@kensio/yulin 0.42.0 → 0.44.0

package/dist/service/cognito/sdk/sim-cognito-sdk-directory-routes.d.ts

@@ -0,0 +1,7 @@
+import { type SimSdkCommandRoute } from "../../../sdk/index.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+/**
+ * The SDK Command routes for the users and groups in a pool.
+ */
+export declare function simCognitoSdkDirectoryRoutes(simCognito: SimCognitoIdentityProvider): readonly (readonly [string, SimSdkCommandRoute])[];
+//# sourceMappingURL=sim-cognito-sdk-directory-routes.d.ts.map

package/dist/service/cognito/sdk/sim-cognito-sdk-directory-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-directory-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-directory-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAwB/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CA2IpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-directory-routes.js

@@ -0,0 +1,77 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * The SDK Command routes for the users and groups in a pool.
+ */
+export function simCognitoSdkDirectoryRoutes(simCognito) {
+    return [
+        [
+            "AdminCreateUserCommand",
+            async (command, context) => await simCognito.adminCreateUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminGetUserCommand",
+            async (command, context) => await simCognito.adminGetUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminDeleteUserCommand",
+            async (command, context) => await simCognito.adminDeleteUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminSetUserPasswordCommand",
+            async (command, context) => await simCognito.adminSetUserPassword(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminUpdateUserAttributesCommand",
+            async (command, context) => await simCognito.adminUpdateUserAttributes(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminDisableUserCommand",
+            async (command, context) => await simCognito.adminDisableUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminEnableUserCommand",
+            async (command, context) => await simCognito.adminEnableUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListUsersCommand",
+            async (command, context) => await simCognito.listUsers(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "CreateGroupCommand",
+            async (command, context) => await simCognito.createGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "GetGroupCommand",
+            async (command, context) => await simCognito.getGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "UpdateGroupCommand",
+            async (command, context) => await simCognito.updateGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DeleteGroupCommand",
+            async (command, context) => await simCognito.deleteGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListGroupsCommand",
+            async (command, context) => await simCognito.listGroups(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminAddUserToGroupCommand",
+            async (command, context) => await simCognito.adminAddUserToGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminRemoveUserFromGroupCommand",
+            async (command, context) => await simCognito.adminRemoveUserFromGroup(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "AdminListGroupsForUserCommand",
+            async (command, context) => await simCognito.adminListGroupsForUser(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListUsersInGroupCommand",
+            async (command, context) => await simCognito.listUsersInGroup(command, simSdkCallerOptions(context)),
+        ],
+    ];
+}
+//# sourceMappingURL=sim-cognito-sdk-directory-routes.js.map

package/dist/service/cognito/sdk/sim-cognito-sdk-directory-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-directory-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-directory-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AA0B/B;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAsC;IAEtC,OAAO;QACL;YACE,wBAAwB;YACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,qBAAqB;YACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,YAAY,CAC3B,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,wBAAwB;YACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,6BAA6B;YAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,kCAAkC;YAClC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,yBAAyB,CACxC,OAA8C,EAC9C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,yBAAyB;YACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,wBAAwB;YACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,kBAAkB;YAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,SAAS,CACxB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oBAAoB;YACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,WAAW,CAC1B,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,iBAAiB;YACjB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,QAAQ,CACvB,OAA6B,EAC7B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oBAAoB;YACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,WAAW,CAC1B,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oBAAoB;YACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,WAAW,CAC1B,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,mBAAmB;YACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,UAAU,CACzB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,4BAA4B;YAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,mBAAmB,CAClC,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,iCAAiC;YACjC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,wBAAwB,CACvC,OAA6C,EAC7C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,yBAAyB;YACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/sdk/sim-cognito-sdk-pool-routes.d.ts

@@ -0,0 +1,7 @@
+import { type SimSdkCommandRoute } from "../../../sdk/index.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+/**
+ * The SDK Command routes for pools and their app clients.
+ */
+export declare function simCognitoSdkPoolRoutes(simCognito: SimCognitoIdentityProvider): readonly (readonly [string, SimSdkCommandRoute])[];
+//# sourceMappingURL=sim-cognito-sdk-pool-routes.d.ts.map

package/dist/service/cognito/sdk/sim-cognito-sdk-pool-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-pool-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-pool-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAa/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAmEpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-pool-routes.js

@@ -0,0 +1,41 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * The SDK Command routes for pools and their app clients.
+ */
+export function simCognitoSdkPoolRoutes(simCognito) {
+    return [
+        [
+            "CreateUserPoolCommand",
+            async (command, context) => await simCognito.createUserPool(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DescribeUserPoolCommand",
+            async (command, context) => await simCognito.describeUserPool(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DeleteUserPoolCommand",
+            async (command, context) => await simCognito.deleteUserPool(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListUserPoolsCommand",
+            async (command, context) => await simCognito.listUserPools(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "CreateUserPoolClientCommand",
+            async (command, context) => await simCognito.createUserPoolClient(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DescribeUserPoolClientCommand",
+            async (command, context) => await simCognito.describeUserPoolClient(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DeleteUserPoolClientCommand",
+            async (command, context) => await simCognito.deleteUserPoolClient(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListUserPoolClientsCommand",
+            async (command, context) => await simCognito.listUserPoolClients(command, simSdkCallerOptions(context)),
+        ],
+    ];
+}
+//# sourceMappingURL=sim-cognito-sdk-pool-routes.js.map

package/dist/service/cognito/sdk/sim-cognito-sdk-pool-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-pool-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-pool-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAe/B;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAsC;IAEtC,OAAO;QACL;YACE,uBAAuB;YACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,cAAc,CAC7B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,yBAAyB;YACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,gBAAgB,CAC/B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,uBAAuB;YACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,cAAc,CAC7B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,sBAAsB;YACtB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,aAAa,CAC5B,OAAkC,EAClC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,6BAA6B;YAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,6BAA6B;YAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,4BAA4B;YAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,mBAAmB,CAClC,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/serve/sim-cognito-controller.d.ts

@@ -0,0 +1,40 @@
+import type { SimAwsServiceController, SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
+import { SimAws } from "../../aws/sim-aws.js";
+interface SimCognitoServiceControllerProperties {
+    readonly simAws?: SimAws;
+}
+/**
+ * Localhost HTTP controller for the public endpoints of a simulated user pool.
+ *
+ * Real Cognito serves a pool's JWKS and its OpenID configuration to anyone,
+ * with no SigV4 signature, because a token verifier holding no AWS credentials
+ * has to be able to fetch them. Both are anonymous here for the same reason,
+ * so a verifier pointed at the local URL fetches keys the way it does against
+ * real Cognito rather than being handed them.
+ *
+ * The Cognito API itself is not served. An SDK client reaches the simulator
+ * through `SimSdk` rather than through an endpoint override.
+ */
+export declare class SimCognitoServiceController implements SimAwsServiceController {
+    private readonly simAws;
+    private readonly openIdConfiguration;
+    private readonly response;
+    constructor(properties?: SimCognitoServiceControllerProperties);
+    /**
+     * Handle an HTTP request routed to a simulated Cognito regional endpoint.
+     */
+    handleRequest(serviceRequest: SimAwsServiceRequest): Promise<Response>;
+    private respond;
+    /**
+     * Find the pool a request names, if this endpoint serves it.
+     *
+     * A pool id is unique across the simulation and says nothing about the
+     * Account that owns the pool, so the lookup spans Accounts. It does name the
+     * pool's region, and real Cognito serves a pool only on that region's
+     * endpoint, so a pool reached through another region's hostname is not
+     * found here either.
+     */
+    private servedPool;
+}
+export {};
+//# sourceMappingURL=sim-cognito-controller.d.ts.map

package/dist/service/cognito/serve/sim-cognito-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAe9C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA4B,YAAW,uBAAuB;IACzE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAuC;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,UAAU,GAAE,qCAA0C,EAGjE;IAED;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAErE;IAED,OAAO,CAAC,OAAO;IA4Cf;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU;CAoBnB"}

package/dist/service/cognito/serve/sim-cognito-controller.js

@@ -0,0 +1,91 @@
+import { SimAws } from "../../aws/sim-aws.js";
+import { SimCognitoEndpointResponse } from "./sim-cognito-endpoint-response.js";
+import { SimCognitoOpenIdConfiguration } from "./sim-cognito-openid-configuration.js";
+/**
+ * The path segment both public pool endpoints sit under.
+ */
+const wellKnownSegment = ".well-known";
+/**
+ * The methods a published document is read with.
+ */
+const readMethods = new Set(["GET", "HEAD"]);
+/**
+ * Localhost HTTP controller for the public endpoints of a simulated user pool.
+ *
+ * Real Cognito serves a pool's JWKS and its OpenID configuration to anyone,
+ * with no SigV4 signature, because a token verifier holding no AWS credentials
+ * has to be able to fetch them. Both are anonymous here for the same reason,
+ * so a verifier pointed at the local URL fetches keys the way it does against
+ * real Cognito rather than being handed them.
+ *
+ * The Cognito API itself is not served. An SDK client reaches the simulator
+ * through `SimSdk` rather than through an endpoint override.
+ */
+export class SimCognitoServiceController {
+    simAws;
+    openIdConfiguration = new SimCognitoOpenIdConfiguration();
+    response = new SimCognitoEndpointResponse();
+    constructor(properties = {}) {
+        const { simAws = new SimAws() } = properties;
+        this.simAws = simAws;
+    }
+    /**
+     * Handle an HTTP request routed to a simulated Cognito regional endpoint.
+     */
+    handleRequest(serviceRequest) {
+        return Promise.resolve(this.respond(serviceRequest));
+    }
+    respond(serviceRequest) {
+        const { request } = serviceRequest;
+        const url = new URL(request.url);
+        if (!readMethods.has(request.method)) {
+            return this.response.notRead(request.method);
+        }
+        // A path is exactly '<userPoolId>/.well-known/<document>'. Anything
+        // longer is a path real Cognito has nothing at, rather than a prefix of
+        // one it serves.
+        const [userPoolId, wellKnown, document, ...rest] = url.pathname
+            .slice(1)
+            .split("/");
+        if (userPoolId === undefined ||
+            userPoolId.length === 0 ||
+            wellKnown !== wellKnownSegment ||
+            rest.length > 0) {
+            return this.response.noSuchEndpoint(url.pathname);
+        }
+        const pool = this.servedPool(userPoolId, serviceRequest.target);
+        if (pool === undefined) {
+            return this.response.noSuchUserPool(userPoolId);
+        }
+        if (document === "jwks.json") {
+            return this.response.document(pool.jwks(), request.method);
+        }
+        if (document === "openid-configuration") {
+            return this.response.document(this.openIdConfiguration.document(pool, url.origin), request.method);
+        }
+        return this.response.noSuchEndpoint(url.pathname);
+    }
+    /**
+     * Find the pool a request names, if this endpoint serves it.
+     *
+     * A pool id is unique across the simulation and says nothing about the
+     * Account that owns the pool, so the lookup spans Accounts. It does name the
+     * pool's region, and real Cognito serves a pool only on that region's
+     * endpoint, so a pool reached through another region's hostname is not
+     * found here either.
+     */
+    servedPool(userPoolId, target) {
+        const pool = this.simAws
+            .cognitoIdentityProvider()
+            .findUserPoolInAnyAccount(userPoolId);
+        if (pool === undefined) {
+            return undefined;
+        }
+        const [poolRegionName] = pool.id.split("_", 1);
+        if (poolRegionName !== target.regionName) {
+            return undefined;
+        }
+        return pool;
+    }
+}
+//# sourceMappingURL=sim-cognito-controller.js.map

package/dist/service/cognito/serve/sim-cognito-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-controller.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAEtF;;GAEG;AACH,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;GAEG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAM7C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAS;IACf,mBAAmB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAC1D,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE7D,YAAY,UAAU,GAA0C,EAAE;QAChE,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAoC;QAChD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACvD,CAAC;IAEO,OAAO,CAAC,cAAoC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,oEAAoE;QACpE,wEAAwE;QACxE,iBAAiB;QACjB,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ;aAC5D,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC,CAAC;QAEd,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,MAAM,KAAK,CAAC;YACvB,SAAS,KAAK,gBAAgB;YAC9B,IAAI,CAAC,MAAM,GAAG,CAAC,EACf,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACnD,OAAO,CAAC,MAAM,CACf,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACK,UAAU,CAChB,UAAkB,EAClB,MAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,uBAAuB,EAAE;aACzB,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE/C,IAAI,cAAc,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-endpoint-response.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The responses a simulated user pool's public endpoints answer with.
+ *
+ * Both endpoints serve JSON, so a refusal is JSON too, carrying the `message`
+ * a Cognito error carries.
+ */
+export declare class SimCognitoEndpointResponse {
+    /**
+     * Serve a document the pool publishes.
+     *
+     * A HEAD asks for the headers a GET would answer with and no body, so the
+     * document is measured rather than sent.
+     */
+    document(body: object, method: string): Response;
+    /**
+     * Refuse a pool id this endpoint has no pool for.
+     */
+    noSuchUserPool(userPoolId: string): Response;
+    /**
+     * Refuse a method that does not read a published document.
+     *
+     * Both endpoints publish a document, so `GET` and `HEAD` are all they
+     * answer. The Cognito API is reached through `SimSdk` rather than by posting
+     * to this hostname, so a `POST` here is not the API either.
+     */
+    notRead(method: string): Response;
+    /**
+     * Refuse a path that is neither of the two public endpoints.
+     */
+    noSuchEndpoint(pathname: string): Response;
+}
+//# sourceMappingURL=sim-cognito-endpoint-response.d.ts.map

package/dist/service/cognito/serve/sim-cognito-endpoint-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-endpoint-response.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-endpoint-response.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAY/C;IAED;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAK3C;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAShC;IAED;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAKzC;CACF"}

package/dist/service/cognito/serve/sim-cognito-endpoint-response.js

@@ -0,0 +1,51 @@
+/**
+ * The responses a simulated user pool's public endpoints answer with.
+ *
+ * Both endpoints serve JSON, so a refusal is JSON too, carrying the `message`
+ * a Cognito error carries.
+ */
+export class SimCognitoEndpointResponse {
+    /**
+     * Serve a document the pool publishes.
+     *
+     * A HEAD asks for the headers a GET would answer with and no body, so the
+     * document is measured rather than sent.
+     */
+    document(body, method) {
+        const json = JSON.stringify(body);
+        const headers = {
+            "content-type": "application/json",
+            "content-length": String(Buffer.byteLength(json)),
+        };
+        if (method === "HEAD") {
+            return new Response(undefined, { status: 200, headers });
+        }
+        return new Response(json, { status: 200, headers });
+    }
+    /**
+     * Refuse a pool id this endpoint has no pool for.
+     */
+    noSuchUserPool(userPoolId) {
+        return Response.json({ message: `User pool ${userPoolId} does not exist.` }, { status: 404 });
+    }
+    /**
+     * Refuse a method that does not read a published document.
+     *
+     * Both endpoints publish a document, so `GET` and `HEAD` are all they
+     * answer. The Cognito API is reached through `SimSdk` rather than by posting
+     * to this hostname, so a `POST` here is not the API either.
+     */
+    notRead(method) {
+        return Response.json({
+            message: `Simulated Cognito answers ${method} at no user pool endpoint. ` +
+                `The JWKS and the OpenID configuration are read with GET.`,
+        }, { status: 405, headers: { allow: "GET, HEAD" } });
+    }
+    /**
+     * Refuse a path that is neither of the two public endpoints.
+     */
+    noSuchEndpoint(pathname) {
+        return Response.json({ message: `No simulated Cognito endpoint at ${pathname}` }, { status: 404 });
+    }
+}
+//# sourceMappingURL=sim-cognito-endpoint-response.js.map

package/dist/service/cognito/serve/sim-cognito-endpoint-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-endpoint-response.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-endpoint-response.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,IAAY,EAAE,MAAc;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG;YACd,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SAClD,CAAC;QAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,UAAkB;QAC/B,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,aAAa,UAAU,kBAAkB,EAAE,EACtD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,QAAQ,CAAC,IAAI,CAClB;YACE,OAAO,EACL,6BAA6B,MAAM,6BAA6B;gBAChE,0DAA0D;SAC7D,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB;QAC7B,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,oCAAoC,QAAQ,EAAE,EAAE,EAC3D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-openid-configuration.d.ts

@@ -0,0 +1,36 @@
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+/**
+ * The OpenID Connect discovery metadata of a user pool, in the shape the real
+ * `.../.well-known/openid-configuration` endpoint serves.
+ */
+export interface SimCognitoOpenIdConfigurationDocument {
+    readonly issuer: string;
+    readonly jwks_uri: string;
+    readonly id_token_signing_alg_values_supported: readonly string[];
+    readonly response_types_supported: readonly string[];
+    readonly scopes_supported: readonly string[];
+    readonly subject_types_supported: readonly string[];
+    readonly token_endpoint_auth_methods_supported: readonly string[];
+}
+/**
+ * Builds the discovery document a simulated user pool publishes.
+ *
+ * The issuer and the JWKS URI name the origin the request arrived on rather
+ * than the real AWS one. A client that discovers a document has to be able to
+ * fetch the keys it points at, and pointing at `cognito-idp.<region>.amazonaws.com`
+ * would send it to real AWS. The tokens themselves still carry the real issuer
+ * in `iss`, which is what a verifier builds from a pool id and checks against,
+ * so the two disagree here and agree on real Cognito.
+ *
+ * No `authorization_endpoint`, `token_endpoint` or `userinfo_endpoint` is
+ * published, because the hosted UI and the OAuth endpoints are not simulated.
+ * A client discovering nothing there fails rather than calling an endpoint
+ * that would not answer.
+ */
+export declare class SimCognitoOpenIdConfiguration {
+    /**
+     * The discovery document for a pool, as served from an origin.
+     */
+    document(pool: SimCognitoUserPool, origin: string): SimCognitoOpenIdConfigurationDocument;
+}
+//# sourceMappingURL=sim-cognito-openid-configuration.d.ts.map

package/dist/service/cognito/serve/sim-cognito-openid-configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-openid-configuration.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-openid-configuration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF;;;GAGG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,qCAAqC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClE,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,qCAAqC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,QAAQ,CACN,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,GACb,qCAAqC,CAevC;CACF"}

package/dist/service/cognito/serve/sim-cognito-openid-configuration.js

@@ -0,0 +1,36 @@
+/**
+ * Builds the discovery document a simulated user pool publishes.
+ *
+ * The issuer and the JWKS URI name the origin the request arrived on rather
+ * than the real AWS one. A client that discovers a document has to be able to
+ * fetch the keys it points at, and pointing at `cognito-idp.<region>.amazonaws.com`
+ * would send it to real AWS. The tokens themselves still carry the real issuer
+ * in `iss`, which is what a verifier builds from a pool id and checks against,
+ * so the two disagree here and agree on real Cognito.
+ *
+ * No `authorization_endpoint`, `token_endpoint` or `userinfo_endpoint` is
+ * published, because the hosted UI and the OAuth endpoints are not simulated.
+ * A client discovering nothing there fails rather than calling an endpoint
+ * that would not answer.
+ */
+export class SimCognitoOpenIdConfiguration {
+    /**
+     * The discovery document for a pool, as served from an origin.
+     */
+    document(pool, origin) {
+        const issuer = `${origin}/${pool.id}`;
+        return {
+            issuer,
+            jwks_uri: `${issuer}/.well-known/jwks.json`,
+            id_token_signing_alg_values_supported: ["RS256"],
+            response_types_supported: ["code", "token"],
+            scopes_supported: ["openid", "email", "phone", "profile"],
+            subject_types_supported: ["public"],
+            token_endpoint_auth_methods_supported: [
+                "client_secret_basic",
+                "client_secret_post",
+            ],
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-openid-configuration.js.map

package/dist/service/cognito/serve/sim-cognito-openid-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-openid-configuration.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-openid-configuration.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,QAAQ,CACN,IAAwB,EACxB,MAAc;QAEd,MAAM,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QAEtC,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,GAAG,MAAM,wBAAwB;YAC3C,qCAAqC,EAAE,CAAC,OAAO,CAAC;YAChD,wBAAwB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3C,gBAAgB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;YACzD,uBAAuB,EAAE,CAAC,QAAQ,CAAC;YACnC,qCAAqC,EAAE;gBACrC,qBAAqB;gBACrB,oBAAoB;aACrB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-authentication.d.ts

@@ -0,0 +1,59 @@
+import type { BackgroundScheduler } from "../../util/background/background.js";
+import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
+import type * as simCognitoCommands from "./command/sim-cognito-command.types.js";
+import type { SimCognitoCommands } from "./command/sim-cognito-commands.js";
+export interface SimCognitoIdentityProviderRequestOptions {
+    readonly caller?: SimAwsCaller;
+}
+interface SimCognitoAuthenticationProperties {
+    readonly commands: SimCognitoCommands;
+    readonly background: BackgroundScheduler;
+}
+/**
+ * The sign-in half of simulated Cognito: starting an authentication, answering
+ * a challenge, and signing out.
+ *
+ * The admin operations and the client ones are both here, because an
+ * application usually uses one or the other and a caller reaches them on the
+ * one service object either way. They differ in authorization:
+ * `AdminInitiateAuth`, `AdminRespondToAuthChallenge` and
+ * `AdminUserGlobalSignOut` authorize an IAM action against the pool, and
+ * `InitiateAuth`, `RespondToAuthChallenge` and `GlobalSignOut` authorize
+ * nothing at all, as real Cognito evaluates no IAM policy for them.
+ */
+export declare abstract class SimCognitoAuthentication {
+    protected readonly commands: SimCognitoCommands;
+    protected readonly background: BackgroundScheduler;
+    protected constructor(properties: SimCognitoAuthenticationProperties);
+    /**
+     * Handle an AdminInitiateAuth Command from the SDK.
+     */
+    adminInitiateAuth(command: simCognitoCommands.SimAdminInitiateAuthCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminInitiateAuthCommandOutput>;
+    /**
+     * Handle an AdminRespondToAuthChallenge Command from the SDK.
+     */
+    adminRespondToAuthChallenge(command: simCognitoCommands.SimAdminRespondToAuthChallengeCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminRespondToAuthChallengeCommandOutput>;
+    /**
+     * Handle an InitiateAuth Command from the SDK.
+     *
+     * No caller is read, because real Cognito authorizes this operation with no
+     * IAM policy at all.
+     */
+    initiateAuth(command: simCognitoCommands.SimInitiateAuthCommand): Promise<simCognitoCommands.SimInitiateAuthCommandOutput>;
+    /**
+     * Handle a RespondToAuthChallenge Command from the SDK.
+     */
+    respondToAuthChallenge(command: simCognitoCommands.SimRespondToAuthChallengeCommand): Promise<simCognitoCommands.SimRespondToAuthChallengeCommandOutput>;
+    /**
+     * Handle a GlobalSignOut Command from the SDK.
+     *
+     * The access token is what authorizes this, as it does on real Cognito.
+     */
+    globalSignOut(command: simCognitoCommands.SimGlobalSignOutCommand): Promise<simCognitoCommands.SimGlobalSignOutCommandOutput>;
+    /**
+     * Handle an AdminUserGlobalSignOut Command from the SDK.
+     */
+    adminUserGlobalSignOut(command: simCognitoCommands.SimAdminUserGlobalSignOutCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminUserGlobalSignOutCommandOutput>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-authentication.d.ts.map

package/dist/service/cognito/sim-cognito-authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authentication.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,wBAAwB;IAC5C,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAChD,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IAEnD,SAAS,aAAa,UAAU,EAAE,kCAAkC,EAGnE;IAED;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,kBAAkB,CAAC,2BAA2B,EACvD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAG/D;IAED;;OAEG;IACG,2BAA2B,CAC/B,OAAO,EAAE,kBAAkB,CAAC,qCAAqC,EACjE,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2CAA2C,CAAC,CAGzE;IAED;;;;;OAKG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;;;OAIG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;CACF"}

package/dist/service/cognito/sim-cognito-authentication.js

@@ -0,0 +1,68 @@
+/**
+ * The sign-in half of simulated Cognito: starting an authentication, answering
+ * a challenge, and signing out.
+ *
+ * The admin operations and the client ones are both here, because an
+ * application usually uses one or the other and a caller reaches them on the
+ * one service object either way. They differ in authorization:
+ * `AdminInitiateAuth`, `AdminRespondToAuthChallenge` and
+ * `AdminUserGlobalSignOut` authorize an IAM action against the pool, and
+ * `InitiateAuth`, `RespondToAuthChallenge` and `GlobalSignOut` authorize
+ * nothing at all, as real Cognito evaluates no IAM policy for them.
+ */
+export class SimCognitoAuthentication {
+    commands;
+    background;
+    constructor(properties) {
+        this.commands = properties.commands;
+        this.background = properties.background;
+    }
+    /**
+     * Handle an AdminInitiateAuth Command from the SDK.
+     */
+    async adminInitiateAuth(command, options) {
+        await this.background.sequence();
+        return this.commands.auth.adminInitiateAuth.handle(command, options);
+    }
+    /**
+     * Handle an AdminRespondToAuthChallenge Command from the SDK.
+     */
+    async adminRespondToAuthChallenge(command, options) {
+        await this.background.sequence();
+        return this.commands.auth.adminRespondToChallenge.handle(command, options);
+    }
+    /**
+     * Handle an InitiateAuth Command from the SDK.
+     *
+     * No caller is read, because real Cognito authorizes this operation with no
+     * IAM policy at all.
+     */
+    async initiateAuth(command) {
+        await this.background.sequence();
+        return this.commands.auth.initiateAuth.handle(command);
+    }
+    /**
+     * Handle a RespondToAuthChallenge Command from the SDK.
+     */
+    async respondToAuthChallenge(command) {
+        await this.background.sequence();
+        return this.commands.auth.respondToChallenge.handle(command);
+    }
+    /**
+     * Handle a GlobalSignOut Command from the SDK.
+     *
+     * The access token is what authorizes this, as it does on real Cognito.
+     */
+    async globalSignOut(command) {
+        await this.background.sequence();
+        return this.commands.auth.signOut.globalSignOut(command);
+    }
+    /**
+     * Handle an AdminUserGlobalSignOut Command from the SDK.
+     */
+    async adminUserGlobalSignOut(command, options) {
+        await this.background.sequence();
+        return this.commands.auth.signOut.adminUserGlobalSignOut(command, options);
+    }
+}
+//# sourceMappingURL=sim-cognito-authentication.js.map

package/dist/service/cognito/sim-cognito-authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authentication.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-authentication.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,wBAAwB;IACzB,QAAQ,CAAqB;IAC7B,UAAU,CAAsB;IAEnD,YAAsB,UAA8C;QAClE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAuD,EACvD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAiE,EACjE,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD;QAEnD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;CACF"}