@goldstack/template-user-management 0.1.1

package/dist/src/codeChallenge.d.ts

@@ -0,0 +1,3 @@
+export declare function getCodeChallenge(): Promise<string>;
+export declare function getCodeVerifier(): Promise<string>;
+//# sourceMappingURL=codeChallenge.d.ts.map

package/dist/src/codeChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeChallenge.d.ts","sourceRoot":"","sources":["../../src/codeChallenge.ts"],"names":[],"mappings":"AA+CA,wBAAsB,gBAAgB,oBAErC;AAED,wBAAsB,eAAe,oBAsBpC"}

package/dist/src/codeChallenge.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCodeVerifier = exports.getCodeChallenge = void 0;
+// based on https://github.com/curityio/pkce-javascript-example/blob/master/index.html
+const utils_esbuild_1 = require("@goldstack/utils-esbuild");
+function generateRandomString(length) {
+    let text = '';
+    const possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+    for (let i = 0; i < length; i++) {
+        text += possible.charAt(Math.floor(Math.random() * possible.length));
+    }
+    return text;
+}
+async function generateCodeChallenge(randomString) {
+    let digest;
+    // make this work both in the browser and Node.js (for unit tests)
+    // see https://remarkablemark.medium.com/how-to-generate-a-sha-256-hash-with-javascript-d3b2696382fd
+    if (typeof window !== 'undefined') {
+        digest = String.fromCharCode(...new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(randomString))));
+        return btoa(digest)
+            .replace(/=/g, '')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_');
+    }
+    else {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const { createHash } = require((0, utils_esbuild_1.excludeInBundle)('crypto'));
+        digest = createHash('sha256').update(randomString).digest('hex');
+        return Buffer.from(digest, 'utf8')
+            .toString('base64')
+            .replace(/=/g, '')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_');
+    }
+}
+let codeVerifier = undefined;
+async function getCodeChallenge() {
+    return await generateCodeChallenge(await getCodeVerifier());
+}
+exports.getCodeChallenge = getCodeChallenge;
+async function getCodeVerifier() {
+    if (codeVerifier) {
+        return codeVerifier;
+    }
+    if (typeof window !== 'undefined' && window.sessionStorage) {
+        const inSessionStorage = window.sessionStorage.getItem('goldstack_code_verifier');
+        if (inSessionStorage) {
+            codeVerifier = inSessionStorage;
+            return codeVerifier;
+        }
+    }
+    const newCodeVerifier = generateRandomString(64);
+    codeVerifier = newCodeVerifier;
+    if (typeof window !== 'undefined' && window.sessionStorage) {
+        window.sessionStorage.setItem('goldstack_code_verifier', codeVerifier);
+    }
+    return codeVerifier;
+}
+exports.getCodeVerifier = getCodeVerifier;
+//# sourceMappingURL=codeChallenge.js.map

package/dist/src/codeChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeChallenge.js","sourceRoot":"","sources":["../../src/codeChallenge.ts"],"names":[],"mappings":";;;AAAA,sFAAsF;AACtF,4DAA2D;AAE3D,SAAS,oBAAoB,CAAC,MAAc;IAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,QAAQ,GACZ,gEAAgE,CAAC;IAEnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC/B,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;KACtE;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,YAAoB;IACvD,IAAI,MAAc,CAAC;IAEnB,kEAAkE;IAClE,oGAAoG;IACpG,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;QACjC,MAAM,GAAG,MAAM,CAAC,YAAY,CAC1B,GAAG,IAAI,UAAU,CACf,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxB,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CACF,CACF,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;aAChB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,8DAA8D;QAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAA,+BAAe,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;aAC/B,QAAQ,CAAC,QAAQ,CAAC;aAClB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;KACxB;AACH,CAAC;AAED,IAAI,YAAY,GAAuB,SAAS,CAAC;AAE1C,KAAK,UAAU,gBAAgB;IACpC,OAAO,MAAM,qBAAqB,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC;AAC9D,CAAC;AAFD,4CAEC;AAEM,KAAK,UAAU,eAAe;IACnC,IAAI,YAAY,EAAE;QAChB,OAAO,YAAY,CAAC;KACrB;IAED,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,EAAE;QAC1D,MAAM,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CACpD,yBAAyB,CAC1B,CAAC;QACF,IAAI,gBAAgB,EAAE;YACpB,YAAY,GAAG,gBAAgB,CAAC;YAChC,OAAO,YAAY,CAAC;SACrB;KACF;IAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjD,YAAY,GAAG,eAAe,CAAC;IAE/B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,EAAE;QAC1D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;KACxE;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAtBD,0CAsBC"}

package/dist/src/cognitoClientAuth.d.ts

@@ -0,0 +1,21 @@
+export interface GetTokenResults {
+    accessToken: string;
+    refreshToken: string;
+    idToken: string;
+}
+export declare function getToken(args: {
+    goldstackConfig: any;
+    code?: string;
+    refreshToken?: string;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<GetTokenResults>;
+export declare function executeTokenRequest(args: {
+    tokenEndpoint: string;
+    clientId: string;
+    code?: string;
+    refreshToken?: string;
+    redirectUri: string;
+}): Promise<GetTokenResults>;
+//# sourceMappingURL=cognitoClientAuth.d.ts.map

package/dist/src/cognitoClientAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoClientAuth.d.ts","sourceRoot":"","sources":["../../src/cognitoClientAuth.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,eAAe,EAAE,GAAG,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsC3B;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmC3B"}

package/dist/src/cognitoClientAuth.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeTokenRequest = exports.getToken = void 0;
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+const codeChallenge_1 = require("./codeChallenge");
+const cognitoEndpoints_1 = require("./cognitoEndpoints");
+const userManagementConfig_1 = require("./userManagementConfig");
+async function getToken(args) {
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    if (deploymentName === 'local') {
+        if (args.code !== 'dummy-client-token') {
+            throw new Error(`Unexpected code for client auth: '${args.code}'. Expected: dummy-client-token`);
+        }
+        return {
+            accessToken: 'dummyToken',
+            refreshToken: 'dummyRefreshToken',
+            idToken: 'dummyIdToken',
+        };
+    }
+    const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+        goldstackJson: args.goldstackConfig,
+        packageSchema: args.packageSchema,
+    });
+    const deploymentOutput = (0, userManagementConfig_1.getDeploymentsOutput)(args.deploymentsOutput, deploymentName);
+    const deployment = packageConfig.getDeployment(deploymentName);
+    return await executeTokenRequest({
+        tokenEndpoint: await (0, cognitoEndpoints_1.getEndpoint)({ ...args, endpoint: 'token' }),
+        clientId: deploymentOutput.terraform.user_pool_client_id.value,
+        code: args.code,
+        refreshToken: args.refreshToken,
+        redirectUri: deployment.configuration.callbackUrl,
+    });
+}
+exports.getToken = getToken;
+async function executeTokenRequest(args) {
+    const xhr = new XMLHttpRequest();
+    return new Promise(async (resolve, reject) => {
+        xhr.onload = function () {
+            const response = xhr.response;
+            if (xhr.status == 200) {
+                resolve({
+                    accessToken: response.access_token,
+                    refreshToken: args.refreshToken || response.refresh_token,
+                    idToken: response.id_token,
+                });
+            }
+            else {
+                reject(new Error(`Cannot obtain token ${response.error_description} (${response.error})`));
+            }
+        };
+        xhr.responseType = 'json';
+        xhr.open('POST', args.tokenEndpoint, true);
+        xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
+        const codeVerifier = await (0, codeChallenge_1.getCodeVerifier)();
+        xhr.send(new URLSearchParams({
+            client_id: args.clientId,
+            code_verifier: args.code ? codeVerifier : '',
+            grant_type: args.code ? 'authorization_code' : 'refresh_token',
+            redirect_uri: args.redirectUri,
+            refresh_token: args.refreshToken || '',
+            code: args.code || '',
+        }));
+    });
+}
+exports.executeTokenRequest = executeTokenRequest;
+//# sourceMappingURL=cognitoClientAuth.js.map

package/dist/src/cognitoClientAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoClientAuth.js","sourceRoot":"","sources":["../../src/cognitoClientAuth.ts"],"names":[],"mappings":";;;AAAA,4FAAiF;AACjF,mDAAkD;AAClD,yDAAiD;AAKjD,iEAGgC;AAQzB,KAAK,UAAU,QAAQ,CAAC,IAO9B;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,IAAI,cAAc,KAAK,OAAO,EAAE;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE;YACtC,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,IAAI,iCAAiC,CAChF,CAAC;SACH;QACD,OAAO;YACL,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,mBAAmB;YACjC,OAAO,EAAE,cAAc;SACxB,CAAC;KACH;IAED,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAA,2CAAoB,EAC3C,IAAI,CAAC,iBAAiB,EACtB,cAAc,CACf,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAE/D,OAAO,MAAM,mBAAmB,CAAC;QAC/B,aAAa,EAAE,MAAM,IAAA,8BAAW,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChE,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK;QAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,WAAW;KAClD,CAAC,CAAC;AACL,CAAC;AA7CD,4BA6CC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAMzC;IACC,MAAM,GAAG,GAAG,IAAI,cAAc,EAAE,CAAC;IAEjC,OAAO,IAAI,OAAO,CAAkB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,GAAG,CAAC,MAAM,GAAG;YACX,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;gBACrB,OAAO,CAAC;oBACN,WAAW,EAAE,QAAQ,CAAC,YAAY;oBAClC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa;oBACzD,OAAO,EAAE,QAAQ,CAAC,QAAQ;iBAC3B,CAAC,CAAC;aACJ;iBAAM;gBACL,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,KAAK,GAAG,CACxE,CACF,CAAC;aACH;QACH,CAAC,CAAC;QACF,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC3C,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,IAAA,+BAAe,GAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CACN,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe;YAC9D,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;SACtB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAzCD,kDAyCC"}

package/dist/src/cognitoEndpoints.d.ts

@@ -0,0 +1,9 @@
+import { Endpoint } from './templateUserManagement';
+export declare function getEndpoint(args: {
+    goldstackConfig: any;
+    endpoint: Endpoint;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<string>;
+//# sourceMappingURL=cognitoEndpoints.d.ts.map

package/dist/src/cognitoEndpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoEndpoints.d.ts","sourceRoot":"","sources":["../../src/cognitoEndpoints.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,QAAQ,EAGT,MAAM,0BAA0B,CAAC;AAMlC,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,GAAG,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4ClB"}

package/dist/src/cognitoEndpoints.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEndpoint = void 0;
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+const codeChallenge_1 = require("./codeChallenge");
+const userManagementConfig_1 = require("./userManagementConfig");
+async function getEndpoint(args) {
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    if (deploymentName === 'local') {
+        return 'https://localhost';
+    }
+    const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+        goldstackJson: args.goldstackConfig,
+        packageSchema: args.packageSchema,
+    });
+    const deploymentOutput = (0, userManagementConfig_1.getDeploymentsOutput)(args.deploymentsOutput, deploymentName);
+    // const baseUrl = `https://${deploymentOutput.terraform.endpoint.value}`;
+    const deployment = packageConfig.getDeployment(deploymentName);
+    const baseUrl = `https://${deployment.configuration.cognitoDomain}`;
+    switch (args.endpoint) {
+        case 'authorize':
+            return (`${baseUrl}/oauth2/authorize?response_type=code` +
+                `&client_id=${deploymentOutput.terraform.user_pool_client_id.value}` +
+                `&redirect_uri=${deployment.configuration.callbackUrl}` +
+                '&code_challenge_method=S256' +
+                `&code_challenge=${await (0, codeChallenge_1.getCodeChallenge)()}`);
+        case 'token':
+            return `${baseUrl}/oauth2/token`;
+        case 'logout':
+            return (`${baseUrl}/logout?response_type=code` +
+                `&client_id=${deploymentOutput.terraform.user_pool_client_id.value}` +
+                `&redirect_uri=${deployment.configuration.callbackUrl}` +
+                '&code_challenge_method=S256' +
+                `&code_challenge=${await (0, codeChallenge_1.getCodeChallenge)()}`);
+    }
+}
+exports.getEndpoint = getEndpoint;
+//# sourceMappingURL=cognitoEndpoints.js.map

package/dist/src/cognitoEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoEndpoints.js","sourceRoot":"","sources":["../../src/cognitoEndpoints.ts"],"names":[],"mappings":";;;AAAA,4FAAiF;AACjF,mDAAmD;AAMnD,iEAGgC;AAEzB,KAAK,UAAU,WAAW,CAAC,IAMjC;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,IAAI,cAAc,KAAK,OAAO,EAAE;QAC9B,OAAO,mBAAmB,CAAC;KAC5B;IAED,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAA,2CAAoB,EAC3C,IAAI,CAAC,iBAAiB,EACtB,cAAc,CACf,CAAC;IAEF,0EAA0E;IAE1E,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,UAAU,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;IACpE,QAAQ,IAAI,CAAC,QAAQ,EAAE;QACrB,KAAK,WAAW;YACd,OAAO,CACL,GAAG,OAAO,sCAAsC;gBAChD,cAAc,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACpE,iBAAiB,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE;gBACvD,6BAA6B;gBAC7B,mBAAmB,MAAM,IAAA,gCAAgB,GAAE,EAAE,CAC9C,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,GAAG,OAAO,eAAe,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,CACL,GAAG,OAAO,4BAA4B;gBACtC,cAAc,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACpE,iBAAiB,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE;gBACvD,6BAA6B;gBAC7B,mBAAmB,MAAM,IAAA,gCAAgB,GAAE,EAAE,CAC9C,CAAC;KACL;AACH,CAAC;AAlDD,kCAkDC"}

package/dist/src/cognitoTokenVerify.d.ts

@@ -0,0 +1,34 @@
+import { CognitoJwtVerifier } from 'aws-jwt-verify';
+import type { CognitoAccessTokenPayload, CognitoIdTokenPayload } from 'aws-jwt-verify/jwt-model';
+export declare function connectWithCognito({ goldstackConfig, packageSchema, deploymentsOutput, deploymentName, }: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<CognitoManager>;
+export interface CognitoManager {
+    validate(accessToken: string): Promise<CognitoAccessTokenPayload>;
+    /**
+     * Validates an id token without validating it. On the server, ensure to validate the <i>accessToken</i> as well.
+     * It is not recommended practice to assert authentication for an API using an id token only.
+     */
+    validateIdToken(idToken: string): Promise<CognitoIdTokenPayload & {
+        email: string;
+    }>;
+}
+export declare class CognitoManagerImpl implements CognitoManager {
+    accessTokenVerifier: CognitoJwtVerifier<any, any, any>;
+    idTokenVerifier: CognitoJwtVerifier<any, any, any>;
+    constructor(accessTokenVerifier: CognitoJwtVerifier<any, any, any>, idTokenVerifier: CognitoJwtVerifier<any, any, any>);
+    validate(jwtToken: string): Promise<CognitoAccessTokenPayload>;
+    validateIdToken(jwtToken: string): Promise<CognitoIdTokenPayload & {
+        email: string;
+    }>;
+}
+export declare class LocalUserManagerImpl implements CognitoManager {
+    validateIdToken(idToken: string): Promise<CognitoIdTokenPayload & {
+        email: string;
+    }>;
+    validate(jwtToken: string): Promise<CognitoAccessTokenPayload>;
+}
+//# sourceMappingURL=cognitoTokenVerify.d.ts.map

package/dist/src/cognitoTokenVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoTokenVerify.d.ts","sourceRoot":"","sources":["../../src/cognitoTokenVerify.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,KAAK,EACV,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAYlC,wBAAsB,kBAAkB,CAAC,EACvC,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,GACf,EAAE;IACD,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClE;;;OAGG;IACH,eAAe,CACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACvD,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,eAAe,EAAE,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAGjD,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACtD,eAAe,EAAE,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAM9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAS9D,eAAe,CACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAQtD;AAED,qBAAa,oBAAqB,YAAW,cAAc;IACnD,eAAe,CACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAgBrE"}

package/dist/src/cognitoTokenVerify.js

@@ -0,0 +1,105 @@
+"use strict";
+/* eslint-disable @typescript-eslint/no-unused-vars */
+/* esbuild-ignore ui */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalUserManagerImpl = exports.CognitoManagerImpl = exports.connectWithCognito = void 0;
+const aws_jwt_verify_1 = require("aws-jwt-verify");
+const jwk_1 = require("aws-jwt-verify/jwk");
+const userManagementConfig_1 = require("./userManagementConfig");
+/**
+ * We want to keep only one JWKS cache globally for our application.
+ */
+let sharedJwksCache = undefined;
+async function connectWithCognito({ goldstackConfig, packageSchema, deploymentsOutput, deploymentName, }) {
+    deploymentName = (0, userManagementConfig_1.getDeploymentName)(deploymentName);
+    if (deploymentName === 'local') {
+        return new LocalUserManagerImpl();
+    }
+    const deploymentOutput = (0, userManagementConfig_1.getDeploymentsOutput)(deploymentsOutput, deploymentName);
+    if (!sharedJwksCache) {
+        sharedJwksCache = new jwk_1.SimpleJwksCache();
+    }
+    const accessTokenVerifier = aws_jwt_verify_1.CognitoJwtVerifier.create({
+        userPoolId: deploymentOutput.terraform.user_pool_id.value,
+        tokenUse: 'access',
+        clientId: deploymentOutput.terraform.user_pool_client_id.value,
+    }, {
+        jwksCache: sharedJwksCache,
+    });
+    const idTokenVerifier = aws_jwt_verify_1.CognitoJwtVerifier.create({
+        userPoolId: deploymentOutput.terraform.user_pool_id.value,
+        tokenUse: 'id',
+        clientId: deploymentOutput.terraform.user_pool_client_id.value,
+    }, {
+        jwksCache: sharedJwksCache,
+    });
+    return new CognitoManagerImpl(accessTokenVerifier, idTokenVerifier);
+}
+exports.connectWithCognito = connectWithCognito;
+class CognitoManagerImpl {
+    constructor(accessTokenVerifier, idTokenVerifier) {
+        this.accessTokenVerifier = accessTokenVerifier;
+        this.idTokenVerifier = idTokenVerifier;
+    }
+    async validate(jwtToken) {
+        try {
+            const payload = await this.accessTokenVerifier.verify(jwtToken);
+            return payload;
+        }
+        catch {
+            throw new Error('Invalid token');
+        }
+    }
+    async validateIdToken(jwtToken) {
+        try {
+            const payload = await this.idTokenVerifier.verify(jwtToken);
+            return payload;
+        }
+        catch {
+            throw new Error('Invalid token');
+        }
+    }
+}
+exports.CognitoManagerImpl = CognitoManagerImpl;
+class LocalUserManagerImpl {
+    async validateIdToken(idToken) {
+        return {
+            at_hash: 'NixgfrD9129y_3vcIILTIg',
+            sub: '9ad18936-07ce-4c17-8ed9-278fdd35406a',
+            email_verified: true,
+            phone_number_verified: false,
+            'cognito:preferred_role': '',
+            'cognito:roles': [],
+            identities: [],
+            iss: 'https://cognito-idp.us-west-2.amazonaws.com/us-west-2_AnBhna7ph',
+            'cognito:username': '9ad18936-07ce-4c17-8ed9-278fdd35406a',
+            origin_jti: '72408fc1-2223-4a04-9a45-f10aaefd77ee',
+            aud: '7cuiqmug2c50sgqi93igjk16mf',
+            event_id: '4dcbf59b-53a8-4674-94c9-81eb2171b66d',
+            token_use: 'id',
+            auth_time: Math.floor(Date.now() / 1000),
+            exp: Math.floor(Date.now() / 1000) + 60 * 60 * 24,
+            iat: Math.floor(Date.now() / 1000),
+            jti: '17fdf966-9882-4114-8095-ecc9ac19aa7b',
+            email: 'dummy@dummy.com',
+        };
+    }
+    async validate(jwtToken) {
+        return {
+            auth_time: Math.floor(Date.now() / 1000),
+            client_id: '7cuiqmug2c50sgqi93igjk16mf',
+            exp: Math.floor(Date.now() / 1000) + 60 * 60 * 24,
+            iat: Math.floor(Date.now() / 1000),
+            iss: 'https://cognito-idp.us-west-2.amazonaws.com/us-west-2_AnBhna7ph',
+            jti: '53b68584-3a9e-4b97-b7de-10924c57d191',
+            origin_jti: '4ee806c2-6948-4d57-886b-1e94eb0f5193',
+            scope: 'openid email',
+            sub: '9ad18936-07ce-4c17-8ed9-278fdd35406a',
+            username: '9ad18936-07ce-4c17-8ed9-278fdd35406a',
+            token_use: 'access',
+            version: 2,
+        };
+    }
+}
+exports.LocalUserManagerImpl = LocalUserManagerImpl;
+//# sourceMappingURL=cognitoTokenVerify.js.map

package/dist/src/cognitoTokenVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoTokenVerify.js","sourceRoot":"","sources":["../../src/cognitoTokenVerify.ts"],"names":[],"mappings":";AAAA,sDAAsD;AACtD,uBAAuB;;;AAEvB,mDAAoD;AACpD,4CAAqD;AAOrD,iEAGgC;AAEhC;;GAEG;AACH,IAAI,eAAe,GAAgC,SAAS,CAAC;AAEtD,KAAK,UAAU,kBAAkB,CAAC,EACvC,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,GAMf;IACC,cAAc,GAAG,IAAA,wCAAiB,EAAC,cAAc,CAAC,CAAC;IAEnD,IAAI,cAAc,KAAK,OAAO,EAAE;QAC9B,OAAO,IAAI,oBAAoB,EAAE,CAAC;KACnC;IAED,MAAM,gBAAgB,GAAG,IAAA,2CAAoB,EAC3C,iBAAiB,EACjB,cAAc,CACf,CAAC;IAEF,IAAI,CAAC,eAAe,EAAE;QACpB,eAAe,GAAG,IAAI,qBAAe,EAAE,CAAC;KACzC;IAED,MAAM,mBAAmB,GAAG,mCAAkB,CAAC,MAAM,CACnD;QACE,UAAU,EAAE,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;QACzD,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK;KAC/D,EACD;QACE,SAAS,EAAE,eAAe;KAC3B,CACF,CAAC;IACF,MAAM,eAAe,GAAG,mCAAkB,CAAC,MAAM,CAC/C;QACE,UAAU,EAAE,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;QACzD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK;KAC/D,EACD;QACE,SAAS,EAAE,eAAe;KAC3B,CACF,CAAC;IACF,OAAO,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;AACtE,CAAC;AA/CD,gDA+CC;AAaD,MAAa,kBAAkB;IAI7B,YACE,mBAAsD,EACtD,eAAkD;QAElD,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChE,OAAO,OAAc,CAAC;SACvB;QAAC,MAAM;YACN,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;SAClC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAAgB;QAEhB,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5D,OAAO,OAAc,CAAC;SACvB;QAAC,MAAM;YACN,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;SAClC;IACH,CAAC;CACF;AA/BD,gDA+BC;AAED,MAAa,oBAAoB;IAC/B,KAAK,CAAC,eAAe,CACnB,OAAe;QAEf,OAAO;YACL,OAAO,EAAE,wBAAwB;YACjC,GAAG,EAAE,sCAAsC;YAC3C,cAAc,EAAE,IAAI;YACpB,qBAAqB,EAAE,KAAK;YAC5B,wBAAwB,EAAE,EAAE;YAC5B,eAAe,EAAE,EAAE;YACnB,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,iEAAiE;YACtE,kBAAkB,EAAE,sCAAsC;YAC1D,UAAU,EAAE,sCAAsC;YAClD,GAAG,EAAE,4BAA4B;YACjC,QAAQ,EAAE,sCAAsC;YAChD,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACxC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACjD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG,EAAE,sCAAsC;YAC3C,KAAK,EAAE,iBAAiB;SACzB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACxC,SAAS,EAAE,4BAA4B;YACvC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACjD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG,EAAE,iEAAiE;YACtE,GAAG,EAAE,sCAAsC;YAC3C,UAAU,EAAE,sCAAsC;YAClD,KAAK,EAAE,cAAc;YACrB,GAAG,EAAE,sCAAsC;YAC3C,QAAQ,EAAE,sCAAsC;YAChD,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;CACF;AAzCD,oDAyCC"}

package/dist/src/templateUserManagement.d.ts

@@ -0,0 +1,54 @@
+export * from './types/UserManagementPackage';
+import type { CognitoManager } from './cognitoTokenVerify';
+export type { CognitoManager } from './cognitoTokenVerify';
+import type { GetTokenResults } from './cognitoClientAuth';
+export type { GetTokenResults };
+export declare function connectWithCognito(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<CognitoManager>;
+export declare type Endpoint = 'authorize' | 'token' | 'logout';
+export declare function getEndpoint(args: {
+    goldstackConfig: any;
+    endpoint: Endpoint;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<string>;
+export declare function getToken(args: {
+    goldstackConfig: any;
+    code?: string;
+    refreshToken?: string;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<GetTokenResults>;
+export interface ClientAuthResult {
+    accessToken: string;
+    idToken: string;
+}
+/**
+ * <p>Performs client-side authentication.
+ * <p>Will redirect to Cognito hosted UI for signin if required.
+ * <p>Sets client-side cookies and session variables.
+ * <p>For more control on what gets persisted on the client-side, use the method <code>getToken</code>.
+ */
+export declare function performClientAuth(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<ClientAuthResult | undefined>;
+/**
+ * <p>Will clear all cached variables set in <code>performClientAuth</code> and redirect user to the sign in page.
+ * <p>If you manage your own client-side config, use <code>getEndpoint</code> to obtain the logout endpoint.
+ */
+export declare function performLogout(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<void>;
+//# sourceMappingURL=templateUserManagement.d.ts.map

package/dist/src/templateUserManagement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateUserManagement.d.ts","sourceRoot":"","sources":["../../src/templateUserManagement.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC;AAM9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,CAAC;AAEhC,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,cAAc,CAAC,CAE1B;AAED,oBAAY,QAAQ,GAChB,WAAW,GACX,OAAO,GACP,QAAQ,CAAC;AAEb,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,GAAG,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAElB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,eAAe,EAAE,GAAG,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,eAAe,CAAC,CAE3B;AAuBD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CA6FxC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,iBAQA"}

package/dist/src/templateUserManagement.js

@@ -0,0 +1,162 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performLogout = exports.performClientAuth = exports.getToken = exports.getEndpoint = exports.connectWithCognito = void 0;
+__exportStar(require("./types/UserManagementPackage"), exports);
+const tokenVerify = __importStar(require("./cognitoTokenVerify"));
+const cognitoEndpoints_1 = require("./cognitoEndpoints");
+const cognitoClientAuth_1 = require("./cognitoClientAuth");
+const userManagementConfig_1 = require("./userManagementConfig");
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+async function connectWithCognito(args) {
+    return tokenVerify.connectWithCognito(args);
+}
+exports.connectWithCognito = connectWithCognito;
+async function getEndpoint(args) {
+    return (0, cognitoEndpoints_1.getEndpoint)(args);
+}
+exports.getEndpoint = getEndpoint;
+async function getToken(args) {
+    return (0, cognitoClientAuth_1.getToken)(args);
+}
+exports.getToken = getToken;
+function setCookie(name, value, minutes) {
+    let expires;
+    if (minutes) {
+        const date = new Date();
+        date.setTime(date.getTime() + minutes * 60 * 1000);
+        expires = '; expires=' + date.toUTCString();
+    }
+    else {
+        expires = '';
+    }
+    document.cookie = name + '=' + value + expires + '; path=/';
+}
+function eraseCookie(name) {
+    document.cookie = name + '=; Max-Age=0';
+}
+/*
+ * Keeping this only in memory
+ */
+let refreshTokenStorage = undefined;
+/**
+ * <p>Performs client-side authentication.
+ * <p>Will redirect to Cognito hosted UI for signin if required.
+ * <p>Sets client-side cookies and session variables.
+ * <p>For more control on what gets persisted on the client-side, use the method <code>getToken</code>.
+ */
+async function performClientAuth(args) {
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    const params = new URLSearchParams(window.location.search);
+    const code = params.get('code');
+    const existingAccessToken = window.sessionStorage.getItem('goldstack_access_token');
+    const existingIdToken = window.sessionStorage.getItem('goldstack_id_token');
+    if (existingAccessToken && existingIdToken) {
+        // remove code from URL
+        if (code) {
+            const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+                goldstackJson: args.goldstackConfig,
+                packageSchema: args.packageSchema,
+            });
+            const deployment = packageConfig.getDeployment(deploymentName);
+            window.location.href = deployment.configuration.callbackUrl;
+            return {
+                accessToken: existingAccessToken,
+                idToken: existingIdToken,
+            };
+        }
+        return {
+            accessToken: existingAccessToken,
+            idToken: existingIdToken,
+        };
+    }
+    if (code) {
+        const token = await getToken({ ...args, code });
+        window.sessionStorage.setItem('goldstack_access_token', token.accessToken);
+        window.sessionStorage.setItem('goldstack_id_token', token.idToken);
+        refreshTokenStorage = token.refreshToken;
+        // only store access and id token in cookie
+        setCookie('goldstack_access_token', token.accessToken, 60);
+        setCookie('goldstack_id_token', token.idToken, 60);
+        const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+            goldstackJson: args.goldstackConfig,
+            packageSchema: args.packageSchema,
+        });
+        const deployment = packageConfig.getDeployment(deploymentName);
+        window.location.href = deployment.configuration.callbackUrl;
+        return {
+            accessToken: token.accessToken,
+            idToken: token.idToken,
+        };
+    }
+    if (deploymentName === 'local') {
+        window.location.href = '?code=dummy-local-code';
+        return;
+    }
+    const refreshToken = refreshTokenStorage;
+    // if there is a refresh token, try to get a new token with that first before doing a redirect
+    if (refreshToken) {
+        try {
+            const token = await getToken({ ...args, refreshToken });
+            window.sessionStorage.setItem('goldstack_access_token', token.accessToken);
+            window.sessionStorage.setItem('goldstack_id_token', token.idToken);
+            refreshTokenStorage = token.refreshToken;
+            // only store access and id token in cookie
+            setCookie('goldstack_access_token', token.accessToken, 60);
+            setCookie('goldstack_id_token', token.idToken, 60);
+            return {
+                accessToken: token.accessToken,
+                idToken: token.idToken,
+            };
+        }
+        catch (e) {
+            // if there is an error, we better discard our refresh token, it could be expired
+            refreshTokenStorage = undefined;
+            // then we proceed with the redirect to login
+        }
+    }
+    const endpoint = await getEndpoint({ ...args, endpoint: 'authorize' });
+    window.location.href = endpoint;
+    return undefined;
+}
+exports.performClientAuth = performClientAuth;
+/**
+ * <p>Will clear all cached variables set in <code>performClientAuth</code> and redirect user to the sign in page.
+ * <p>If you manage your own client-side config, use <code>getEndpoint</code> to obtain the logout endpoint.
+ */
+async function performLogout(args) {
+    refreshTokenStorage = undefined;
+    eraseCookie('goldstack_access_token');
+    eraseCookie('goldstack_id_token');
+    window.sessionStorage.removeItem('goldstack_access_token');
+    window.sessionStorage.removeItem('goldstack_id_token');
+    const endpoint = await getEndpoint({ ...args, endpoint: 'logout' });
+    window.location.href = endpoint;
+}
+exports.performLogout = performLogout;
+//# sourceMappingURL=templateUserManagement.js.map

package/dist/src/templateUserManagement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateUserManagement.js","sourceRoot":"","sources":["../../src/templateUserManagement.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gEAA8C;AAE9C,kEAAoD;AAEpD,yDAAmE;AACnE,2DAA8D;AAE9D,iEAA2D;AAC3D,4FAAiF;AAS1E,KAAK,UAAU,kBAAkB,CAAC,IAKxC;IACC,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAPD,gDAOC;AAOM,KAAK,UAAU,WAAW,CAAC,IAMjC;IACC,OAAO,IAAA,8BAAc,EAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AARD,kCAQC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAO9B;IACC,OAAO,IAAA,4BAAW,EAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AATD,4BASC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,OAAe;IAC7D,IAAI,OAAe,CAAC;IACpB,IAAI,OAAO,EAAE;QACX,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACnD,OAAO,GAAG,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;KAC7C;SAAM;QACL,OAAO,GAAG,EAAE,CAAC;KACd;IACD,QAAQ,CAAC,MAAM,GAAG,IAAI,GAAG,GAAG,GAAG,KAAK,GAAG,OAAO,GAAG,UAAU,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,QAAQ,CAAC,MAAM,GAAG,IAAI,GAAG,cAAc,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,IAAI,mBAAmB,GAAuB,SAAS,CAAC;AAOxD;;;;;GAKG;AACI,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,mBAAmB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CACvD,wBAAwB,CACzB,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5E,IAAI,mBAAmB,IAAI,eAAe,EAAE;QAC1C,uBAAuB;QACvB,IAAI,IAAI,EAAE;YACR,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;gBACA,aAAa,EAAE,IAAI,CAAC,eAAe;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC;YAC5D,OAAO;gBACL,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE,eAAe;aACzB,CAAC;SACH;QAED,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,eAAe;SACzB,CAAC;KACH;IAED,IAAI,IAAI,EAAE;QACR,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,mBAAmB,GAAG,KAAK,CAAC,YAAY,CAAC;QACzC,2CAA2C;QAC3C,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3D,SAAS,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;YACA,aAAa,EAAE,IAAI,CAAC,eAAe;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC;QAC5D,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACH;IAED,IAAI,cAAc,KAAK,OAAO,EAAE;QAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,wBAAwB,CAAC;QAChD,OAAO;KACR;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC;IACzC,8FAA8F;IAC9F,IAAI,YAAY,EAAE;QAChB,IAAI;YACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAExD,MAAM,CAAC,cAAc,CAAC,OAAO,CAC3B,wBAAwB,EACxB,KAAK,CAAC,WAAW,CAClB,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACnE,mBAAmB,GAAG,KAAK,CAAC,YAAY,CAAC;YACzC,2CAA2C;YAC3C,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,SAAS,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAEnD,OAAO;gBACL,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;SACH;QAAC,OAAO,CAAC,EAAE;YACV,iFAAiF;YACjF,mBAAmB,GAAG,SAAS,CAAC;YAChC,6CAA6C;SAC9C;KACF;IAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAEvE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAlGD,8CAkGC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,mBAAmB,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACtC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAClC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;AAClC,CAAC;AAbD,sCAaC"}

package/dist/src/types/UserManagementDeployment.d.ts

@@ -0,0 +1,11 @@
+import type { AWSDeployment } from '@goldstack/infra-aws';
+import type { TerraformDeployment } from '@goldstack/utils-terraform';
+import type { Deployment } from '@goldstack/infra';
+import type { UserManagementDeploymentConfiguration } from './UserManagementDeploymentConfiguration';
+export type { AWSDeployment, TerraformDeployment, Deployment, UserManagementDeploymentConfiguration, };
+export interface ThisDeployment extends Deployment, AWSDeployment, TerraformDeployment {
+    configuration: UserManagementDeploymentConfiguration;
+}
+export type { ThisDeployment as UserManagementDeployment };
+export default ThisDeployment;
+//# sourceMappingURL=UserManagementDeployment.d.ts.map

package/dist/src/types/UserManagementDeployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementDeployment.d.ts","sourceRoot":"","sources":["../../../src/types/UserManagementDeployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAErG,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,UAAU,EACV,qCAAqC,GACtC,CAAC;AAEF,MAAM,WAAW,cACf,SAAQ,UAAU,EAChB,aAAa,EACb,mBAAmB;IACrB,aAAa,EAAE,qCAAqC,CAAC;CACtD;AAED,YAAY,EAAE,cAAc,IAAI,wBAAwB,EAAE,CAAC;AAE3D,eAAe,cAAc,CAAC"}

package/dist/src/types/UserManagementDeployment.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserManagementDeployment.js.map

package/dist/src/types/UserManagementDeployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementDeployment.js","sourceRoot":"","sources":["../../../src/types/UserManagementDeployment.ts"],"names":[],"mappings":""}

package/dist/src/types/UserManagementDeploymentConfiguration.d.ts

@@ -0,0 +1,38 @@
+import type { DeploymentConfiguration } from '@goldstack/infra';
+export type { DeploymentConfiguration };
+/**
+ * The name of the Cognito user pool.
+ *
+ * @title User Pool Name
+ * @pattern ^[A-Za-z0-9-]*$
+ */
+export declare type UserPoolName = string;
+/**
+ * The domain name of the Route 53 hosted zone that the cognito domain should be added to.
+ *
+ * @title Hosted Zone Domain
+ * @pattern ^[^\s]*
+ */
+export declare type HostedZoneDomain = string;
+/**
+ * The domain where Cognito will be deployed to
+ *
+ * @title Cognito Domain
+ * @pattern ^[^\s]*
+ */
+export declare type CognitoDomain = string;
+/**
+ * URL that users should be redirected to after a successful login.
+ *
+ * @title Callback URL
+ * @pattern ^[^\s]*
+ */
+export declare type CallbackUrl = string;
+export interface ThisDeploymentConfiguration extends DeploymentConfiguration {
+    userPoolName: UserPoolName;
+    hostedZoneDomain: HostedZoneDomain;
+    cognitoDomain: CognitoDomain;
+    callbackUrl: CallbackUrl;
+}
+export type { ThisDeploymentConfiguration as UserManagementDeploymentConfiguration };
+//# sourceMappingURL=UserManagementDeploymentConfiguration.d.ts.map

package/dist/src/types/UserManagementDeploymentConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementDeploymentConfiguration.d.ts","sourceRoot":"","sources":["../../../src/types/UserManagementDeploymentConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,YAAY,EAAE,uBAAuB,EAAE,CAAC;AAExC;;;;;GAKG;AACH,oBAAY,YAAY,GAAG,MAAM,CAAC;AAElC;;;;;GAKG;AACH,oBAAY,gBAAgB,GAAG,MAAM,CAAC;AAEtC;;;;;GAKG;AACH,oBAAY,aAAa,GAAG,MAAM,CAAC;AAEnC;;;;;GAKG;AACH,oBAAY,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,WAAW,2BAA4B,SAAQ,uBAAuB;IAC1E,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,YAAY,EAAE,2BAA2B,IAAI,qCAAqC,EAAE,CAAC"}

package/dist/src/types/UserManagementDeploymentConfiguration.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserManagementDeploymentConfiguration.js.map

package/dist/src/types/UserManagementDeploymentConfiguration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementDeploymentConfiguration.js","sourceRoot":"","sources":["../../../src/types/UserManagementDeploymentConfiguration.ts"],"names":[],"mappings":""}

package/dist/src/types/UserManagementPackage.d.ts

@@ -0,0 +1,22 @@
+import type { Package } from '@goldstack/utils-package';
+import type { UserManagementConfiguration } from './UserManagementPackageConfiguration';
+import type { UserManagementDeployment } from './UserManagementDeployment';
+export type { UserManagementConfiguration, UserManagementDeployment };
+/**
+ * Places where cognito should be deployed to.
+ *
+ * @title Deployments
+ */
+export declare type UserManagementDeployments = UserManagementDeployment[];
+/**
+ * A cognito configuration.
+ *
+ * @title User Management Package
+ */
+export interface ThisPackage extends Package {
+    configuration: UserManagementConfiguration;
+    deployments: UserManagementDeployments;
+}
+export type { ThisPackage as UserManagementPackage };
+export default ThisPackage;
+//# sourceMappingURL=UserManagementPackage.d.ts.map

package/dist/src/types/UserManagementPackage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementPackage.d.ts","sourceRoot":"","sources":["../../../src/types/UserManagementPackage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAE3E,YAAY,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,CAAC;AAEtE;;;;GAIG;AACH,oBAAY,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO;IAC1C,aAAa,EAAE,2BAA2B,CAAC;IAC3C,WAAW,EAAE,yBAAyB,CAAC;CACxC;AAED,YAAY,EAAE,WAAW,IAAI,qBAAqB,EAAE,CAAC;AAErD,eAAe,WAAW,CAAC"}

package/dist/src/types/UserManagementPackage.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserManagementPackage.js.map

package/dist/src/types/UserManagementPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementPackage.js","sourceRoot":"","sources":["../../../src/types/UserManagementPackage.ts"],"names":[],"mappings":""}

package/dist/src/types/UserManagementPackageConfiguration.d.ts

@@ -0,0 +1,14 @@
+import { Configuration } from '@goldstack/utils-package';
+export type { Configuration };
+/**
+ * User Management Configuration
+ *
+ * @title User Management Configuration
+ *
+ */
+export interface ThisPackageConfiguration extends Configuration {
+    [propName: string]: any;
+}
+export type { ThisPackageConfiguration as UserManagementConfiguration };
+export default ThisPackageConfiguration;
+//# sourceMappingURL=UserManagementPackageConfiguration.d.ts.map

package/dist/src/types/UserManagementPackageConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementPackageConfiguration.d.ts","sourceRoot":"","sources":["../../../src/types/UserManagementPackageConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,WAAW,wBAAyB,SAAQ,aAAa;IAC7D,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC;CACzB;AAED,YAAY,EAAE,wBAAwB,IAAI,2BAA2B,EAAE,CAAC;AAExE,eAAe,wBAAwB,CAAC"}

package/dist/src/types/UserManagementPackageConfiguration.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserManagementPackageConfiguration.js.map

package/dist/src/types/UserManagementPackageConfiguration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserManagementPackageConfiguration.js","sourceRoot":"","sources":["../../../src/types/UserManagementPackageConfiguration.ts"],"names":[],"mappings":""}

package/dist/src/userManagementConfig.d.ts

@@ -0,0 +1,3 @@
+export declare function getDeploymentName(deploymentName?: string): string;
+export declare function getDeploymentsOutput(deploymentsOutput: any, deploymentName: string): any;
+//# sourceMappingURL=userManagementConfig.d.ts.map

package/dist/src/userManagementConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userManagementConfig.d.ts","sourceRoot":"","sources":["../../src/userManagementConfig.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,cAAc,CAAC,EAAE,MAAM,UAcxD;AAED,wBAAgB,oBAAoB,CAClC,iBAAiB,EAAE,GAAG,EACtB,cAAc,EAAE,MAAM,OAWvB"}

package/dist/src/userManagementConfig.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDeploymentsOutput = exports.getDeploymentName = void 0;
+function getDeploymentName(deploymentName) {
+    if (!deploymentName) {
+        if (typeof window === 'undefined') {
+            deploymentName = process.env.GOLDSTACK_DEPLOYMENT;
+        }
+        else {
+            deploymentName = window.GOLDSTACK_DEPLOYMENT;
+        }
+    }
+    if (!deploymentName) {
+        throw new Error('Environment variable GOLDSTACK_DEPLOYMENT not defined.');
+    }
+    return deploymentName;
+}
+exports.getDeploymentName = getDeploymentName;
+function getDeploymentsOutput(deploymentsOutput, deploymentName) {
+    const deploymentOutput = deploymentsOutput.find((deployment) => (deployment.name = deploymentName));
+    if (!deploymentOutput) {
+        throw new Error(`No outputs from Terraform Apply available for deployment '${deploymentName}'. Did you run 'yarn infra up' for this deployment?`);
+    }
+    return deploymentOutput;
+}
+exports.getDeploymentsOutput = getDeploymentsOutput;
+//# sourceMappingURL=userManagementConfig.js.map

package/dist/src/userManagementConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userManagementConfig.js","sourceRoot":"","sources":["../../src/userManagementConfig.ts"],"names":[],"mappings":";;;AAAA,SAAgB,iBAAiB,CAAC,cAAuB;IACvD,IAAI,CAAC,cAAc,EAAE;QACnB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;YACjC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;SACnD;aAAM;YACL,cAAc,GAAI,MAAc,CAAC,oBAAoB,CAAC;SACvD;KACF;IAED,IAAI,CAAC,cAAc,EAAE;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;KAC3E;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAdD,8CAcC;AAED,SAAgB,oBAAoB,CAClC,iBAAsB,EACtB,cAAsB;IAEtB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAC7C,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,cAAc,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE;QACrB,MAAM,IAAI,KAAK,CACb,6DAA6D,cAAc,qDAAqD,CACjI,CAAC;KACH;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAbD,oDAaC"}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@goldstack/template-user-management",
+  "version": "0.1.1",
+  "description": "Template utilities for user management",
+  "keywords": [
+    "goldstack",
+    "utility",
+    "infrastructure",
+    "cognito",
+    "aws",
+    "IaC",
+    "configuration"
+  ],
+  "homepage": "https://goldstack.party",
+  "bugs": {
+    "url": "https://github.com/goldstack/goldstack/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/goldstack/goldstack.git"
+  },
+  "license": "MIT",
+  "author": "Max Rohde",
+  "sideEffects": false,
+  "main": "dist/src/templateUserManagement.js",
+  "scripts": {
+    "build": "yarn clean && yarn compile",
+    "build:watch": "yarn clean && yarn compile-watch",
+    "clean": "rimraf ./dist",
+    "compile": "tsc -p tsconfig.json",
+    "compile-watch": "tsc -p tsconfig.json --watch",
+    "coverage": "jest --collect-coverage --passWithNoTests --config=./jest.config.js --runInBand",
+    "generate-schema": "ts-node scripts/generateSchemas.ts && cp schemas/* ../../../templates/packages/user-management/schemas",
+    "prepublishOnly": "yarn run build",
+    "publish": "utils-git changed --exec \"yarn npm publish $@\"",
+    "test-ci": "jest --passWithNoTests --config=./jest.config.js --runInBand",
+    "version:apply": "utils-git changed --exec \"yarn version $@ && yarn version apply\"",
+    "version:apply:force": "yarn version $@ && yarn version apply"
+  },
+  "dependencies": {
+    "@goldstack/infra": "0.4.4",
+    "@goldstack/infra-aws": "0.4.7",
+    "@goldstack/utils-esbuild": "0.5.4",
+    "@goldstack/utils-package": "0.4.4",
+    "@goldstack/utils-package-config-embedded": "0.5.5",
+    "@goldstack/utils-template": "0.4.4",
+    "@goldstack/utils-terraform": "0.4.7",
+    "aws-jwt-verify": "^3.2.0",
+    "aws-sdk": "^2.1222.0",
+    "source-map-support": "^0.5.21"
+  },
+  "devDependencies": {
+    "@goldstack/utils-docs-cli": "0.3.11",
+    "@goldstack/utils-git": "0.2.4",
+    "@goldstack/utils-package-config-generate": "0.3.4",
+    "@types/jest": "^29.0.1",
+    "@types/node": "^18.7.13",
+    "@types/yargs": "^17.0.10",
+    "jest": "^28.1.0",
+    "rimraf": "^3.0.2",
+    "ts-jest": "^28.0.2",
+    "ts-node": "^10.9.1",
+    "typescript": "^4.8.4"
+  },
+  "publishConfig": {
+    "main": "dist/src/templateUserManagement.js"
+  }
+}