@kensio/yulin 0.41.0 → 0.43.0

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.d.ts

@@ -0,0 +1,31 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCreateUserPoolCommandInput } from "../../command/user-pool/user-pool.command.js";
+interface SimCfnCognitoUserPoolPropertiesProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * Reads AWS::Cognito::UserPool CloudFormation properties into the CreateUserPool
+ * input the pool creator needs.
+ *
+ * The refusal of unsimulated properties runs on construction rather than when
+ * a property is read, so a Resource asking for something unmodelled cannot get
+ * as far as creating a pool that would then be wrong.
+ */
+export declare class SimCfnCognitoUserPoolProperties {
+    private readonly resource;
+    private readonly properties;
+    private readonly propertyParser;
+    constructor(properties: SimCfnCognitoUserPoolPropertiesProperties);
+    /**
+     * The CreateUserPool input this Resource asks for.
+     *
+     * `UserPoolName` is CloudFormation's name for what the API calls `PoolName`,
+     * and it is the one property whose name differs between them.
+     */
+    createUserPoolInput(): SimCreateUserPoolCommandInput;
+    private string;
+}
+export {};
+//# sourceMappingURL=sim-cfn-cognito-user-pool-properties.d.ts.map

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-user-pool-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAoBlG,UAAU,yCAAyC;IACjD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,yCAAyC,EAKhE;IAED;;;;;OAKG;IACH,mBAAmB,IAAI,6BAA6B,CAoBnD;IAED,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.js

@@ -0,0 +1,60 @@
+import { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+import { SimCfnCognitoPolicies } from "./sim-cfn-cognito-policies.js";
+/**
+ * The AWS::Cognito::UserPool properties this simulation deploys.
+ *
+ * `MfaConfiguration` and `UserPoolTier` are here because CreateUserPool
+ * accepts each at its AWS default and refuses it otherwise, in words that say
+ * why. A CDK stack states both routinely, so refusing them outright would
+ * refuse templates that ask for nothing unsimulated.
+ */
+const simulatedProperties = [
+    "UserPoolName",
+    "Policies",
+    "DeletionProtection",
+    "MfaConfiguration",
+    "UserPoolTier",
+];
+/**
+ * Reads AWS::Cognito::UserPool CloudFormation properties into the CreateUserPool
+ * input the pool creator needs.
+ *
+ * The refusal of unsimulated properties runs on construction rather than when
+ * a property is read, so a Resource asking for something unmodelled cannot get
+ * as far as creating a pool that would then be wrong.
+ */
+export class SimCfnCognitoUserPoolProperties {
+    resource;
+    properties;
+    propertyParser = new SimCfnCognitoPropertyParser({
+        resourceType: "AWS::Cognito::UserPool",
+        simulated: simulatedProperties,
+    });
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+        this.propertyParser.requireOnlySimulated(this.resource, this.properties);
+    }
+    /**
+     * The CreateUserPool input this Resource asks for.
+     *
+     * `UserPoolName` is CloudFormation's name for what the API calls `PoolName`,
+     * and it is the one property whose name differs between them.
+     */
+    createUserPoolInput() {
+        return {
+            PoolName: this.string(this.properties["UserPoolName"], "UserPoolName"),
+            Policies: new SimCfnCognitoPolicies({
+                resource: this.resource,
+                propertyParser: this.propertyParser,
+            }).parse(this.properties["Policies"]),
+            DeletionProtection: this.string(this.properties["DeletionProtection"], "DeletionProtection"),
+            MfaConfiguration: this.string(this.properties["MfaConfiguration"], "MfaConfiguration"),
+            UserPoolTier: this.string(this.properties["UserPoolTier"], "UserPoolTier"),
+        };
+    }
+    string(value, label) {
+        return this.propertyParser.optionalString(this.resource, value, label);
+    }
+}
+//# sourceMappingURL=sim-cfn-cognito-user-pool-properties.js.map

package/dist/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-user-pool-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/user-pool/sim-cfn-cognito-user-pool-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAG;IAC1B,cAAc;IACd,UAAU;IACV,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;CACf,CAAC;AAOF;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,wBAAwB;QACtC,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAqD;QAC/D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;YACtE,QAAQ,EAAE,IAAI,qBAAqB,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACrC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAC3B,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EACnC,kBAAkB,CACnB;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;SACF,CAAC;IACJ,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/command/auth/auth.command.d.ts

@@ -0,0 +1,162 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * The tokens a successful authentication answers with.
+ *
+ * `AccessToken` and `IdToken` are real RS256 JWTs, signed by the key the pool
+ * publishes in its JWKS. `RefreshToken` is an opaque string, as it is on real
+ * Cognito, and a token refresh answers without one.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AuthenticationResultType.html
+ */
+export interface SimCognitoAuthenticationResultType {
+    readonly AccessToken?: string | undefined;
+    readonly IdToken?: string | undefined;
+    readonly RefreshToken?: string | undefined;
+    readonly ExpiresIn?: number | undefined;
+    readonly TokenType?: string | undefined;
+}
+/**
+ * The AdminInitiateAuth inputs this simulation reads, and the ones it refuses.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminInitiateAuthCommand/
+ */
+export interface SimAdminInitiateAuthCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly ClientId?: string | undefined;
+    readonly AuthFlow?: string | undefined;
+    readonly AuthParameters?: Readonly<Record<string, string>> | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+    readonly AnalyticsMetadata?: object | undefined;
+    readonly ContextData?: object | undefined;
+    readonly Session?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminInitiateAuth command.
+ */
+export interface SimAdminInitiateAuthCommand {
+    readonly input: SimAdminInitiateAuthCommandInput;
+}
+/**
+ * What starting an authentication answers with: either the tokens, or the
+ * challenge and session that stand between the user and them.
+ *
+ * `AdminInitiateAuth` and `InitiateAuth` answer the same way, as do the two
+ * challenge responses, so they share this shape.
+ */
+export interface SimCognitoAuthenticationOutput {
+    readonly ChallengeName?: string | undefined;
+    readonly Session?: string | undefined;
+    readonly ChallengeParameters?: Readonly<Record<string, string>> | undefined;
+    readonly AuthenticationResult?: SimCognitoAuthenticationResultType | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+export type SimAdminInitiateAuthCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The AdminRespondToAuthChallenge inputs this simulation reads, and the ones
+ * it refuses.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminRespondToAuthChallengeCommand/
+ */
+export interface SimAdminRespondToAuthChallengeCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly ClientId?: string | undefined;
+    readonly ChallengeName?: string | undefined;
+    readonly ChallengeResponses?: Readonly<Record<string, string>> | undefined;
+    readonly Session?: string | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+    readonly AnalyticsMetadata?: object | undefined;
+    readonly ContextData?: object | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminRespondToAuthChallenge command.
+ */
+export interface SimAdminRespondToAuthChallengeCommand {
+    readonly input: SimAdminRespondToAuthChallengeCommandInput;
+}
+export type SimAdminRespondToAuthChallengeCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The InitiateAuth inputs this simulation reads, and the ones it refuses.
+ *
+ * There is no `UserPoolId`: an app client id is enough to find the pool, as it
+ * is on real Cognito. `UserContextData` is the client-side counterpart of the
+ * admin operations' `ContextData`.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/InitiateAuthCommand/
+ */
+export interface SimInitiateAuthCommandInput {
+    readonly ClientId?: string | undefined;
+    readonly AuthFlow?: string | undefined;
+    readonly AuthParameters?: Readonly<Record<string, string>> | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+    readonly AnalyticsMetadata?: object | undefined;
+    readonly UserContextData?: object | undefined;
+    readonly Session?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito InitiateAuth command.
+ */
+export interface SimInitiateAuthCommand {
+    readonly input: SimInitiateAuthCommandInput;
+}
+export type SimInitiateAuthCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The RespondToAuthChallenge inputs this simulation reads, and the ones it
+ * refuses.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/RespondToAuthChallengeCommand/
+ */
+export interface SimRespondToAuthChallengeCommandInput {
+    readonly ClientId?: string | undefined;
+    readonly ChallengeName?: string | undefined;
+    readonly ChallengeResponses?: Readonly<Record<string, string>> | undefined;
+    readonly Session?: string | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+    readonly AnalyticsMetadata?: object | undefined;
+    readonly UserContextData?: object | undefined;
+}
+/**
+ * Minimal structural sim Cognito RespondToAuthChallenge command.
+ */
+export interface SimRespondToAuthChallengeCommand {
+    readonly input: SimRespondToAuthChallengeCommandInput;
+}
+export type SimRespondToAuthChallengeCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The GlobalSignOut inputs this simulation reads.
+ *
+ * The access token is what says which user and which pool the request is for,
+ * so it is the only input there is.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GlobalSignOutCommand/
+ */
+export interface SimGlobalSignOutCommandInput {
+    readonly AccessToken?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito GlobalSignOut command.
+ */
+export interface SimGlobalSignOutCommand {
+    readonly input: SimGlobalSignOutCommandInput;
+}
+export interface SimGlobalSignOutCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * The AdminUserGlobalSignOut inputs this simulation reads.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/AdminUserGlobalSignOutCommand/
+ */
+export interface SimAdminUserGlobalSignOutCommandInput {
+    readonly UserPoolId?: string | undefined;
+    readonly Username?: string | undefined;
+}
+/**
+ * Minimal structural sim Cognito AdminUserGlobalSignOut command.
+ */
+export interface SimAdminUserGlobalSignOutCommand {
+    readonly input: SimAdminUserGlobalSignOutCommandInput;
+}
+export interface SimAdminUserGlobalSignOutCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=auth.command.d.ts.map

package/dist/service/cognito/command/auth/auth.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC5B,kCAAkC,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/auth/auth.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.command.js.map

package/dist/service/cognito/command/auth/auth.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.command.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":""}

package/dist/service/cognito/command/auth/sim-cognito-admin-initiate-auth.d.ts

@@ -0,0 +1,32 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoAuthFlowRunner } from "./sim-cognito-auth-flow-runner.js";
+import type { SimAdminInitiateAuthCommand, SimAdminInitiateAuthCommandOutput } from "./auth.command.js";
+interface SimCognitoAdminInitiateAuthProperties {
+    readonly authResolver: SimCognitoAuthResolver;
+    readonly flowRunner: SimCognitoAuthFlowRunner;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The AdminInitiateAuth command.
+ *
+ * This is the server-side entry point, so the caller needs the
+ * `cognito-idp:AdminInitiateAuth` permission on the pool. It runs
+ * `ADMIN_USER_PASSWORD_AUTH` and `REFRESH_TOKEN_AUTH`. A user that gets past
+ * its password either receives tokens or, if it still has to replace that
+ * password, the `NEW_PASSWORD_REQUIRED` challenge and a session.
+ */
+export declare class SimCognitoAdminInitiateAuth {
+    private readonly authResolver;
+    private readonly flowRunner;
+    private readonly unsimulatedOptions;
+    constructor(properties: SimCognitoAdminInitiateAuthProperties);
+    /**
+     * Start an authentication.
+     */
+    handle(command: SimAdminInitiateAuthCommand, options?: SimCognitoCommandOptions): SimAdminInitiateAuthCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-admin-initiate-auth.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-admin-initiate-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-initiate-auth.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-admin-initiate-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,KAAK,EACV,2BAA2B,EAC3B,iCAAiC,EAClC,MAAM,mBAAmB,CAAC;AAE3B,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2B;IACtD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,2BAA2B,EACpC,OAAO,CAAC,EAAE,wBAAwB,GACjC,iCAAiC,CAsBnC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-admin-initiate-auth.js

@@ -0,0 +1,37 @@
+import { SimCognitoAuthParameters } from "./sim-cognito-auth-parameters.js";
+import { adminAuthFlows } from "./sim-cognito-auth-flows.js";
+import { SimCognitoUnsimulatedAuthOptions } from "./sim-cognito-unsimulated-auth-options.js";
+/**
+ * The AdminInitiateAuth command.
+ *
+ * This is the server-side entry point, so the caller needs the
+ * `cognito-idp:AdminInitiateAuth` permission on the pool. It runs
+ * `ADMIN_USER_PASSWORD_AUTH` and `REFRESH_TOKEN_AUTH`. A user that gets past
+ * its password either receives tokens or, if it still has to replace that
+ * password, the `NEW_PASSWORD_REQUIRED` challenge and a session.
+ */
+export class SimCognitoAdminInitiateAuth {
+    authResolver;
+    flowRunner;
+    unsimulatedOptions = new SimCognitoUnsimulatedAuthOptions();
+    constructor(properties) {
+        this.authResolver = properties.authResolver;
+        this.flowRunner = properties.flowRunner;
+    }
+    /**
+     * Start an authentication.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const { pool, client } = this.authResolver.poolClient("cognito-idp:AdminInitiateAuth", input, options);
+        this.unsimulatedOptions.refuseInAdminInitiate(input);
+        const flow = adminAuthFlows.require(input.AuthFlow);
+        flow.requireEnabledFor(client);
+        return this.flowRunner.run(flow, {
+            pool,
+            client,
+            parameters: new SimCognitoAuthParameters("AuthParameters", input.AuthParameters),
+        });
+    }
+}
+//# sourceMappingURL=sim-cognito-admin-initiate-auth.js.map

package/dist/service/cognito/command/auth/sim-cognito-admin-initiate-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-initiate-auth.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-admin-initiate-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAe7F;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAyB;IACrC,UAAU,CAA2B;IACrC,kBAAkB,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAE7E,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAoC,EACpC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACnD,+BAA+B,EAC/B,KAAK,EACL,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE;YAC/B,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,IAAI,wBAAwB,CACtC,gBAAgB,EAChB,KAAK,CAAC,cAAc,CACrB;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.d.ts

@@ -0,0 +1,29 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
+import type { SimAdminRespondToAuthChallengeCommand, SimAdminRespondToAuthChallengeCommandOutput } from "./auth.command.js";
+interface SimCognitoAdminRespondToChallengeProperties {
+    readonly authResolver: SimCognitoAuthResolver;
+    readonly newPassword: SimCognitoNewPasswordResponse;
+}
+interface SimCognitoCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The AdminRespondToAuthChallenge command.
+ *
+ * Only `NEW_PASSWORD_REQUIRED` is answered, and the caller needs the
+ * `cognito-idp:AdminRespondToAuthChallenge` permission on the pool.
+ */
+export declare class SimCognitoAdminRespondToChallenge {
+    private readonly authResolver;
+    private readonly newPassword;
+    private readonly unsimulatedOptions;
+    constructor(properties: SimCognitoAdminRespondToChallengeProperties);
+    /**
+     * Answer a challenge.
+     */
+    handle(command: SimAdminRespondToAuthChallengeCommand, options?: SimCognitoCommandOptions): SimAdminRespondToAuthChallengeCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-admin-respond-to-challenge.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-respond-to-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,KAAK,EACV,qCAAqC,EACrC,2CAA2C,EAC5C,MAAM,mBAAmB,CAAC;AAE3B,UAAU,2CAA2C;IACnD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;CACrD;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;GAKG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,qCAAqC,EAC9C,OAAO,CAAC,EAAE,wBAAwB,GACjC,2CAA2C,CAoB7C;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.js

@@ -0,0 +1,34 @@
+import { SimCognitoAuthParameters } from "./sim-cognito-auth-parameters.js";
+import { requireSimCognitoNewPasswordChallenge } from "./sim-cognito-auth-challenge.js";
+import { SimCognitoUnsimulatedAuthOptions } from "./sim-cognito-unsimulated-auth-options.js";
+/**
+ * The AdminRespondToAuthChallenge command.
+ *
+ * Only `NEW_PASSWORD_REQUIRED` is answered, and the caller needs the
+ * `cognito-idp:AdminRespondToAuthChallenge` permission on the pool.
+ */
+export class SimCognitoAdminRespondToChallenge {
+    authResolver;
+    newPassword;
+    unsimulatedOptions = new SimCognitoUnsimulatedAuthOptions();
+    constructor(properties) {
+        this.authResolver = properties.authResolver;
+        this.newPassword = properties.newPassword;
+    }
+    /**
+     * Answer a challenge.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const { pool, client } = this.authResolver.poolClient("cognito-idp:AdminRespondToAuthChallenge", input, options);
+        this.unsimulatedOptions.refuseInAdminResponse(input);
+        requireSimCognitoNewPasswordChallenge(input.ChallengeName);
+        return this.newPassword.handle({
+            pool,
+            client,
+            parameters: new SimCognitoAuthParameters("ChallengeResponses", input.ChallengeResponses),
+            session: input.Session,
+        });
+    }
+}
+//# sourceMappingURL=sim-cognito-admin-respond-to-challenge.js.map

package/dist/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-admin-respond-to-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-admin-respond-to-challenge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,iCAAiC,CAAC;AAExF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAe7F;;;;;GAKG;AACH,MAAM,OAAO,iCAAiC;IAC3B,YAAY,CAAyB;IACrC,WAAW,CAAgC;IAC3C,kBAAkB,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAE7E,YAAY,UAAuD;QACjE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAA8C,EAC9C,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACnD,yCAAyC,EACzC,KAAK,EACL,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACrD,qCAAqC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE3D,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAC7B,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,IAAI,wBAAwB,CACtC,oBAAoB,EACpB,KAAK,CAAC,kBAAkB,CACzB;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The challenge this simulation can answer.
+ */
+export declare const newPasswordRequiredChallenge = "NEW_PASSWORD_REQUIRED";
+/**
+ * Refuse a challenge this simulation cannot answer.
+ *
+ * MFA and custom authentication challenges are refused rather than answered as
+ * this one, because what a caller has to send back is different for each.
+ */
+export declare function requireSimCognitoNewPasswordChallenge(challengeName: string | undefined): void;
+//# sourceMappingURL=sim-cognito-auth-challenge.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auth-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAEpE;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACnD,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,IAAI,CAUN"}

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.js

@@ -0,0 +1,20 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+/**
+ * The challenge this simulation can answer.
+ */
+export const newPasswordRequiredChallenge = "NEW_PASSWORD_REQUIRED";
+/**
+ * Refuse a challenge this simulation cannot answer.
+ *
+ * MFA and custom authentication challenges are refused rather than answered as
+ * this one, because what a caller has to send back is different for each.
+ */
+export function requireSimCognitoNewPasswordChallenge(challengeName) {
+    if (challengeName === newPasswordRequiredChallenge) {
+        return;
+    }
+    throw new SimCognitoInvalidParameterException(`ChallengeName '${String(challengeName)}' is not simulated: ` +
+        `${newPasswordRequiredChallenge} is the only challenge this ` +
+        `simulation issues.`);
+}
+//# sourceMappingURL=sim-cognito-auth-challenge.js.map

package/dist/service/cognito/command/auth/sim-cognito-auth-challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auth-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,aAAiC;IAEjC,IAAI,aAAa,KAAK,4BAA4B,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,MAAM,CAAC,aAAa,CAAC,sBAAsB;QAC3D,GAAG,4BAA4B,8BAA8B;QAC7D,oBAAoB,CACvB,CAAC;AACJ,CAAC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts

@@ -0,0 +1,31 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoUserPoolStore } from "../../user-pool/sim-cognito-user-pool-store.js";
+import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
+import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
+import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
+import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
+import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
+import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
+interface SimCognitoAuthCommandsProperties {
+    readonly resolver: SimCognitoRequestResolver;
+    readonly pools: SimCognitoUserPoolStore;
+    readonly clock: SimClock;
+}
+/**
+ * The authentication command handlers of one simulated Cognito scope.
+ *
+ * The four sign-in commands share a resolver, a token issuer and the bodies of
+ * the flows they run, and the sign-out commands share the pool store with
+ * them, so they are built together here rather than among the pool and
+ * directory commands.
+ */
+export declare class SimCognitoAuthCommands {
+    readonly adminInitiateAuth: SimCognitoAdminInitiateAuth;
+    readonly adminRespondToChallenge: SimCognitoAdminRespondToChallenge;
+    readonly initiateAuth: SimCognitoInitiateAuth;
+    readonly respondToChallenge: SimCognitoRespondToChallenge;
+    readonly signOut: SimCognitoSignOutCommands;
+    constructor(properties: SimCognitoAuthCommandsProperties);
+}
+export {};
+//# sourceMappingURL=sim-cognito-auth-commands.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAE9F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAGhG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAKxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EAmCvD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js

@@ -0,0 +1,63 @@
+import { SimCognitoTokenIssuer } from "../../user-pool/token/sim-cognito-token-issuer.js";
+import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
+import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
+import { SimCognitoAuthFlowRunner } from "./sim-cognito-auth-flow-runner.js";
+import { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
+import { SimCognitoNewPasswordChallenge } from "./sim-cognito-new-password-challenge.js";
+import { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
+import { SimCognitoPasswordSignIn } from "./sim-cognito-password-sign-in.js";
+import { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
+import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
+/**
+ * The authentication command handlers of one simulated Cognito scope.
+ *
+ * The four sign-in commands share a resolver, a token issuer and the bodies of
+ * the flows they run, and the sign-out commands share the pool store with
+ * them, so they are built together here rather than among the pool and
+ * directory commands.
+ */
+export class SimCognitoAuthCommands {
+    adminInitiateAuth;
+    adminRespondToChallenge;
+    initiateAuth;
+    respondToChallenge;
+    signOut;
+    constructor(properties) {
+        const { resolver, pools, clock } = properties;
+        const authResolver = new SimCognitoAuthResolver({ resolver, pools });
+        const tokenIssuer = new SimCognitoTokenIssuer({ clock });
+        const flowRunner = new SimCognitoAuthFlowRunner({
+            passwordSignIn: new SimCognitoPasswordSignIn({
+                authResolver,
+                tokenIssuer,
+                challenge: new SimCognitoNewPasswordChallenge({ clock }),
+            }),
+            refreshSignIn: new SimCognitoRefreshSignIn({ tokenIssuer, clock }),
+        });
+        const newPassword = new SimCognitoNewPasswordResponse({
+            authResolver,
+            tokenIssuer,
+            clock,
+        });
+        this.adminInitiateAuth = new SimCognitoAdminInitiateAuth({
+            authResolver,
+            flowRunner,
+        });
+        this.adminRespondToChallenge = new SimCognitoAdminRespondToChallenge({
+            authResolver,
+            newPassword,
+        });
+        this.initiateAuth = new SimCognitoInitiateAuth({
+            authResolver,
+            flowRunner,
+        });
+        this.respondToChallenge = new SimCognitoRespondToChallenge({
+            authResolver,
+            newPassword,
+        });
+        this.signOut = new SimCognitoSignOutCommands({ resolver, pools, clock });
+    }
+}
+//# sourceMappingURL=sim-cognito-auth-commands.js.map

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAE1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAQtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,WAAW;gBACX,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;aACzD,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC;YACpD,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.d.ts

@@ -0,0 +1,26 @@
+import type { SimCognitoAuthFlow } from "./sim-cognito-auth-flow.js";
+import type { SimCognitoPasswordSignIn, SimCognitoAuthRequest } from "./sim-cognito-password-sign-in.js";
+import type { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import type { SimCognitoAuthenticationOutput } from "./auth.command.js";
+interface SimCognitoAuthFlowRunnerProperties {
+    readonly passwordSignIn: SimCognitoPasswordSignIn;
+    readonly refreshSignIn: SimCognitoRefreshSignIn;
+}
+/**
+ * Runs whichever flow a request resolved to.
+ *
+ * `AdminInitiateAuth` and `InitiateAuth` accept different flow names and reach
+ * the pool differently, and once a flow is resolved they run the same bodies,
+ * so the running of one lives here rather than in either command.
+ */
+export declare class SimCognitoAuthFlowRunner {
+    private readonly passwordSignIn;
+    private readonly refreshSignIn;
+    constructor(properties: SimCognitoAuthFlowRunnerProperties);
+    /**
+     * Run a flow the app client is configured for.
+     */
+    run(flow: SimCognitoAuthFlow, request: SimCognitoAuthRequest): SimCognitoAuthenticationOutput;
+}
+export {};
+//# sourceMappingURL=sim-cognito-auth-flow-runner.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-auth-flow-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-auth-flow-runner.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-flow-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CACjD;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IAExD,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;OAEG;IACH,GAAG,CACD,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,qBAAqB,GAC7B,8BAA8B,CAMhC;CACF"}