@kensio/yulin 1.12.0 → 1.12.1

package/dist/service/cognito/error/sim-cognito.error.js

@@ -56,6 +56,18 @@ export class SimCognitoGroupExistsException extends SimCognitoError {
         super(message, { httpStatusCode: 400 });
     }
 }
+/**
+ * Simulated Cognito DuplicateProviderException error.
+ *
+ * Real Cognito reports a second identity provider added under a name the pool
+ * already holds this way, rather than as a bad parameter.
+ */
+export class SimCognitoDuplicateProviderException extends SimCognitoError {
+    name = "DuplicateProviderException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
 /**
  * Simulated Cognito UserNotFoundException error.
  *

package/dist/service/cognito/error/sim-cognito.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA4B,EAAE;QAEvD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iCAAkC,SAAQ,eAAe;IAC3C,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,8BAA+B,SAAQ,eAAe;IACxC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAExD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gCAAiC,SAAQ,eAAe;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAExD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,kCAAmC,SAAQ,eAAe;IAC5C,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA4B,EAAE;QAEvD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iCAAkC,SAAQ,eAAe;IAC3C,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,8BAA+B,SAAQ,eAAe;IACxC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oCAAqC,SAAQ,eAAe;IAC9C,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAExD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gCAAiC,SAAQ,eAAe;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,mCAAoC,SAAQ,eAAe;IAC7C,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAExD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,kCAAmC,SAAQ,eAAe;IAC5C,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/cognito/index.d.ts

@@ -13,12 +13,25 @@ export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cog
 export { SimCognitoTokenLifetime, type SimCognitoTokenValidityUnit, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, type SimCognitoTokenValidityInput, type SimCognitoTokenValidityUnitsType, } from "./user-pool/client/sim-cognito-token-validity.js";
 export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
+export { SimCognitoFederation } from "./sim-cognito-federation.js";
 export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
 export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
 export { SimCognitoConfirmationCode } from "./user-pool/user/sim-cognito-confirmation-code.js";
 export type { SimCognitoUsername } from "./user-pool/user/sim-cognito-username.js";
 export { SimCognitoUserStatus, type SimCognitoUserStatusValue, } from "./user-pool/user/sim-cognito-user-status.js";
 export { SimCognitoUserAttributes, type SimCognitoAttributeType, } from "./user-pool/user/sim-cognito-user-attributes.js";
+export { SimCognitoOAuthSettings, type SimCognitoOAuthSettingsType, } from "./user-pool/client/sim-cognito-oauth-settings.js";
+export { SimCognitoUserPoolDomain } from "./user-pool/domain/sim-cognito-user-pool-domain.js";
+export { SimCognitoDomainName } from "./user-pool/domain/sim-cognito-domain-name.js";
+export { SimCognitoCustomDomainConfig, type SimCognitoCustomDomainConfigType, } from "./user-pool/domain/sim-cognito-custom-domain-config.js";
+export { SimCognitoUserPoolIdentityProvider } from "./user-pool/idp/sim-cognito-user-pool-identity-provider.js";
+export { SimCognitoIdentityProviderSettings, type SimCognitoIdentityProviderSettingsInput, } from "./user-pool/idp/sim-cognito-identity-provider-settings.js";
+export { SimCognitoProviderType } from "./user-pool/idp/sim-cognito-provider-type.js";
+export { SimCognitoProviderDetails, type SimCognitoProviderDetailsType, } from "./user-pool/idp/sim-cognito-provider-details.js";
+export { SimCognitoAttributeMapping, type SimCognitoAttributeMappingType, } from "./user-pool/idp/sim-cognito-attribute-mapping.js";
+export { SimCognitoExternalUser, type SimCognitoExternalUserType, } from "./user-pool/idp/sim-cognito-external-user.js";
+export { SimCognitoFederatedIdentity, type SimCognitoIdentityClaim, } from "./user-pool/idp/sim-cognito-federated-identity.js";
+export { SimCognitoAuthorizationCode } from "./user-pool/auth/sim-cognito-authorization-code.js";
 export { SimCognitoGroup } from "./user-pool/group/sim-cognito-group.js";
 export type { SimCognitoGroupName } from "./user-pool/group/sim-cognito-group-name.js";
 export { SimCognitoGroupSettings, type SimCognitoGroupSettingsInput, } from "./user-pool/group/sim-cognito-group-settings.js";
@@ -31,5 +44,6 @@ export { SimCognitoTriggerOccasion } from "./user-pool/trigger/sim-cognito-trigg
 export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
 export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
 export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
-export { SimCognitoCodeMismatchException, SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
+export { isSimCognitoOAuthError, SimCognitoOAuthError, type SimCognitoOAuthErrorCode, } from "./error/sim-cognito-oauth.error.js";
+export { SimCognitoCodeMismatchException, SimCognitoDuplicateProviderException, SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/cognito/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,GACzC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,yBAAyB,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,GAClC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sDAAsD,CAAC;AAC9D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,GACzC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,yBAAyB,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,EAClC,KAAK,uCAAuC,GAC7C,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,GACnC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,KAAK,8BAA8B,GACpC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,0BAA0B,GAChC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,GAClC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sDAAsD,CAAC;AAC9D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,wBAAwB,GAC9B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/index.js

@@ -11,11 +11,24 @@ export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cog
 export { SimCognitoTokenLifetime, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, } from "./user-pool/client/sim-cognito-token-validity.js";
 export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
+export { SimCognitoFederation } from "./sim-cognito-federation.js";
 export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
 export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
 export { SimCognitoConfirmationCode } from "./user-pool/user/sim-cognito-confirmation-code.js";
 export { SimCognitoUserStatus, } from "./user-pool/user/sim-cognito-user-status.js";
 export { SimCognitoUserAttributes, } from "./user-pool/user/sim-cognito-user-attributes.js";
+export { SimCognitoOAuthSettings, } from "./user-pool/client/sim-cognito-oauth-settings.js";
+export { SimCognitoUserPoolDomain } from "./user-pool/domain/sim-cognito-user-pool-domain.js";
+export { SimCognitoDomainName } from "./user-pool/domain/sim-cognito-domain-name.js";
+export { SimCognitoCustomDomainConfig, } from "./user-pool/domain/sim-cognito-custom-domain-config.js";
+export { SimCognitoUserPoolIdentityProvider } from "./user-pool/idp/sim-cognito-user-pool-identity-provider.js";
+export { SimCognitoIdentityProviderSettings, } from "./user-pool/idp/sim-cognito-identity-provider-settings.js";
+export { SimCognitoProviderType } from "./user-pool/idp/sim-cognito-provider-type.js";
+export { SimCognitoProviderDetails, } from "./user-pool/idp/sim-cognito-provider-details.js";
+export { SimCognitoAttributeMapping, } from "./user-pool/idp/sim-cognito-attribute-mapping.js";
+export { SimCognitoExternalUser, } from "./user-pool/idp/sim-cognito-external-user.js";
+export { SimCognitoFederatedIdentity, } from "./user-pool/idp/sim-cognito-federated-identity.js";
+export { SimCognitoAuthorizationCode } from "./user-pool/auth/sim-cognito-authorization-code.js";
 export { SimCognitoGroup } from "./user-pool/group/sim-cognito-group.js";
 export { SimCognitoGroupSettings, } from "./user-pool/group/sim-cognito-group-settings.js";
 export { SimCognitoSigningKey, } from "./user-pool/token/sim-cognito-signing-key.js";
@@ -26,5 +39,6 @@ export { SimCognitoTriggerOccasion } from "./user-pool/trigger/sim-cognito-trigg
 export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
 export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
 export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
-export { SimCognitoCodeMismatchException, SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
+export { isSimCognitoOAuthError, SimCognitoOAuthError, } from "./error/sim-cognito-oauth.error.js";
+export { SimCognitoCodeMismatchException, SimCognitoDuplicateProviderException, SimCognitoError, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoResourceNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.js.map

package/dist/service/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,GAEhC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,GAIzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,EACL,oBAAoB,GAErB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,EACL,uBAAuB,GAExB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,GAGrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,GAEhC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,GAIzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,EACL,oBAAoB,GAErB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,GAEnC,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,GAE1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,GAE3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,GAEvB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,EACL,uBAAuB,GAExB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,GAGrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/registry/sim-cognito-domain-registry.d.ts

@@ -0,0 +1,49 @@
+import type { SimAwsServiceHosts } from "../../../serve/controller/host/sim-aws-service-hosts.js";
+import type { SimAwsServiceTarget } from "../../../serve/controller/sim-service-controller.js";
+import type { SimCognitoUserPoolDomain } from "../user-pool/domain/sim-cognito-user-pool-domain.js";
+/**
+ * Simulated Cognito cross-Account registry of user pool domains.
+ *
+ * A domain is unique across the whole of real AWS rather than within one
+ * account, so this is where that uniqueness is enforced, in the same way pool
+ * ids are allocated against the pool registry.
+ *
+ * It is also how a served request finds the pool it is for. A request to a
+ * hosted domain carries a hostname and nothing else: no pool id, no account,
+ * and for a custom domain nothing that says it is a Cognito hostname at all.
+ * That makes this the answer to which simulated service a hostname belongs to,
+ * which is what `SimAwsServiceHosts` asks.
+ */
+export declare class SimCognitoDomainRegistry implements SimAwsServiceHosts {
+    private readonly domainsByName;
+    private readonly domainsByHost;
+    /**
+     * Register a newly created domain, so requests to it resolve.
+     *
+     * A domain string already in use is refused the way real Cognito refuses
+     * one, and so is a hostname already answered on, which is the same thing
+     * said in terms of the request that would arrive.
+     */
+    register(domain: SimCognitoUserPoolDomain): void;
+    /**
+     * Forget a deleted domain, so requests to it stop resolving.
+     */
+    deregister(domain: SimCognitoUserPoolDomain): void;
+    /**
+     * Find a domain by the domain string it was created with.
+     */
+    find(domainValue: string | undefined): SimCognitoUserPoolDomain | undefined;
+    /**
+     * Find the domain a request's hostname reaches.
+     */
+    findByHost(hostname: string): SimCognitoUserPoolDomain | undefined;
+    /**
+     * The simulated service target a hostname names, if a domain answers on it.
+     *
+     * The region comes from the pool's id rather than from the hostname, because
+     * a custom domain's hostname says nothing about where its pool lives.
+     */
+    targetForHost(hostname: string): SimAwsServiceTarget | undefined;
+    private requireUnused;
+}
+//# sourceMappingURL=sim-cognito-domain-registry.d.ts.map

package/dist/service/cognito/registry/sim-cognito-domain-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/registry/sim-cognito-domain-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAG/F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAGpG;;;;;;;;;;;;GAYG;AACH,qBAAa,wBAAyB,YAAW,kBAAkB;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+C;IAC7E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+C;IAE7E;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAQ/C;IAED;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAMjD;IAED;;OAEG;IACH,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,wBAAwB,GAAG,SAAS,CAM1E;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;;;;OAKG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAc/D;IAED,OAAO,CAAC,aAAa;CAatB"}

package/dist/service/cognito/registry/sim-cognito-domain-registry.js

@@ -0,0 +1,83 @@
+import { SimCognitoInvalidParameterException } from "../error/sim-cognito.error.js";
+import { simCognitoUserPoolRegionName } from "../user-pool/sim-cognito-user-pool-id.js";
+/**
+ * Simulated Cognito cross-Account registry of user pool domains.
+ *
+ * A domain is unique across the whole of real AWS rather than within one
+ * account, so this is where that uniqueness is enforced, in the same way pool
+ * ids are allocated against the pool registry.
+ *
+ * It is also how a served request finds the pool it is for. A request to a
+ * hosted domain carries a hostname and nothing else: no pool id, no account,
+ * and for a custom domain nothing that says it is a Cognito hostname at all.
+ * That makes this the answer to which simulated service a hostname belongs to,
+ * which is what `SimAwsServiceHosts` asks.
+ */
+export class SimCognitoDomainRegistry {
+    domainsByName = new Map();
+    domainsByHost = new Map();
+    /**
+     * Register a newly created domain, so requests to it resolve.
+     *
+     * A domain string already in use is refused the way real Cognito refuses
+     * one, and so is a hostname already answered on, which is the same thing
+     * said in terms of the request that would arrive.
+     */
+    register(domain) {
+        this.requireUnused(domain);
+        this.domainsByName.set(domain.value, domain);
+        for (const hostname of domain.hostnames) {
+            this.domainsByHost.set(hostname.toLowerCase(), domain);
+        }
+    }
+    /**
+     * Forget a deleted domain, so requests to it stop resolving.
+     */
+    deregister(domain) {
+        this.domainsByName.delete(domain.value);
+        for (const hostname of domain.hostnames) {
+            this.domainsByHost.delete(hostname.toLowerCase());
+        }
+    }
+    /**
+     * Find a domain by the domain string it was created with.
+     */
+    find(domainValue) {
+        if (domainValue === undefined) {
+            return undefined;
+        }
+        return this.domainsByName.get(domainValue);
+    }
+    /**
+     * Find the domain a request's hostname reaches.
+     */
+    findByHost(hostname) {
+        return this.domainsByHost.get(hostname.toLowerCase());
+    }
+    /**
+     * The simulated service target a hostname names, if a domain answers on it.
+     *
+     * The region comes from the pool's id rather than from the hostname, because
+     * a custom domain's hostname says nothing about where its pool lives.
+     */
+    targetForHost(hostname) {
+        const domain = this.findByHost(hostname);
+        if (domain === undefined) {
+            return undefined;
+        }
+        return {
+            service: "cognitoIdentityProvider",
+            resourceName: domain.value,
+            regionName: simCognitoUserPoolRegionName(domain.userPoolId),
+        };
+    }
+    requireUnused(domain) {
+        const taken = domain.hostnames.some((hostname) => this.domainsByHost.has(hostname.toLowerCase()));
+        if (taken || this.domainsByName.has(domain.value)) {
+            throw new SimCognitoInvalidParameterException(`Domain '${domain.value}' is already in use: a user pool domain is ` +
+                `unique across every simulated Account and Region, as it is across ` +
+                `the whole of real AWS`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cognito-domain-registry.js.map

package/dist/service/cognito/registry/sim-cognito-domain-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-registry.js","sourceRoot":"","sources":["../../../../src/service/cognito/registry/sim-cognito-domain-registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,aAAa,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,aAAa,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE7E;;;;;;OAMG;IACH,QAAQ,CAAC,MAAgC;QACvC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE7C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAgC;QACzC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,WAA+B;QAClC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,OAAO,EAAE,yBAAyB;YAClC,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,UAAU,EAAE,4BAA4B,CACtC,MAAM,CAAC,UAAU,CACD;SACnB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAAgC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAC/C,CAAC;QAEF,IAAI,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,mCAAmC,CAC3C,WAAW,MAAM,CAAC,KAAK,6CAA6C;gBAClE,oEAAoE;gBACpE,uBAAuB,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts

@@ -4,8 +4,9 @@ import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provide
  * Routes intercepted SDK Commands to one scoped simulated Cognito.
  *
  * The routes are grouped the way the operations themselves are, into pools and
- * their app clients, the users and groups in them, and signing in, so that
- * adding an operation touches the group it belongs to.
+ * their app clients, the users and groups in them, the domain and identity
+ * providers they federate through, and signing in, so that adding an operation
+ * touches the group it belongs to.
  */
 export declare class SimCognitoSdkCommandRouter implements SimSdkCommandRouter {
     private readonly routes;

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAKtF;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAMjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAMtF;;;;;;;GAOG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAOjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js

@@ -1,12 +1,14 @@
 import { simCognitoSdkAuthRoutes } from "./sim-cognito-sdk-auth-routes.js";
 import { simCognitoSdkDirectoryRoutes } from "./sim-cognito-sdk-directory-routes.js";
+import { simCognitoSdkFederationRoutes } from "./sim-cognito-sdk-federation-routes.js";
 import { simCognitoSdkPoolRoutes } from "./sim-cognito-sdk-pool-routes.js";
 /**
  * Routes intercepted SDK Commands to one scoped simulated Cognito.
  *
  * The routes are grouped the way the operations themselves are, into pools and
- * their app clients, the users and groups in them, and signing in, so that
- * adding an operation touches the group it belongs to.
+ * their app clients, the users and groups in them, the domain and identity
+ * providers they federate through, and signing in, so that adding an operation
+ * touches the group it belongs to.
  */
 export class SimCognitoSdkCommandRouter {
     routes;
@@ -15,6 +17,7 @@ export class SimCognitoSdkCommandRouter {
             ...simCognitoSdkPoolRoutes(simCognito),
             ...simCognitoSdkDirectoryRoutes(simCognito),
             ...simCognitoSdkAuthRoutes(simCognito),
+            ...simCognitoSdkFederationRoutes(simCognito),
         ]);
     }
     /**

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,4BAA4B,CAAC,UAAU,CAAC;YAC3C,GAAG,uBAAuB,CAAC,UAAU,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,4BAA4B,CAAC,UAAU,CAAC;YAC3C,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,6BAA6B,CAAC,UAAU,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-federation-routes.d.ts

@@ -0,0 +1,7 @@
+import { type SimSdkCommandRoute } from "../../../sdk/index.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+/**
+ * The SDK Command routes for hosted domains and identity providers.
+ */
+export declare function simCognitoSdkFederationRoutes(simCognito: SimCognitoIdentityProvider): readonly (readonly [string, SimSdkCommandRoute])[];
+//# sourceMappingURL=sim-cognito-sdk-federation-routes.d.ts.map

package/dist/service/cognito/sdk/sim-cognito-sdk-federation-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-federation-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-federation-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAa/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAmEpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-federation-routes.js

@@ -0,0 +1,41 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * The SDK Command routes for hosted domains and identity providers.
+ */
+export function simCognitoSdkFederationRoutes(simCognito) {
+    return [
+        [
+            "CreateUserPoolDomainCommand",
+            async (command, context) => await simCognito.createUserPoolDomain(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DescribeUserPoolDomainCommand",
+            async (command, context) => await simCognito.describeUserPoolDomain(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DeleteUserPoolDomainCommand",
+            async (command, context) => await simCognito.deleteUserPoolDomain(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "CreateIdentityProviderCommand",
+            async (command, context) => await simCognito.createIdentityProvider(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DescribeIdentityProviderCommand",
+            async (command, context) => await simCognito.describeIdentityProvider(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "UpdateIdentityProviderCommand",
+            async (command, context) => await simCognito.updateIdentityProvider(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "DeleteIdentityProviderCommand",
+            async (command, context) => await simCognito.deleteIdentityProvider(command, simSdkCallerOptions(context)),
+        ],
+        [
+            "ListIdentityProvidersCommand",
+            async (command, context) => await simCognito.listIdentityProviders(command, simSdkCallerOptions(context)),
+        ],
+    ];
+}
+//# sourceMappingURL=sim-cognito-sdk-federation-routes.js.map

package/dist/service/cognito/sdk/sim-cognito-sdk-federation-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-federation-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-federation-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAe/B;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAsC;IAEtC,OAAO;QACL;YACE,6BAA6B;YAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,6BAA6B;YAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,oBAAoB,CACnC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,iCAAiC;YACjC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,wBAAwB,CACvC,OAA6C,EAC7C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,8BAA8B;YAC9B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,qBAAqB,CACpC,OAA0C,EAC1C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/serve/sim-cognito-controller.d.ts

@@ -17,6 +17,10 @@ interface SimCognitoServiceControllerProperties {
  * Cognito serves nothing at. Nothing here delivers a message, so this is where
  * one is read during local development.
  *
+ * A pool's hosted domain is served too, on its own hostname rather than on the
+ * regional endpoint, and `SimCognitoDomainController` answers those requests.
+ * That is where the OAuth endpoints of an authorization code grant live.
+ *
  * The Cognito API itself is not served. An SDK client reaches the simulator
  * through `SimSdk` rather than through an endpoint override.
  */
@@ -24,6 +28,7 @@ export declare class SimCognitoServiceController implements SimAwsServiceControl
     private readonly simAws;
     private readonly openIdConfiguration;
     private readonly response;
+    private readonly domainController;
     constructor(properties?: SimCognitoServiceControllerProperties);
     /**
      * Handle an HTTP request routed to a simulated Cognito regional endpoint.

package/dist/service/cognito/serve/sim-cognito-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA8B9C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA4B,YAAW,uBAAuB;IACzE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAuC;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,UAAU,GAAE,qCAA0C,EAGjE;IAED;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAErE;IAED,OAAO,CAAC,OAAO;IAuCf;;OAEG;IACH,OAAO,CAAC,MAAM;IAkCd;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU;CAoBnB"}
+{"version":3,"file":"sim-cognito-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA+B9C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,2BAA4B,YAAW,uBAAuB;IACzE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAuC;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAE9D,YAAY,UAAU,GAAE,qCAA0C,EAIjE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO3E;IAED,OAAO,CAAC,OAAO;IAuCf;;OAEG;IACH,OAAO,CAAC,MAAM;IAkCd;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU;CAoBnB"}

package/dist/service/cognito/serve/sim-cognito-controller.js

@@ -1,4 +1,5 @@
 import { SimAws } from "../../aws/sim-aws.js";
+import { SimCognitoDomainController } from "./sim-cognito-domain-controller.js";
 import { SimCognitoEndpointResponse } from "./sim-cognito-endpoint-response.js";
 import { SimCognitoOpenIdConfiguration } from "./sim-cognito-openid-configuration.js";
 /**
@@ -36,6 +37,10 @@ const readMethods = new Set(["GET", "HEAD"]);
  * Cognito serves nothing at. Nothing here delivers a message, so this is where
  * one is read during local development.
  *
+ * A pool's hosted domain is served too, on its own hostname rather than on the
+ * regional endpoint, and `SimCognitoDomainController` answers those requests.
+ * That is where the OAuth endpoints of an authorization code grant live.
+ *
  * The Cognito API itself is not served. An SDK client reaches the simulator
  * through `SimSdk` rather than through an endpoint override.
  */
@@ -43,15 +48,20 @@ export class SimCognitoServiceController {
     simAws;
     openIdConfiguration = new SimCognitoOpenIdConfiguration();
     response = new SimCognitoEndpointResponse();
+    domainController;
     constructor(properties = {}) {
         const { simAws = new SimAws() } = properties;
         this.simAws = simAws;
+        this.domainController = new SimCognitoDomainController({ simAws });
     }
     /**
      * Handle an HTTP request routed to a simulated Cognito regional endpoint.
      */
-    handleRequest(serviceRequest) {
-        return Promise.resolve(this.respond(serviceRequest));
+    async handleRequest(serviceRequest) {
+        // A request that reached a hosted domain's hostname names that domain,
+        // where one to the regional endpoint names no resource at all.
+        const domainResponse = await this.domainController.handleRequest(serviceRequest);
+        return domainResponse ?? this.respond(serviceRequest);
     }
     respond(serviceRequest) {
         const { request } = serviceRequest;

package/dist/service/cognito/serve/sim-cognito-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-controller.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAEtF;;GAEG;AACH,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAgB7C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAS;IACf,mBAAmB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAC1D,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE7D,YAAY,UAAU,GAA0C,EAAE;QAChE,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAoC;QAChD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACvD,CAAC;IAEO,OAAO,CAAC,cAAoC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,6DAA6D;QAC7D,2EAA2E;QAC3E,uCAAuC;QACvC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ;aAC1D,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC,CAAC;QAEd,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,KAAK,EAAE;YACjB,OAAO,KAAK,SAAS;YACrB,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,CAAC,EACf,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YACvB,OAAO;YACP,QAAQ;YACR,GAAG;YACH,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,MAAM,CACZ,IAAwB,EACxB,OAAgC;QAEhC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEnD,wEAAwE;QACxE,yEAAyE;QACzE,2CAA2C;QAC3C,IAAI,OAAO,KAAK,eAAe,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EACtE,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACnD,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACK,UAAU,CAChB,UAAkB,EAClB,MAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,uBAAuB,EAAE;aACzB,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE/C,IAAI,cAAc,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-controller.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAEtF;;GAEG;AACH,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAgB7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAS;IACf,mBAAmB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAC1D,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAC5C,gBAAgB,CAA6B;IAE9D,YAAY,UAAU,GAA0C,EAAE;QAChE,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,cAAc,GAClB,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAE5D,OAAO,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,CAAC;IAEO,OAAO,CAAC,cAAoC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,6DAA6D;QAC7D,2EAA2E;QAC3E,uCAAuC;QACvC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ;aAC1D,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC,CAAC;QAEd,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,KAAK,EAAE;YACjB,OAAO,KAAK,SAAS;YACrB,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,CAAC,EACf,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YACvB,OAAO;YACP,QAAQ;YACR,GAAG;YACH,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,MAAM,CACZ,IAAwB,EACxB,OAAgC;QAEhC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEnD,wEAAwE;QACxE,yEAAyE;QACzE,2CAA2C;QAC3C,IAAI,OAAO,KAAK,eAAe,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EACtE,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EACnD,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACK,UAAU,CAChB,UAAkB,EAClB,MAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,uBAAuB,EAAE;aACzB,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE/C,IAAI,cAAc,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-domain-controller.d.ts

@@ -0,0 +1,48 @@
+import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
+import type { SimAws } from "../../aws/sim-aws.js";
+interface SimCognitoDomainControllerProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The localhost HTTP side of a pool's hosted domain.
+ *
+ * These are the endpoints a browser and an application's own server reach, and
+ * they carry no AWS credentials at all: an authorization code grant is signed
+ * by nobody, in the same way `InitiateAuth` is. What authenticates the
+ * application is its app client secret, at the token endpoint.
+ *
+ * The pool's own scope answers each request, found from the domain rather than
+ * assumed to be the default one, because a domain names a pool that any
+ * Account and Region of the simulation could have created.
+ */
+export declare class SimCognitoDomainController {
+    private readonly simAws;
+    private readonly endpoints;
+    constructor(properties: SimCognitoDomainControllerProperties);
+    /**
+     * Handle a request that reached a hosted domain's hostname, or answer
+     * nothing for one that named no domain at all.
+     *
+     * A request to the regional endpoint names no resource, and that is what
+     * tells the two apart.
+     */
+    handleRequest(serviceRequest: SimAwsServiceRequest): Promise<Response | undefined>;
+    /**
+     * The hosted domain a request arrived at, if it arrived at one.
+     */
+    private servedDomain;
+    /**
+     * The pool a hosted domain belongs to.
+     */
+    private pool;
+    /**
+     * The simulated Cognito scope that owns a pool.
+     *
+     * The Account comes from the pool's ARN and the Region from its id, and each
+     * scope's services are made once and kept, so this is the same service
+     * object that created the pool rather than another view of it.
+     */
+    private cognitoFor;
+}
+export {};
+//# sourceMappingURL=sim-cognito-domain-controller.d.ts.map

package/dist/service/cognito/serve/sim-cognito-domain-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-controller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAEhG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAOnD,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAE7D,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;OAMG;IACG,aAAa,CACjB,cAAc,EAAE,oBAAoB,GACnC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAgB/B;IAED;;OAEG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;IACH,OAAO,CAAC,IAAI;IAaZ;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;CAMnB"}

package/dist/service/cognito/serve/sim-cognito-domain-controller.js

@@ -0,0 +1,79 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simCognitoUserPoolRegionName } from "../user-pool/sim-cognito-user-pool-id.js";
+import { SimCognitoDomainEndpoints } from "./sim-cognito-domain-endpoints.js";
+/**
+ * The localhost HTTP side of a pool's hosted domain.
+ *
+ * These are the endpoints a browser and an application's own server reach, and
+ * they carry no AWS credentials at all: an authorization code grant is signed
+ * by nobody, in the same way `InitiateAuth` is. What authenticates the
+ * application is its app client secret, at the token endpoint.
+ *
+ * The pool's own scope answers each request, found from the domain rather than
+ * assumed to be the default one, because a domain names a pool that any
+ * Account and Region of the simulation could have created.
+ */
+export class SimCognitoDomainController {
+    simAws;
+    endpoints = new SimCognitoDomainEndpoints();
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Handle a request that reached a hosted domain's hostname, or answer
+     * nothing for one that named no domain at all.
+     *
+     * A request to the regional endpoint names no resource, and that is what
+     * tells the two apart.
+     */
+    async handleRequest(serviceRequest) {
+        const domain = this.servedDomain(serviceRequest);
+        if (domain === undefined) {
+            return undefined;
+        }
+        const url = new URL(serviceRequest.request.url);
+        const pool = this.pool(domain);
+        return await this.endpoints.handleRequest({
+            pool,
+            cognito: this.cognitoFor(pool),
+            serviceRequest,
+            url,
+        });
+    }
+    /**
+     * The hosted domain a request arrived at, if it arrived at one.
+     */
+    servedDomain(serviceRequest) {
+        const { resourceName } = serviceRequest.target;
+        if (resourceName === "") {
+            return undefined;
+        }
+        return this.simAws
+            .cognitoIdentityProvider()
+            .findUserPoolDomainInAnyAccount(resourceName);
+    }
+    /**
+     * The pool a hosted domain belongs to.
+     */
+    pool(domain) {
+        const pool = this.simAws
+            .cognitoIdentityProvider()
+            .findUserPoolInAnyAccount(domain.userPoolId);
+        assertDefined(pool, `sim Cognito user pool ${domain.userPoolId} for domain ${domain.value}`);
+        return pool;
+    }
+    /**
+     * The simulated Cognito scope that owns a pool.
+     *
+     * The Account comes from the pool's ARN and the Region from its id, and each
+     * scope's services are made once and kept, so this is the same service
+     * object that created the pool rather than another view of it.
+     */
+    cognitoFor(pool) {
+        return this.simAws
+            .account(pool.arn.accountId)
+            .region(simCognitoUserPoolRegionName(pool.id))
+            .cognitoIdentityProvider();
+    }
+}
+//# sourceMappingURL=sim-cognito-domain-controller.js.map

package/dist/service/cognito/serve/sim-cognito-domain-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-controller.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAM9E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IACf,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAE7D,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC;QAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAEjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YACxC,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC9B,cAAc;YACd,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAClB,cAAoC;QAEpC,MAAM,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC;QAE/C,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM;aACf,uBAAuB,EAAE;aACzB,8BAA8B,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,MAAgC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,uBAAuB,EAAE;aACzB,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE/C,aAAa,CACX,IAAI,EACJ,yBAAyB,MAAM,CAAC,UAAU,eAAe,MAAM,CAAC,KAAK,EAAE,CACxE,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,IAAwB;QACzC,OAAO,IAAI,CAAC,MAAM;aACf,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aAC3B,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAkB,CAAC;aAC9D,uBAAuB,EAAE,CAAC;IAC/B,CAAC;CACF"}