@kensio/yulin 1.15.1 → 1.16.1

package/dist/service/cognito/serve/page/sim-cognito-page-paths.d.ts

@@ -0,0 +1,39 @@
+import type { SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
+/**
+ * The path the sign-in form is served at and posts back to.
+ *
+ * Real managed login serves its form at `/login` and sends the browser there
+ * from `/oauth2/authorize`. Here the authorize endpoint answers with the form
+ * itself, so an application's own authorize URL is the whole of what a test
+ * has to know.
+ */
+export declare const simCognitoAuthorizePath = "/oauth2/authorize";
+/**
+ * The path the sign-up form is served at.
+ */
+export declare const simCognitoSignUpPath = "/signup";
+/**
+ * The path the confirmation form is served at.
+ *
+ * Real managed login confirms a sign-up on a page of `/signup` rather than at
+ * a path of its own. This one is separate so that a browser can come back to
+ * it with the code, and a test can reach it without replaying the sign-up.
+ */
+export declare const simCognitoConfirmPath = "/confirm";
+/**
+ * Whether a request signs in one of the pool's own users.
+ *
+ * A request naming no identity provider, or naming `COGNITO`, is the one
+ * managed login answers with its own form, so a refusal from it is shown on
+ * that form. One naming an external provider has no form to be shown on.
+ */
+export declare function simCognitoIsLocalSignIn(values: SimCognitoPageParameters): boolean;
+/**
+ * The authorize parameters out of everything a request carried.
+ *
+ * A form post arrives holding these and the fields the form asked for, and a
+ * page passes on only these, so nothing a person typed becomes part of the
+ * next request's authorize parameters.
+ */
+export declare function simCognitoCarriedParameters(values: SimCognitoPageParameters): SimCognitoPageParameters;
+//# sourceMappingURL=sim-cognito-page-paths.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-page-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-paths.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAmBhD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAIT;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,wBAAwB,GAC/B,wBAAwB,CAI1B"}

package/dist/service/cognito/serve/page/sim-cognito-page-paths.js

@@ -0,0 +1,59 @@
+/**
+ * The path the sign-in form is served at and posts back to.
+ *
+ * Real managed login serves its form at `/login` and sends the browser there
+ * from `/oauth2/authorize`. Here the authorize endpoint answers with the form
+ * itself, so an application's own authorize URL is the whole of what a test
+ * has to know.
+ */
+export const simCognitoAuthorizePath = "/oauth2/authorize";
+/**
+ * The path the sign-up form is served at.
+ */
+export const simCognitoSignUpPath = "/signup";
+/**
+ * The path the confirmation form is served at.
+ *
+ * Real managed login confirms a sign-up on a page of `/signup` rather than at
+ * a path of its own. This one is separate so that a browser can come back to
+ * it with the code, and a test can reach it without replaying the sign-up.
+ */
+export const simCognitoConfirmPath = "/confirm";
+/**
+ * The authorize parameters every page carries on to the next.
+ *
+ * A sign-up ends in a sign-in, and that sign-in has to reach the app client's
+ * callback URL with the `state` the application started with, so these travel
+ * through each form as hidden inputs.
+ */
+const carriedNames = new Set([
+    "response_type",
+    "client_id",
+    "redirect_uri",
+    "state",
+    "scope",
+    "code_challenge",
+    "code_challenge_method",
+]);
+/**
+ * Whether a request signs in one of the pool's own users.
+ *
+ * A request naming no identity provider, or naming `COGNITO`, is the one
+ * managed login answers with its own form, so a refusal from it is shown on
+ * that form. One naming an external provider has no form to be shown on.
+ */
+export function simCognitoIsLocalSignIn(values) {
+    const named = values["identity_provider"] ?? values["idp_identifier"];
+    return named === undefined || named === "COGNITO";
+}
+/**
+ * The authorize parameters out of everything a request carried.
+ *
+ * A form post arrives holding these and the fields the form asked for, and a
+ * page passes on only these, so nothing a person typed becomes part of the
+ * next request's authorize parameters.
+ */
+export function simCognitoCarriedParameters(values) {
+    return Object.fromEntries(Object.entries(values).filter(([name]) => carriedNames.has(name)));
+}
+//# sourceMappingURL=sim-cognito-page-paths.js.map

package/dist/service/cognito/serve/page/sim-cognito-page-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-paths.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEtE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAgC;IAEhC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-page-request.d.ts

@@ -0,0 +1,22 @@
+import type { SimAwsServiceRequest } from "../../../../serve/controller/sim-service-controller.js";
+import type { SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
+/**
+ * What a request to a managed login page carried.
+ *
+ * A page is reached with a query string and posted back with a form encoded
+ * body, and both are name and value pairs, so they are read into the same
+ * record. Which of them a value came from changes nothing about what the page
+ * does with it.
+ */
+export declare class SimCognitoPageRequest {
+    /**
+     * The values a request carried, from its body where it has one and from its
+     * query string where it has not.
+     */
+    values(serviceRequest: SimAwsServiceRequest, url: URL): SimCognitoPageParameters;
+    /**
+     * The body as it arrived, which the serving layer buffered.
+     */
+    private body;
+}
+//# sourceMappingURL=sim-cognito-page-request.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-page-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-request.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;;OAGG;IACH,MAAM,CACJ,cAAc,EAAE,oBAAoB,EACpC,GAAG,EAAE,GAAG,GACP,wBAAwB,CAM1B;IAED;;OAEG;IACH,OAAO,CAAC,IAAI;CAOb"}

package/dist/service/cognito/serve/page/sim-cognito-page-request.js

@@ -0,0 +1,30 @@
+/**
+ * What a request to a managed login page carried.
+ *
+ * A page is reached with a query string and posted back with a form encoded
+ * body, and both are name and value pairs, so they are read into the same
+ * record. Which of them a value came from changes nothing about what the page
+ * does with it.
+ */
+export class SimCognitoPageRequest {
+    /**
+     * The values a request carried, from its body where it has one and from its
+     * query string where it has not.
+     */
+    values(serviceRequest, url) {
+        if (serviceRequest.request.method === "GET") {
+            return Object.fromEntries(url.searchParams);
+        }
+        return Object.fromEntries(new URLSearchParams(this.body(serviceRequest)));
+    }
+    /**
+     * The body as it arrived, which the serving layer buffered.
+     */
+    body(serviceRequest) {
+        if (serviceRequest.body === undefined) {
+            return "";
+        }
+        return Buffer.from(serviceRequest.body).toString("utf8");
+    }
+}
+//# sourceMappingURL=sim-cognito-page-request.js.map

package/dist/service/cognito/serve/page/sim-cognito-page-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-request.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-request.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;;OAGG;IACH,MAAM,CACJ,cAAoC,EACpC,GAAQ;QAER,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,cAAoC;QAC/C,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts

@@ -0,0 +1,28 @@
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import { type SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
+/**
+ * The sign-in form managed login answers an authorize request with.
+ *
+ * The form posts back to the authorize endpoint, carrying the parameters the
+ * browser arrived on as hidden inputs and the two fields the person filled in.
+ * The pool's identity providers are links to the same endpoint with
+ * `identity_provider` set, so both ways in are reachable from this one page.
+ */
+export declare class SimCognitoSignInPage {
+    private readonly markup;
+    /**
+     * The page a browser is answered with, with a message where a sign-in has
+     * already been refused once.
+     */
+    render(pool: SimCognitoUserPool, parameters: SimCognitoPageParameters, message?: string): Response;
+    /**
+     * One link per identity provider this app client offers, each starting the
+     * federated sign-in the same endpoint already answers.
+     *
+     * A provider the client left out of its `SupportedIdentityProviders` is left
+     * off the page, because the authorize request the link would make is one
+     * that endpoint refuses.
+     */
+    private providerLinks;
+}
+//# sourceMappingURL=sim-cognito-sign-in-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAOtC;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,wBAAwB,EACpC,OAAO,CAAC,EAAE,MAAM,GACf,QAAQ,CAeV;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;CAsBtB"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js

@@ -0,0 +1,45 @@
+import { SimCognitoPageMarkup, } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The sign-in form managed login answers an authorize request with.
+ *
+ * The form posts back to the authorize endpoint, carrying the parameters the
+ * browser arrived on as hidden inputs and the two fields the person filled in.
+ * The pool's identity providers are links to the same endpoint with
+ * `identity_provider` set, so both ways in are reachable from this one page.
+ */
+export class SimCognitoSignInPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The page a browser is answered with, with a message where a sign-in has
+     * already been refused once.
+     */
+    render(pool, parameters, message) {
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoAuthorizePath, this.markup.hidden(parameters) +
+                this.markup.field("username", "Username") +
+                this.markup.field("password", "Password", "password") +
+                this.markup.submit("signIn", "Sign in")) +
+            this.providerLinks(pool, parameters) +
+            this.markup.link(simCognitoSignUpPath, parameters, "Sign up") +
+            this.markup.link(simCognitoConfirmPath, parameters, "Confirm a sign-up");
+        return this.markup.page("Sign in", body);
+    }
+    /**
+     * One link per identity provider this app client offers, each starting the
+     * federated sign-in the same endpoint already answers.
+     *
+     * A provider the client left out of its `SupportedIdentityProviders` is left
+     * off the page, because the authorize request the link would make is one
+     * that endpoint refuses.
+     */
+    providerLinks(pool, parameters) {
+        const clientId = parameters["client_id"];
+        const client = clientId === undefined ? undefined : pool.findClient(clientId);
+        return pool.auth.identityProviders.all
+            .filter((provider) => client?.oauth.allowsIdentityProvider(provider.name) ?? false)
+            .map((provider) => this.markup.link(simCognitoAuthorizePath, { ...parameters, identity_provider: provider.name }, `Sign in with ${provider.name}`))
+            .join("");
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-in-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAwB,EACxB,UAAoC,EACpC,OAAgB;QAEhB,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,UAAU,EAAE,SAAS,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,IAAwB,EACxB,UAAoC;QAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG;aACnC,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAC/D;aACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,EAAE,GAAG,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnD,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAChC,CACF;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.d.ts

@@ -0,0 +1,35 @@
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+/**
+ * The sign-up form, reached from a link on the sign-in page.
+ *
+ * The form asks for a username, a password and the attributes the pool needs
+ * of a new user. Those are the ones its `Schema` made required, and the ones
+ * its `AutoVerifiedAttributes` names, because the second is where the
+ * confirmation code would have been delivered.
+ *
+ * Posting it is `SignUp`, called as an application calls it. A refusal is
+ * shown on the form, which is what managed login does with a password the
+ * pool's policy turns down.
+ */
+export declare class SimCognitoSignUpPage {
+    private readonly markup;
+    /**
+     * The attributes this pool's sign-up form asks for.
+     */
+    static attributeNames(pool: SimCognitoUserPool): readonly string[];
+    /**
+     * The attributes the form asked for, as `SignUp` takes them.
+     */
+    private static attributesIn;
+    /**
+     * The page, or the sign-up its form has just posted.
+     */
+    handle(form: SimCognitoPageForm): Promise<Response>;
+    /**
+     * The page a browser is answered with, with a message where a sign-up has
+     * already been refused once.
+     */
+    private render;
+}
+//# sourceMappingURL=sim-cognito-sign-up-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-up-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-up-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAEnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQhE;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,SAAS,MAAM,EAAE,CAYjE;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAQ3B;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuBxD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAoBf"}

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.js

@@ -0,0 +1,85 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPageMarkup } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The sign-up form, reached from a link on the sign-in page.
+ *
+ * The form asks for a username, a password and the attributes the pool needs
+ * of a new user. Those are the ones its `Schema` made required, and the ones
+ * its `AutoVerifiedAttributes` names, because the second is where the
+ * confirmation code would have been delivered.
+ *
+ * Posting it is `SignUp`, called as an application calls it. A refusal is
+ * shown on the form, which is what managed login does with a password the
+ * pool's policy turns down.
+ */
+export class SimCognitoSignUpPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The attributes this pool's sign-up form asks for.
+     */
+    static attributeNames(pool) {
+        const { schema, autoVerifiedAttributes, usernameAttributes } = pool.settings;
+        const asked = new Set([
+            ...schema.requiredNames,
+            ...autoVerifiedAttributes.names,
+        ]);
+        // A pool signing users in by an address takes that address as the
+        // username, so asking for it again would be asking the same question
+        // twice.
+        return [...asked.difference(new Set(usernameAttributes.names))];
+    }
+    /**
+     * The attributes the form asked for, as `SignUp` takes them.
+     */
+    static attributesIn(form) {
+        return this.attributeNames(form.pool)
+            .map((name) => ({ Name: name, Value: form.field(name) }))
+            .filter((attribute) => (attribute.Value ?? "") !== "");
+    }
+    /**
+     * The page, or the sign-up its form has just posted.
+     */
+    async handle(form) {
+        if (!form.isPosted) {
+            return this.render(form);
+        }
+        try {
+            await form.cognito.signUp({
+                input: {
+                    ClientId: form.clientId,
+                    Username: form.username,
+                    Password: form.field("password"),
+                    UserAttributes: SimCognitoSignUpPage.attributesIn(form),
+                    ...form.secretHash(),
+                },
+            });
+        }
+        catch (error) {
+            return this.render(form, SimCognitoPageForm.messageIn(error));
+        }
+        return this.markup.redirect(simCognitoConfirmPath, {
+            ...form.parameters,
+            username: form.username,
+        });
+    }
+    /**
+     * The page a browser is answered with, with a message where a sign-up has
+     * already been refused once.
+     */
+    render(form, message) {
+        const { parameters } = form;
+        const attributes = SimCognitoSignUpPage.attributeNames(form.pool)
+            .map((name) => this.markup.field(name, name))
+            .join("");
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoSignUpPath, this.markup.hidden(parameters) +
+                this.markup.field("username", "Username") +
+                this.markup.field("password", "Password", "password") +
+                attributes +
+                this.markup.submit("signUp", "Sign up")) +
+            this.markup.link(simCognitoAuthorizePath, parameters, "Back to sign in");
+        return this.markup.page("Sign up", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-sign-up-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-sign-up-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-up-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-up-page.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAwB;QAC5C,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,GAC1D,IAAI,CAAC,QAAQ,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;YACpB,GAAG,MAAM,CAAC,aAAa;YACvB,GAAG,sBAAsB,CAAC,KAAK;SAChC,CAAC,CAAC;QAEH,kEAAkE;QAClE,qEAAqE;QACrE,SAAS;QACT,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,YAAY,CACzB,IAAwB;QAExB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACxD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;oBAChC,cAAc,EAAE,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC;oBACvD,GAAG,IAAI,CAAC,UAAU,EAAE;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE;YACjD,GAAG,IAAI,CAAC,UAAU;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,IAAwB,EAAE,OAAgB;QACvD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aAC9D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAC5C,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oBAAoB,EACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,UAAU;gBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.d.ts

@@ -1,35 +1,35 @@
-import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
-import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
-import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoDomainRequest } from "./sim-cognito-domain-request.js";
+export type { SimCognitoDomainRequest } from "./sim-cognito-domain-request.js";
 /**
- * One request to a hosted domain, and what answers it.
- */
-export interface SimCognitoDomainRequest {
-    readonly pool: SimCognitoUserPool;
-    /** The simulated Cognito scope the pool belongs to. */
-    readonly cognito: SimCognitoIdentityProvider;
-    readonly serviceRequest: SimAwsServiceRequest;
-    readonly url: URL;
-}
-/**
- * The three endpoints a pool's hosted domain serves.
+ * The endpoints and pages a pool's hosted domain serves.
  *
- * Each takes one HTTP method and one only, as real Cognito's do, and turns
- * what the simulation answered into the redirect or the JSON body a browser or
- * an application's own server reads.
+ * The token and logout endpoints take one HTTP method each, as real Cognito's
+ * do. The authorize endpoint takes the post of the sign-in form it serves as
+ * well as the get an application sends the browser on, and so do the two pages
+ * reached from that form.
  */
 export declare class SimCognitoDomainEndpoints {
     private readonly response;
     private readonly tokenRequest;
+    private readonly pageRequest;
+    private readonly pages;
     /**
      * Answer a request that reached the domain's hostname.
      */
     handleRequest(request: SimCognitoDomainRequest): Promise<Response>;
     /**
-     * Sign a user in through an identity provider and send the browser back to
-     * the application with a code.
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     *
+     * A get carrying credentials and a post of the sign-in form are the same
+     * request to the simulation. Both name the user and its password, and the
+     * only difference is where those two were read from.
      */
     private authorize;
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    private refused;
     /**
      * Exchange an authorization code or a refresh token for tokens.
      */
@@ -39,10 +39,7 @@ export declare class SimCognitoDomainEndpoints {
      */
     private logout;
     /**
-     * Answer a request that used the method its endpoint takes.
-     *
-     * Each endpoint takes one method and one only, as real Cognito's do, so what
-     * is left to say about any other is which one it was.
+     * Answer a request that used a method its endpoint takes.
      */
     private answered;
 }

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-domain-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAWhF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAElC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAE7D;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBvE;IAED;;;OAGG;YACW,SAAS;IAkBvB;;OAEG;YACW,KAAK;IAenB;;OAEG;YACW,MAAM;IAcpB;;;;;OAKG;YACW,QAAQ;CAavB"}
+{"version":3,"file":"sim-cognito-domain-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAgB/E,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsBvE;IAED;;;;;;;OAOG;YACW,SAAS;IAiBvB;;OAEG;IACH,OAAO,CAAC,OAAO;IAef;;OAEG;YACW,KAAK;IAenB;;OAEG;YACW,MAAM;IAcpB;;OAEG;YACW,QAAQ;CAavB"}

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.js

@@ -1,27 +1,37 @@
+import { SimCognitoManagedLogin } from "./page/sim-cognito-managed-login.js";
+import { simCognitoAuthorizePath } from "./page/sim-cognito-page-paths.js";
+import { SimCognitoPageRequest } from "./page/sim-cognito-page-request.js";
 import { SimCognitoOAuthResponse } from "./sim-cognito-oauth-response.js";
 import { SimCognitoTokenRequest } from "./sim-cognito-token-request.js";
 /**
- * The paths a hosted domain serves.
+ * The remaining paths a hosted domain serves.
  */
-const authorizePath = "/oauth2/authorize";
 const tokenPath = "/oauth2/token";
 const logoutPath = "/logout";
 /**
- * The three endpoints a pool's hosted domain serves.
+ * The methods a page takes, which is both of them, because a form is fetched
+ * and then posted back.
+ */
+const pageMethods = "GET, POST";
+/**
+ * The endpoints and pages a pool's hosted domain serves.
  *
- * Each takes one HTTP method and one only, as real Cognito's do, and turns
- * what the simulation answered into the redirect or the JSON body a browser or
- * an application's own server reads.
+ * The token and logout endpoints take one HTTP method each, as real Cognito's
+ * do. The authorize endpoint takes the post of the sign-in form it serves as
+ * well as the get an application sends the browser on, and so do the two pages
+ * reached from that form.
  */
 export class SimCognitoDomainEndpoints {
     response = new SimCognitoOAuthResponse();
     tokenRequest = new SimCognitoTokenRequest();
+    pageRequest = new SimCognitoPageRequest();
+    pages = new SimCognitoManagedLogin();
     /**
      * Answer a request that reached the domain's hostname.
      */
     async handleRequest(request) {
         const { pathname } = request.url;
-        if (pathname === authorizePath) {
+        if (pathname === simCognitoAuthorizePath) {
             return await this.authorize(request);
         }
         if (pathname === tokenPath) {
@@ -30,23 +40,37 @@ export class SimCognitoDomainEndpoints {
         if (pathname === logoutPath) {
             return await this.logout(request);
         }
+        if (SimCognitoManagedLogin.servesPage(pathname)) {
+            return await this.answered(request, pageMethods, async () => this.pages.handlePage(request));
+        }
         return this.response.noSuchEndpoint(pathname);
     }
     /**
-     * Sign a user in through an identity provider and send the browser back to
-     * the application with a code.
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     *
+     * A get carrying credentials and a post of the sign-in form are the same
+     * request to the simulation. Both name the user and its password, and the
+     * only difference is where those two were read from.
      */
     async authorize(request) {
-        const parameters = Object.fromEntries(request.url.searchParams);
-        return await this.answered(request, "GET", async () => {
+        return await this.answered(request, pageMethods, async () => {
+            const parameters = this.pageRequest.values(request.serviceRequest, request.url);
             try {
                 return this.response.redirect(await request.cognito.hostedAuthorize(request.pool, parameters));
             }
             catch (error) {
-                return this.response.refusedRedirect(error, parameters["redirect_uri"], parameters["state"]);
+                return this.refused(request, parameters, error);
             }
         });
     }
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    refused(request, parameters, error) {
+        return (this.pages.refusedSignIn(request, parameters, error) ??
+            this.response.refusedRedirect(error, parameters["redirect_uri"], parameters["state"]));
+    }
     /**
      * Exchange an authorization code or a refresh token for tokens.
      */
@@ -75,15 +99,12 @@ export class SimCognitoDomainEndpoints {
         });
     }
     /**
-     * Answer a request that used the method its endpoint takes.
-     *
-     * Each endpoint takes one method and one only, as real Cognito's do, so what
-     * is left to say about any other is which one it was.
+     * Answer a request that used a method its endpoint takes.
      */
-    async answered(request, method, answer) {
+    async answered(request, allowed, answer) {
         const requested = request.serviceRequest.request.method;
-        if (requested !== method) {
-            return this.response.notAllowed(requested, method);
+        if (!allowed.split(", ").includes(requested)) {
+            return this.response.notAllowed(requested, allowed);
         }
         return await answer();
     }

package/dist/service/cognito/serve/sim-cognito-domain-endpoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-domain-endpoints.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;GAEG;AACH,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,UAAU,GAAG,SAAS,CAAC;AAc7B;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzC,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE7D;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,SAAS,CAAC,OAAgC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAClC,KAAK,EACL,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,OAAO,CAAC,CACpB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,OAAgC;QAClD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CACzB,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAC/B,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAC/C,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAAC,OAAgC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,QAAQ,CACpB,OAAgC,EAChC,MAAc,EACd,MAA+B;QAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAExD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-domain-endpoints.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;GAEG;AACH,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;GAGG;AACH,MAAM,WAAW,GAAG,WAAW,CAAC;AAIhC;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzC,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC5C,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEtD;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAEjC,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACzC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,SAAS,CAAC,OAAgC;QACtD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,GAAG,CACZ,CAAC;YAEF,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,OAAO,CACb,OAAgC,EAChC,UAAoC,EACpC,KAAc;QAEd,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC3B,KAAK,EACL,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,OAAO,CAAC,CACpB,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CAAC,OAAgC;QAClD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CACzB,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAC/B,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAC/C,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAM,CAAC,OAAgC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CACpB,OAAgC,EAChC,OAAe,EACf,MAA+B;QAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAExD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cognito/serve/sim-cognito-domain-request.d.ts

@@ -0,0 +1,14 @@
+import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+import type { SimCognitoUserPool } from "../user-pool/sim-cognito-user-pool.js";
+/**
+ * One request to a hosted domain, and what answers it.
+ */
+export interface SimCognitoDomainRequest {
+    readonly pool: SimCognitoUserPool;
+    /** The simulated Cognito scope the pool belongs to. */
+    readonly cognito: SimCognitoIdentityProvider;
+    readonly serviceRequest: SimAwsServiceRequest;
+    readonly url: URL;
+}
+//# sourceMappingURL=sim-cognito-domain-request.d.ts.map

package/dist/service/cognito/serve/sim-cognito-domain-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-request.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAElC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB"}

package/dist/service/cognito/serve/sim-cognito-domain-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cognito-domain-request.js.map

package/dist/service/cognito/serve/sim-cognito-domain-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-domain-request.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-domain-request.ts"],"names":[],"mappings":""}