@kensio/yulin 1.14.2 → 1.15.0

package/dist/service/cognito/sim-cognito-identity-provider.js

@@ -6,7 +6,7 @@ import { SimCognitoCommands } from "./command/sim-cognito-commands.js";
 import { SimCognitoDomainRegistry } from "./registry/sim-cognito-domain-registry.js";
 import { SimCognitoUserPoolRegistry } from "./registry/sim-cognito-user-pool-registry.js";
 import { SimCognitoSdkCommandRouter } from "./sdk/sim-cognito-sdk-command-router.js";
-import { SimCognitoFederation } from "./sim-cognito-federation.js";
+import { SimCognitoAppClients } from "./sim-cognito-app-clients.js";
 import { requireSimCognitoUserPoolId, } from "./user-pool/sim-cognito-user-pool-id.js";
 import { SimCognitoUserPoolStore } from "./user-pool/sim-cognito-user-pool-store.js";
 import { SimCognitoNoTriggerFunctions, } from "./user-pool/trigger/sim-cognito-trigger-functions.js";
@@ -18,14 +18,15 @@ import { SimCognitoNoTriggerFunctions, } from "./user-pool/trigger/sim-cognito-t
  * id names the region it was created in, and an app client id is only
  * meaningful inside its pool.
  *
- * The pool and app client operations are here. The user and group operations
- * are on `SimCognitoUserDirectory`, which this extends, so a caller reaches
+ * The pool operations are here. The app client ones are on
+ * `SimCognitoAppClients` and the user and group ones on
+ * `SimCognitoUserDirectory`, both of which this extends, so a caller reaches
  * all of them on one service object.
  *
  * Only user pools are simulated. Cognito identity pools, which hand out AWS
  * credentials, are a different service and are not simulated at all.
  */
-export class SimCognitoIdentityProvider extends SimCognitoFederation {
+export class SimCognitoIdentityProvider extends SimCognitoAppClients {
     pools;
     userPoolRegistry;
     domainRegistry;
@@ -122,46 +123,29 @@ export class SimCognitoIdentityProvider extends SimCognitoFederation {
         return this.commands.userPools.delete(command, options);
     }
     /**
-     * Handle a ListUserPools Command from the SDK.
-     */
-    async listUserPools(command, options) {
-        await this.background.sequence();
-        return this.commands.listUserPools.handle(command, options);
-    }
-    /**
-     * Handle a CreateUserPoolClient Command from the SDK.
-     */
-    async createUserPoolClient(command, options) {
-        await this.background.sequence();
-        return this.commands.clients.create(command, options);
-    }
-    /**
-     * Handle a DescribeUserPoolClient Command from the SDK.
-     */
-    async describeUserPoolClient(command, options) {
-        await this.background.sequence();
-        return this.commands.clients.describe(command, options);
-    }
-    /**
-     * Handle an UpdateUserPoolClient Command from the SDK.
+     * Handle a SetUserPoolMfaConfig Command from the SDK.
+     *
+     * This is the second call real CloudFormation makes when a template declares
+     * a pool with MFA, and the only place the factors behind an `MfaConfiguration`
+     * are set.
      */
-    async updateUserPoolClient(command, options) {
+    async setUserPoolMfaConfig(command, options) {
         await this.background.sequence();
-        return this.commands.clients.update(command, options);
+        return this.commands.userPoolMfa.set(command, options);
     }
     /**
-     * Handle a DeleteUserPoolClient Command from the SDK.
+     * Handle a GetUserPoolMfaConfig Command from the SDK.
      */
-    async deleteUserPoolClient(command, options) {
+    async getUserPoolMfaConfig(command, options) {
         await this.background.sequence();
-        return this.commands.clients.delete(command, options);
+        return this.commands.userPoolMfa.get(command, options);
     }
     /**
-     * Handle a ListUserPoolClients Command from the SDK.
+     * Handle a ListUserPools Command from the SDK.
      */
-    async listUserPoolClients(command, options) {
+    async listUserPools(command, options) {
         await this.background.sequence();
-        return this.commands.listClients.handle(command, options);
+        return this.commands.listUserPools.handle(command, options);
     }
     /**
      * Get this service's CloudFormation Resource factory.

package/dist/service/cognito/sim-cognito-identity-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-identity-provider.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAKnE,OAAO,EACL,2BAA2B,GAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAgC9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IACjD,KAAK,CAA0B;IAC/B,gBAAgB,CAA6B;IAC7C,cAAc,CAA2B;IACzC,SAAS,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,GAAG,IAAI,4BAA4B,CAAC;QAC7D,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,gBAAgB,GAAG,IAAI,0BAA0B,EAAE,EACnD,cAAc,GAAG,IAAI,wBAAwB,EAAE,EAC/C,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,GACtD,GAAG,UAAU,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,QAAQ,EAAE,IAAI,kBAAkB,CAAC;gBAC/B,kBAAkB;gBAClB,GAAG;gBACH,KAAK,EAAE,UAAU;gBACjB,KAAK;gBACL,OAAO,EAAE,cAAc;gBACvB,gBAAgB;aACjB,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAkC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD,EACnD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD,EACzD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-identity-provider.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAKpE,OAAO,EACL,2BAA2B,GAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAgC9D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IACjD,KAAK,CAA0B;IAC/B,gBAAgB,CAA6B;IAC7C,cAAc,CAA2B;IACzC,SAAS,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,GAAG,IAAI,4BAA4B,CAAC;QAC7D,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,gBAAgB,GAAG,IAAI,0BAA0B,EAAE,EACnD,cAAc,GAAG,IAAI,wBAAwB,EAAE,EAC/C,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,GACtD,GAAG,UAAU,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,QAAQ,EAAE,IAAI,kBAAkB,CAAC;gBAC/B,kBAAkB;gBAClB,GAAG;gBACH,KAAK,EAAE,UAAU;gBACjB,KAAK;gBACL,OAAO,EAAE,cAAc;gBACvB,gBAAgB;aACjB,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAkC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD,EACnD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-user-directory.d.ts

@@ -1,7 +1,7 @@
 import type { BackgroundScheduler } from "../../util/background/background.js";
 import type * as simCognitoCommands from "./command/sim-cognito-command.types.js";
 import type { SimCognitoCommands } from "./command/sim-cognito-commands.js";
-import { SimCognitoAuthentication, type SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-authentication.js";
+import { SimCognitoUserFactors, type SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-user-factors.js";
 export type { SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-authentication.js";
 interface SimCognitoUserDirectoryProperties {
     readonly commands: SimCognitoCommands;
@@ -12,12 +12,13 @@ interface SimCognitoUserDirectoryProperties {
  * groups they belong to.
  *
  * `SimCognitoIdentityProvider` extends this, which extends
- * `SimCognitoAuthentication`, so a caller reaches every operation on the one
+ * `SimCognitoUserFactors`, so a caller reaches every operation on the one
  * service object the way the real API presents them. They are split up because
- * a pool's settings, a pool's contents and signing in are three separate
- * concerns, and each is long enough to read on its own.
+ * a pool's settings, a pool's contents, the factors a user registers and
+ * signing in are separate concerns, and each is long enough to read on its
+ * own.
  */
-export declare abstract class SimCognitoUserDirectory extends SimCognitoAuthentication {
+export declare abstract class SimCognitoUserDirectory extends SimCognitoUserFactors {
     protected constructor(properties: SimCognitoUserDirectoryProperties);
     /**
      * Handle an AdminCreateUser Command from the SDK.

package/dist/service/cognito/sim-cognito-user-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,wBAAwB,EACxB,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AAEzC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;GASG;AACH,8BAAsB,uBAAwB,SAAQ,wBAAwB;IAC5E,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}
+{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,KAAK,wCAAwC,EAC9C,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,uBAAwB,SAAQ,qBAAqB;IACzE,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}

package/dist/service/cognito/sim-cognito-user-directory.js

@@ -1,15 +1,16 @@
-import { SimCognitoAuthentication, } from "./sim-cognito-authentication.js";
+import { SimCognitoUserFactors, } from "./sim-cognito-user-factors.js";
 /**
  * The directory half of simulated Cognito: the users in a pool, and the
  * groups they belong to.
  *
  * `SimCognitoIdentityProvider` extends this, which extends
- * `SimCognitoAuthentication`, so a caller reaches every operation on the one
+ * `SimCognitoUserFactors`, so a caller reaches every operation on the one
  * service object the way the real API presents them. They are split up because
- * a pool's settings, a pool's contents and signing in are three separate
- * concerns, and each is long enough to read on its own.
+ * a pool's settings, a pool's contents, the factors a user registers and
+ * signing in are separate concerns, and each is long enough to read on its
+ * own.
  */
-export class SimCognitoUserDirectory extends SimCognitoAuthentication {
+export class SimCognitoUserDirectory extends SimCognitoUserFactors {
     constructor(properties) {
         super(properties);
     }

package/dist/service/cognito/sim-cognito-user-directory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-directory.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,wBAAwB,GAEzB,MAAM,iCAAiC,CAAC;AASzC;;;;;;;;;GASG;AACH,MAAM,OAAgB,uBAAwB,SAAQ,wBAAwB;IAC5E,YAAsB,UAA6C;QACjE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD;QAEnD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAwD,EACxD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkD,EAClD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA+D,EAC/D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA+C,EAC/C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,OAA8C,EAC9C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAgD,EAChD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD,EACzD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-directory.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC;AASvC;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,uBAAwB,SAAQ,qBAAqB;IACzE,YAAsB,UAA6C;QACjE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD;QAEnD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAwD,EACxD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkD,EAClD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA+D,EAC/D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAqD,EACrD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA+C,EAC/C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,OAA8C,EAC9C,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAiD,EACjD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAgD,EAChD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD,EACzD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-user-factors.d.ts

@@ -0,0 +1,47 @@
+import type { BackgroundScheduler } from "../../util/background/background.js";
+import type * as simCognitoCommands from "./command/sim-cognito-command.types.js";
+import type { SimCognitoCommands } from "./command/sim-cognito-commands.js";
+import { SimCognitoAuthentication, type SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-authentication.js";
+export type { SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-authentication.js";
+interface SimCognitoUserFactorsProperties {
+    readonly commands: SimCognitoCommands;
+    readonly background: BackgroundScheduler;
+}
+/**
+ * The self-service half of simulated Cognito: a signed-in user reading itself,
+ * and the second factors it registers.
+ *
+ * All but one of these are authorized by the user's own access token and
+ * evaluate no IAM policy, as real Cognito evaluates none for them.
+ * `AdminSetUserMFAPreference` is the administrative one, and authorizes
+ * against the pool like every other admin operation.
+ *
+ * `SimCognitoUserDirectory` extends this, which extends
+ * `SimCognitoAuthentication`.
+ */
+export declare abstract class SimCognitoUserFactors extends SimCognitoAuthentication {
+    protected constructor(properties: SimCognitoUserFactorsProperties);
+    /**
+     * Handle a GetUser Command from the SDK.
+     *
+     * The access token is what authorizes this, as it does on real Cognito.
+     */
+    getUser(command: simCognitoCommands.SimGetUserCommand): Promise<simCognitoCommands.SimGetUserCommandOutput>;
+    /**
+     * Handle an AssociateSoftwareToken Command from the SDK.
+     */
+    associateSoftwareToken(command: simCognitoCommands.SimAssociateSoftwareTokenCommand): Promise<simCognitoCommands.SimAssociateSoftwareTokenCommandOutput>;
+    /**
+     * Handle a VerifySoftwareToken Command from the SDK.
+     */
+    verifySoftwareToken(command: simCognitoCommands.SimVerifySoftwareTokenCommand): Promise<simCognitoCommands.SimVerifySoftwareTokenCommandOutput>;
+    /**
+     * Handle a SetUserMFAPreference Command from the SDK.
+     */
+    setUserMFAPreference(command: simCognitoCommands.SimSetUserMFAPreferenceCommand): Promise<simCognitoCommands.SimSetUserMFAPreferenceCommandOutput>;
+    /**
+     * Handle an AdminSetUserMFAPreference Command from the SDK.
+     */
+    adminSetUserMFAPreference(command: simCognitoCommands.SimAdminSetUserMFAPreferenceCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminSetUserMFAPreferenceCommandOutput>;
+}
+//# sourceMappingURL=sim-cognito-user-factors.d.ts.map

package/dist/service/cognito/sim-cognito-user-factors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-factors.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-factors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,wBAAwB,EACxB,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AAEzC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,qBAAsB,SAAQ,wBAAwB;IAC1E,SAAS,aAAa,UAAU,EAAE,+BAA+B,EAEhE;IAED;;;;OAIG;IACG,OAAO,CACX,OAAO,EAAE,kBAAkB,CAAC,iBAAiB,GAC5C,OAAO,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAGrD;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,GACxD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,GACzD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;CACF"}

package/dist/service/cognito/sim-cognito-user-factors.js

@@ -0,0 +1,56 @@
+import { SimCognitoAuthentication, } from "./sim-cognito-authentication.js";
+/**
+ * The self-service half of simulated Cognito: a signed-in user reading itself,
+ * and the second factors it registers.
+ *
+ * All but one of these are authorized by the user's own access token and
+ * evaluate no IAM policy, as real Cognito evaluates none for them.
+ * `AdminSetUserMFAPreference` is the administrative one, and authorizes
+ * against the pool like every other admin operation.
+ *
+ * `SimCognitoUserDirectory` extends this, which extends
+ * `SimCognitoAuthentication`.
+ */
+export class SimCognitoUserFactors extends SimCognitoAuthentication {
+    constructor(properties) {
+        super(properties);
+    }
+    /**
+     * Handle a GetUser Command from the SDK.
+     *
+     * The access token is what authorizes this, as it does on real Cognito.
+     */
+    async getUser(command) {
+        await this.background.sequence();
+        return this.commands.users.getUser(command);
+    }
+    /**
+     * Handle an AssociateSoftwareToken Command from the SDK.
+     */
+    async associateSoftwareToken(command) {
+        await this.background.sequence();
+        return this.commands.userMfa.associateSoftwareToken(command);
+    }
+    /**
+     * Handle a VerifySoftwareToken Command from the SDK.
+     */
+    async verifySoftwareToken(command) {
+        await this.background.sequence();
+        return this.commands.userMfa.verifySoftwareToken(command);
+    }
+    /**
+     * Handle a SetUserMFAPreference Command from the SDK.
+     */
+    async setUserMFAPreference(command) {
+        await this.background.sequence();
+        return this.commands.userMfa.setUserMfaPreference(command);
+    }
+    /**
+     * Handle an AdminSetUserMFAPreference Command from the SDK.
+     */
+    async adminSetUserMFAPreference(command, options) {
+        await this.background.sequence();
+        return this.commands.userMfa.adminSetUserMfaPreference(command, options);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-factors.js.map

package/dist/service/cognito/sim-cognito-user-factors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-factors.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-factors.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,wBAAwB,GAEzB,MAAM,iCAAiC,CAAC;AASzC;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,qBAAsB,SAAQ,wBAAwB;IAC1E,YAAsB,UAA2C;QAC/D,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,OAA6C;QAE7C,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAyD;QAEzD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D;QAE1D,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAA+D,EAC/D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session-store.d.ts

@@ -6,6 +6,8 @@ export interface SimCognitoAuthSessionRequest {
     readonly sessionId: string | undefined;
     readonly username: string;
     readonly clientId: string;
+    /** The challenge the response is answering, which the session carries. */
+    readonly challengeName: string;
     readonly now: Date;
 }
 /**
@@ -32,8 +34,8 @@ export declare class SimCognitoAuthSessionStore {
      * Resolve the session a challenge response carries, or refuse.
      *
      * A session this pool never issued, one already used, one for another user
-     * or app client, and one that has run out all fail the same way, as they do
-     * on real Cognito.
+     * or app client, one issued for a different challenge, and one that has run
+     * out all fail the same way, as they do on real Cognito.
      */
     require(request: SimCognitoAuthSessionRequest): SimCognitoAuthSession;
     /**

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-session-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE;;;;;;OAMG;IACH,GAAG,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAGxC;IAED;;OAEG;IACH,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAMrE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,EAAE,4BAA4B,GAAG,qBAAqB,CAcpE;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAE3C;IAED,OAAO,CAAC,aAAa;CAOtB"}
+{"version":3,"file":"sim-cognito-auth-session-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,0EAA0E;IAC1E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE;;;;;;OAMG;IACH,GAAG,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAGxC;IAED;;OAEG;IACH,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAMrE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,EAAE,4BAA4B,GAAG,qBAAqB,CAepE;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAE3C;IAED,OAAO,CAAC,aAAa;CAOtB"}

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session-store.js

@@ -31,13 +31,14 @@ export class SimCognitoAuthSessionStore {
      * Resolve the session a challenge response carries, or refuse.
      *
      * A session this pool never issued, one already used, one for another user
-     * or app client, and one that has run out all fail the same way, as they do
-     * on real Cognito.
+     * or app client, one issued for a different challenge, and one that has run
+     * out all fail the same way, as they do on real Cognito.
      */
     require(request) {
         const session = this.find(request.sessionId);
         if (session === undefined ||
             !session.belongsTo(request.username, request.clientId) ||
+            !session.answers(request.challengeName) ||
             session.isExpiredAt(request.now)) {
             throw new SimCognitoNotAuthorizedException("Invalid session for the user.");
         }

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-session-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAapF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAErE;;;;;;OAMG;IACH,GAAG,CAAC,OAA8B;QAChC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,SAA6B;QAChC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAqC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7C,IACE,OAAO,KAAK,SAAS;YACrB,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;YACtD,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAA8B;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,aAAa,CAAC,GAAS;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-session-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAgBpF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAErE;;;;;;OAMG;IACH,GAAG,CAAC,OAA8B;QAChC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,SAA6B;QAChC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,OAAqC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7C,IACE,OAAO,KAAK,SAAS;YACrB,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;YACtD,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;YACvC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAA8B;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,aAAa,CAAC,GAAS;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session.d.ts

@@ -3,6 +3,16 @@ interface SimCognitoAuthSessionProperties {
     readonly clientId: string;
     readonly challengeName: string;
     readonly issuedAt: Date;
+    /**
+     * The code the challenge sent the user, for a challenge that sent one.
+     *
+     * An `SMS_MFA` code lives here rather than on the user because it belongs to
+     * this one challenge: it goes when the session goes, so a code from an
+     * abandoned sign-in cannot complete a later one. A `SOFTWARE_TOKEN_MFA`
+     * challenge has none, because the code is whatever the user's authenticator
+     * app is showing.
+     */
+    readonly code?: string | undefined;
 }
 /**
  * One challenge session, which is what an unfinished authentication carries
@@ -17,6 +27,8 @@ export declare class SimCognitoAuthSession {
     readonly clientId: string;
     readonly challengeName: string;
     readonly issuedAt: Date;
+    /** The code this challenge sent, where it sent one. */
+    readonly code: string | undefined;
     constructor(properties: SimCognitoAuthSessionProperties);
     /**
      * Whether this session has run out by a given moment.
@@ -26,6 +38,14 @@ export declare class SimCognitoAuthSession {
      * Whether this session belongs to a user and app client.
      */
     belongsTo(username: string, clientId: string): boolean;
+    /**
+     * Whether this session was issued for the challenge being answered.
+     *
+     * A session carries one challenge, so answering an `SMS_MFA` challenge with
+     * the session from a `NEW_PASSWORD_REQUIRED` one is no more a valid session
+     * than one from another user.
+     */
+    answers(challengeName: string): boolean;
 }
 export {};
 //# sourceMappingURL=sim-cognito-auth-session.d.ts.map

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-session.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session.ts"],"names":[],"mappings":"AAaA,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,QAAQ,EAAE,IAAI,CAAC;IAE/B,YAAY,UAAU,EAAE,+BAA+B,EAMtD;IAED;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAM9B;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;CACF"}
+{"version":3,"file":"sim-cognito-auth-session.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session.ts"],"names":[],"mappings":"AAaA,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAExB;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,QAAQ,EAAE,IAAI,CAAC;IAE/B,uDAAuD;IACvD,SAAgB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzC,YAAY,UAAU,EAAE,+BAA+B,EAOtD;IAED;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAM9B;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAEtC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session.js

@@ -21,12 +21,15 @@ export class SimCognitoAuthSession {
     clientId;
     challengeName;
     issuedAt;
+    /** The code this challenge sent, where it sent one. */
+    code;
     constructor(properties) {
         this.id = randomBytes(sessionBytes).toString("base64url");
         this.username = properties.username;
         this.clientId = properties.clientId;
         this.challengeName = properties.challengeName;
         this.issuedAt = properties.issuedAt;
+        this.code = properties.code;
     }
     /**
      * Whether this session has run out by a given moment.
@@ -41,5 +44,15 @@ export class SimCognitoAuthSession {
     belongsTo(username, clientId) {
         return this.username === username && this.clientId === clientId;
     }
+    /**
+     * Whether this session was issued for the challenge being answered.
+     *
+     * A session carries one challenge, so answering an `SMS_MFA` challenge with
+     * the session from a `NEW_PASSWORD_REQUIRED` one is no more a valid session
+     * than one from another user.
+     */
+    answers(challengeName) {
+        return this.challengeName === challengeName;
+    }
 }
 //# sourceMappingURL=sim-cognito-auth-session.js.map

package/dist/service/cognito/user-pool/auth/sim-cognito-auth-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-session.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,YAAY,GAAG,EAAE,CAAC;AASxB;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAChB,EAAE,CAAS;IACX,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,aAAa,CAAS;IACtB,QAAQ,CAAO;IAE/B,YAAY,UAA2C;QACrD,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAS;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,IAAI,CACrD,CAAC;QAEF,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB,EAAE,QAAgB;QAC1C,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAClE,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-session.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,YAAY,GAAG,EAAE,CAAC;AAoBxB;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAChB,EAAE,CAAS;IACX,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,aAAa,CAAS;IACtB,QAAQ,CAAO;IAE/B,uDAAuD;IACvC,IAAI,CAAqB;IAEzC,YAAY,UAA2C;QACrD,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAS;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,IAAI,CACrD,CAAC;QAEF,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB,EAAE,QAAgB;QAC1C,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,aAAqB;QAC3B,OAAO,IAAI,CAAC,aAAa,KAAK,aAAa,CAAC;IAC9C,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-issued-token.d.ts

@@ -31,6 +31,16 @@ export declare class SimCognitoIssuedToken {
      */
     readonly scopes: readonly string[];
     constructor(properties: SimCognitoIssuedTokenProperties);
+    /**
+     * Whether this token may act on the user it was issued to.
+     *
+     * Real Cognito refuses an operation a user performs on itself where the
+     * access token does not carry `aws.cognito.signin.user.admin`. A token from
+     * an API sign-in always carries it, which is what an empty scope list here
+     * means, and a hosted sign-in carries it only where the app client asked for
+     * it among its `AllowedOAuthScopes`.
+     */
+    get actsForUser(): boolean;
     /**
      * Whether this token has run out by a given moment.
      */

package/dist/service/cognito/user-pool/auth/sim-cognito-issued-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-issued-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-issued-token.ts"],"names":[],"mappings":"AAAA,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAEzB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,IAAI,CAAC;IAC/B,SAAgB,SAAS,EAAE,IAAI,CAAC;IAEhC;;;OAGG;IACH,SAAgB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,YAAY,UAAU,EAAE,+BAA+B,EAOtD;IAED;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAE9B;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/B;CACF"}
+{"version":3,"file":"sim-cognito-issued-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-issued-token.ts"],"names":[],"mappings":"AAEA,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAEzB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,QAAQ,EAAE,IAAI,CAAC;IAC/B,SAAgB,SAAS,EAAE,IAAI,CAAC;IAEhC;;;OAGG;IACH,SAAgB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,YAAY,UAAU,EAAE,+BAA+B,EAOtD;IAED;;;;;;;;OAQG;IACH,IAAI,WAAW,IAAI,OAAO,CAKzB;IAED;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAE9B;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/B;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-issued-token.js

@@ -1,3 +1,4 @@
+import { simCognitoUserPoolAdminScope } from "../token/sim-cognito-access-token.js";
 /**
  * One token a pool has issued, as the pool remembers it.
  *
@@ -26,6 +27,19 @@ export class SimCognitoIssuedToken {
         this.expiresAt = properties.expiresAt;
         this.scopes = properties.scopes ?? [];
     }
+    /**
+     * Whether this token may act on the user it was issued to.
+     *
+     * Real Cognito refuses an operation a user performs on itself where the
+     * access token does not carry `aws.cognito.signin.user.admin`. A token from
+     * an API sign-in always carries it, which is what an empty scope list here
+     * means, and a hosted sign-in carries it only where the app client asked for
+     * it among its `AllowedOAuthScopes`.
+     */
+    get actsForUser() {
+        return (this.scopes.length === 0 ||
+            this.scopes.includes(simCognitoUserPoolAdminScope));
+    }
     /**
      * Whether this token has run out by a given moment.
      */

package/dist/service/cognito/user-pool/auth/sim-cognito-issued-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-issued-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-issued-token.ts"],"names":[],"mappings":"AAcA;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IAChB,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,QAAQ,CAAO;IACf,SAAS,CAAO;IAEhC;;;OAGG;IACa,MAAM,CAAoB;IAE1C,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAS;QACnB,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-issued-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-issued-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAgBpF;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IAChB,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,QAAQ,CAAO;IACf,SAAS,CAAO;IAEhC;;;OAGG;IACa,MAAM,CAAoB;IAE1C,YAAY,UAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI,WAAW;QACb,OAAO,CACL,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CACnD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAS;QACnB,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACpC,CAAC;CACF"}

package/dist/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.d.ts

@@ -1,3 +1,4 @@
+import type { SimCognitoUserPoolSchema } from "../schema/sim-cognito-user-pool-schema.js";
 import type { SimCognitoAttributeType } from "../user/sim-cognito-user-attributes.js";
 import type { SimCognitoExternalUser } from "./sim-cognito-external-user.js";
 /**
@@ -18,7 +19,8 @@ export type SimCognitoAttributeMappingType = Readonly<Record<string, string>>;
  */
 export declare class SimCognitoAttributeMapping {
     private readonly mapping;
-    constructor(mapping: SimCognitoAttributeMappingType | undefined);
+    private readonly schema;
+    constructor(mapping: SimCognitoAttributeMappingType | undefined, schema: SimCognitoUserPoolSchema);
     /**
      * This mapping as a described provider reports it.
      */
@@ -28,12 +30,16 @@ export declare class SimCognitoAttributeMapping {
      */
     attributesFor(externalUser: SimCognitoExternalUser): readonly SimCognitoAttributeType[];
     /**
-     * Refuse a mapping onto an attribute no pool here holds.
+     * Refuse a mapping onto an attribute the pool's schema does not hold.
+     *
+     * A `custom:` attribute the pool declared is as good a target as a standard
+     * one, and one it did not declare is refused here rather than during a
+     * sign-in much later, which is where writing the attribute would otherwise
+     * catch it.
      *
      * `username` is refused with its own message: real Cognito builds a
      * federated user's username from the provider and the subject, and a mapping
-     * cannot change it. It is refused here rather than during a sign-in much
-     * later, which is where the pool's schema would otherwise catch it.
+     * cannot change it.
      */
     private requireMappedNames;
 }

package/dist/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-attribute-mapping.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,YAAY,OAAO,EAAE,8BAA8B,GAAG,SAAS,EAG9D;IAED;;OAEG;IACH,QAAQ,IAAI,8BAA8B,CAEzC;IAED;;OAEG;IACH,aAAa,CACX,YAAY,EAAE,sBAAsB,GACnC,SAAS,uBAAuB,EAAE,CAOpC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;CAmB3B"}
+{"version":3,"file":"sim-cognito-attribute-mapping.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD,YACE,OAAO,EAAE,8BAA8B,GAAG,SAAS,EACnD,MAAM,EAAE,wBAAwB,EAKjC;IAED;;OAEG;IACH,QAAQ,IAAI,8BAA8B,CAEzC;IAED;;OAEG;IACH,aAAa,CACX,YAAY,EAAE,sBAAsB,GACnC,SAAS,uBAAuB,EAAE,CAOpC;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kBAAkB;CAmB3B"}

package/dist/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.js

@@ -1,5 +1,4 @@
 import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
-import { isSimCognitoStandardAttribute } from "../user/sim-cognito-standard-attributes.js";
 /**
  * What a provider's claims become on the pool user signing in.
  *
@@ -9,8 +8,10 @@ import { isSimCognitoStandardAttribute } from "../user/sim-cognito-standard-attr
  */
 export class SimCognitoAttributeMapping {
     mapping;
-    constructor(mapping) {
+    schema;
+    constructor(mapping, schema) {
         this.mapping = { ...mapping };
+        this.schema = schema;
         this.requireMappedNames();
     }
     /**
@@ -31,12 +32,16 @@ export class SimCognitoAttributeMapping {
             .filter((attribute) => attribute.Value !== undefined);
     }
     /**
-     * Refuse a mapping onto an attribute no pool here holds.
+     * Refuse a mapping onto an attribute the pool's schema does not hold.
+     *
+     * A `custom:` attribute the pool declared is as good a target as a standard
+     * one, and one it did not declare is refused here rather than during a
+     * sign-in much later, which is where writing the attribute would otherwise
+     * catch it.
      *
      * `username` is refused with its own message: real Cognito builds a
      * federated user's username from the provider and the subject, and a mapping
-     * cannot change it. It is refused here rather than during a sign-in much
-     * later, which is where the pool's schema would otherwise catch it.
+     * cannot change it.
      */
     requireMappedNames() {
         for (const attributeName of Object.keys(this.mapping)) {
@@ -45,10 +50,10 @@ export class SimCognitoAttributeMapping {
                     "federated user's username from the provider name and the " +
                     "subject it signed in with");
             }
-            if (!isSimCognitoStandardAttribute(attributeName)) {
+            if (!this.schema.holds(attributeName)) {
                 throw new SimCognitoInvalidParameterException(`AttributeMapping '${attributeName}' is not in the pool's schema: ` +
-                    `a pool here holds the standard attributes only, so there is ` +
-                    `nothing for the provider's claim to be mapped onto`);
+                    `${this.schema.describeHolding()}, so there is nothing for the ` +
+                    `provider's claim to be mapped onto`);
             }
         }
     }