@kensio/yulin 1.14.2 → 1.15.0

package/dist/service/cognito/command/auth/sim-cognito-password-sign-in.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-password-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-password-sign-in.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAE/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAE5G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,8BAA8B,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,YAAY,UAAU,EAAE,kCAAkC,EAKzD;IAED;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CA0CzC;CACF"}
+{"version":3,"file":"sim-cognito-password-sign-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-password-sign-in.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,8BAA8B,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,YAAY,UAAU,EAAE,kCAAkC,EAKzD;IAED;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,8BAA8B,CAAC,CAiCzC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-password-sign-in.js

@@ -1,6 +1,5 @@
 import { requireSimCognitoConfirmed, requireSimCognitoSignIn, requireSimCognitoSignInUser, } from "../../user-pool/auth/sim-cognito-sign-in.js";
 import { SimCognitoTriggerOccasion } from "../../user-pool/trigger/sim-cognito-trigger-occasion.js";
-import { SimCognitoAuthenticationResult } from "./sim-cognito-authentication-result.js";
 /**
  * Signing a user in with a username and password.
  *
@@ -12,13 +11,12 @@ import { SimCognitoAuthenticationResult } from "./sim-cognito-authentication-res
  */
 export class SimCognitoPasswordSignIn {
     authResolver;
-    tokenIssuer;
+    completion;
     challenge;
     triggers;
-    result = new SimCognitoAuthenticationResult();
     constructor(properties) {
         this.authResolver = properties.authResolver;
-        this.tokenIssuer = properties.tokenIssuer;
+        this.completion = properties.completion;
         this.challenge = properties.challenge;
         this.triggers = properties.triggers;
     }
@@ -50,25 +48,20 @@ export class SimCognitoPasswordSignIn {
         if (user.status.mustChangePassword) {
             return this.challenge.issue({ pool, clientId: client.id, user });
         }
+        // A user that has registered a second factor is challenged for it here
+        // rather than answered with tokens, which is what the pool's
+        // MfaConfiguration decides.
+        //
         // `ClientMetadata` reaches PreAuthentication and PostAuthentication, and
         // not the token trigger: real Cognito does not pass an InitiateAuth or
         // AdminInitiateAuth request's on to that one.
-        const authenticated = {
-            $metadata: {},
-            AuthenticationResult: this.result.of(await this.tokenIssuer.issue({
-                pool,
-                client,
-                user,
-                occasion: SimCognitoTriggerOccasion.tokenGeneration,
-            })),
-        };
-        await this.triggers.postAuthentication({
+        return await this.completion.challengeOrComplete({
             pool,
             client,
             user,
+            occasion: SimCognitoTriggerOccasion.tokenGeneration,
             clientMetadata,
         });
-        return authenticated;
     }
 }
 //# sourceMappingURL=sim-cognito-password-sign-in.js.map

package/dist/service/cognito/command/auth/sim-cognito-password-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-password-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-password-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAIrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AAEpG,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AA4BxF;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAClB,YAAY,CAAyB;IACrC,WAAW,CAAwB;IACnC,SAAS,CAAiC;IAC1C,QAAQ,CAA6B;IACrC,MAAM,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE/D,YAAY,UAA8C;QACxD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEjE,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACpC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;QAEH,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,8CAA8C;QAC9C,MAAM,aAAa,GAAG;YACpB,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAClC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC3B,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,yBAAyB,CAAC,eAAe;aACpD,CAAC,CACH;SACF,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACrC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-password-sign-in.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-password-sign-in.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAGrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AA8BpG;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAClB,YAAY,CAAyB;IACrC,UAAU,CAA6B;IACvC,SAAS,CAAiC;IAC1C,QAAQ,CAA6B;IAEtD,YAAY,UAA8C;QACxD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,OAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEjE,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACpC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;QAEH,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,uEAAuE;QACvE,6DAA6D;QAC7D,4BAA4B;QAC5B,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,8CAA8C;QAC9C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAC/C,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,QAAQ,EAAE,yBAAyB,CAAC,eAAe;YACnD,cAAc;SACf,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-respond-to-challenge.d.ts

@@ -1,9 +1,9 @@
 import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
-import type { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
+import type { SimCognitoChallengeResponses } from "./sim-cognito-challenge-responses.js";
 import type { SimRespondToAuthChallengeCommand, SimRespondToAuthChallengeCommandOutput } from "./auth.command.js";
 interface SimCognitoRespondToChallengeProperties {
     readonly authResolver: SimCognitoAuthResolver;
-    readonly newPassword: SimCognitoNewPasswordResponse;
+    readonly responses: SimCognitoChallengeResponses;
 }
 /**
  * The RespondToAuthChallenge command.
@@ -14,7 +14,7 @@ interface SimCognitoRespondToChallengeProperties {
  */
 export declare class SimCognitoRespondToChallenge {
     private readonly authResolver;
-    private readonly newPassword;
+    private readonly responses;
     private readonly unsimulatedOptions;
     constructor(properties: SimCognitoRespondToChallengeProperties);
     /**

package/dist/service/cognito/command/auth/sim-cognito-respond-to-challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-respond-to-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-respond-to-challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,mBAAmB,CAAC;AAE3B,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;CACrD;AAED;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,YAAY,UAAU,EAAE,sCAAsC,EAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,sCAAsC,CAAC,CAiBjD;CACF"}
+{"version":3,"file":"sim-cognito-respond-to-challenge.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-respond-to-challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEzF,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,mBAAmB,CAAC;AAE3B,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;CAClD;AAED;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,YAAY,UAAU,EAAE,sCAAsC,EAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,sCAAsC,CAAC,CAejD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-respond-to-challenge.js

@@ -1,5 +1,4 @@
 import { SimCognitoAuthParameters } from "./sim-cognito-auth-parameters.js";
-import { requireSimCognitoNewPasswordChallenge } from "./sim-cognito-auth-challenge.js";
 import { SimCognitoUnsimulatedAuthOptions } from "./sim-cognito-unsimulated-auth-options.js";
 /**
  * The RespondToAuthChallenge command.
@@ -10,11 +9,11 @@ import { SimCognitoUnsimulatedAuthOptions } from "./sim-cognito-unsimulated-auth
  */
 export class SimCognitoRespondToChallenge {
     authResolver;
-    newPassword;
+    responses;
     unsimulatedOptions = new SimCognitoUnsimulatedAuthOptions();
     constructor(properties) {
         this.authResolver = properties.authResolver;
-        this.newPassword = properties.newPassword;
+        this.responses = properties.responses;
     }
     /**
      * Answer a challenge.
@@ -23,8 +22,7 @@ export class SimCognitoRespondToChallenge {
         const { input } = command;
         const { pool, client } = this.authResolver.client(input.ClientId);
         this.unsimulatedOptions.refuseInResponse(input);
-        requireSimCognitoNewPasswordChallenge(input.ChallengeName);
-        return await this.newPassword.handle({
+        return await this.responses.handle(input.ChallengeName, {
             pool,
             client,
             parameters: new SimCognitoAuthParameters("ChallengeResponses", input.ChallengeResponses),

package/dist/service/cognito/command/auth/sim-cognito-respond-to-challenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-respond-to-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-respond-to-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,iCAAiC,CAAC;AAExF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAW7F;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IACtB,YAAY,CAAyB;IACrC,WAAW,CAAgC;IAC3C,kBAAkB,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAE7E,YAAY,UAAkD;QAC5D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAyC;QAEzC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,qCAAqC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE3D,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACnC,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,IAAI,wBAAwB,CACtC,oBAAoB,EACpB,KAAK,CAAC,kBAAkB,CACzB;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-respond-to-challenge.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-respond-to-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAG5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAW7F;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IACtB,YAAY,CAAyB;IACrC,SAAS,CAA+B;IACxC,kBAAkB,GAAG,IAAI,gCAAgC,EAAE,CAAC;IAE7E,YAAY,UAAkD;QAC5D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAyC;QAEzC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YACtD,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,IAAI,wBAAwB,CACtC,oBAAoB,EACpB,KAAK,CAAC,kBAAkB,CACzB;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-sign-in-completion.d.ts

@@ -0,0 +1,68 @@
+import type { SimCognitoUserPoolClient } from "../../user-pool/client/sim-cognito-user-pool-client.js";
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoTokenIssuer } from "../../user-pool/token/sim-cognito-token-issuer.js";
+import type { SimCognitoTriggerOccasion } from "../../user-pool/trigger/sim-cognito-trigger-occasion.js";
+import type { SimCognitoUserPoolTriggers } from "../../user-pool/trigger/sim-cognito-user-pool-triggers.js";
+import type { SimCognitoUser } from "../../user-pool/user/sim-cognito-user.js";
+import type { SimCognitoMfaChallenge } from "./sim-cognito-mfa-challenge.js";
+import type { SimCognitoAuthenticationOutput } from "./auth.command.js";
+interface SimCognitoSignInCompletionProperties {
+    readonly tokenIssuer: SimCognitoTokenIssuer;
+    readonly triggers: SimCognitoUserPoolTriggers;
+    /** The second factor a user may still owe before it is signed in. */
+    readonly mfaChallenge: SimCognitoMfaChallenge;
+}
+/**
+ * A sign-in with nothing left in its way.
+ */
+interface SimCognitoCompletedSignIn {
+    readonly pool: SimCognitoUserPool;
+    readonly client: SimCognitoUserPoolClient;
+    readonly user: SimCognitoUser;
+    /**
+     * The `PreTokenGeneration` occasion these tokens are issued on, which says
+     * which request finished the sign-in.
+     */
+    readonly occasion: SimCognitoTriggerOccasion;
+    /**
+     * The `ClientMetadata` to pass on to the token trigger, which only the
+     * challenge responses have: real Cognito does not pass an `InitiateAuth`
+     * request's on to that one.
+     */
+    readonly tokenClientMetadata?: Readonly<Record<string, string>> | undefined;
+    /** The `ClientMetadata` `PostAuthentication` reads, which every request has. */
+    readonly clientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * The last thing every finished sign-in does: issue the tokens, and run the
+ * pool's `PostAuthentication` trigger.
+ *
+ * A sign-in can finish at the password, at the new password challenge or at an
+ * MFA challenge, and all three end the same way, so they end in one place. The
+ * order matters and is real Cognito's: the tokens are issued first and the
+ * trigger runs after them, so a handler that throws leaves the sign-in it was
+ * told about standing. The request itself still fails on the trigger, and the
+ * caller is answered with the failure rather than with the tokens.
+ *
+ * The two that finish before the second factor go through
+ * `challengeOrComplete`, which is where a user that registered one is
+ * challenged instead.
+ */
+export declare class SimCognitoSignInCompletion {
+    private readonly tokenIssuer;
+    private readonly triggers;
+    private readonly mfaChallenge;
+    private readonly result;
+    constructor(properties: SimCognitoSignInCompletionProperties);
+    /**
+     * Answer with the MFA challenge this user still owes, or with the tokens
+     * where it owes none.
+     */
+    challengeOrComplete(request: SimCognitoCompletedSignIn): Promise<SimCognitoAuthenticationOutput>;
+    /**
+     * Answer with the tokens this sign-in earned.
+     */
+    complete(request: SimCognitoCompletedSignIn): Promise<SimCognitoAuthenticationOutput>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-sign-in-completion.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-sign-in-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-completion.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-in-completion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACzG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAE/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;CAC/C;AAED;;GAEG;AACH,UAAU,yBAAyB;IACjC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAE9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAE5E,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;OAGG;IACG,mBAAmB,CACvB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,8BAA8B,CAAC,CAWzC;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,8BAA8B,CAAC,CAuBzC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-sign-in-completion.js

@@ -0,0 +1,64 @@
+import { SimCognitoAuthenticationResult } from "./sim-cognito-authentication-result.js";
+/**
+ * The last thing every finished sign-in does: issue the tokens, and run the
+ * pool's `PostAuthentication` trigger.
+ *
+ * A sign-in can finish at the password, at the new password challenge or at an
+ * MFA challenge, and all three end the same way, so they end in one place. The
+ * order matters and is real Cognito's: the tokens are issued first and the
+ * trigger runs after them, so a handler that throws leaves the sign-in it was
+ * told about standing. The request itself still fails on the trigger, and the
+ * caller is answered with the failure rather than with the tokens.
+ *
+ * The two that finish before the second factor go through
+ * `challengeOrComplete`, which is where a user that registered one is
+ * challenged instead.
+ */
+export class SimCognitoSignInCompletion {
+    tokenIssuer;
+    triggers;
+    mfaChallenge;
+    result = new SimCognitoAuthenticationResult();
+    constructor(properties) {
+        this.tokenIssuer = properties.tokenIssuer;
+        this.triggers = properties.triggers;
+        this.mfaChallenge = properties.mfaChallenge;
+    }
+    /**
+     * Answer with the MFA challenge this user still owes, or with the tokens
+     * where it owes none.
+     */
+    async challengeOrComplete(request) {
+        const { pool, client, user, clientMetadata } = request;
+        return ((await this.mfaChallenge.issueFor({
+            pool,
+            client,
+            user,
+            clientMetadata,
+        })) ?? (await this.complete(request)));
+    }
+    /**
+     * Answer with the tokens this sign-in earned.
+     */
+    async complete(request) {
+        const { pool, client, user, clientMetadata } = request;
+        const authenticated = {
+            $metadata: {},
+            AuthenticationResult: this.result.of(await this.tokenIssuer.issue({
+                pool,
+                client,
+                user,
+                occasion: request.occasion,
+                clientMetadata: request.tokenClientMetadata,
+            })),
+        };
+        await this.triggers.postAuthentication({
+            pool,
+            client,
+            user,
+            clientMetadata,
+        });
+        return authenticated;
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-in-completion.js.map

package/dist/service/cognito/command/auth/sim-cognito-sign-in-completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-completion.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-in-completion.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAqCxF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IACpB,WAAW,CAAwB;IACnC,QAAQ,CAA6B;IACrC,YAAY,CAAyB;IACrC,MAAM,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE/D,YAAY,UAAgD;QAC1D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAkC;QAElC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QAEvD,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YAChC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,OAAkC;QAElC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QACvD,MAAM,aAAa,GAAG;YACpB,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAClC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC3B,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,OAAO,CAAC,mBAAmB;aAC5C,CAAC,CACH;SACF,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACrC,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-sign-out.d.ts

@@ -17,9 +17,10 @@ interface SimCognitoCommandOptions {
  * Both forget the refresh and access tokens the user holds, so a later
  * `REFRESH_TOKEN_AUTH` fails and the access token that signed out cannot sign
  * out again. Real Cognito revokes them the same way. Where they differ is
- * authorization: `GlobalSignOut` is authorized by the user's own access token
- * and evaluates no IAM policy, and `AdminUserGlobalSignOut` is an
- * administrative call that needs the IAM permission on the pool.
+ * authorization: `GlobalSignOut` is authorized by the user's own access token,
+ * which has to carry the scope every self-service operation needs, and
+ * evaluates no IAM policy. `AdminUserGlobalSignOut` is an administrative call
+ * that needs the IAM permission on the pool.
  */
 export declare class SimCognitoSignOutCommands {
     private readonly resolver;

package/dist/service/cognito/command/auth/sim-cognito-sign-out.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-out.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-out.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACtC,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,mBAAmB,CAAC;AAE3B,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,GAC/B,6BAA6B,CAiB/B;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAUxC;CACF"}
+{"version":3,"file":"sim-cognito-sign-out.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-out.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAE9F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACtC,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,mBAAmB,CAAC;AAE3B,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,mCAAmC,EAI1D;IAED;;OAEG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,GAC/B,6BAA6B,CAmB/B;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAUxC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-sign-out.js

@@ -1,13 +1,15 @@
 import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+import { requireSimCognitoSelfService } from "../user/sim-cognito-self-service-scope.js";
 /**
  * The commands that sign a user out of every session it has.
  *
  * Both forget the refresh and access tokens the user holds, so a later
  * `REFRESH_TOKEN_AUTH` fails and the access token that signed out cannot sign
  * out again. Real Cognito revokes them the same way. Where they differ is
- * authorization: `GlobalSignOut` is authorized by the user's own access token
- * and evaluates no IAM policy, and `AdminUserGlobalSignOut` is an
- * administrative call that needs the IAM permission on the pool.
+ * authorization: `GlobalSignOut` is authorized by the user's own access token,
+ * which has to carry the scope every self-service operation needs, and
+ * evaluates no IAM policy. `AdminUserGlobalSignOut` is an administrative call
+ * that needs the IAM permission on the pool.
  */
 export class SimCognitoSignOutCommands {
     resolver;
@@ -27,6 +29,7 @@ export class SimCognitoSignOutCommands {
             throw new SimCognitoInvalidParameterException("AccessToken is required: sign out the user it was issued to");
         }
         const { pool, token } = this.pools.requireAccessToken(accessToken, this.clock.now());
+        requireSimCognitoSelfService(token, "GlobalSignOut");
         pool.auth.signOut(token.username);
         return { $metadata: {} };
     }

package/dist/service/cognito/command/auth/sim-cognito-sign-out.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-out.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-out.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAoBvF;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,CAA4B;IACpC,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,OAAgC;QAEhC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAE9C,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,mCAAmC,CAC3C,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CACnD,WAAW,EACX,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3C,oCAAoC,EACpC,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEjC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-sign-out.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-sign-out.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAmBzF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,CAA4B;IACpC,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,OAAgC;QAEhC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAE9C,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,mCAAmC,CAC3C,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CACnD,WAAW,EACX,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;QAEF,4BAA4B,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAErD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3C,oCAAoC,EACpC,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEjC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cognito/command/idp/sim-cognito-identity-provider-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-identity-provider-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/idp/sim-cognito-identity-provider-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACtC,gCAAgC,EAChC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,+BAA+B,EAC/B,qCAAqC,EACrC,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,gCAAgC,CAAC;AAOxC,UAAU,4CAA4C;IACpD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;GAKG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwC;IAE7D,YAAY,UAAU,EAAE,4CAA4C,EAGnE;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAiBxC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,kCAAkC,EAC3C,OAAO,CAAC,EAAE,wBAAwB,GACjC,wCAAwC,CAY1C;IAED;;;;;;;OAOG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAoBxC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAaxC;IAED;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,+BAA+B,EACxC,OAAO,CAAC,EAAE,wBAAwB,GACjC,qCAAqC,CAkBvC;CACF"}
+{"version":3,"file":"sim-cognito-identity-provider-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/idp/sim-cognito-identity-provider-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACtC,gCAAgC,EAChC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,+BAA+B,EAC/B,qCAAqC,EACrC,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,gCAAgC,CAAC;AAOxC,UAAU,4CAA4C;IACpD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;GAKG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwC;IAE7D,YAAY,UAAU,EAAE,4CAA4C,EAGnE;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAoBxC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,kCAAkC,EAC3C,OAAO,CAAC,EAAE,wBAAwB,GACjC,wCAAwC,CAY1C;IAED;;;;;;;OAOG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAoBxC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,wBAAwB,GACjC,sCAAsC,CAaxC;IAED;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,+BAA+B,EACxC,OAAO,CAAC,EAAE,wBAAwB,GACjC,qCAAqC,CAkBvC;CACF"}

package/dist/service/cognito/command/idp/sim-cognito-identity-provider-commands.js

@@ -28,7 +28,7 @@ export class SimCognitoIdentityProviderCommands {
         const pool = this.resolver.pool("cognito-idp:CreateIdentityProvider", input.UserPoolId, options);
         const provider = new SimCognitoUserPoolIdentityProvider({
             userPoolId: pool.id,
-            settings: new SimCognitoIdentityProviderSettings(input),
+            settings: new SimCognitoIdentityProviderSettings(input, pool.settings.schema),
             createdAt: this.clock.now(),
         });
         pool.auth.identityProviders.add(provider);
@@ -55,10 +55,7 @@ export class SimCognitoIdentityProviderCommands {
         const { input } = command;
         const pool = this.resolver.pool("cognito-idp:UpdateIdentityProvider", input.UserPoolId, options);
         const provider = pool.auth.identityProviders.require(input.ProviderName ?? "");
-        provider.update(new SimCognitoIdentityProviderSettings({
-            ...input,
-            ProviderType: provider.type.value,
-        }), this.clock.now());
+        provider.update(new SimCognitoIdentityProviderSettings({ ...input, ProviderType: provider.type.value }, pool.settings.schema), this.clock.now());
         return { $metadata: {}, IdentityProvider: this.view.describe(provider) };
     }
     /**

package/dist/service/cognito/command/idp/sim-cognito-identity-provider-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-identity-provider-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/idp/sim-cognito-identity-provider-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,+DAA+D,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,gEAAgE,CAAC;AACpH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAczF;;GAEG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAWxB;;;;;GAKG;AACH,MAAM,OAAO,kCAAkC;IAC5B,QAAQ,CAA4B;IACpC,KAAK,CAAW;IAChB,IAAI,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE7D,YAAY,UAAwD;QAClE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,kCAAkC,CAAC;YACtD,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,IAAI,kCAAkC,CAAC,KAAK,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA2C,EAC3C,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,sCAAsC,EACtC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAClD,KAAK,CAAC,YAAY,IAAI,EAAE,CACzB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAClD,KAAK,CAAC,YAAY,IAAI,EAAE,CACzB,CAAC;QAEF,QAAQ,CAAC,MAAM,CACb,IAAI,kCAAkC,CAAC;YACrC,GAAG,KAAK;YACR,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;SAClC,CAAC,EACF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAChC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAC9D,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,CACF,OAAwC,EACxC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,mCAAmC,EACnC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE;YAC/D,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,YAAY;YAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-identity-provider-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/idp/sim-cognito-identity-provider-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,+DAA+D,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,gEAAgE,CAAC;AACpH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAczF;;GAEG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAWxB;;;;;GAKG;AACH,MAAM,OAAO,kCAAkC;IAC5B,QAAQ,CAA4B;IACpC,KAAK,CAAW;IAChB,IAAI,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE7D,YAAY,UAAwD;QAClE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,kCAAkC,CAAC;YACtD,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,IAAI,kCAAkC,CAC9C,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,MAAM,CACrB;YACD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA2C,EAC3C,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,sCAAsC,EACtC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAClD,KAAK,CAAC,YAAY,IAAI,EAAE,CACzB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAClD,KAAK,CAAC,YAAY,IAAI,EAAE,CACzB,CAAC;QAEF,QAAQ,CAAC,MAAM,CACb,IAAI,kCAAkC,CACpC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CACrB,EACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAyC,EACzC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,oCAAoC,EACpC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAChC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAC9D,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,CACF,OAAwC,EACxC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,mCAAmC,EACnC,KAAK,CAAC,UAAU,EAChB,OAAO,CACR,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE;YAC/D,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,YAAY;YAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-command.types.d.ts

@@ -2,10 +2,12 @@
  * The sim Cognito Command types, gathered for the service facade.
  */
 export type { SimCognitoUserPoolType, SimCreateUserPoolCommand, SimCreateUserPoolCommandInput, SimCreateUserPoolCommandOutput, SimDeleteUserPoolCommand, SimDeleteUserPoolCommandInput, SimDeleteUserPoolCommandOutput, SimDescribeUserPoolCommand, SimDescribeUserPoolCommandInput, SimDescribeUserPoolCommandOutput, SimUpdateUserPoolCommand, SimUpdateUserPoolCommandInput, SimUpdateUserPoolCommandOutput, } from "./user-pool/user-pool.command.js";
+export type { SimGetUserPoolMfaConfigCommand, SimGetUserPoolMfaConfigCommandInput, SimGetUserPoolMfaConfigCommandOutput, SimSetUserPoolMfaConfigCommand, SimSetUserPoolMfaConfigCommandInput, SimSetUserPoolMfaConfigCommandOutput, } from "./user-pool/user-pool-mfa.command.js";
 export type { SimCognitoUserPoolDescriptionType, SimListUserPoolsCommand, SimListUserPoolsCommandInput, SimListUserPoolsCommandOutput, } from "./user-pool/list-user-pools.command.js";
 export type { SimCognitoUserPoolClientSettingsInput, SimCognitoUserPoolClientType, SimCreateUserPoolClientCommand, SimCreateUserPoolClientCommandInput, SimCreateUserPoolClientCommandOutput, SimDeleteUserPoolClientCommand, SimDeleteUserPoolClientCommandInput, SimDeleteUserPoolClientCommandOutput, SimDescribeUserPoolClientCommand, SimDescribeUserPoolClientCommandInput, SimDescribeUserPoolClientCommandOutput, SimUpdateUserPoolClientCommand, SimUpdateUserPoolClientCommandInput, SimUpdateUserPoolClientCommandOutput, } from "./client/user-pool-client.command.js";
 export type { SimCognitoUserPoolClientDescription, SimListUserPoolClientsCommand, SimListUserPoolClientsCommandInput, SimListUserPoolClientsCommandOutput, } from "./client/list-user-pool-clients.command.js";
-export type { SimAdminCreateUserCommand, SimAdminCreateUserCommandInput, SimAdminCreateUserCommandOutput, SimAdminDeleteUserCommand, SimAdminDeleteUserCommandOutput, SimAdminDisableUserCommand, SimAdminDisableUserCommandOutput, SimAdminEnableUserCommand, SimAdminEnableUserCommandOutput, SimAdminGetUserCommand, SimAdminGetUserCommandOutput, SimAdminSetUserPasswordCommand, SimAdminSetUserPasswordCommandInput, SimAdminSetUserPasswordCommandOutput, SimAdminUpdateUserAttributesCommand, SimAdminUpdateUserAttributesCommandInput, SimAdminUpdateUserAttributesCommandOutput, SimCognitoAdminUserCommandInput, SimCognitoDescribedUser, SimCognitoUserType, } from "./user/user.command.js";
+export type { SimAdminCreateUserCommand, SimAdminCreateUserCommandInput, SimAdminCreateUserCommandOutput, SimAdminDeleteUserCommand, SimAdminDeleteUserCommandOutput, SimAdminDisableUserCommand, SimAdminDisableUserCommandOutput, SimAdminEnableUserCommand, SimAdminEnableUserCommandOutput, SimAdminGetUserCommand, SimAdminGetUserCommandOutput, SimAdminSetUserPasswordCommand, SimAdminSetUserPasswordCommandInput, SimAdminSetUserPasswordCommandOutput, SimAdminUpdateUserAttributesCommand, SimAdminUpdateUserAttributesCommandInput, SimAdminUpdateUserAttributesCommandOutput, SimCognitoAdminUserCommandInput, SimCognitoDescribedUser, SimCognitoSelfUser, SimCognitoUserFactors, SimCognitoUserType, } from "./user/user.command.js";
+export type { SimAdminSetUserMFAPreferenceCommand, SimAdminSetUserMFAPreferenceCommandInput, SimAdminSetUserMFAPreferenceCommandOutput, SimAssociateSoftwareTokenCommand, SimAssociateSoftwareTokenCommandInput, SimAssociateSoftwareTokenCommandOutput, SimGetUserCommand, SimGetUserCommandInput, SimGetUserCommandOutput, SimSetUserMFAPreferenceCommand, SimSetUserMFAPreferenceCommandInput, SimSetUserMFAPreferenceCommandOutput, SimVerifySoftwareTokenCommand, SimVerifySoftwareTokenCommandInput, SimVerifySoftwareTokenCommandOutput, } from "./user/user-mfa.command.js";
 export type { SimListUsersCommand, SimListUsersCommandInput, SimListUsersCommandOutput, } from "./user/list-users.command.js";
 export type { SimAdminConfirmSignUpCommand, SimAdminConfirmSignUpCommandInput, SimAdminConfirmSignUpCommandOutput, SimCognitoSignUpCommandInput, SimConfirmSignUpCommand, SimConfirmSignUpCommandInput, SimConfirmSignUpCommandOutput, SimResendConfirmationCodeCommand, SimResendConfirmationCodeCommandOutput, SimSignUpCommand, SimSignUpCommandInput, SimSignUpCommandOutput, } from "./user/sign-up.command.js";
 export type { SimCognitoGroupCommandInput, SimCognitoGroupType, SimCreateGroupCommand, SimCreateGroupCommandInput, SimCreateGroupCommandOutput, SimDeleteGroupCommand, SimDeleteGroupCommandOutput, SimGetGroupCommand, SimGetGroupCommandOutput, SimListGroupsCommand, SimListGroupsCommandInput, SimListGroupsCommandOutput, SimUpdateGroupCommand, SimUpdateGroupCommandInput, SimUpdateGroupCommandOutput, } from "./group/group.command.js";

package/dist/service/cognito/command/sim-cognito-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qCAAqC,EACrC,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,4BAA4B,EAC5B,iCAAiC,EACjC,kCAAkC,EAClC,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,qCAAqC,EACrC,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"sim-cognito-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qCAAqC,EACrC,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,4BAA4B,EAC5B,iCAAiC,EACjC,kCAAkC,EAClC,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,sCAAsC,EACtC,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,qCAAqC,EACrC,0BAA0B,EAC1B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,8BAA8B,EAC9B,kCAAkC,EAClC,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,gCAAgC,EAChC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC"}

package/dist/service/cognito/command/sim-cognito-commands.d.ts

@@ -16,9 +16,11 @@ import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool
 import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
 import { SimCognitoSignUpCommands } from "./user/sim-cognito-sign-up-commands.js";
 import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoUserMfaCommands } from "./user/sim-cognito-user-mfa-commands.js";
 import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
 import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
 import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+import { SimCognitoUserPoolMfaCommands } from "./user-pool/sim-cognito-user-pool-mfa-commands.js";
 interface SimCognitoCommandsProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
     readonly iam: SimIamInterServiceAuthZ;
@@ -36,10 +38,12 @@ interface SimCognitoCommandsProperties {
  */
 export declare class SimCognitoCommands {
     readonly userPools: SimCognitoUserPoolCommands;
+    readonly userPoolMfa: SimCognitoUserPoolMfaCommands;
     readonly listUserPools: SimCognitoListUserPools;
     readonly clients: SimCognitoUserPoolClientCommands;
     readonly listClients: SimCognitoListUserPoolClients;
     readonly users: SimCognitoUserCommands;
+    readonly userMfa: SimCognitoUserMfaCommands;
     readonly signUp: SimCognitoSignUpCommands;
     readonly userUpdates: SimCognitoUserUpdateCommands;
     readonly listUsers: SimCognitoListUsers;

package/dist/service/cognito/command/sim-cognito-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAInG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAGxG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAGrG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAE3F,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IACjD,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAC7C,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,SAAgB,iBAAiB,EAAE,kCAAkC,CAAC;IACtE,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IAEjD,YAAY,UAAU,EAAE,4BAA4B,EAkFnD;CACF"}
+{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAInG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAGxG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAGrG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAElG,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IACnD,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IACjD,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAC7C,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,SAAgB,iBAAiB,EAAE,kCAAkC,CAAC;IACtE,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IAEjD,YAAY,UAAU,EAAE,4BAA4B,EA6FnD;CACF"}

package/dist/service/cognito/command/sim-cognito-commands.js

@@ -18,11 +18,14 @@ import { SimCognitoListGroups } from "./group/sim-cognito-list-groups.js";
 import { SimCognitoUserPoolClientCommands } from "./client/sim-cognito-user-pool-client-commands.js";
 import { SimCognitoListUsers } from "./user/sim-cognito-list-users.js";
 import { SimCognitoSignUpCommands } from "./user/sim-cognito-sign-up-commands.js";
+import { SimCognitoTokenUser } from "./user/sim-cognito-token-user.js";
 import { SimCognitoUserCommands } from "./user/sim-cognito-user-commands.js";
+import { SimCognitoUserMfaCommands } from "./user/sim-cognito-user-mfa-commands.js";
 import { SimCognitoRequestResolver } from "./sim-cognito-request-resolver.js";
 import { SimCognitoUserUpdateCommands } from "./user/sim-cognito-user-update-commands.js";
 import { SimCognitoListUserPools } from "./user-pool/sim-cognito-list-user-pools.js";
 import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-commands.js";
+import { SimCognitoUserPoolMfaCommands } from "./user-pool/sim-cognito-user-pool-mfa-commands.js";
 /**
  * The command handlers of one simulated Cognito scope.
  *
@@ -32,10 +35,12 @@ import { SimCognitoUserPoolCommands } from "./user-pool/sim-cognito-user-pool-co
  */
 export class SimCognitoCommands {
     userPools;
+    userPoolMfa;
     listUserPools;
     clients;
     listClients;
     users;
+    userMfa;
     signUp;
     userUpdates;
     listUsers;
@@ -63,6 +68,9 @@ export class SimCognitoCommands {
         // One token issuer serves the API sign-ins and the hosted endpoints, so a
         // token is the same thing however the user reached it.
         const tokenIssuer = new SimCognitoTokenIssuer({ clock, triggers });
+        // The operations a signed-in user performs on itself name no pool at all:
+        // the access token is what says which pool the request is for.
+        const tokenUser = new SimCognitoTokenUser({ pools, clock });
         this.userPools = new SimCognitoUserPoolCommands({
             pools,
             poolFactory: new SimCognitoUserPoolFactory({
@@ -72,6 +80,7 @@ export class SimCognitoCommands {
             }),
             authorizer,
         });
+        this.userPoolMfa = new SimCognitoUserPoolMfaCommands({ pools, authorizer });
         this.listUserPools = new SimCognitoListUserPools({ pools, authorizer });
         this.clients = new SimCognitoUserPoolClientCommands({
             pools,
@@ -81,10 +90,16 @@ export class SimCognitoCommands {
         this.listClients = new SimCognitoListUserPoolClients({ pools, authorizer });
         this.users = new SimCognitoUserCommands({
             resolver,
+            tokenUser,
             userFactory,
             triggers,
             messenger,
         });
+        this.userMfa = new SimCognitoUserMfaCommands({
+            resolver,
+            tokenUser,
+            clock,
+        });
         this.signUp = new SimCognitoSignUpCommands({
             authResolver,
             resolver,
@@ -107,6 +122,7 @@ export class SimCognitoCommands {
             clock,
             triggers,
             tokenIssuer,
+            messenger,
         });
         this.domains = new SimCognitoDomainCommands({
             pools,

package/dist/service/cognito/command/sim-cognito-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAW3F;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,MAAM,CAA2B;IACjC,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAC7B,OAAO,CAA2B;IAClC,iBAAiB,CAAqC;IACtD,MAAM,CAA2B;IAEjD,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,GACxE,UAAU,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW,EAAE,IAAI,yBAAyB,CAAC;gBACzC,kBAAkB;gBAClB,KAAK;gBACL,KAAK;aACN,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;YAC7D,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC;YACrC,QAAQ;YACR,YAAY;YACZ,KAAK;YACL,KAAK;YACL,QAAQ;YACR,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,KAAK;YACL,OAAO;YACP,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,kCAAkC,CAAC;YAC9D,QAAQ;YACR,KAAK;SACN,CAAC,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,WAAW;YACX,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAWlG;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,WAAW,CAAgC;IAC3C,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,OAAO,CAA4B;IACnC,MAAM,CAA2B;IACjC,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAC7B,OAAO,CAA2B;IAClC,iBAAiB,CAAqC;IACtD,MAAM,CAA2B;IAEjD,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,GACxE,UAAU,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW,EAAE,IAAI,yBAAyB,CAAC;gBACzC,kBAAkB;gBAClB,KAAK;gBACL,KAAK;aACN,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;YAC7D,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,SAAS;YACT,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC3C,QAAQ;YACR,SAAS;YACT,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC;YACrC,QAAQ;YACR,YAAY;YACZ,KAAK;YACL,KAAK;YACL,QAAQ;YACR,WAAW;YACX,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,KAAK;YACL,OAAO;YACP,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,kCAAkC,CAAC;YAC9D,QAAQ;YACR,KAAK;SACN,CAAC,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,WAAW;YACX,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/user/sim-cognito-self-service-scope.d.ts

@@ -0,0 +1,14 @@
+import type { SimCognitoIssuedToken } from "../../user-pool/auth/sim-cognito-issued-token.js";
+/**
+ * Refuse an operation a user performs on itself where the access token was
+ * never granted the scope real Cognito needs for one.
+ *
+ * A token from an API sign-in always carries
+ * `aws.cognito.signin.user.admin`, and a token from a hosted sign-in carries
+ * it only where the app client asked for it among its `AllowedOAuthScopes`. A
+ * hosted sign-in granted `openid email` alone can read its own claims and
+ * nothing else, so letting one through here would pass code a deployment
+ * refuses.
+ */
+export declare function requireSimCognitoSelfService(token: SimCognitoIssuedToken, operation: string): void;
+//# sourceMappingURL=sim-cognito-self-service-scope.d.ts.map

package/dist/service/cognito/command/user/sim-cognito-self-service-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-self-service-scope.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/sim-cognito-self-service-scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAE9F;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,qBAAqB,EAC5B,SAAS,EAAE,MAAM,GAChB,IAAI,CASN"}

package/dist/service/cognito/command/user/sim-cognito-self-service-scope.js

@@ -0,0 +1,20 @@
+import { SimCognitoNotAuthorizedException } from "../../error/sim-cognito.error.js";
+/**
+ * Refuse an operation a user performs on itself where the access token was
+ * never granted the scope real Cognito needs for one.
+ *
+ * A token from an API sign-in always carries
+ * `aws.cognito.signin.user.admin`, and a token from a hosted sign-in carries
+ * it only where the app client asked for it among its `AllowedOAuthScopes`. A
+ * hosted sign-in granted `openid email` alone can read its own claims and
+ * nothing else, so letting one through here would pass code a deployment
+ * refuses.
+ */
+export function requireSimCognitoSelfService(token, operation) {
+    if (token.actsForUser) {
+        return;
+    }
+    throw new SimCognitoNotAuthorizedException(`Access Token does not have required scopes: ${operation} needs the ` +
+        `aws.cognito.signin.user.admin scope, which this sign-in was not granted`);
+}
+//# sourceMappingURL=sim-cognito-self-service-scope.js.map

package/dist/service/cognito/command/user/sim-cognito-self-service-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-self-service-scope.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user/sim-cognito-self-service-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAGpF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAA4B,EAC5B,SAAiB;IAEjB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CACxC,+CAA+C,SAAS,aAAa;QACnE,yEAAyE,CAC5E,CAAC;AACJ,CAAC"}