@kensio/yulin 0.41.0 → 0.42.0

package/dist/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.d.ts

@@ -0,0 +1,27 @@
+import type { SimSsmParameter } from "../../../../ssm/parameter/sim-ssm-parameter.js";
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimSsmParameterCfnProperties {
+    readonly parameter: SimSsmParameter;
+}
+/**
+ * CloudFormation-facing values for a simulated SSM parameter.
+ */
+export declare class SimSsmParameterCfn implements SimCfnResourceValueAdapter {
+    private readonly parameter;
+    constructor(properties: SimSsmParameterCfnProperties);
+    /**
+     * AWS::SSM::Parameter Ref returns the parameter name rather than its ARN,
+     * which is what makes a Ref usable as a GetParameter Name.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * AWS::SSM::Parameter attributes.
+     *
+     * `Value` reads the current version, so a Resource depending on it sees
+     * what the parameter holds after the stack deployed it.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};
+//# sourceMappingURL=sim-ssm-parameter-cfn.d.ts.map

package/dist/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-cfn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,4BAA4B;IACpC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;GAEG;AACH,qBAAa,kBAAmB,YAAW,0BAA0B;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAE5C,YAAY,UAAU,EAAE,4BAA4B,EAEnD;IAED;;;OAGG;IACH,QAAQ,IAAI,mBAAmB,CAE9B;IAED;;;;;OAKG;IACH,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAczD;CACF"}

package/dist/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.js

@@ -0,0 +1,36 @@
+/**
+ * CloudFormation-facing values for a simulated SSM parameter.
+ */
+export class SimSsmParameterCfn {
+    parameter;
+    constructor(properties) {
+        this.parameter = properties.parameter;
+    }
+    /**
+     * AWS::SSM::Parameter Ref returns the parameter name rather than its ARN,
+     * which is what makes a Ref usable as a GetParameter Name.
+     */
+    refValue() {
+        return this.parameter.name.value;
+    }
+    /**
+     * AWS::SSM::Parameter attributes.
+     *
+     * `Value` reads the current version, so a Resource depending on it sees
+     * what the parameter holds after the stack deployed it.
+     */
+    attributeValue(attributeName) {
+        switch (attributeName) {
+            case "Type": {
+                return this.parameter.type.value;
+            }
+            case "Value": {
+                return this.parameter.currentVersion.value.value;
+            }
+            default: {
+                throw new Error(`Unsupported AWS::SSM::Parameter attribute ${attributeName}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-cfn.js.map

package/dist/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-cfn.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/ssm/sim-ssm-parameter-cfn.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAkB;IAE5C,YAAY,UAAwC;QAClD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,aAAqB;QAClC,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACnC,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;YACnD,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,6CAA6C,aAAa,EAAE,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAChG,OAAO,KAAK,EACV,mCAAmC,EACnC,4BAA4B,EAC7B,MAAM,gDAAgD,CAAC;AAIxD;;GAEG;AACH,wBAAgB,8CAA8C,CAC5D,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,wBAAwB,EAC5C,YAAY,EAAE,mCAAmC,GAChD,4BAA4B,CA6D9B"}
+{"version":3,"file":"sim-cfn-service-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAChG,OAAO,KAAK,EACV,mCAAmC,EACnC,4BAA4B,EAC7B,MAAM,gDAAgD,CAAC;AAIxD;;GAEG;AACH,wBAAgB,8CAA8C,CAC5D,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,wBAAwB,EAC5C,YAAY,EAAE,mCAAmC,GAChD,4BAA4B,CAgE9B"}

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.js

@@ -45,6 +45,9 @@ export function resolveSimCloudFormationServiceResourceFactory(simAws, accountRe
         case "SecretsManager": {
             return scopedAws.secretsManager().cfnResourceFactory();
         }
+        case "SSM": {
+            return scopedAws.ssm().cfnResourceFactory();
+        }
         default: {
             throw new Error(`Unsupported sim CloudFormation Resource service ${resourceType.serviceName}`);
         }

package/dist/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-service-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gEAAgE,CAAC;AAEvH;;GAEG;AACH,MAAM,UAAU,8CAA8C,CAC5D,MAAc,EACd,kBAA4C,EAC5C,YAAiD;IAEjD,IACE,YAAY,CAAC,YAAY,KAAK,QAAQ;QACtC,YAAY,CAAC,WAAW,KAAK,QAAQ;QACrC,YAAY,CAAC,gBAAgB,KAAK,qBAAqB,EACvD,CAAC;QACD,OAAO,IAAI,qCAAqC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,kDAAkD,YAAY,CAAC,gBAAgB,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,oDAAoD,YAAY,CAAC,YAAY,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CACzC,kBAAkB,CAAC,SAAS,EAC5B,kBAAkB,CAAC,UAAU,CAC9B,CAAC;IAEF,QAAQ,YAAY,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,KAAK,CAAC;QACX,KAAK,oBAAoB,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,wBAAwB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACrD,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjD,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAClD,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC,EAAE,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,cAAc,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACzD,CAAC;QACD,SAAS,CAAC;YACR,MAAM,IAAI,KAAK,CACb,mDAAmD,YAAY,CAAC,WAAW,EAAE,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-cfn-service-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/resolve/service/sim-cfn-service-resolver.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gEAAgE,CAAC;AAEvH;;GAEG;AACH,MAAM,UAAU,8CAA8C,CAC5D,MAAc,EACd,kBAA4C,EAC5C,YAAiD;IAEjD,IACE,YAAY,CAAC,YAAY,KAAK,QAAQ;QACtC,YAAY,CAAC,WAAW,KAAK,QAAQ;QACrC,YAAY,CAAC,gBAAgB,KAAK,qBAAqB,EACvD,CAAC;QACD,OAAO,IAAI,qCAAqC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,kDAAkD,YAAY,CAAC,gBAAgB,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,oDAAoD,YAAY,CAAC,YAAY,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CACzC,kBAAkB,CAAC,SAAS,EAC5B,kBAAkB,CAAC,UAAU,CAC9B,CAAC;IAEF,QAAQ,YAAY,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,KAAK,CAAC;QACX,KAAK,oBAAoB,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,wBAAwB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACrD,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjD,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAClD,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC,EAAE,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,cAAc,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACzD,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QACD,SAAS,CAAC;YACR,MAAM,IAAI,KAAK,CACb,mDAAmD,YAAY,CAAC,WAAW,EAAE,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/service/cognito/command/authorize/sim-cognito-authorizer.d.ts

@@ -0,0 +1,36 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCognitoUserPoolId } from "../../user-pool/sim-cognito-user-pool-id.js";
+interface SimCognitoAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to Cognito user pool requests.
+ *
+ * App clients have no ARN of their own, so operations on one authorize
+ * against the ARN of the pool it belongs to. A policy granting
+ * `cognito-idp:DescribeUserPoolClient` on a pool therefore reaches every
+ * client in it, as it does on real AWS.
+ */
+export declare class SimCognitoAuthorizer {
+    private readonly iam;
+    private readonly accountRegionScope;
+    constructor(properties: SimCognitoAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on a user pool.
+     *
+     * The pool need not exist. Real IAM evaluates a request before the service
+     * handles it, so a caller with no permission is refused whether or not the
+     * pool is there, and never learns which it was.
+     */
+    authorizeUserPool(action: string, userPoolId: SimCognitoUserPoolId, caller?: SimAwsCaller): void;
+    /**
+     * Ensure the caller may perform an action that names no particular pool.
+     */
+    authorizeAny(action: string, caller?: SimAwsCaller): void;
+    private authorizeResource;
+}
+export {};
+//# sourceMappingURL=sim-cognito-authorizer.d.ts.map

package/dist/service/cognito/command/authorize/sim-cognito-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/authorize/sim-cognito-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAYxF,UAAU,8BAA8B;IACtC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,8BAA8B,EAGrD;IAED;;;;;;OAMG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,oBAAoB,EAChC,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAMN;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAExD;IAED,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/service/cognito/command/authorize/sim-cognito-authorizer.js

@@ -0,0 +1,54 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { cognitoUserPoolArnPrefix } from "../../user-pool/sim-cognito-user-pool-arn.js";
+/**
+ * The resource an operation with no particular pool authorizes against.
+ *
+ * Real Cognito gives `CreateUserPool` and `ListUserPools` no resource-level
+ * permissions, so a policy allowing either has to use a resource of `*`.
+ * Authorizing against `*` here is what makes a policy naming individual pool
+ * ARNs fail the same way it would on real AWS.
+ */
+const anyResource = "*";
+/**
+ * Applies simulated IAM authorization to Cognito user pool requests.
+ *
+ * App clients have no ARN of their own, so operations on one authorize
+ * against the ARN of the pool it belongs to. A policy granting
+ * `cognito-idp:DescribeUserPoolClient` on a pool therefore reaches every
+ * client in it, as it does on real AWS.
+ */
+export class SimCognitoAuthorizer {
+    iam;
+    accountRegionScope;
+    constructor(properties) {
+        this.iam = properties.iam;
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may perform an action on a user pool.
+     *
+     * The pool need not exist. Real IAM evaluates a request before the service
+     * handles it, so a caller with no permission is refused whether or not the
+     * pool is there, and never learns which it was.
+     */
+    authorizeUserPool(action, userPoolId, caller) {
+        this.authorizeResource(action, cognitoUserPoolArnPrefix(this.accountRegionScope) + userPoolId, caller);
+    }
+    /**
+     * Ensure the caller may perform an action that names no particular pool.
+     */
+    authorizeAny(action, caller) {
+        this.authorizeResource(action, anyResource, caller);
+    }
+    authorizeResource(action, resource, caller) {
+        const decision = this.iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-authorizer.js.map

package/dist/service/cognito/command/authorize/sim-cognito-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/authorize/sim-cognito-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAGxF;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,GAAG,CAAC;AAOxB;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,GAAG,CAA0B;IAC7B,kBAAkB,CAA2B;IAE9D,YAAY,UAA0C;QACpD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CACf,MAAc,EACd,UAAgC,EAChC,MAAqB;QAErB,IAAI,CAAC,iBAAiB,CACpB,MAAM,EACN,wBAAwB,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,UAAU,EAC9D,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc,EAAE,MAAqB;QAChD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/command/client/list-user-pool-clients.command.d.ts

@@ -0,0 +1,29 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * An app client as sim Cognito reports it in a listing, which carries only
+ * enough to describe it with.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientDescription.html
+ */
+export interface SimCognitoUserPoolClientDescription {
+    readonly ClientId?: string | undefined;
+    readonly UserPoolId?: string | undefined;
+    readonly ClientName?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito ListUserPoolClients command.
+ */
+export interface SimListUserPoolClientsCommand {
+    readonly input: SimListUserPoolClientsCommandInput;
+}
+export interface SimListUserPoolClientsCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly MaxResults?: number | undefined;
+    readonly NextToken?: string | undefined;
+}
+export interface SimListUserPoolClientsCommandOutput {
+    readonly UserPoolClients?: readonly SimCognitoUserPoolClientDescription[] | undefined;
+    readonly NextToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=list-user-pool-clients.command.d.ts.map

package/dist/service/cognito/command/client/list-user-pool-clients.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-user-pool-clients.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/list-user-pool-clients.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,eAAe,CAAC,EACvB,SAAS,mCAAmC,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/client/list-user-pool-clients.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=list-user-pool-clients.command.js.map

package/dist/service/cognito/command/client/list-user-pool-clients.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-user-pool-clients.command.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/list-user-pool-clients.command.ts"],"names":[],"mappings":""}

package/dist/service/cognito/command/client/sim-cognito-list-user-pool-clients.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoUserPoolStore } from "../../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoAuthorizer } from "../authorize/sim-cognito-authorizer.js";
+import type { SimListUserPoolClientsCommand, SimListUserPoolClientsCommandOutput } from "./list-user-pool-clients.command.js";
+interface SimCognitoListUserPoolClientsProperties {
+    readonly pools: SimCognitoUserPoolStore;
+    readonly authorizer: SimCognitoAuthorizer;
+}
+interface SimCognitoListUserPoolClientsOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The ListUserPoolClients command.
+ *
+ * This authorizes against the pool, not against `*`, because real Cognito
+ * gives the action a resource-level permission on the pool whose clients are
+ * being listed.
+ */
+export declare class SimCognitoListUserPoolClients {
+    private readonly pools;
+    private readonly authorizer;
+    private readonly view;
+    constructor(properties: SimCognitoListUserPoolClientsProperties);
+    /**
+     * List the app clients of one pool, in creation order.
+     */
+    handle(command: SimListUserPoolClientsCommand, options?: SimCognitoListUserPoolClientsOptions): SimListUserPoolClientsCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-list-user-pool-clients.d.ts.map

package/dist/service/cognito/command/client/sim-cognito-list-user-pool-clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-user-pool-clients.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-list-user-pool-clients.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGnF,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,qCAAqC,CAAC;AAE7C,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAUD;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsC;IAE3D,YAAY,UAAU,EAAE,uCAAuC,EAG9D;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oCAAoC,GAC7C,mCAAmC,CAoBrC;CACF"}

package/dist/service/cognito/command/client/sim-cognito-list-user-pool-clients.js

@@ -0,0 +1,44 @@
+import { requireSimCognitoUserPoolId } from "../../user-pool/sim-cognito-user-pool-id.js";
+import { SimCognitoPage } from "../sim-cognito-page.js";
+import { SimCognitoUserPoolClientView } from "./sim-cognito-user-pool-client-view.js";
+/**
+ * How many app clients a page holds when the request does not say.
+ *
+ * Unlike `ListUserPools`, this operation does not insist on being told, and
+ * sixty is the most Cognito will return either way.
+ */
+const defaultMaxResults = 60;
+/**
+ * The ListUserPoolClients command.
+ *
+ * This authorizes against the pool, not against `*`, because real Cognito
+ * gives the action a resource-level permission on the pool whose clients are
+ * being listed.
+ */
+export class SimCognitoListUserPoolClients {
+    pools;
+    authorizer;
+    view = new SimCognitoUserPoolClientView();
+    constructor(properties) {
+        this.pools = properties.pools;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * List the app clients of one pool, in creation order.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const userPoolId = requireSimCognitoUserPoolId(input.UserPoolId);
+        this.authorizer.authorizeUserPool("cognito-idp:ListUserPoolClients", userPoolId, options?.caller);
+        const page = new SimCognitoPage(this.pools.require(userPoolId).clients, {
+            maxResults: input.MaxResults ?? defaultMaxResults,
+            nextToken: input.NextToken,
+        });
+        return {
+            $metadata: {},
+            UserPoolClients: page.items.map((client) => this.view.listEntry(client)),
+            NextToken: page.nextToken,
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-list-user-pool-clients.js.map

package/dist/service/cognito/command/client/sim-cognito-list-user-pool-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-list-user-pool-clients.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-list-user-pool-clients.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAG1F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAetF;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,KAAK,CAA0B;IAC/B,UAAU,CAAuB;IACjC,IAAI,GAAG,IAAI,4BAA4B,EAAE,CAAC;IAE3D,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAsC,EACtC,OAA8C;QAE9C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,iCAAiC,EACjC,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YACtE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,iBAAiB;YACjD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/client/sim-cognito-unsimulated-client-options.d.ts

@@ -0,0 +1,16 @@
+import type { SimCreateUserPoolClientCommandInput } from "./user-pool-client.command.js";
+/**
+ * Refuses the CreateUserPoolClient inputs this simulation does not model.
+ *
+ * Storing any of them would suggest an app client that works here would work
+ * there.
+ */
+export declare class SimCognitoUnsimulatedUserPoolClientOptions {
+    private readonly unsimulated;
+    private readonly managedLogin;
+    /**
+     * Refuse a request carrying an input this simulation cannot honour.
+     */
+    refuseIn(input: SimCreateUserPoolClientCommandInput): void;
+}
+//# sourceMappingURL=sim-cognito-unsimulated-client-options.d.ts.map

package/dist/service/cognito/command/client/sim-cognito-unsimulated-client-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-client-options.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-unsimulated-client-options.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEzF;;;;;GAKG;AACH,qBAAa,0CAA0C;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IACF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2C;IAExE;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,mCAAmC,GAAG,IAAI,CAkDzD;CACF"}

package/dist/service/cognito/command/client/sim-cognito-unsimulated-client-options.js

@@ -0,0 +1,28 @@
+import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
+import { SimCognitoUnsimulatedManagedLogin } from "./sim-cognito-unsimulated-managed-login.js";
+/**
+ * Refuses the CreateUserPoolClient inputs this simulation does not model.
+ *
+ * Storing any of them would suggest an app client that works here would work
+ * there.
+ */
+export class SimCognitoUnsimulatedUserPoolClientOptions {
+    unsimulated = new SimCognitoUnsimulatedInput("CreateUserPoolClient");
+    managedLogin = new SimCognitoUnsimulatedManagedLogin();
+    /**
+     * Refuse a request carrying an input this simulation cannot honour.
+     */
+    refuseIn(input) {
+        this.managedLogin.refuseIn(input);
+        this.unsimulated.refuseUnless("EnableTokenRevocation", input.EnableTokenRevocation, true, "token revocation");
+        this.unsimulated.refuseUnless("PreventUserExistenceErrors", input.PreventUserExistenceErrors, "LEGACY", "hiding whether a user exists");
+        this.unsimulated.refuse("ClientSecret", input.ClientSecret, "a secret of your own instead of a generated one");
+        this.unsimulated.refuse("AnalyticsConfiguration", input.AnalyticsConfiguration, "Amazon Pinpoint analytics");
+        this.unsimulated.refuse("AuthSessionValidity", input.AuthSessionValidity, "the authentication session lifetime");
+        this.unsimulated.refuse("EnablePropagateAdditionalUserContextData", input.EnablePropagateAdditionalUserContextData, "threat protection context data");
+        this.unsimulated.refuse("RefreshTokenRotation", input.RefreshTokenRotation, "refresh token rotation");
+        this.unsimulated.refuse("ReadAttributes", input.ReadAttributes, "per-client attribute permissions");
+        this.unsimulated.refuse("WriteAttributes", input.WriteAttributes, "per-client attribute permissions");
+    }
+}
+//# sourceMappingURL=sim-cognito-unsimulated-client-options.js.map

package/dist/service/cognito/command/client/sim-cognito-unsimulated-client-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-client-options.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-unsimulated-client-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAG/F;;;;;GAKG;AACH,MAAM,OAAO,0CAA0C;IACpC,WAAW,GAAG,IAAI,0BAA0B,CAC3D,sBAAsB,CACvB,CAAC;IACe,YAAY,GAAG,IAAI,iCAAiC,EAAE,CAAC;IAExE;;OAEG;IACH,QAAQ,CAAC,KAA0C;QACjD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,uBAAuB,EACvB,KAAK,CAAC,qBAAqB,EAC3B,IAAI,EACJ,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,4BAA4B,EAC5B,KAAK,CAAC,0BAA0B,EAChC,QAAQ,EACR,8BAA8B,CAC/B,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,cAAc,EACd,KAAK,CAAC,YAAY,EAClB,iDAAiD,CAClD,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,wBAAwB,EACxB,KAAK,CAAC,sBAAsB,EAC5B,2BAA2B,CAC5B,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,qBAAqB,EACrB,KAAK,CAAC,mBAAmB,EACzB,qCAAqC,CACtC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,0CAA0C,EAC1C,KAAK,CAAC,wCAAwC,EAC9C,gCAAgC,CACjC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,sBAAsB,EACtB,KAAK,CAAC,oBAAoB,EAC1B,wBAAwB,CACzB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,gBAAgB,EAChB,KAAK,CAAC,cAAc,EACpB,kCAAkC,CACnC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,iBAAiB,EACjB,KAAK,CAAC,eAAe,EACrB,kCAAkC,CACnC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/client/sim-cognito-unsimulated-managed-login.d.ts

@@ -0,0 +1,23 @@
+import type { SimCreateUserPoolClientCommandInput } from "./user-pool-client.command.js";
+/**
+ * Refuses the managed login inputs of an app client.
+ *
+ * Managed login is a hosted web application and a set of OAuth endpoints,
+ * rather than an API this simulation could stand in for, so none of its
+ * settings mean anything here.
+ */
+export declare class SimCognitoUnsimulatedManagedLogin {
+    private readonly unsimulated;
+    /**
+     * Refuse a request carrying a managed login setting.
+     */
+    refuseIn(input: SimCreateUserPoolClientCommandInput): void;
+    /**
+     * Refuse a client federating to an external identity provider.
+     *
+     * A client supporting only `COGNITO` is asking for the pool's own users,
+     * which is what this simulation has, so that one is allowed through.
+     */
+    private refuseSupportedIdentityProviders;
+}
+//# sourceMappingURL=sim-cognito-unsimulated-managed-login.d.ts.map

package/dist/service/cognito/command/client/sim-cognito-unsimulated-managed-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-managed-login.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-unsimulated-managed-login.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAUzF;;;;;;GAMG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAEF;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,mCAAmC,GAAG,IAAI,CAkCzD;IAED;;;;;OAKG;IACH,OAAO,CAAC,gCAAgC;CAsBzC"}

package/dist/service/cognito/command/client/sim-cognito-unsimulated-managed-login.js

@@ -0,0 +1,51 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
+/**
+ * The only identity provider a simulated app client can support.
+ *
+ * `COGNITO` means the pool's own users, which is what a client supports when
+ * a request names no providers at all.
+ */
+const cognitoIdentityProvider = "COGNITO";
+/**
+ * Refuses the managed login inputs of an app client.
+ *
+ * Managed login is a hosted web application and a set of OAuth endpoints,
+ * rather than an API this simulation could stand in for, so none of its
+ * settings mean anything here.
+ */
+export class SimCognitoUnsimulatedManagedLogin {
+    unsimulated = new SimCognitoUnsimulatedInput("CreateUserPoolClient");
+    /**
+     * Refuse a request carrying a managed login setting.
+     */
+    refuseIn(input) {
+        this.refuseSupportedIdentityProviders(input.SupportedIdentityProviders);
+        this.unsimulated.refuseUnless("AllowedOAuthFlowsUserPoolClient", input.AllowedOAuthFlowsUserPoolClient, false, "the OAuth 2.0 authorization server endpoints");
+        this.unsimulated.refuse("AllowedOAuthFlows", input.AllowedOAuthFlows, "OAuth grants through managed login");
+        this.unsimulated.refuse("AllowedOAuthScopes", input.AllowedOAuthScopes, "OAuth scopes");
+        this.unsimulated.refuse("CallbackURLs", input.CallbackURLs, "managed login redirects");
+        this.unsimulated.refuse("LogoutURLs", input.LogoutURLs, "managed login redirects");
+        this.unsimulated.refuse("DefaultRedirectURI", input.DefaultRedirectURI, "managed login redirects");
+    }
+    /**
+     * Refuse a client federating to an external identity provider.
+     *
+     * A client supporting only `COGNITO` is asking for the pool's own users,
+     * which is what this simulation has, so that one is allowed through.
+     */
+    refuseSupportedIdentityProviders(providers) {
+        if (providers === undefined) {
+            return;
+        }
+        const federated = providers.filter((provider) => provider !== cognitoIdentityProvider);
+        if (federated.length === 0) {
+            return;
+        }
+        throw new SimCognitoInvalidParameterException(`CreateUserPoolClient SupportedIdentityProviders ` +
+            `'${federated.join(", ")}' is not simulated: federated sign-in ` +
+            `happens at the provider rather than in this simulation. Only ` +
+            `'${cognitoIdentityProvider}' is supported.`);
+    }
+}
+//# sourceMappingURL=sim-cognito-unsimulated-managed-login.js.map

package/dist/service/cognito/command/client/sim-cognito-unsimulated-managed-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-unsimulated-managed-login.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-unsimulated-managed-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAGjF;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,OAAO,iCAAiC;IAC3B,WAAW,GAAG,IAAI,0BAA0B,CAC3D,sBAAsB,CACvB,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,KAA0C;QACjD,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAExE,IAAI,CAAC,WAAW,CAAC,YAAY,CAC3B,iCAAiC,EACjC,KAAK,CAAC,+BAA+B,EACrC,KAAK,EACL,8CAA8C,CAC/C,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,mBAAmB,EACnB,KAAK,CAAC,iBAAiB,EACvB,oCAAoC,CACrC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,oBAAoB,EACpB,KAAK,CAAC,kBAAkB,EACxB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,cAAc,EACd,KAAK,CAAC,YAAY,EAClB,yBAAyB,CAC1B,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,YAAY,EACZ,KAAK,CAAC,UAAU,EAChB,yBAAyB,CAC1B,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,oBAAoB,EACpB,KAAK,CAAC,kBAAkB,EACxB,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,gCAAgC,CACtC,SAAwC;QAExC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAChC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,uBAAuB,CACnD,CAAC;QAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,mCAAmC,CAC3C,kDAAkD;YAChD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;YAChE,+DAA+D;YAC/D,IAAI,uBAAuB,iBAAiB,CAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/client/sim-cognito-user-pool-client-commands.d.ts

@@ -0,0 +1,50 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoUserPoolClientFactory } from "../../user-pool/client/sim-cognito-user-pool-client-factory.js";
+import type { SimCognitoUserPoolStore } from "../../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoAuthorizer } from "../authorize/sim-cognito-authorizer.js";
+import type { SimCreateUserPoolClientCommand, SimCreateUserPoolClientCommandOutput, SimDeleteUserPoolClientCommand, SimDeleteUserPoolClientCommandOutput, SimDescribeUserPoolClientCommand, SimDescribeUserPoolClientCommandOutput } from "./user-pool-client.command.js";
+interface SimCognitoUserPoolClientCommandsProperties {
+    readonly pools: SimCognitoUserPoolStore;
+    readonly clientFactory: SimCognitoUserPoolClientFactory;
+    readonly authorizer: SimCognitoAuthorizer;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The commands that create, describe and delete a simulated app client.
+ *
+ * Each one authorizes against the pool's ARN, because an app client has no
+ * ARN of its own.
+ */
+export declare class SimCognitoUserPoolClientCommands {
+    private readonly pools;
+    private readonly clientFactory;
+    private readonly authorizer;
+    private readonly view;
+    private readonly unsimulatedOptions;
+    constructor(properties: SimCognitoUserPoolClientCommandsProperties);
+    /**
+     * Create an app client in a pool.
+     */
+    create(command: SimCreateUserPoolClientCommand, options?: SimCognitoCommandOptions): SimCreateUserPoolClientCommandOutput;
+    /**
+     * Describe an app client's settings, including its secret.
+     */
+    describe(command: SimDescribeUserPoolClientCommand, options?: SimCognitoCommandOptions): SimDescribeUserPoolClientCommandOutput;
+    /**
+     * Delete an app client from a pool.
+     */
+    delete(command: SimDeleteUserPoolClientCommand, options?: SimCognitoCommandOptions): SimDeleteUserPoolClientCommandOutput;
+    /**
+     * Resolve the pool an app client operation names, once the caller is
+     * allowed to reach it.
+     *
+     * Authorization comes before the lookup, as real IAM evaluates a request
+     * before the service handles it, so a caller with no permission is refused
+     * whether or not the pool is there.
+     */
+    private authorizedPool;
+}
+export {};
+//# sourceMappingURL=sim-cognito-user-pool-client-commands.d.ts.map

package/dist/service/cognito/command/client/sim-cognito-user-pool-client-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-client-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-user-pool-client-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,gEAAgE,CAAC;AAItH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGnF,OAAO,KAAK,EACV,8BAA8B,EAC9B,oCAAoC,EACpC,8BAA8B,EAC9B,oCAAoC,EACpC,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,+BAA+B,CAAC;AAEvC,UAAU,0CAA0C;IAClD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;GAKG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsC;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACgB;IAEnD,YAAY,UAAU,EAAE,0CAA0C,EAIjE;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,wBAAwB,GACjC,oCAAoC,CAqBtC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAaxC;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,wBAAwB,GACjC,oCAAoC,CAYtC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAWvB"}

package/dist/service/cognito/command/client/sim-cognito-user-pool-client-commands.js

@@ -0,0 +1,75 @@
+import { requireSimCognitoUserPoolClientId } from "../../user-pool/client/sim-cognito-user-pool-client-id.js";
+import { requireSimCognitoUserPoolId } from "../../user-pool/sim-cognito-user-pool-id.js";
+import { SimCognitoUnsimulatedUserPoolClientOptions } from "./sim-cognito-unsimulated-client-options.js";
+import { SimCognitoUserPoolClientView } from "./sim-cognito-user-pool-client-view.js";
+/**
+ * The commands that create, describe and delete a simulated app client.
+ *
+ * Each one authorizes against the pool's ARN, because an app client has no
+ * ARN of its own.
+ */
+export class SimCognitoUserPoolClientCommands {
+    pools;
+    clientFactory;
+    authorizer;
+    view = new SimCognitoUserPoolClientView();
+    unsimulatedOptions = new SimCognitoUnsimulatedUserPoolClientOptions();
+    constructor(properties) {
+        this.pools = properties.pools;
+        this.clientFactory = properties.clientFactory;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * Create an app client in a pool.
+     */
+    create(command, options) {
+        const { input } = command;
+        const pool = this.authorizedPool("cognito-idp:CreateUserPoolClient", input.UserPoolId, options);
+        this.unsimulatedOptions.refuseIn(input);
+        const client = this.clientFactory.make({
+            pool,
+            name: input.ClientName,
+            generateSecret: input.GenerateSecret,
+            explicitAuthFlows: input.ExplicitAuthFlows,
+            tokenValidity: input,
+        });
+        pool.addClient(client);
+        return { $metadata: {}, UserPoolClient: this.view.describe(client) };
+    }
+    /**
+     * Describe an app client's settings, including its secret.
+     */
+    describe(command, options) {
+        const { input } = command;
+        const pool = this.authorizedPool("cognito-idp:DescribeUserPoolClient", input.UserPoolId, options);
+        const clientId = requireSimCognitoUserPoolClientId(input.ClientId);
+        return {
+            $metadata: {},
+            UserPoolClient: this.view.describe(pool.requireClient(clientId)),
+        };
+    }
+    /**
+     * Delete an app client from a pool.
+     */
+    delete(command, options) {
+        const { input } = command;
+        const pool = this.authorizedPool("cognito-idp:DeleteUserPoolClient", input.UserPoolId, options);
+        const clientId = requireSimCognitoUserPoolClientId(input.ClientId);
+        pool.removeClient(pool.requireClient(clientId));
+        return { $metadata: {} };
+    }
+    /**
+     * Resolve the pool an app client operation names, once the caller is
+     * allowed to reach it.
+     *
+     * Authorization comes before the lookup, as real IAM evaluates a request
+     * before the service handles it, so a caller with no permission is refused
+     * whether or not the pool is there.
+     */
+    authorizedPool(action, requestedUserPoolId, options) {
+        const userPoolId = requireSimCognitoUserPoolId(requestedUserPoolId);
+        this.authorizer.authorizeUserPool(action, userPoolId, options?.caller);
+        return this.pools.require(userPoolId);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pool-client-commands.js.map

package/dist/service/cognito/command/client/sim-cognito-user-pool-client-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pool-client-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/client/sim-cognito-user-pool-client-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iCAAiC,EAAE,MAAM,2DAA2D,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAI1F,OAAO,EAAE,0CAA0C,EAAE,MAAM,6CAA6C,CAAC;AACzG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAoBtF;;;;;GAKG;AACH,MAAM,OAAO,gCAAgC;IAC1B,KAAK,CAA0B;IAC/B,aAAa,CAAkC;IAC/C,UAAU,CAAuB;IACjC,IAAI,GAAG,IAAI,4BAA4B,EAAE,CAAC;IAC1C,kBAAkB,GACjC,IAAI,0CAA0C,EAAE,CAAC;IAEnD,YAAY,UAAsD;QAChE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAuC,EACvC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAC9B,kCAAkC,EAClC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACrC,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAC9B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnE,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;SACjE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAuC,EACvC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAC9B,kCAAkC,EAClC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEhD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACpB,MAAc,EACd,mBAAuC,EACvC,OAA6C;QAE7C,MAAM,UAAU,GAAG,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;QAEpE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;CACF"}