udCB1bmRlciB0aGUgL3N0YXRpY3MgYW5kIC8ud2VsbC1rbm9udyBwYXRoLlxuICAgKi9cbiAgcmVhZG9ubHkgc3RhdGljUmVzb3VyY2VzRGlyZWN0b3J5OiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIERlZmF1bHQgdXJsIHBhdGggdGhlIHVzZXIgaXMgc2VuZCB0by5cbiAgICogTm90ZTogcmVzcG9uc2liaWxpdHkgb2YgY3JlYXRpbmcgdGhlIGxhbWJkYSBsaWVzIGJ5IHRoZSB1c2VyIG9mIHRoaXMgY29uc3RydWN0LlxuICAgKi9cbiAgcmVhZG9ubHkgZGVmYXVsdFBhdGg6IHN0cmluZztcblxuICAvKipcbiAgICogT3BlbklEIENvbm5lY3QgY29ubmVjdGlvbiBwcm9maWxlc1xuICAgKi9cbiAgcmVhZG9ubHkgb2lkY1Byb2ZpbGVzOiBPcGVuSWRDb25uZWN0Q29ubmVjdGlvblByb2ZpbGVbXTtcblxuICAvKipcbiAgICogU2Vzc2lvbiBsaWZldGltZSBpbiBtaW51dGVzXG4gICAqIEBkZWZhdWx0IDE1XG4gICAqL1xuICByZWFkb25seSBzZXNzaW9uTGlmZXRpbWU/OiBudW1iZXI7XG5cbiAgLyoqXG4gICAqIE92ZXJ3cml0ZXMgdGhlIGRlZmF1bHQgQ1NQIGhlYWRlciB2YWx1ZVxuICAgKi9cbiAgcmVhZG9ubHkgY3NwSGVhZGVyVmFsdWU/OiBzdHJpbmc7XG59Il19

package/lib/webapp/Webpage.d.ts

@@ -0,0 +1,49 @@
+import { aws_lambda as Lambda, aws_dynamodb, Duration } from 'aws-cdk-lib';
+import { IRole } from 'aws-cdk-lib/aws-iam';
+import { LayerVersion } from 'aws-cdk-lib/aws-lambda';
+import { IFilterPattern } from 'aws-cdk-lib/aws-logs';
+import { Construct } from 'constructs';
+export interface WebpageProps {
+    readonly apiFunction: any;
+    readonly description: string;
+    readonly environment?: {
+        [key: string]: string;
+    };
+    readonly role?: IRole;
+    /**
+     * Set a lambda timeout in miliseconds
+     * @default 3000 (ms)
+     */
+    readonly timeout?: Duration;
+}
+export declare class Webpage extends Construct {
+    lambda: Lambda.Function;
+    constructor(scope: Construct, id: string, props: WebpageProps);
+    /**
+     * Add the shared resources layer that is constructed for this webapp.
+     * @param layer
+     */
+    addLambdaLayer(layer: LayerVersion): void;
+    /**
+     * Grant access to the session store and add SESSION_TABLE environment variable
+     * @param table
+     */
+    allowSessionAccess(table: aws_dynamodb.ITable): void;
+    /**
+     * Add session env variable.
+     * @param minutes
+     */
+    overwriteSessionLifetime(minutes: number): void;
+    /**
+     * Add standard environment variables to the lambda
+     * @param applicationName
+     */
+    addStandardEnvironment(applicationName: string): void;
+    /**
+     * Monitor the logs generated by this function for a filter pattern, generate metric
+     * and alarm on increased error rate.
+     *
+     * @param filterPattern Pattern to filter by (default: containing ERROR)
+     */
+    monitor(applicationName: string, filterPattern?: IFilterPattern): void;
+}

package/lib/webapp/Webpage.js

@@ -0,0 +1,91 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webpage = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+const aws_logs_1 = require("aws-cdk-lib/aws-logs");
+const constructs_1 = require("constructs");
+class Webpage extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        // See https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Lambda-Insights-extension-versionsx86-64.html
+        const insightsArn = `arn:aws:lambda:${aws_cdk_lib_1.Stack.of(this).region}:580247275435:layer:LambdaInsightsExtension:21`;
+        const apiFunction = props.apiFunction;
+        this.lambda = new apiFunction(this, 'lambda', {
+            runtime: aws_cdk_lib_1.aws_lambda.Runtime.NODEJS_18_X,
+            handler: 'index.handler',
+            code: aws_cdk_lib_1.aws_lambda.Code.fromInline('empty'),
+            description: props.description,
+            role: props.role,
+            timeout: props.timeout,
+            memorySize: 512,
+            insightsVersion: aws_cdk_lib_1.aws_lambda.LambdaInsightsVersion.fromInsightVersionArn(insightsArn),
+            logRetention: aws_logs_1.RetentionDays.ONE_MONTH,
+            environment: {
+                ...props.environment,
+            },
+        });
+    }
+    /**
+     * Add the shared resources layer that is constructed for this webapp.
+     * @param layer
+     */
+    addLambdaLayer(layer) {
+        this.lambda.addLayers(layer);
+    }
+    /**
+     * Grant access to the session store and add SESSION_TABLE environment variable
+     * @param table
+     */
+    allowSessionAccess(table) {
+        this.lambda.addEnvironment('SESSION_TABLE', table.tableName);
+        table.grantReadWriteData(this.lambda.grantPrincipal);
+    }
+    /**
+     * Add session env variable.
+     * @param minutes
+     */
+    overwriteSessionLifetime(minutes) {
+        this.lambda.addEnvironment('SESSION_TTL_MIN', minutes.toString());
+    }
+    /**
+     * Add standard environment variables to the lambda
+     * @param applicationName
+     */
+    addStandardEnvironment(applicationName) {
+        this.lambda.addEnvironment('WEBAPP_NAME', applicationName);
+    }
+    /**
+     * Monitor the logs generated by this function for a filter pattern, generate metric
+     * and alarm on increased error rate.
+     *
+     * @param filterPattern Pattern to filter by (default: containing ERROR)
+     */
+    monitor(applicationName, filterPattern) {
+        const errorMetricFilter = new aws_logs_1.MetricFilter(this, 'MetricFilter', {
+            logGroup: this.lambda.logGroup,
+            metricNamespace: `${applicationName}/${this.node.id}`,
+            metricName: 'Errors',
+            filterPattern: filterPattern ?? aws_logs_1.FilterPattern.anyTerm('ERROR'),
+            metricValue: '1',
+        });
+        errorMetricFilter.applyRemovalPolicy(aws_cdk_lib_1.RemovalPolicy.DESTROY);
+        const alarm = new aws_cloudwatch_1.Alarm(this, `${applicationName}-${this.node.id}-alarm`, {
+            metric: errorMetricFilter.metric({
+                statistic: 'sum',
+                period: aws_cdk_lib_1.Duration.minutes(5),
+            }),
+            evaluationPeriods: 3,
+            threshold: 5,
+            alarmName: `Increased error rate for ${this.node.id}`,
+            alarmDescription: `This alarm triggers if the function ${this.node.id} is logging more than 5 errors over n minutes.`,
+        });
+        alarm.applyRemovalPolicy(aws_cdk_lib_1.RemovalPolicy.DESTROY);
+    }
+}
+exports.Webpage = Webpage;
+_a = JSII_RTTI_SYMBOL_1;
+Webpage[_a] = { fqn: "@gemeentenijmegen/webapp.Webpage", version: "0.0.1" };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiV2VicGFnZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy93ZWJhcHAvV2VicGFnZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLDZDQUFpRztBQUNqRywrREFBbUQ7QUFHbkQsbURBQWtHO0FBQ2xHLDJDQUF1QztBQWdCdkMsTUFBYSxPQUFRLFNBQVEsc0JBQVM7SUFHcEMsWUFBWSxLQUFnQixFQUFFLEVBQVUsRUFBRSxLQUFtQjtRQUMzRCxLQUFLLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBRWpCLG1IQUFtSDtRQUNuSCxNQUFNLFdBQVcsR0FBRyxrQkFBa0IsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsTUFBTSxnREFBZ0QsQ0FBQztRQUU1RyxNQUFNLFdBQVcsR0FBRyxLQUFLLENBQUMsV0FBc0YsQ0FBQztRQUNqSCxJQUFJLENBQUMsTUFBTSxHQUFHLElBQUksV0FBVyxDQUFDLElBQUksRUFBRSxRQUFRLEVBQUU7WUFDNUMsT0FBTyxFQUFFLHdCQUFNLENBQUMsT0FBTyxDQUFDLFdBQVc7WUFDbkMsT0FBTyxFQUFFLGVBQWU7WUFDeEIsSUFBSSxFQUFFLHdCQUFNLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUM7WUFDckMsV0FBVyxFQUFFLEtBQUssQ0FBQyxXQUFXO1lBQzlCLElBQUksRUFBRSxLQUFLLENBQUMsSUFBSTtZQUNoQixPQUFPLEVBQUUsS0FBSyxDQUFDLE9BQU87WUFDdEIsVUFBVSxFQUFFLEdBQUc7WUFDZixlQUFlLEVBQUUsd0JBQU0sQ0FBQyxxQkFBcUIsQ0FBQyxxQkFBcUIsQ0FBQyxXQUFXLENBQUM7WUFDaEYsWUFBWSxFQUFFLHdCQUFhLENBQUMsU0FBUztZQUNyQyxXQUFXLEVBQUU7Z0JBQ1gsR0FBRyxLQUFLLENBQUMsV0FBVzthQUNyQjtTQUNGLENBQUMsQ0FBQztJQUVMLENBQUM7SUFFRDs7O09BR0c7SUFDSCxjQUFjLENBQUMsS0FBbUI7UUFDaEMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDL0IsQ0FBQztJQUVEOzs7T0FHRztJQUNILGtCQUFrQixDQUFDLEtBQTBCO1FBQzNDLElBQUksQ0FBQyxNQUFNLENBQUMsY0FBYyxDQUFDLGVBQWUsRUFBRSxLQUFLLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDN0QsS0FBSyxDQUFDLGtCQUFrQixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsY0FBYyxDQUFDLENBQUM7SUFDdkQsQ0FBQztJQUVEOzs7T0FHRztJQUNILHdCQUF3QixDQUFDLE9BQWU7UUFDdEMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxjQUFjLENBQUMsaUJBQWlCLEVBQUUsT0FBTyxDQUFDLFFBQVEsRUFBRSxDQUFDLENBQUM7SUFDcEUsQ0FBQztJQUVEOzs7T0FHRztJQUNILHNCQUFzQixDQUFDLGVBQXVCO1FBQzVDLElBQUksQ0FBQyxNQUFNLENBQUMsY0FBYyxDQUFDLGFBQWEsRUFBRSxlQUFlLENBQUMsQ0FBQztJQUM3RCxDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSCxPQUFPLENBQUMsZUFBdUIsRUFBRSxhQUE4QjtRQUM3RCxNQUFNLGlCQUFpQixHQUFHLElBQUksdUJBQVksQ0FBQyxJQUFJLEVBQUUsY0FBYyxFQUFFO1lBQy9ELFFBQVEsRUFBRSxJQUFJLENBQUMsTUFBTSxDQUFDLFFBQVE7WUFDOUIsZUFBZSxFQUFFLEdBQUcsZUFBZSxJQUFJLElBQUksQ0FBQyxJQUFJLENBQUMsRUFBRSxFQUFFO1lBQ3JELFVBQVUsRUFBRSxRQUFRO1lBQ3BCLGFBQWEsRUFBRSxhQUFhLElBQUksd0JBQWEsQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDO1lBQzlELFdBQVcsRUFBRSxHQUFHO1NBQ2pCLENBQUMsQ0FBQztRQUNILGlCQUFpQixDQUFDLGtCQUFrQixDQUFDLDJCQUFhLENBQUMsT0FBTyxDQUFDLENBQUM7UUFFNUQsTUFBTSxLQUFLLEdBQUcsSUFBSSxzQkFBSyxDQUFDLElBQUksRUFBRSxHQUFHLGVBQWUsSUFBSSxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsUUFBUSxFQUFFO1lBQ3hFLE1BQU0sRUFBRSxpQkFBaUIsQ0FBQyxNQUFNLENBQUM7Z0JBQy9CLFNBQVMsRUFBRSxLQUFLO2dCQUNoQixNQUFNLEVBQUUsc0JBQVEsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO2FBQzVCLENBQUM7WUFDRixpQkFBaUIsRUFBRSxDQUFDO1lBQ3BCLFNBQVMsRUFBRSxDQUFDO1lBQ1osU0FBUyxFQUFFLDRCQUE0QixJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsRUFBRTtZQUNyRCxnQkFBZ0IsRUFBRSx1Q0FBdUMsSUFBSSxDQUFDLElBQUksQ0FBQyxFQUFFLGdEQUFnRDtTQUN0SCxDQUFDLENBQUM7UUFDSCxLQUFLLENBQUMsa0JBQWtCLENBQUMsMkJBQWEsQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUNsRCxDQUFDOztBQXZGSCwwQkF5RkMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgeyBhd3NfbGFtYmRhIGFzIExhbWJkYSwgYXdzX2R5bmFtb2RiLCBSZW1vdmFsUG9saWN5LCBEdXJhdGlvbiwgU3RhY2sgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBBbGFybSB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1jbG91ZHdhdGNoJztcbmltcG9ydCB7IElSb2xlIH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLWlhbSc7XG5pbXBvcnQgeyBMYXllclZlcnNpb24gfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtbGFtYmRhJztcbmltcG9ydCB7IEZpbHRlclBhdHRlcm4sIElGaWx0ZXJQYXR0ZXJuLCBNZXRyaWNGaWx0ZXIsIFJldGVudGlvbkRheXMgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtbG9ncyc7XG5pbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tICdjb25zdHJ1Y3RzJztcblxudHlwZSBUID0gTGFtYmRhLkZ1bmN0aW9uO1xuXG5leHBvcnQgaW50ZXJmYWNlIFdlYnBhZ2VQcm9wcyB7XG4gIHJlYWRvbmx5IGFwaUZ1bmN0aW9uOiBhbnk7IC8vIFR5cGUgaGFjayBjYXN0IGxhdGVyIHRvIHtuZXcoc2NvcGU6IENvbnN0cnVjdCwgaWQ6c3RyaW5nLCBwcm9wcz86IExhbWJkYS5GdW5jdGlvblByb3BzKTogVCB9XG4gIHJlYWRvbmx5IGRlc2NyaXB0aW9uOiBzdHJpbmc7XG4gIHJlYWRvbmx5IGVudmlyb25tZW50Pzoge1trZXk6IHN0cmluZ106IHN0cmluZ307XG4gIHJlYWRvbmx5IHJvbGU/OiBJUm9sZTtcbiAgLyoqXG4gICAqIFNldCBhIGxhbWJkYSB0aW1lb3V0IGluIG1pbGlzZWNvbmRzXG4gICAqIEBkZWZhdWx0IDMwMDAgKG1zKVxuICAgKi9cbiAgcmVhZG9ubHkgdGltZW91dD86IER1cmF0aW9uO1xufVxuXG5leHBvcnQgY2xhc3MgV2VicGFnZSBleHRlbmRzIENvbnN0cnVjdCB7XG4gIGxhbWJkYTogTGFtYmRhLkZ1bmN0aW9uO1xuXG4gIGNvbnN0cnVjdG9yKHNjb3BlOiBDb25zdHJ1Y3QsIGlkOiBzdHJpbmcsIHByb3BzOiBXZWJwYWdlUHJvcHMpIHtcbiAgICBzdXBlcihzY29wZSwgaWQpO1xuXG4gICAgLy8gU2VlIGh0dHBzOi8vZG9jcy5hd3MuYW1hem9uLmNvbS9BbWF6b25DbG91ZFdhdGNoL2xhdGVzdC9tb25pdG9yaW5nL0xhbWJkYS1JbnNpZ2h0cy1leHRlbnNpb24tdmVyc2lvbnN4ODYtNjQuaHRtbFxuICAgIGNvbnN0IGluc2lnaHRzQXJuID0gYGFybjphd3M6bGFtYmRhOiR7U3RhY2sub2YodGhpcykucmVnaW9ufTo1ODAyNDcyNzU0MzU6bGF5ZXI6TGFtYmRhSW5zaWdodHNFeHRlbnNpb246MjFgO1xuXG4gICAgY29uc3QgYXBpRnVuY3Rpb24gPSBwcm9wcy5hcGlGdW5jdGlvbiBhcyB7bmV3KGZTY29wZTogQ29uc3RydWN0LCBmSWQ6c3RyaW5nLCBmUHJvcHM/OiBMYW1iZGEuRnVuY3Rpb25Qcm9wcyk6IFQgfTtcbiAgICB0aGlzLmxhbWJkYSA9IG5ldyBhcGlGdW5jdGlvbih0aGlzLCAnbGFtYmRhJywge1xuICAgICAgcnVudGltZTogTGFtYmRhLlJ1bnRpbWUuTk9ERUpTXzE4X1gsIC8vIFJlcXVpcmVkIGJ1dCBvdmVyd3JpdHRlblxuICAgICAgaGFuZGxlcjogJ2luZGV4LmhhbmRsZXInLCAvLyBSZXF1aXJlZCBidXQgb3ZlcndyaXR0ZW5cbiAgICAgIGNvZGU6IExhbWJkYS5Db2RlLmZyb21JbmxpbmUoJ2VtcHR5JyksIC8vIHJlcXVpcmVkIGJ1dCBvdmVyd3JpdHRlblxuICAgICAgZGVzY3JpcHRpb246IHByb3BzLmRlc2NyaXB0aW9uLFxuICAgICAgcm9sZTogcHJvcHMucm9sZSxcbiAgICAgIHRpbWVvdXQ6IHByb3BzLnRpbWVvdXQsXG4gICAgICBtZW1vcnlTaXplOiA1MTIsXG4gICAgICBpbnNpZ2h0c1ZlcnNpb246IExhbWJkYS5MYW1iZGFJbnNpZ2h0c1ZlcnNpb24uZnJvbUluc2lnaHRWZXJzaW9uQXJuKGluc2lnaHRzQXJuKSxcbiAgICAgIGxvZ1JldGVudGlvbjogUmV0ZW50aW9uRGF5cy5PTkVfTU9OVEgsXG4gICAgICBlbnZpcm9ubWVudDoge1xuICAgICAgICAuLi5wcm9wcy5lbnZpcm9ubWVudCxcbiAgICAgIH0sXG4gICAgfSk7XG5cbiAgfVxuXG4gIC8qKlxuICAgKiBBZGQgdGhlIHNoYXJlZCByZXNvdXJjZXMgbGF5ZXIgdGhhdCBpcyBjb25zdHJ1Y3RlZCBmb3IgdGhpcyB3ZWJhcHAuXG4gICAqIEBwYXJhbSBsYXllclxuICAgKi9cbiAgYWRkTGFtYmRhTGF5ZXIobGF5ZXI6IExheWVyVmVyc2lvbikge1xuICAgIHRoaXMubGFtYmRhLmFkZExheWVycyhsYXllcik7XG4gIH1cblxuICAvKipcbiAgICogR3JhbnQgYWNjZXNzIHRvIHRoZSBzZXNzaW9uIHN0b3JlIGFuZCBhZGQgU0VTU0lPTl9UQUJMRSBlbnZpcm9ubWVudCB2YXJpYWJsZVxuICAgKiBAcGFyYW0gdGFibGVcbiAgICovXG4gIGFsbG93U2Vzc2lvbkFjY2Vzcyh0YWJsZTogYXdzX2R5bmFtb2RiLklUYWJsZSkge1xuICAgIHRoaXMubGFtYmRhLmFkZEVudmlyb25tZW50KCdTRVNTSU9OX1RBQkxFJywgdGFibGUudGFibGVOYW1lKTtcbiAgICB0YWJsZS5ncmFudFJlYWRXcml0ZURhdGEodGhpcy5sYW1iZGEuZ3JhbnRQcmluY2lwYWwpO1xuICB9XG5cbiAgLyoqXG4gICAqIEFkZCBzZXNzaW9uIGVudiB2YXJpYWJsZS5cbiAgICogQHBhcmFtIG1pbnV0ZXNcbiAgICovXG4gIG92ZXJ3cml0ZVNlc3Npb25MaWZldGltZShtaW51dGVzOiBudW1iZXIpIHtcbiAgICB0aGlzLmxhbWJkYS5hZGRFbnZpcm9ubWVudCgnU0VTU0lPTl9UVExfTUlOJywgbWludXRlcy50b1N0cmluZygpKTtcbiAgfVxuXG4gIC8qKlxuICAgKiBBZGQgc3RhbmRhcmQgZW52aXJvbm1lbnQgdmFyaWFibGVzIHRvIHRoZSBsYW1iZGFcbiAgICogQHBhcmFtIGFwcGxpY2F0aW9uTmFtZVxuICAgKi9cbiAgYWRkU3RhbmRhcmRFbnZpcm9ubWVudChhcHBsaWNhdGlvbk5hbWU6IHN0cmluZykge1xuICAgIHRoaXMubGFtYmRhLmFkZEVudmlyb25tZW50KCdXRUJBUFBfTkFNRScsIGFwcGxpY2F0aW9uTmFtZSk7XG4gIH1cblxuICAvKipcbiAgICogTW9uaXRvciB0aGUgbG9ncyBnZW5lcmF0ZWQgYnkgdGhpcyBmdW5jdGlvbiBmb3IgYSBmaWx0ZXIgcGF0dGVybiwgZ2VuZXJhdGUgbWV0cmljXG4gICAqIGFuZCBhbGFybSBvbiBpbmNyZWFzZWQgZXJyb3IgcmF0ZS5cbiAgICpcbiAgICogQHBhcmFtIGZpbHRlclBhdHRlcm4gUGF0dGVybiB0byBmaWx0ZXIgYnkgKGRlZmF1bHQ6IGNvbnRhaW5pbmcgRVJST1IpXG4gICAqL1xuICBtb25pdG9yKGFwcGxpY2F0aW9uTmFtZTogc3RyaW5nLCBmaWx0ZXJQYXR0ZXJuPzogSUZpbHRlclBhdHRlcm4pIHtcbiAgICBjb25zdCBlcnJvck1ldHJpY0ZpbHRlciA9IG5ldyBNZXRyaWNGaWx0ZXIodGhpcywgJ01ldHJpY0ZpbHRlcicsIHtcbiAgICAgIGxvZ0dyb3VwOiB0aGlzLmxhbWJkYS5sb2dHcm91cCxcbiAgICAgIG1ldHJpY05hbWVzcGFjZTogYCR7YXBwbGljYXRpb25OYW1lfS8ke3RoaXMubm9kZS5pZH1gLFxuICAgICAgbWV0cmljTmFtZTogJ0Vycm9ycycsXG4gICAgICBmaWx0ZXJQYXR0ZXJuOiBmaWx0ZXJQYXR0ZXJuID8/IEZpbHRlclBhdHRlcm4uYW55VGVybSgnRVJST1InKSxcbiAgICAgIG1ldHJpY1ZhbHVlOiAnMScsXG4gICAgfSk7XG4gICAgZXJyb3JNZXRyaWNGaWx0ZXIuYXBwbHlSZW1vdmFsUG9saWN5KFJlbW92YWxQb2xpY3kuREVTVFJPWSk7XG5cbiAgICBjb25zdCBhbGFybSA9IG5ldyBBbGFybSh0aGlzLCBgJHthcHBsaWNhdGlvbk5hbWV9LSR7dGhpcy5ub2RlLmlkfS1hbGFybWAsIHtcbiAgICAgIG1ldHJpYzogZXJyb3JNZXRyaWNGaWx0ZXIubWV0cmljKHtcbiAgICAgICAgc3RhdGlzdGljOiAnc3VtJyxcbiAgICAgICAgcGVyaW9kOiBEdXJhdGlvbi5taW51dGVzKDUpLFxuICAgICAgfSksXG4gICAgICBldmFsdWF0aW9uUGVyaW9kczogMyxcbiAgICAgIHRocmVzaG9sZDogNSxcbiAgICAgIGFsYXJtTmFtZTogYEluY3JlYXNlZCBlcnJvciByYXRlIGZvciAke3RoaXMubm9kZS5pZH1gLFxuICAgICAgYWxhcm1EZXNjcmlwdGlvbjogYFRoaXMgYWxhcm0gdHJpZ2dlcnMgaWYgdGhlIGZ1bmN0aW9uICR7dGhpcy5ub2RlLmlkfSBpcyBsb2dnaW5nIG1vcmUgdGhhbiA1IGVycm9ycyBvdmVyIG4gbWludXRlcy5gLFxuICAgIH0pO1xuICAgIGFsYXJtLmFwcGx5UmVtb3ZhbFBvbGljeShSZW1vdmFsUG9saWN5LkRFU1RST1kpO1xuICB9XG5cbn1cbiJdfQ==

package/lib/webapp/auth/AuthRequestHandler.d.ts

@@ -0,0 +1,15 @@
+import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
+interface requestProps {
+    cookies: string;
+    queryStringParamCode: string;
+    queryStringParamState: string;
+    dynamoDBClient: DynamoDBClient;
+    oidcProfiles: any[];
+    redirectToPostLoginHook: boolean;
+}
+export declare class AuthRequestHandler {
+    private config;
+    constructor(props: requestProps);
+    handleRequest(): Promise<import("@gemeentenijmegen/apigateway-http/lib/V2/Response").ApiGatewayV2Response>;
+}
+export {};

package/lib/webapp/auth/AuthRequestHandler.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthRequestHandler = void 0;
+const logger_1 = require("@aws-lambda-powertools/logger");
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const session_1 = require("@gemeentenijmegen/session");
+const OpenIDConnect_1 = require("../util/OpenIDConnect");
+class AuthRequestHandler {
+    constructor(props) {
+        this.config = props;
+    }
+    async handleRequest() {
+        const logger = new logger_1.Logger({ serviceName: process.env.WEBAPP_NAME });
+        // Check for active session
+        let session = new session_1.Session(this.config.cookies, this.config.dynamoDBClient, {
+            ttlInMinutes: parseInt(process.env.SESSION_TTL_MIN ?? '15'),
+        });
+        await session.init();
+        if (session.sessionId === false || session.sessionId === undefined) {
+            return Response_1.Response.redirect('/login');
+        }
+        if (session.isLoggedIn() === true) {
+            return Response_1.Response.redirect('/');
+        }
+        // Get the state from the session & find the coresponding profile
+        const states = JSON.parse(session.getValue('states'));
+        const profileName = states[this.config.queryStringParamState];
+        if (!profileName) {
+            console.error('state does not match session state');
+            return Response_1.Response.redirect('/login');
+        }
+        const profile = this.config.oidcProfiles.find(p => p.name === profileName);
+        if (!profile) {
+            console.error('No profile found for name', profileName);
+            return Response_1.Response.redirect('/login');
+        }
+        // Get claims
+        try {
+            const OIDC = new OpenIDConnect_1.OpenIDConnect(profile);
+            // Backchannel to get claims
+            const claims = await OIDC.authorize(this.config.queryStringParamCode, Object.keys(states), this.config.queryStringParamState);
+            if (claims) {
+                // Log loggin information
+                if (claims.hasOwnProperty('acr') && claims.hasOwnProperty('amr')) {
+                    logger.info('auth succesful', { loa: claims.acr, method: claims.amr });
+                }
+                // Store claims in session
+                try {
+                    // Set status and loggedin value depending on if we have a post-login hook
+                    const loggedin = this.config.redirectToPostLoginHook ? false : true;
+                    const status = this.config.redirectToPostLoginHook ? 'pre-login' : 'loggedin';
+                    await session.createSession({
+                        loggedin: { BOOL: loggedin },
+                        status: { S: status },
+                        claims: { S: JSON.stringify(claims) },
+                        profileUsed: { S: profile.name },
+                    });
+                }
+                catch (error) {
+                    console.error(error.message);
+                    return Response_1.Response.error(500);
+                }
+            }
+            else {
+                return Response_1.Response.redirect('/login');
+            }
+        }
+        catch (error) {
+            console.error(error.message);
+            return Response_1.Response.redirect('/login');
+        }
+        const redirect = this.config.redirectToPostLoginHook ? '/post-login' : '/';
+        return Response_1.Response.redirect(redirect, 302, [session.getCookie()]);
+    }
+}
+exports.AuthRequestHandler = AuthRequestHandler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/auth/auth-function.d.ts

@@ -0,0 +1,13 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for AuthFunction
+ */
+export interface AuthFunctionProps extends lambda.FunctionOptions {
+}
+/**
+ * An AWS Lambda function which executes src/webapp/auth/auth.
+ */
+export declare class AuthFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: AuthFunctionProps);
+}

package/lib/webapp/auth/auth-function.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/webapp/auth/auth.
+ */
+class AuthFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/webapp/auth/auth.lambda.ts',
+            ...props,
+            runtime: new lambda.Runtime('nodejs18.x', lambda.RuntimeFamily.NODEJS),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../assets/webapp/auth/auth.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.AuthFunction = AuthFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/auth/auth.lambda.d.ts

@@ -0,0 +1,2 @@
+import { ApiGatewayV2Response } from '@gemeentenijmegen/apigateway-http/lib/V2/Response';
+export declare function handler(event: any, _context: any): Promise<ApiGatewayV2Response>;

package/lib/webapp/auth/auth.lambda.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const Response_1 = require("@gemeentenijmegen/apigateway-http/lib/V2/Response");
+const AuthRequestHandler_1 = require("./AuthRequestHandler");
+const Files_1 = require("../util/Files");
+const dynamoDBClient = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const profiles = Files_1.Files.getAuthenticationProfiles();
+function parseEvent(event) {
+    return {
+        cookies: event?.cookies?.join(';'),
+        code: event?.queryStringParameters?.code,
+        state: event?.queryStringParameters?.state,
+    };
+}
+async function handler(event, _context) {
+    try {
+        const params = parseEvent(event);
+        const requestHandler = new AuthRequestHandler_1.AuthRequestHandler({
+            cookies: params.cookies,
+            queryStringParamCode: params.code,
+            queryStringParamState: params.state,
+            dynamoDBClient,
+            oidcProfiles: profiles,
+            redirectToPostLoginHook: process.env.REDIRECT_TO_POST_LOGIN_HOOK === 'true',
+        });
+        return await requestHandler.handleRequest();
+    }
+    catch (err) {
+        console.error(err);
+        return Response_1.Response.error(500);
+    }
+}
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/login/login-function.d.ts

@@ -0,0 +1,13 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for LoginFunction
+ */
+export interface LoginFunctionProps extends lambda.FunctionOptions {
+}
+/**
+ * An AWS Lambda function which executes src/webapp/login/login.
+ */
+export declare class LoginFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: LoginFunctionProps);
+}