@kensio/yulin 1.14.1 → 1.15.0

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts

@@ -1,9 +1,12 @@
 import { SimCognitoAdminCreateUserConfig, type SimCognitoAdminCreateUserConfigType } from "./sim-cognito-admin-create-user-config.js";
 import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
 import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoUserPoolMfa } from "./mfa/sim-cognito-user-pool-mfa.js";
 import { SimCognitoPasswordPolicy, type SimCognitoUserPoolPoliciesType } from "./sim-cognito-password-policy.js";
 import { SimCognitoVerificationMessages, type SimCognitoVerificationMessagesType } from "./message/sim-cognito-verification-messages.js";
 import { SimCognitoUnsimulatedPoolSettings, type SimCognitoUnsimulatedPoolSettingsType } from "./sim-cognito-unsimulated-pool-settings.js";
+import type { SimCognitoSchemaAttributeType } from "./schema/sim-cognito-schema-attribute.js";
+import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
  * The pool settings a request can set, in the shape the SDK sends them.
@@ -14,9 +17,19 @@ import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 export interface SimCognitoUserPoolSettingsInput extends SimCognitoUnsimulatedPoolSettingsType, SimCognitoVerificationMessagesType {
     readonly Policies?: SimCognitoUserPoolPoliciesType | undefined;
     readonly DeletionProtection?: string | undefined;
+    readonly MfaConfiguration?: string | undefined;
     readonly AdminCreateUserConfig?: SimCognitoAdminCreateUserConfigType | undefined;
     readonly AutoVerifiedAttributes?: readonly string[] | undefined;
     readonly LambdaConfig?: object | undefined;
+    /**
+     * The attributes the pool holds on its users beyond the standard ones.
+     *
+     * Only `CreateUserPool` carries it. It is named among the shared settings
+     * because that is where the pool's schema is built, and `UpdateUserPool`
+     * refuses one rather than replacing the schema of a pool that already has
+     * users written against it.
+     */
+    readonly Schema?: readonly SimCognitoSchemaAttributeType[] | undefined;
 }
 interface SimCognitoUserPoolSettingsProperties {
     readonly input: SimCognitoUserPoolSettingsInput;
@@ -29,8 +42,8 @@ interface SimCognitoUserPoolSettingsProperties {
 /**
  * The settings of one simulated user pool that a request can change: the
  * password policy, the deletion protection, whether users may sign themselves
- * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
- * and what its messages say.
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
+ * whether it asks for a second factor and what its messages say.
  *
  * The pool's id, ARN and name are not among them. The first two identify the
  * pool, and renaming one is not simulated.
@@ -40,8 +53,13 @@ interface SimCognitoUserPoolSettingsProperties {
  * rather than merge: an update builds a whole configuration out of its own
  * request, and the pool swaps to it, so a setting the update is silent about
  * goes back to its default rather than staying as it was.
+ *
+ * The schema is the exception. Only `CreateUserPool` declares one, so an
+ * update takes on the schema of the settings it replaces rather than dropping
+ * the pool back to the standard attributes.
  */
 export declare class SimCognitoUserPoolSettings {
+    #private;
     readonly passwordPolicy: SimCognitoPasswordPolicy;
     readonly deletionProtection: SimCognitoDeletionProtection;
     readonly adminCreateUserConfig: SimCognitoAdminCreateUserConfig;
@@ -50,6 +68,17 @@ export declare class SimCognitoUserPoolSettings {
      * The Lambda triggers the pool runs, by the ARN of the function each names.
      */
     readonly lambdaConfig: SimCognitoLambdaConfig;
+    /**
+     * Whether the pool challenges for a second factor, and which factors it
+     * offers.
+     *
+     * The `MfaConfiguration` is one of these settings because both pool requests
+     * carry it. The factors behind it are not: only `SetUserPoolMfaConfig` says
+     * what they are, and it changes them in place rather than through a whole
+     * new set of settings, so an update carries them across rather than
+     * replacing them.
+     */
+    readonly mfa: SimCognitoUserPoolMfa;
     /**
      * What the pool says in the message it sends a user signing itself up.
      */
@@ -60,6 +89,20 @@ export declare class SimCognitoUserPoolSettings {
      */
     readonly unsimulated: SimCognitoUnsimulatedPoolSettings;
     constructor(properties: SimCognitoUserPoolSettingsProperties);
+    /**
+     * The attributes the pool holds on its users: the standard ones, and the
+     * ones its `Schema` declared under `custom:` names.
+     */
+    get schema(): SimCognitoUserPoolSchema;
+    /**
+     * Take on the schema of the settings this set replaces.
+     *
+     * `UpdateUserPool` has no `Schema` input on real Cognito, so an update
+     * changes nothing about the attributes a pool holds. Carrying the schema
+     * across is what keeps that true here, where an update otherwise replaces
+     * every setting with the default of the one it left out.
+     */
+    keepSchemaOf(replaced: SimCognitoUserPoolSettings): void;
 }
 export {};
 //# sourceMappingURL=sim-cognito-user-pool-settings.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,EACjC,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BACf,SACE,qCAAqC,EACrC,kCAAkC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA0B;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,WAAW,EAAE,iCAAiC,CAAC;IAE/D,YAAY,UAAU,EAAE,oCAAoC,EAqB3D;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,EACjC,KAAK,qCAAqC,EAC3C,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,+BACf,SACE,qCAAqC,EACrC,kCAAkC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,6BAA6B,EAAE,GAAG,SAAS,CAAC;CACxE;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,0BAA0B;;IACrC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,qBAAqB,EAAE,+BAA+B,CAAC;IACvE,SAAgB,sBAAsB,EAAE,gCAAgC,CAAC;IAEzE;;OAEG;IACH,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IAErD;;;;;;;;;OASG;IACH,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAE3C;;OAEG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;;OAGG;IACH,SAAgB,WAAW,EAAE,iCAAiC,CAAC;IAI/D,YAAY,UAAU,EAAE,oCAAoC,EAyB3D;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,wBAAwB,CAErC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAEvD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js

@@ -1,15 +1,18 @@
 import { SimCognitoAdminCreateUserConfig, } from "./sim-cognito-admin-create-user-config.js";
 import { SimCognitoAutoVerifiedAttributes } from "./sim-cognito-auto-verified-attributes.js";
 import { SimCognitoDeletionProtection } from "./sim-cognito-deletion-protection.js";
+import { SimCognitoMfaConfiguration } from "./mfa/sim-cognito-mfa-configuration.js";
+import { SimCognitoUserPoolMfa } from "./mfa/sim-cognito-user-pool-mfa.js";
 import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
 import { SimCognitoVerificationMessages, } from "./message/sim-cognito-verification-messages.js";
 import { SimCognitoUnsimulatedPoolSettings, } from "./sim-cognito-unsimulated-pool-settings.js";
+import { SimCognitoUserPoolSchema } from "./schema/sim-cognito-user-pool-schema.js";
 import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
 /**
  * The settings of one simulated user pool that a request can change: the
  * password policy, the deletion protection, whether users may sign themselves
- * up, what confirming a sign-up verifies, the Lambda triggers the pool runs
- * and what its messages say.
+ * up, what confirming a sign-up verifies, the Lambda triggers the pool runs,
+ * whether it asks for a second factor and what its messages say.
  *
  * The pool's id, ARN and name are not among them. The first two identify the
  * pool, and renaming one is not simulated.
@@ -19,6 +22,10 @@ import { SimCognitoLambdaConfig } from "./trigger/sim-cognito-lambda-config.js";
  * rather than merge: an update builds a whole configuration out of its own
  * request, and the pool swaps to it, so a setting the update is silent about
  * goes back to its default rather than staying as it was.
+ *
+ * The schema is the exception. Only `CreateUserPool` declares one, so an
+ * update takes on the schema of the settings it replaces rather than dropping
+ * the pool back to the standard attributes.
  */
 export class SimCognitoUserPoolSettings {
     passwordPolicy;
@@ -29,6 +36,17 @@ export class SimCognitoUserPoolSettings {
      * The Lambda triggers the pool runs, by the ARN of the function each names.
      */
     lambdaConfig;
+    /**
+     * Whether the pool challenges for a second factor, and which factors it
+     * offers.
+     *
+     * The `MfaConfiguration` is one of these settings because both pool requests
+     * carry it. The factors behind it are not: only `SetUserPoolMfaConfig` says
+     * what they are, and it changes them in place rather than through a whole
+     * new set of settings, so an update carries them across rather than
+     * replacing them.
+     */
+    mfa;
     /**
      * What the pool says in the message it sends a user signing itself up.
      */
@@ -38,6 +56,7 @@ export class SimCognitoUserPoolSettings {
      * reports it.
      */
     unsimulated;
+    #schema;
     constructor(properties) {
         const { input, operation } = properties;
         this.passwordPolicy = new SimCognitoPasswordPolicy(input.Policies?.PasswordPolicy);
@@ -45,8 +64,28 @@ export class SimCognitoUserPoolSettings {
         this.adminCreateUserConfig = new SimCognitoAdminCreateUserConfig(input.AdminCreateUserConfig);
         this.autoVerifiedAttributes = new SimCognitoAutoVerifiedAttributes(input.AutoVerifiedAttributes);
         this.lambdaConfig = new SimCognitoLambdaConfig(input.LambdaConfig, operation);
+        this.mfa = new SimCognitoUserPoolMfa(new SimCognitoMfaConfiguration(input.MfaConfiguration));
         this.verificationMessages = new SimCognitoVerificationMessages(input);
         this.unsimulated = new SimCognitoUnsimulatedPoolSettings(input);
+        this.#schema = new SimCognitoUserPoolSchema(input.Schema);
+    }
+    /**
+     * The attributes the pool holds on its users: the standard ones, and the
+     * ones its `Schema` declared under `custom:` names.
+     */
+    get schema() {
+        return this.#schema;
+    }
+    /**
+     * Take on the schema of the settings this set replaces.
+     *
+     * `UpdateUserPool` has no `Schema` input on real Cognito, so an update
+     * changes nothing about the attributes a pool holds. Carrying the schema
+     * across is what keeps that true here, where an update otherwise replaces
+     * every setting with the default of the one it left out.
+     */
+    keepSchemaOf(replaced) {
+        this.#schema = replaced.schema;
     }
 }
 //# sourceMappingURL=sim-cognito-user-pool-settings.js.map

package/dist/service/cognito/user-pool/sim-cognito-user-pool-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AA+BhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,WAAW,CAAoC;IAE/D,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-settings.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAEhC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AA0ChF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,0BAA0B;IACrB,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,qBAAqB,CAAkC;IACvD,sBAAsB,CAAmC;IAEzE;;OAEG;IACa,YAAY,CAAyB;IAErD;;;;;;;;;OASG;IACa,GAAG,CAAwB;IAE3C;;OAEG;IACa,oBAAoB,CAAiC;IAErE;;;OAGG;IACa,WAAW,CAAoC;IAE/D,OAAO,CAA2B;IAElC,YAAY,UAAgD;QAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAwB,CAChD,KAAK,CAAC,QAAQ,EAAE,cAAc,CAC/B,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CACxD,KAAK,CAAC,kBAAkB,CACzB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,+BAA+B,CAC9D,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,IAAI,gCAAgC,CAChE,KAAK,CAAC,sBAAsB,CAC7B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAC5C,KAAK,CAAC,YAAY,EAClB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,qBAAqB,CAClC,IAAI,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAoC;QAC/C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts

@@ -10,7 +10,7 @@ import type { SimCognitoName } from "./sim-cognito-name.js";
 import type { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
 import { type SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
 import type { SimCognitoUserPoolSettings } from "./sim-cognito-user-pool-settings.js";
-import { SimCognitoSigningKey, type SimCognitoJwks } from "./token/sim-cognito-signing-key.js";
+import type { SimCognitoJwks, SimCognitoSigningKey } from "./token/sim-cognito-signing-key.js";
 import type { SimCognitoUser } from "./user/sim-cognito-user.js";
 import { type SimCognitoUsername } from "./user/sim-cognito-username.js";
 interface SimCognitoUserPoolProperties {
@@ -47,6 +47,7 @@ export declare class SimCognitoUserPool {
     private readonly clientStore;
     private readonly userStore;
     private readonly groupStore;
+    private readonly keys;
     constructor(properties: SimCognitoUserPoolProperties);
     /**
      * The settings this pool applies: its password policy, its deletion
@@ -67,22 +68,9 @@ export declare class SimCognitoUserPool {
     get issuerUrl(): string;
     /** The name this pool is known by where a scheme would be wrong. */
     get providerName(): string;
-    /**
-     * The key this pool signs its tokens with, generated on first use.
-     *
-     * The key belongs to the pool, as it does on real Cognito, so a token from
-     * one pool does not carry a signature another pool's JWKS can verify.
-     */
+    /** The key this pool signs its tokens with, generated on first use. */
     get signingKey(): SimCognitoSigningKey;
-    /**
-     * The public keys this pool publishes, in the shape its JWKS endpoint
-     * serves.
-     *
-     * A verifier configured for this pool takes this document and verifies the
-     * pool's tokens with nothing else needed. Real Cognito publishes two keys
-     * and rotates between them, and this publishes one, so code assuming a
-     * single entry passes here and is still wrong against real AWS.
-     */
+    /** The public keys this pool publishes, as its JWKS endpoint serves them. */
     jwks(): SimCognitoJwks;
     /**
      * When the pool's settings last changed.
@@ -147,11 +135,17 @@ export declare class SimCognitoUserPool {
     /**
      * The confirmation code a user of this pool has outstanding, if it has one.
      *
-     * This is the simulator's own accessor, for a test that signed a user up:
-     * nothing here delivers a message for one to read the code from. Real
-     * Cognito reports a code to nobody, so this is a deliberate divergence.
+     * This and `softwareTokenCode` are the simulator's own accessors, for a test
+     * that has nowhere else to read a code from: nothing here delivers a message
+     * or holds the user's phone. Real Cognito reports either code to nobody.
      */
     confirmationCode(username: string): string | undefined;
+    /**
+     * The code a user's authenticator app is showing now, for a user that has
+     * been given a software token secret. A test that would rather compute the
+     * code itself can do so from the `SecretCode`, which is a real shared secret.
+     */
+    softwareTokenCode(username: string): string | undefined;
     /** Every message this pool would have sent, oldest first. */
     sentMessages(): readonly SimCognitoSentMessage[];
     /**

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD;;;;OAIG;IACH,SAAgB,QAAQ,6BAAoC;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAMzD,YAAY,UAAU,EAAE,4BAA4B,EAQnD;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,0BAA0B,CAEzC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjD;IAED,0DAA0D;IAC1D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;;OAQG;IACH,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrD;IAED,6DAA6D;IAC7D,YAAY,IAAI,SAAS,qBAAqB,EAAE,CAE/C;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD;;;;OAIG;IACH,SAAgB,QAAQ,6BAAoC;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;IAKjD,YAAY,UAAU,EAAE,4BAA4B,EAQnD;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,0BAA0B,CAEzC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAGjD;IAED,0DAA0D;IAC1D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,uEAAuE;IACvE,IAAI,UAAU,IAAI,oBAAoB,CAErC;IAED,6EAA6E;IAC7E,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrD;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAItD;IAED,6DAA6D;IAC7D,YAAY,IAAI,SAAS,qBAAqB,EAAE,CAE/C;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js

@@ -3,7 +3,7 @@ import { SimCognitoUserPoolClientStore } from "./client/sim-cognito-user-pool-cl
 import { SimCognitoGroupStore } from "./group/sim-cognito-group-store.js";
 import { SimCognitoSentMessageStore } from "./message/sim-cognito-sent-message-store.js";
 import { simCognitoUserPoolIssuerUrl, simCognitoUserPoolProviderName, } from "./sim-cognito-user-pool-id.js";
-import { SimCognitoSigningKey, } from "./token/sim-cognito-signing-key.js";
+import { SimCognitoPoolKeys } from "./token/sim-cognito-pool-keys.js";
 import { SimCognitoUserStore } from "./user/sim-cognito-user-store.js";
 import { requireSimCognitoUsername, } from "./user/sim-cognito-username.js";
 /**
@@ -32,9 +32,9 @@ export class SimCognitoUserPool {
     clientStore = new SimCognitoUserPoolClientStore();
     userStore = new SimCognitoUserStore();
     groupStore = new SimCognitoGroupStore();
+    keys = new SimCognitoPoolKeys();
     #settings;
     #modifiedDate;
-    #signingKey;
     constructor(properties) {
         this.id = properties.id;
         this.arn = properties.arn;
@@ -72,27 +72,13 @@ export class SimCognitoUserPool {
     get providerName() {
         return simCognitoUserPoolProviderName(this.id);
     }
-    /**
-     * The key this pool signs its tokens with, generated on first use.
-     *
-     * The key belongs to the pool, as it does on real Cognito, so a token from
-     * one pool does not carry a signature another pool's JWKS can verify.
-     */
+    /** The key this pool signs its tokens with, generated on first use. */
     get signingKey() {
-        this.#signingKey ??= SimCognitoSigningKey.generate();
-        return this.#signingKey;
+        return this.keys.signingKey;
     }
-    /**
-     * The public keys this pool publishes, in the shape its JWKS endpoint
-     * serves.
-     *
-     * A verifier configured for this pool takes this document and verifies the
-     * pool's tokens with nothing else needed. Real Cognito publishes two keys
-     * and rotates between them, and this publishes one, so code assuming a
-     * single entry passes here and is still wrong against real AWS.
-     */
+    /** The public keys this pool publishes, as its JWKS endpoint serves them. */
     jwks() {
-        return { keys: [this.signingKey.publicJwk()] };
+        return this.keys.jwks();
     }
     /**
      * When the pool's settings last changed.
@@ -185,14 +171,22 @@ export class SimCognitoUserPool {
     /**
      * The confirmation code a user of this pool has outstanding, if it has one.
      *
-     * This is the simulator's own accessor, for a test that signed a user up:
-     * nothing here delivers a message for one to read the code from. Real
-     * Cognito reports a code to nobody, so this is a deliberate divergence.
+     * This and `softwareTokenCode` are the simulator's own accessors, for a test
+     * that has nowhere else to read a code from: nothing here delivers a message
+     * or holds the user's phone. Real Cognito reports either code to nobody.
      */
     confirmationCode(username) {
         return this.requireUser(requireSimCognitoUsername(username))
             .confirmationCode;
     }
+    /**
+     * The code a user's authenticator app is showing now, for a user that has
+     * been given a software token secret. A test that would rather compute the
+     * code itself can do so from the `SecretCode`, which is a real shared secret.
+     */
+    softwareTokenCode(username) {
+        return this.requireUser(requireSimCognitoUsername(username)).mfa.codeAt(this.clock.now());
+    }
     /** Every message this pool would have sent, oldest first. */
     sentMessages() {
         return this.messages.all;

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD;;;;OAIG;IACa,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzD,SAAS,CAA6B;IACtC,aAAa,CAAO;IACpB,WAAW,CAAmC;IAE9C,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAoC;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS;QACX,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY;QACd,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;aACzD,gBAAgB,CAAC;IACtB,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAE/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAMtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEhD;;;;OAIG;IACa,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEjD,SAAS,CAA6B;IACtC,aAAa,CAAO;IAEpB,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,QAAoC;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS;QACX,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY;QACd,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,uEAAuE;IACvE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;aACzD,gBAAgB,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CACrE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-access-token.d.ts

@@ -1,4 +1,14 @@
 import { type SimCognitoTokenClaims, type SimCognitoTokenClaimsProperties } from "./sim-cognito-token-claims.js";
+/**
+ * The scope an access token from an authentication flow in the API carries.
+ *
+ * Real Cognito issues this scope for sign-in through the user pool API, which
+ * asks for no scopes of its own. A sign-in through the hosted endpoints asks
+ * for scopes, and those are what its access token carries instead. It is also
+ * the scope an operation a user performs on itself needs, which is why a
+ * hosted sign-in that never asked for it cannot perform one.
+ */
+export declare const simCognitoUserPoolAdminScope = "aws.cognito.signin.user.admin";
 /**
  * The claims of a simulated access token.
  *

package/dist/service/cognito/user-pool/token/sim-cognito-access-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-access-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACrC,MAAM,+BAA+B,CAAC;AAWvC;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;OAEG;IACH,MAAM,IAAI,qBAAqB,CAU9B;IAED;;;OAGG;IACH,OAAO,CAAC,KAAK;CASd"}
+{"version":3,"file":"sim-cognito-access-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACrC,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,kCAAkC,CAAC;AAE5E;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;OAEG;IACH,MAAM,IAAI,qBAAqB,CAU9B;IAED;;;OAGG;IACH,OAAO,CAAC,KAAK;CASd"}

package/dist/service/cognito/user-pool/token/sim-cognito-access-token.js

@@ -4,9 +4,11 @@ import { SimCognitoSharedTokenClaims, } from "./sim-cognito-token-claims.js";
  *
  * Real Cognito issues this scope for sign-in through the user pool API, which
  * asks for no scopes of its own. A sign-in through the hosted endpoints asks
- * for scopes, and those are what its access token carries instead.
+ * for scopes, and those are what its access token carries instead. It is also
+ * the scope an operation a user performs on itself needs, which is why a
+ * hosted sign-in that never asked for it cannot perform one.
  */
-const userPoolAdminScope = "aws.cognito.signin.user.admin";
+export const simCognitoUserPoolAdminScope = "aws.cognito.signin.user.admin";
 /**
  * The claims of a simulated access token.
  *
@@ -41,7 +43,7 @@ export class SimCognitoAccessToken {
     scope() {
         const { scopes } = this.properties;
         if (scopes === undefined) {
-            return userPoolAdminScope;
+            return simCognitoUserPoolAdminScope;
         }
         return scopes.join(" ");
     }

package/dist/service/cognito/user-pool/token/sim-cognito-access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-access-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAG5B,MAAM,+BAA+B,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAkC;IAC5C,MAAM,CAA8B;IAErD,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAEzC,OAAO;YACL,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACtB,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK;QACX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAEnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-access-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAG5B,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAkC;IAC5C,MAAM,CAA8B;IAErD,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAEzC,OAAO;YACL,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACtB,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK;QACX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAEnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,4BAA4B,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-pool-keys.d.ts

@@ -0,0 +1,27 @@
+import { SimCognitoSigningKey, type SimCognitoJwks } from "./sim-cognito-signing-key.js";
+/**
+ * The key pair one simulated user pool signs its tokens with.
+ *
+ * The key belongs to the pool, as it does on real Cognito, so a token from one
+ * pool does not carry a signature another pool's JWKS can verify. It is
+ * generated the first time the pool signs or publishes anything rather than
+ * when the pool is created, because 2048-bit generation takes long enough to
+ * notice and most pools in a suite never sign a token at all.
+ */
+export declare class SimCognitoPoolKeys {
+    #private;
+    /**
+     * The key this pool signs with, generated on first use.
+     */
+    get signingKey(): SimCognitoSigningKey;
+    /**
+     * The public keys this pool publishes, in the shape its JWKS endpoint serves.
+     *
+     * A verifier configured for this pool takes this document and verifies the
+     * pool's tokens with nothing else needed. Real Cognito publishes two keys and
+     * rotates between them, and this publishes one, so code assuming a single
+     * entry passes here and is still wrong against real AWS.
+     */
+    jwks(): SimCognitoJwks;
+}
+//# sourceMappingURL=sim-cognito-pool-keys.d.ts.map

package/dist/service/cognito/user-pool/token/sim-cognito-pool-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pool-keys.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-pool-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;;IAG7B;;OAEG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;OAOG;IACH,IAAI,IAAI,cAAc,CAErB;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-pool-keys.js

@@ -0,0 +1,32 @@
+import { SimCognitoSigningKey, } from "./sim-cognito-signing-key.js";
+/**
+ * The key pair one simulated user pool signs its tokens with.
+ *
+ * The key belongs to the pool, as it does on real Cognito, so a token from one
+ * pool does not carry a signature another pool's JWKS can verify. It is
+ * generated the first time the pool signs or publishes anything rather than
+ * when the pool is created, because 2048-bit generation takes long enough to
+ * notice and most pools in a suite never sign a token at all.
+ */
+export class SimCognitoPoolKeys {
+    #signingKey;
+    /**
+     * The key this pool signs with, generated on first use.
+     */
+    get signingKey() {
+        this.#signingKey ??= SimCognitoSigningKey.generate();
+        return this.#signingKey;
+    }
+    /**
+     * The public keys this pool publishes, in the shape its JWKS endpoint serves.
+     *
+     * A verifier configured for this pool takes this document and verifies the
+     * pool's tokens with nothing else needed. Real Cognito publishes two keys and
+     * rotates between them, and this publishes one, so code assuming a single
+     * entry passes here and is still wrong against real AWS.
+     */
+    jwks() {
+        return { keys: [this.signingKey.publicJwk()] };
+    }
+}
+//# sourceMappingURL=sim-cognito-pool-keys.js.map

package/dist/service/cognito/user-pool/token/sim-cognito-pool-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-pool-keys.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-pool-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IAC7B,WAAW,CAAmC;IAE9C;;OAEG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;CACF"}

package/dist/service/cognito/user-pool/token/sim-cognito-token-issuer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-token-issuer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-token-issuer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAclE;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAE9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAEvE;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ;IAIvB;;;;;;;;;;;OAWG;IACG,KAAK,CACT,UAAU,EAAE,+BAA+B,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAuBjC;IAED;;;;;;;OAOG;IACG,OAAO,CACX,UAAU,EAAE,+BAA+B,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAEjC;YAEa,UAAU;YAqDV,cAAc;CAY7B"}
+{"version":3,"file":"sim-cognito-token-issuer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-token-issuer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAclE;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAE9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAEvE;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ;IAIvB;;;;;;;;;;;OAWG;IACG,KAAK,CACT,UAAU,EAAE,+BAA+B,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAuBjC;IAED;;;;;;;OAOG;IACG,OAAO,CACX,UAAU,EAAE,+BAA+B,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAEjC;YAEa,UAAU;YAyDV,cAAc;CAY7B"}

package/dist/service/cognito/user-pool/token/sim-cognito-token-issuer.js

@@ -103,6 +103,10 @@ export class SimCognitoTokenIssuer {
             clientId: client.id,
             issuedAt,
             expiresAt: accessTokenExpiresAt,
+            // The pool records what the token carries, because an operation a user
+            // performs on itself is refused unless the scope allows it, and the
+            // record is what the pool reads rather than the signed claims.
+            scopes: properties.scopes,
         }));
         return {
             idToken: pool.signingKey.sign(claimsOverride.applyTo(idToken.claims())),

package/dist/service/cognito/user-pool/token/sim-cognito-token-issuer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-token-issuer.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAM5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA6C7B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAW;IAChB,QAAQ,CAA6B;IAEtD,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,QAAc,EAAE,OAAe;QACrD,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CACT,UAA2C;QAE3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE1E,IAAI,CAAC,IAAI,CAAC,eAAe,CACvB,IAAI,qBAAqB,CAAC;YACxB,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CACvC,QAAQ,EACR,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAC1C;YACD,sEAAsE;YACtE,iCAAiC;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,UAA2C;QAE3C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,UAA2C,EAC3C,QAAc;QAEd,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAC1C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC;QACpE,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,QAAQ,CACzD,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;YACpC,GAAG,UAAU;YACb,QAAQ;YACR,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CACvC,QAAQ,EACR,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CACrC;YACD,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;YAC5C,GAAG,UAAU;YACb,QAAQ;YACR,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAC5C,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CACnD,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,cAAc,CACtB,IAAI,qBAAqB,CAAC;YACxB,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,SAAS,EAAE,oBAAoB;SAChC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,WAAW,EAAE,iBAAiB;YAC9B,SAAS,EAAE,kBAAkB;SAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,UAA2C;QAE3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;QAEpE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YACtD,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-token-issuer.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/token/sim-cognito-token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAM5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA6C7B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IACf,KAAK,CAAW;IAChB,QAAQ,CAA6B;IAEtD,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,QAAc,EAAE,OAAe;QACrD,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CACT,UAA2C;QAE3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE1E,IAAI,CAAC,IAAI,CAAC,eAAe,CACvB,IAAI,qBAAqB,CAAC;YACxB,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CACvC,QAAQ,EACR,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAC1C;YACD,sEAAsE;YACtE,iCAAiC;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,UAA2C;QAE3C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,UAA2C,EAC3C,QAAc;QAEd,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAC1C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC;QACpE,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,QAAQ,CACzD,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;YACpC,GAAG,UAAU;YACb,QAAQ;YACR,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CACvC,QAAQ,EACR,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CACrC;YACD,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;YAC5C,GAAG,UAAU;YACb,QAAQ;YACR,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAC5C,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CACnD,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,cAAc,CACtB,IAAI,qBAAqB,CAAC;YACxB,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,SAAS,EAAE,oBAAoB;YAC/B,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,WAAW,EAAE,iBAAiB;YAC9B,SAAS,EAAE,kBAAkB;SAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,UAA2C;QAE3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;QAEpE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YACtD,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.d.ts

@@ -74,6 +74,10 @@ export declare class SimCognitoTriggerOccasion {
      * The invitation an admin-created user is sent.
      */
     static readonly customMessageAdminCreateUser: SimCognitoTriggerOccasion;
+    /**
+     * The code a sign-in challenged for a second factor is sent.
+     */
+    static readonly customMessageAuthentication: SimCognitoTriggerOccasion;
     readonly trigger: SimCognitoTriggerName;
     readonly source: string;
     private constructor();

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-trigger-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,gBAAuB,MAAM,4BAG3B;IAEF;;;;;;OAMG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;OAMG;IACH,gBAAuB,aAAa,4BAGlC;IAEF;;OAEG;IACH,gBAAuB,iBAAiB,4BAGtC;IAEF;;OAEG;IACH,gBAAuB,kBAAkB,4BAGvC;IAEF;;OAEG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;;OAOG;IACH,gBAAuB,0BAA0B,4BAI7C;IAEJ;;;;;;OAMG;IACH,gBAAuB,sBAAsB,4BAG3C;IAEF;;OAEG;IACH,gBAAuB,mBAAmB,4BAGxC;IAEF;;OAEG;IACH,gBAAuB,uBAAuB,4BAC+B;IAE7E;;OAEG;IACH,gBAAuB,4BAA4B,4BAI/C;IAEJ,SAAgB,OAAO,EAAE,qBAAqB,CAAC;IAC/C,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,eAGN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAY3B;CACF"}
+{"version":3,"file":"sim-cognito-trigger-occasion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,gBAAuB,MAAM,4BAG3B;IAEF;;;;;;OAMG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;OAMG;IACH,gBAAuB,aAAa,4BAGlC;IAEF;;OAEG;IACH,gBAAuB,iBAAiB,4BAGtC;IAEF;;OAEG;IACH,gBAAuB,kBAAkB,4BAGvC;IAEF;;OAEG;IACH,gBAAuB,eAAe,4BAGpC;IAEF;;;;;;;OAOG;IACH,gBAAuB,0BAA0B,4BAI7C;IAEJ;;;;;;OAMG;IACH,gBAAuB,sBAAsB,4BAG3C;IAEF;;OAEG;IACH,gBAAuB,mBAAmB,4BAGxC;IAEF;;OAEG;IACH,gBAAuB,uBAAuB,4BAC+B;IAE7E;;OAEG;IACH,gBAAuB,4BAA4B,4BAI/C;IAEJ;;OAEG;IACH,gBAAuB,2BAA2B,4BAI9C;IAEJ,SAAgB,OAAO,EAAE,qBAAqB,CAAC;IAC/C,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,eAGN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAe3B;CACF"}

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.js

@@ -72,6 +72,10 @@ export class SimCognitoTriggerOccasion {
      * The invitation an admin-created user is sent.
      */
     static customMessageAdminCreateUser = new SimCognitoTriggerOccasion("CustomMessage", "CustomMessage_AdminCreateUser");
+    /**
+     * The code a sign-in challenged for a second factor is sent.
+     */
+    static customMessageAuthentication = new SimCognitoTriggerOccasion("CustomMessage", "CustomMessage_Authentication");
     trigger;
     source;
     constructor(trigger, source) {
@@ -96,6 +100,9 @@ export class SimCognitoTriggerOccasion {
             case "AdminCreateUser": {
                 return this.customMessageAdminCreateUser;
             }
+            case "Authentication": {
+                return this.customMessageAuthentication;
+            }
         }
     }
 }

package/dist/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-trigger-occasion.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACI,MAAM,CAAU,MAAM,GAAG,IAAI,yBAAyB,CAC3D,WAAW,EACX,kBAAkB,CACnB,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,WAAW,EACX,2BAA2B,CAC5B,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,aAAa,GAAG,IAAI,yBAAyB,CAClE,kBAAkB,EAClB,gCAAgC,CACjC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,iBAAiB,GAAG,IAAI,yBAAyB,CACtE,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,kBAAkB,GAAG,IAAI,yBAAyB,CACvE,oBAAoB,EACpB,mCAAmC,CACpC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,oBAAoB,EACpB,gCAAgC,CACjC,CAAC;IAEF;;;;;;;OAOG;IACI,MAAM,CAAU,0BAA0B,GAC/C,IAAI,yBAAyB,CAC3B,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IAEJ;;;;;;OAMG;IACI,MAAM,CAAU,sBAAsB,GAAG,IAAI,yBAAyB,CAC3E,oBAAoB,EACpB,+BAA+B,CAChC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,mBAAmB,GAAG,IAAI,yBAAyB,CACxE,eAAe,EACf,sBAAsB,CACvB,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,uBAAuB,GAC5C,IAAI,yBAAyB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAE7E;;OAEG;IACI,MAAM,CAAU,4BAA4B,GACjD,IAAI,yBAAyB,CAC3B,eAAe,EACf,+BAA+B,CAChC,CAAC;IAEY,OAAO,CAAwB;IAC/B,MAAM,CAAS;IAE/B,YAAoB,OAA8B,EAAE,MAAc;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAClC,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,uBAAuB,CAAC;YACtC,CAAC;YACD,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,4BAA4B,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-trigger-occasion.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/trigger/sim-cognito-trigger-occasion.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACI,MAAM,CAAU,MAAM,GAAG,IAAI,yBAAyB,CAC3D,WAAW,EACX,kBAAkB,CACnB,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,WAAW,EACX,2BAA2B,CAC5B,CAAC;IAEF;;;;;;OAMG;IACI,MAAM,CAAU,aAAa,GAAG,IAAI,yBAAyB,CAClE,kBAAkB,EAClB,gCAAgC,CACjC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,iBAAiB,GAAG,IAAI,yBAAyB,CACtE,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,kBAAkB,GAAG,IAAI,yBAAyB,CACvE,oBAAoB,EACpB,mCAAmC,CACpC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,eAAe,GAAG,IAAI,yBAAyB,CACpE,oBAAoB,EACpB,gCAAgC,CACjC,CAAC;IAEF;;;;;;;OAOG;IACI,MAAM,CAAU,0BAA0B,GAC/C,IAAI,yBAAyB,CAC3B,oBAAoB,EACpB,sCAAsC,CACvC,CAAC;IAEJ;;;;;;OAMG;IACI,MAAM,CAAU,sBAAsB,GAAG,IAAI,yBAAyB,CAC3E,oBAAoB,EACpB,+BAA+B,CAChC,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,mBAAmB,GAAG,IAAI,yBAAyB,CACxE,eAAe,EACf,sBAAsB,CACvB,CAAC;IAEF;;OAEG;IACI,MAAM,CAAU,uBAAuB,GAC5C,IAAI,yBAAyB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAE7E;;OAEG;IACI,MAAM,CAAU,4BAA4B,GACjD,IAAI,yBAAyB,CAC3B,eAAe,EACf,+BAA+B,CAChC,CAAC;IAEJ;;OAEG;IACI,MAAM,CAAU,2BAA2B,GAChD,IAAI,yBAAyB,CAC3B,eAAe,EACf,8BAA8B,CAC/B,CAAC;IAEY,OAAO,CAAwB;IAC/B,MAAM,CAAS;IAE/B,YAAoB,OAA8B,EAAE,MAAc;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,QAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAClC,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,uBAAuB,CAAC;YACtC,CAAC;YACD,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,4BAA4B,CAAC;YAC3C,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,2BAA2B,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}