@kensio/yulin 1.16.1 → 1.16.2

package/dist/service/cognito/serve/page/sim-cognito-forgot-password-page.d.ts

@@ -0,0 +1,26 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+/**
+ * The form that starts a password reset, reached from a link on the sign-in
+ * page.
+ *
+ * It asks who has forgotten the password and posts that to `ForgotPassword`,
+ * which is what an application with its own sign-in screens calls. The browser
+ * goes on to the page that takes the code.
+ *
+ * What an unknown user sees is the app client's `PreventUserExistenceErrors`
+ * decision. A client that hides existence sends the browser to the next page
+ * either way, and one on the `LEGACY` default says the user is not there.
+ */
+export declare class SimCognitoForgotPasswordPage {
+    private readonly markup;
+    /**
+     * The page, or the reset its form has just started.
+     */
+    handle(form: SimCognitoPageForm): Promise<Response>;
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    private render;
+}
+//# sourceMappingURL=sim-cognito-forgot-password-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-forgot-password-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-forgot-password-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-forgot-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQhE;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqBxD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAmBf"}

package/dist/service/cognito/serve/page/sim-cognito-forgot-password-page.js

@@ -0,0 +1,57 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPageMarkup } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoForgotPasswordPath, simCognitoResetPasswordPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The form that starts a password reset, reached from a link on the sign-in
+ * page.
+ *
+ * It asks who has forgotten the password and posts that to `ForgotPassword`,
+ * which is what an application with its own sign-in screens calls. The browser
+ * goes on to the page that takes the code.
+ *
+ * What an unknown user sees is the app client's `PreventUserExistenceErrors`
+ * decision. A client that hides existence sends the browser to the next page
+ * either way, and one on the `LEGACY` default says the user is not there.
+ */
+export class SimCognitoForgotPasswordPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The page, or the reset its form has just started.
+     */
+    async handle(form) {
+        if (!form.isPosted) {
+            return this.render(form);
+        }
+        try {
+            await form.cognito.forgotPassword({
+                input: {
+                    ClientId: form.clientId,
+                    Username: form.username,
+                    ...form.secretHash(),
+                },
+            });
+        }
+        catch (error) {
+            return this.render(form, SimCognitoPageForm.messageIn(error));
+        }
+        return this.markup.redirect(simCognitoResetPasswordPath, {
+            ...form.parameters,
+            username: form.username,
+        });
+    }
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    render(form, message) {
+        const { parameters } = form;
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoForgotPasswordPath, this.markup.hidden(parameters) +
+                this.markup.field("username", "Username") +
+                this.markup.submit("reset", "Send a reset code")) +
+            this.markup.link(simCognitoResetPasswordPath, parameters, "I already have a code") +
+            this.markup.link(simCognitoAuthorizePath, parameters, "Back to sign in");
+        return this.markup.page("Forgotten your password", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-forgot-password-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-forgot-password-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-forgot-password-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-forgot-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAChC,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,GAAG,IAAI,CAAC,UAAU,EAAE;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE;YACvD,GAAG,IAAI,CAAC,UAAU;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,IAAwB,EAAE,OAAgB;QACvD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4BAA4B,EAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CACnD;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,EAC3B,UAAU,EACV,uBAAuB,CACxB;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-managed-login.d.ts

@@ -4,22 +4,25 @@ import type { SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
  * The pages simulated managed login serves.
  *
  * A person reaches the sign-in form at the authorize endpoint, the sign-up
- * form from a link on it, and the confirmation form from the sign-up it has
- * just made. Each form carries the authorize request's own parameters through
- * as hidden inputs, so the sign-in at the end of it reaches the app client's
- * callback URL the application asked for.
+ * form and the forgotten password form from links on it, and the confirmation
+ * and new password forms from the step before each. Each form carries the
+ * authorize request's own parameters through as hidden inputs, so the sign-in
+ * at the end of it reaches the app client's callback URL the application asked
+ * for.
  */
 export declare class SimCognitoManagedLogin {
     private readonly pageRequest;
     private readonly signInPage;
     private readonly signUpPage;
     private readonly confirmPage;
+    private readonly forgotPasswordPage;
+    private readonly resetPasswordPage;
     /**
-     * Whether a path is one of the two pages served beside the OAuth endpoints.
+     * Whether a path is one of the pages served beside the OAuth endpoints.
      */
     static servesPage(pathname: string): boolean;
     /**
-     * Answer the sign-up or confirmation page a request reached.
+     * Answer the page a request reached.
      */
     handlePage(request: SimCognitoDomainRequest): Promise<Response>;
     /**

package/dist/service/cognito/serve/page/sim-cognito-managed-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-managed-login.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAGhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAU7E;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAE3D;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI3C;IAED;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQpE;IAED;;;;;;;;;OASG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,wBAAwB,EACpC,KAAK,EAAE,OAAO,GACb,QAAQ,GAAG,SAAS,CActB;IAED,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cognito-managed-login.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAIhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAa7E;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqC;IAEvE;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3C;IAED;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiBpE;IAED;;;;;;;;;OASG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,wBAAwB,EACpC,KAAK,EAAE,OAAO,GACb,QAAQ,GAAG,SAAS,CActB;IAED,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/serve/page/sim-cognito-managed-login.js

@@ -1,8 +1,10 @@
 import { isSimCognitoManagedLoginRequired } from "../../error/sim-cognito-managed-login.error.js";
 import { isSimCognitoOAuthError } from "../../error/sim-cognito-oauth.error.js";
 import { SimCognitoConfirmPage } from "./sim-cognito-confirm-page.js";
+import { SimCognitoForgotPasswordPage } from "./sim-cognito-forgot-password-page.js";
 import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
-import { simCognitoConfirmPath, simCognitoIsLocalSignIn, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+import { simCognitoForgotPasswordPath, simCognitoIsLocalSignIn, simCognitoPagePaths, simCognitoResetPasswordPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+import { SimCognitoResetPasswordPage } from "./sim-cognito-reset-password-page.js";
 import { SimCognitoPageRequest } from "./sim-cognito-page-request.js";
 import { SimCognitoSignInPage } from "./sim-cognito-sign-in-page.js";
 import { SimCognitoSignUpPage } from "./sim-cognito-sign-up-page.js";
@@ -10,31 +12,44 @@ import { SimCognitoSignUpPage } from "./sim-cognito-sign-up-page.js";
  * The pages simulated managed login serves.
  *
  * A person reaches the sign-in form at the authorize endpoint, the sign-up
- * form from a link on it, and the confirmation form from the sign-up it has
- * just made. Each form carries the authorize request's own parameters through
- * as hidden inputs, so the sign-in at the end of it reaches the app client's
- * callback URL the application asked for.
+ * form and the forgotten password form from links on it, and the confirmation
+ * and new password forms from the step before each. Each form carries the
+ * authorize request's own parameters through as hidden inputs, so the sign-in
+ * at the end of it reaches the app client's callback URL the application asked
+ * for.
  */
 export class SimCognitoManagedLogin {
     pageRequest = new SimCognitoPageRequest();
     signInPage = new SimCognitoSignInPage();
     signUpPage = new SimCognitoSignUpPage();
     confirmPage = new SimCognitoConfirmPage();
+    forgotPasswordPage = new SimCognitoForgotPasswordPage();
+    resetPasswordPage = new SimCognitoResetPasswordPage();
     /**
-     * Whether a path is one of the two pages served beside the OAuth endpoints.
+     * Whether a path is one of the pages served beside the OAuth endpoints.
      */
     static servesPage(pathname) {
-        return (pathname === simCognitoSignUpPath || pathname === simCognitoConfirmPath);
+        return simCognitoPagePaths.has(pathname);
     }
     /**
-     * Answer the sign-up or confirmation page a request reached.
+     * Answer the page a request reached.
      */
     async handlePage(request) {
         const form = this.formIn(request);
-        if (request.url.pathname === simCognitoSignUpPath) {
-            return await this.signUpPage.handle(form);
+        switch (request.url.pathname) {
+            case simCognitoSignUpPath: {
+                return await this.signUpPage.handle(form);
+            }
+            case simCognitoForgotPasswordPath: {
+                return await this.forgotPasswordPage.handle(form);
+            }
+            case simCognitoResetPasswordPath: {
+                return await this.resetPasswordPage.handle(form);
+            }
+            default: {
+                return await this.confirmPage.handle(form);
+            }
         }
-        return await this.confirmPage.handle(form);
     }
     /**
      * Answer a refused authorize request on the sign-in form, where the form is

package/dist/service/cognito/serve/page/sim-cognito-managed-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-managed-login.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IAChB,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAE3D;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAgB;QAChC,OAAO,CACL,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,qBAAqB,CACxE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAgC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YAClD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;OASG;IACH,aAAa,CACX,OAAgC,EAChC,UAAoC,EACpC,KAAc;QAEd,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAC3B,OAAO,CAAC,IAAI,EACZ,UAAU,EACV,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,OAAgC;QAC7C,OAAO,IAAI,kBAAkB,CAC3B,OAAO,EACP,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAC7D,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-managed-login.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACxC,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,kBAAkB,GAAG,IAAI,4BAA4B,EAAE,CAAC;IACxD,iBAAiB,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAEvE;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAgB;QAChC,OAAO,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAgC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElC,QAAQ,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;YACD,KAAK,4BAA4B,EAAE,CAAC;gBAClC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,2BAA2B,EAAE,CAAC;gBACjC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,SAAS,CAAC;gBACR,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,aAAa,CACX,OAAgC,EAChC,UAAoC,EACpC,KAAc;QAEd,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAC3B,OAAO,CAAC,IAAI,EACZ,UAAU,EACV,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,OAAgC;QAC7C,OAAO,IAAI,kBAAkB,CAC3B,OAAO,EACP,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAC7D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-page-paths.d.ts

@@ -20,6 +20,24 @@ export declare const simCognitoSignUpPath = "/signup";
  * it with the code, and a test can reach it without replaying the sign-up.
  */
 export declare const simCognitoConfirmPath = "/confirm";
+/**
+ * The path the form asking who has forgotten a password is served at.
+ */
+export declare const simCognitoForgotPasswordPath = "/forgotPassword";
+/**
+ * The path the form taking the reset code and the new password is served at.
+ *
+ * Real managed login serves both halves of a reset at these two paths, and
+ * that is where an application's own links to them point.
+ */
+export declare const simCognitoResetPasswordPath = "/confirmForgotPassword";
+/**
+ * The pages served beside the OAuth endpoints.
+ *
+ * The sign-in form is not among them. It is what the authorize endpoint
+ * answers with, so it has no path of its own.
+ */
+export declare const simCognitoPagePaths: ReadonlySet<string>;
 /**
  * Whether a request signs in one of the pool's own users.
  *

package/dist/service/cognito/serve/page/sim-cognito-page-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page-paths.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAmBhD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAIT;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,wBAAwB,GAC/B,wBAAwB,CAI1B"}
+{"version":3,"file":"sim-cognito-page-paths.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,4BAA4B,oBAAoB,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAKlD,CAAC;AAmBH;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAIT;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,wBAAwB,GAC/B,wBAAwB,CAI1B"}

package/dist/service/cognito/serve/page/sim-cognito-page-paths.js

@@ -19,6 +19,29 @@ export const simCognitoSignUpPath = "/signup";
  * it with the code, and a test can reach it without replaying the sign-up.
  */
 export const simCognitoConfirmPath = "/confirm";
+/**
+ * The path the form asking who has forgotten a password is served at.
+ */
+export const simCognitoForgotPasswordPath = "/forgotPassword";
+/**
+ * The path the form taking the reset code and the new password is served at.
+ *
+ * Real managed login serves both halves of a reset at these two paths, and
+ * that is where an application's own links to them point.
+ */
+export const simCognitoResetPasswordPath = "/confirmForgotPassword";
+/**
+ * The pages served beside the OAuth endpoints.
+ *
+ * The sign-in form is not among them. It is what the authorize endpoint
+ * answers with, so it has no path of its own.
+ */
+export const simCognitoPagePaths = new Set([
+    simCognitoSignUpPath,
+    simCognitoConfirmPath,
+    simCognitoForgotPasswordPath,
+    simCognitoResetPasswordPath,
+]);
 /**
  * The authorize parameters every page carries on to the next.
  *

package/dist/service/cognito/serve/page/sim-cognito-page-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page-paths.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEtE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAgC;IAEhC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cognito-page-paths.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-paths.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,oBAAoB;IACpB,qBAAqB;IACrB,4BAA4B;IAC5B,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEtE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAgC;IAEhC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-provider-links.d.ts

@@ -0,0 +1,12 @@
+import type { SimCognitoUserPool } from "../../user-pool/sim-cognito-user-pool.js";
+import type { SimCognitoPageMarkup, SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
+/**
+ * One link per identity provider this app client offers, each starting the
+ * federated sign-in the authorize endpoint already answers.
+ *
+ * A provider the client left out of its `SupportedIdentityProviders` is left
+ * off the page, because the authorize request the link would make is one that
+ * endpoint refuses.
+ */
+export declare function simCognitoProviderLinks(markup: SimCognitoPageMarkup, pool: SimCognitoUserPool, parameters: SimCognitoPageParameters): string;
+//# sourceMappingURL=sim-cognito-provider-links.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-provider-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-provider-links.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-provider-links.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,wBAAwB,GACnC,MAAM,CAiBR"}

package/dist/service/cognito/serve/page/sim-cognito-provider-links.js

@@ -0,0 +1,18 @@
+import { simCognitoAuthorizePath } from "./sim-cognito-page-paths.js";
+/**
+ * One link per identity provider this app client offers, each starting the
+ * federated sign-in the authorize endpoint already answers.
+ *
+ * A provider the client left out of its `SupportedIdentityProviders` is left
+ * off the page, because the authorize request the link would make is one that
+ * endpoint refuses.
+ */
+export function simCognitoProviderLinks(markup, pool, parameters) {
+    const clientId = parameters["client_id"];
+    const client = clientId === undefined ? undefined : pool.findClient(clientId);
+    return pool.auth.identityProviders.all
+        .filter((provider) => client?.oauth.allowsIdentityProvider(provider.name) ?? false)
+        .map((provider) => markup.link(simCognitoAuthorizePath, { ...parameters, identity_provider: provider.name }, `Sign in with ${provider.name}`))
+        .join("");
+}
+//# sourceMappingURL=sim-cognito-provider-links.js.map

package/dist/service/cognito/serve/page/sim-cognito-provider-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-provider-links.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-provider-links.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,IAAwB,EACxB,UAAoC;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE9E,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG;SACnC,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAC/D;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,EAAE,GAAG,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnD,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAChC,CACF;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.d.ts

@@ -0,0 +1,27 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+/**
+ * The form that finishes a password reset, reached from the one that started
+ * it.
+ *
+ * It takes the code the pool issued and the password the person has chosen,
+ * and posts both to `ConfirmForgotPassword`. A wrong code and a password the
+ * pool's policy turns down are both shown on the form, which is where the
+ * person can do something about them.
+ *
+ * Nothing here delivers a code to anybody. The pool records the message it
+ * would have sent, and `SimCognitoUserPool.confirmationCode` is where a test
+ * reads it from, which is where a person would have read it out of an inbox.
+ */
+export declare class SimCognitoResetPasswordPage {
+    private readonly markup;
+    /**
+     * The page, or the reset its form has just finished.
+     */
+    handle(form: SimCognitoPageForm): Promise<Response>;
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    private render;
+}
+//# sourceMappingURL=sim-cognito-reset-password-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-reset-password-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-reset-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsBxD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAwBf"}

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.js

@@ -0,0 +1,65 @@
+import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPageMarkup } from "./sim-cognito-page-markup.js";
+import { simCognitoAuthorizePath, simCognitoResetPasswordPath, } from "./sim-cognito-page-paths.js";
+/**
+ * The form that finishes a password reset, reached from the one that started
+ * it.
+ *
+ * It takes the code the pool issued and the password the person has chosen,
+ * and posts both to `ConfirmForgotPassword`. A wrong code and a password the
+ * pool's policy turns down are both shown on the form, which is where the
+ * person can do something about them.
+ *
+ * Nothing here delivers a code to anybody. The pool records the message it
+ * would have sent, and `SimCognitoUserPool.confirmationCode` is where a test
+ * reads it from, which is where a person would have read it out of an inbox.
+ */
+export class SimCognitoResetPasswordPage {
+    markup = new SimCognitoPageMarkup();
+    /**
+     * The page, or the reset its form has just finished.
+     */
+    async handle(form) {
+        if (!form.isPosted) {
+            return this.render(form);
+        }
+        try {
+            await form.cognito.confirmForgotPassword({
+                input: {
+                    ClientId: form.clientId,
+                    Username: form.username,
+                    ConfirmationCode: form.field("code"),
+                    Password: form.field("password"),
+                    ...form.secretHash(),
+                },
+            });
+        }
+        catch (error) {
+            return this.render(form, SimCognitoPageForm.messageIn(error));
+        }
+        // The user signs in with its new password at the endpoint the browser
+        // arrived on, which is where the grant it started carries on from.
+        return this.markup.redirect(simCognitoAuthorizePath, form.parameters);
+    }
+    /**
+     * The page a browser is answered with, with a message where a reset has
+     * already been refused once.
+     */
+    render(form, message) {
+        const { parameters, username } = form;
+        // The page that started the reset names the user, and a browser that came
+        // here from a link instead has to say who it is.
+        const user = username === ""
+            ? this.markup.field("username", "Username")
+            : this.markup.hidden({ username });
+        const body = (message === undefined ? "" : this.markup.message(message)) +
+            this.markup.form(simCognitoResetPasswordPath, this.markup.hidden(parameters) +
+                user +
+                this.markup.field("code", "Reset code") +
+                this.markup.field("password", "New password", "password") +
+                this.markup.submit("reset", "Set the new password")) +
+            this.markup.link(simCognitoAuthorizePath, parameters, "Back to sign in");
+        return this.markup.page("Choose a new password", body);
+    }
+}
+//# sourceMappingURL=sim-cognito-reset-password-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-reset-password-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-reset-password-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-reset-password-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;gBACvC,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBACpC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;oBAChC,GAAG,IAAI,CAAC,UAAU,EAAE;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,IAAwB,EAAE,OAAgB;QACvD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAEtC,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,IAAI,GACR,QAAQ,KAAK,EAAE;YACb,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEvC,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,EAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI;gBACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB,CAAC,CACtD;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts

@@ -6,7 +6,8 @@ import { type SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
  * The form posts back to the authorize endpoint, carrying the parameters the
  * browser arrived on as hidden inputs and the two fields the person filled in.
  * The pool's identity providers are links to the same endpoint with
- * `identity_provider` set, so both ways in are reachable from this one page.
+ * `identity_provider` set, so both ways in are reachable from this one page,
+ * and the other pages of the journey are links beside them.
  */
 export declare class SimCognitoSignInPage {
     private readonly markup;
@@ -15,14 +16,5 @@ export declare class SimCognitoSignInPage {
      * already been refused once.
      */
     render(pool: SimCognitoUserPool, parameters: SimCognitoPageParameters, message?: string): Response;
-    /**
-     * One link per identity provider this app client offers, each starting the
-     * federated sign-in the same endpoint already answers.
-     *
-     * A provider the client left out of its `SupportedIdentityProviders` is left
-     * off the page, because the authorize request the link would make is one
-     * that endpoint refuses.
-     */
-    private providerLinks;
 }
 //# sourceMappingURL=sim-cognito-sign-in-page.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-in-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAOtC;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,wBAAwB,EACpC,OAAO,CAAC,EAAE,MAAM,GACf,QAAQ,CAeV;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;CAsBtB"}
+{"version":3,"file":"sim-cognito-sign-in-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAkBtC;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,wBAAwB,EACpC,OAAO,CAAC,EAAE,MAAM,GACf,QAAQ,CAgBV;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js

@@ -1,12 +1,22 @@
 import { SimCognitoPageMarkup, } from "./sim-cognito-page-markup.js";
-import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+import { simCognitoAuthorizePath, simCognitoConfirmPath, simCognitoForgotPasswordPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
+import { simCognitoProviderLinks } from "./sim-cognito-provider-links.js";
+/**
+ * The other pages the sign-in form links to, in the order they are offered.
+ */
+const linkedPages = [
+    [simCognitoSignUpPath, "Sign up"],
+    [simCognitoConfirmPath, "Confirm a sign-up"],
+    [simCognitoForgotPasswordPath, "Forgotten your password?"],
+];
 /**
  * The sign-in form managed login answers an authorize request with.
  *
  * The form posts back to the authorize endpoint, carrying the parameters the
  * browser arrived on as hidden inputs and the two fields the person filled in.
  * The pool's identity providers are links to the same endpoint with
- * `identity_provider` set, so both ways in are reachable from this one page.
+ * `identity_provider` set, so both ways in are reachable from this one page,
+ * and the other pages of the journey are links beside them.
  */
 export class SimCognitoSignInPage {
     markup = new SimCognitoPageMarkup();
@@ -20,26 +30,11 @@ export class SimCognitoSignInPage {
                 this.markup.field("username", "Username") +
                 this.markup.field("password", "Password", "password") +
                 this.markup.submit("signIn", "Sign in")) +
-            this.providerLinks(pool, parameters) +
-            this.markup.link(simCognitoSignUpPath, parameters, "Sign up") +
-            this.markup.link(simCognitoConfirmPath, parameters, "Confirm a sign-up");
+            simCognitoProviderLinks(this.markup, pool, parameters) +
+            linkedPages
+                .map(([path, text]) => this.markup.link(path, parameters, text))
+                .join("");
         return this.markup.page("Sign in", body);
     }
-    /**
-     * One link per identity provider this app client offers, each starting the
-     * federated sign-in the same endpoint already answers.
-     *
-     * A provider the client left out of its `SupportedIdentityProviders` is left
-     * off the page, because the authorize request the link would make is one
-     * that endpoint refuses.
-     */
-    providerLinks(pool, parameters) {
-        const clientId = parameters["client_id"];
-        const client = clientId === undefined ? undefined : pool.findClient(clientId);
-        return pool.auth.identityProviders.all
-            .filter((provider) => client?.oauth.allowsIdentityProvider(provider.name) ?? false)
-            .map((provider) => this.markup.link(simCognitoAuthorizePath, { ...parameters, identity_provider: provider.name }, `Sign in with ${provider.name}`))
-            .join("");
-    }
 }
 //# sourceMappingURL=sim-cognito-sign-in-page.js.map

package/dist/service/cognito/serve/page/sim-cognito-sign-in-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sign-in-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAwB,EACxB,UAAoC,EACpC,OAAgB;QAEhB,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,UAAU,EAAE,SAAS,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,IAAwB,EACxB,UAAoC;QAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG;aACnC,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAC/D;aACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,EAAE,GAAG,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnD,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAChC,CACF;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-sign-in-page.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-sign-in-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,GAA2C;IAC1D,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACjC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;IAC5C,CAAC,4BAA4B,EAAE,0BAA0B,CAAC;CAC3D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAErD;;;OAGG;IACH,MAAM,CACJ,IAAwB,EACxB,UAAoC,EACpC,OAAgB;QAEhB,MAAM,IAAI,GACR,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC1C;YACD,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC;YACtD,WAAW;iBACR,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;iBAC/D,IAAI,CAAC,EAAE,CAAC,CAAC;QAEd,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-user-directory.d.ts

@@ -40,6 +40,22 @@ export declare abstract class SimCognitoUserDirectory extends SimCognitoUserFact
      * Handle an AdminConfirmSignUp Command from the SDK.
      */
     adminConfirmSignUp(command: simCognitoCommands.SimAdminConfirmSignUpCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminConfirmSignUpCommandOutput>;
+    /**
+     * Handle a ForgotPassword Command from the SDK.
+     *
+     * No caller is read, because real Cognito authorizes this operation with no
+     * IAM policy at all: it is what an application calls for someone who cannot
+     * sign in and holds no AWS credentials.
+     */
+    forgotPassword(command: simCognitoCommands.SimForgotPasswordCommand): Promise<simCognitoCommands.SimForgotPasswordCommandOutput>;
+    /**
+     * Handle a ConfirmForgotPassword Command from the SDK.
+     */
+    confirmForgotPassword(command: simCognitoCommands.SimConfirmForgotPasswordCommand): Promise<simCognitoCommands.SimConfirmForgotPasswordCommandOutput>;
+    /**
+     * Handle an AdminResetUserPassword Command from the SDK.
+     */
+    adminResetUserPassword(command: simCognitoCommands.SimAdminResetUserPasswordCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimAdminResetUserPasswordCommandOutput>;
     /**
      * Handle an AdminGetUser Command from the SDK.
      */

package/dist/service/cognito/sim-cognito-user-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,KAAK,wCAAwC,EAC9C,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,uBAAwB,SAAQ,qBAAqB;IACzE,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}
+{"version":3,"file":"sim-cognito-user-directory.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,KAAK,wCAAwC,EAC9C,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,iCAAiC;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,8BAAsB,uBAAwB,SAAQ,qBAAqB;IACzE,SAAS,aAAa,UAAU,EAAE,iCAAiC,EAElE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,CAAC,gBAAgB,GAC3C,OAAO,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAGpD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,GAClD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,GAC3D,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,CAAC,4BAA4B,EACxD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAGhE;IAED;;;;;;OAMG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,GACnD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,kBAAkB,CAAC,+BAA+B,GAC1D,OAAO,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAGnE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,kBAAkB,CAAC,sBAAsB,EAClD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAG1D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,yBAAyB,CAC7B,OAAO,EAAE,kBAAkB,CAAC,mCAAmC,EAC/D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yCAAyC,CAAC,CAGvE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,kBAAkB,CAAC,yBAAyB,EACrD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAG7D;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAC/C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAGvD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,QAAQ,CACZ,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,kBAAkB,CAAC,qBAAqB,EACjD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAGzD;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,kBAAkB,CAAC,oBAAoB,EAChD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAGxD;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,kBAAkB,CAAC,6BAA6B,EACzD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAGjE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;CACF"}

package/dist/service/cognito/sim-cognito-user-directory.js

@@ -49,6 +49,31 @@ export class SimCognitoUserDirectory extends SimCognitoUserFactors {
         await this.background.sequence();
         return this.commands.signUp.adminConfirmSignUp(command, options);
     }
+    /**
+     * Handle a ForgotPassword Command from the SDK.
+     *
+     * No caller is read, because real Cognito authorizes this operation with no
+     * IAM policy at all: it is what an application calls for someone who cannot
+     * sign in and holds no AWS credentials.
+     */
+    async forgotPassword(command) {
+        await this.background.sequence();
+        return this.commands.passwordReset.forgotPassword(command);
+    }
+    /**
+     * Handle a ConfirmForgotPassword Command from the SDK.
+     */
+    async confirmForgotPassword(command) {
+        await this.background.sequence();
+        return this.commands.passwordReset.confirmForgotPassword(command);
+    }
+    /**
+     * Handle an AdminResetUserPassword Command from the SDK.
+     */
+    async adminResetUserPassword(command, options) {
+        await this.background.sequence();
+        return this.commands.passwordReset.adminResetUserPassword(command, options);
+    }
     /**
      * Handle an AdminGetUser Command from the SDK.
      */