@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/cognito/serve/sim-cognito-web-acl-inspection.js

@@ -0,0 +1,30 @@
+import { SimWafRequestInspection, } from "../../wafv2/association/sim-waf-request-inspection.js";
+/**
+ * Puts a request to the web ACL in front of the pool it reached.
+ *
+ * This runs before the endpoint the request named answers it, so a blocked
+ * request gets 403 and the endpoint does not run. Everything the pool serves
+ * over HTTP goes through it, which is what real AWS WAF covers: managed login,
+ * the classic hosted UI and the pool's own OIDC documents.
+ *
+ * The body is not forwarded. Cognito sends AWS WAF the headers and the path of
+ * a managed login request and none of its body, so a rule inspecting the body
+ * matches nothing at a hosted domain, however well formed it is. Body rules do
+ * reach the user pool API operations, which arrive here as SDK Commands rather
+ * than as HTTP requests and carry no web ACL evaluation at all.
+ */
+export class SimCognitoWebAclInspection {
+    inspection = new SimWafRequestInspection();
+    /**
+     * Put one request to whatever protects the pool it addressed.
+     */
+    async inspect(input) {
+        return await this.inspection.inspect({
+            protection: input.cognito.webAcls(),
+            resourceArn: input.pool.arn.value,
+            request: input.request,
+            forwardBody: false,
+        });
+    }
+}
+//# sourceMappingURL=sim-cognito-web-acl-inspection.js.map

package/dist/service/cognito/serve/sim-cognito-web-acl-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-web-acl-inspection.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-web-acl-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,uDAAuD,CAAC;AAa/D;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,0BAA0B;IACpB,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE5D;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAgC;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACnC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;YACnC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;YACjC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-federation.d.ts

@@ -60,15 +60,23 @@ export declare abstract class SimCognitoFederation extends SimCognitoUserDirecto
      *
      * The answer is where the browser goes next, which for a request that signs
      * a user in is the app client's callback URL carrying an authorization code.
+     *
+     * `presentedSession` is the managed login session the browser holds, which a
+     * served request carries in the `cognito` cookie. Passing one signs the
+     * browser in without credentials, the way real managed login answers a
+     * browser it recognises.
      */
-    hostedAuthorize(pool: SimCognitoUserPool, input: SimCognitoAuthorizeInput): Promise<SimCognitoHostedRedirect>;
+    hostedAuthorize(pool: SimCognitoUserPool, input: SimCognitoAuthorizeInput, presentedSession?: string): Promise<SimCognitoHostedRedirect>;
     /**
      * Handle a request to a pool's `/oauth2/token` endpoint.
      */
     hostedToken(pool: SimCognitoUserPool, input: SimCognitoTokenInput): Promise<SimCognitoTokenOutput>;
     /**
      * Handle a request to a pool's `/logout` endpoint.
+     *
+     * `presentedSession` is the managed login session the browser holds. Ending
+     * it is what makes the next authorize request ask for a password again.
      */
-    hostedSignOut(pool: SimCognitoUserPool, input: SimCognitoLogoutInput): Promise<SimCognitoHostedRedirect>;
+    hostedSignOut(pool: SimCognitoUserPool, input: SimCognitoLogoutInput, presentedSession?: string): Promise<SimCognitoHostedRedirect>;
 }
 //# sourceMappingURL=sim-cognito-federation.d.ts.map

package/dist/service/cognito/sim-cognito-federation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-federation.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-federation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE/E,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,oBAAqB,SAAQ,uBAAuB;IACxE,SAAS,aAAa,UAAU,EAAE,8BAA8B,EAE/D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,kBAAkB,CAAC,+BAA+B,EAC3D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAGnE;IAED;;;;;OAKG;IACG,eAAe,CACnB,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CAGnC;IAED;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAGhC;IAED;;OAEG;IACG,aAAa,CACjB,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CAGnC;CACF"}
+{"version":3,"file":"sim-cognito-federation.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-federation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE/E,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,oBAAqB,SAAQ,uBAAuB;IACxE,SAAS,aAAa,UAAU,EAAE,8BAA8B,EAE/D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,kBAAkB,CAAC,kCAAkC,EAC9D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAGtE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,CAAC,gCAAgC,EAC5D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAGpE;IAED;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,kBAAkB,CAAC,+BAA+B,EAC3D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAGnE;IAED;;;;;;;;;;OAUG;IACG,eAAe,CACnB,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,wBAAwB,EAC/B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,wBAAwB,CAAC,CAGnC;IAED;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAGhC;IAED;;;;;OAKG;IACG,aAAa,CACjB,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,qBAAqB,EAC5B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,wBAAwB,CAAC,CAGnC;CACF"}

package/dist/service/cognito/sim-cognito-federation.js

@@ -76,10 +76,15 @@ export class SimCognitoFederation extends SimCognitoUserDirectory {
      *
      * The answer is where the browser goes next, which for a request that signs
      * a user in is the app client's callback URL carrying an authorization code.
+     *
+     * `presentedSession` is the managed login session the browser holds, which a
+     * served request carries in the `cognito` cookie. Passing one signs the
+     * browser in without credentials, the way real managed login answers a
+     * browser it recognises.
      */
-    async hostedAuthorize(pool, input) {
+    async hostedAuthorize(pool, input, presentedSession) {
         await this.background.sequence();
-        return this.commands.hosted.authorize.handle(pool, input);
+        return this.commands.hosted.authorize.handle(pool, input, presentedSession);
     }
     /**
      * Handle a request to a pool's `/oauth2/token` endpoint.
@@ -90,10 +95,13 @@ export class SimCognitoFederation extends SimCognitoUserDirectory {
     }
     /**
      * Handle a request to a pool's `/logout` endpoint.
+     *
+     * `presentedSession` is the managed login session the browser holds. Ending
+     * it is what makes the next authorize request ask for a password again.
      */
-    async hostedSignOut(pool, input) {
+    async hostedSignOut(pool, input, presentedSession) {
         await this.background.sequence();
-        return this.commands.hosted.logout.handle(pool, input);
+        return this.commands.hosted.logout.handle(pool, input, presentedSession);
     }
 }
 //# sourceMappingURL=sim-cognito-federation.js.map

package/dist/service/cognito/sim-cognito-federation.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-federation.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-federation.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AAUzC;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,oBAAqB,SAAQ,uBAAuB;IACxE,YAAsB,UAA0C;QAC9D,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAA2D,EAC3D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CACnB,IAAwB,EACxB,KAA+B;QAE/B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,IAAwB,EACxB,KAA2B;QAE3B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,IAAwB,EACxB,KAA4B;QAE5B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-federation.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-federation.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AAUzC;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,oBAAqB,SAAQ,uBAAuB;IACxE,YAAsB,UAA0C;QAC9D,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA8D,EAC9D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA4D,EAC5D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAA2D,EAC3D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,eAAe,CACnB,IAAwB,EACxB,KAA+B,EAC/B,gBAAyB;QAEzB,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,IAAwB,EACxB,KAA2B;QAE3B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,IAAwB,EACxB,KAA4B,EAC5B,gBAAyB;QAEzB,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-identity-provider.d.ts

@@ -2,12 +2,11 @@ import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
 import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { type SimWafProtection } from "../wafv2/association/sim-waf-protection.js";
 import { SimCognitoCfnResourceFactory } from "./cfn/sim-cfn-cognito-resource-factory.js";
-import type * as simCognitoCommands from "./command/sim-cognito-command.types.js";
 import { SimCognitoDomainRegistry } from "./registry/sim-cognito-domain-registry.js";
 import { SimCognitoUserPoolRegistry } from "./registry/sim-cognito-user-pool-registry.js";
-import { SimCognitoAppClients } from "./sim-cognito-app-clients.js";
-import type { SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-user-directory.js";
+import { SimCognitoUserPools } from "./sim-cognito-user-pools.js";
 import type { SimCognitoUserPoolClient } from "./user-pool/client/sim-cognito-user-pool-client.js";
 import type { SimCognitoUserPoolDomain } from "./user-pool/domain/sim-cognito-user-pool-domain.js";
 import type { SimCognitoUserPoolClientRegistration, SimCognitoUserPoolRegistration } from "./user-pool/sim-cognito-registration.types.js";
@@ -37,6 +36,12 @@ interface SimCognitoIdentityProviderProperties {
      * ARN, and that ARN can name any Account and Region.
      */
     readonly triggerFunctions?: SimCognitoTriggerFunctions;
+    /**
+     * The web ACLs this scope's pools can be protected by. A standalone
+     * simulated Cognito has none, so a hosted domain serves the requests it
+     * always did.
+     */
+    readonly webAcls?: SimWafProtection;
 }
 /**
  * Simulated Cognito user pools. Handles SDK commands. Emulates AWS behaviour
@@ -54,7 +59,7 @@ interface SimCognitoIdentityProviderProperties {
  * Only user pools are simulated. Cognito identity pools, which hand out AWS
  * credentials, are a different service and are not simulated at all.
  */
-export declare class SimCognitoIdentityProvider extends SimCognitoAppClients {
+export declare class SimCognitoIdentityProvider extends SimCognitoUserPools {
     private readonly pools;
     private readonly userPoolRegistry;
     private readonly domainRegistry;
@@ -115,37 +120,14 @@ export declare class SimCognitoIdentityProvider extends SimCognitoAppClients {
      */
     registerUserPoolClient(registration: SimCognitoUserPoolClientRegistration): SimCognitoUserPoolClient;
     /**
-     * Handle a CreateUserPool Command from the SDK.
-     */
-    createUserPool(command: simCognitoCommands.SimCreateUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimCreateUserPoolCommandOutput>;
-    /**
-     * Handle a DescribeUserPool Command from the SDK.
-     */
-    describeUserPool(command: simCognitoCommands.SimDescribeUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimDescribeUserPoolCommandOutput>;
-    /**
-     * Handle an UpdateUserPool Command from the SDK.
-     */
-    updateUserPool(command: simCognitoCommands.SimUpdateUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimUpdateUserPoolCommandOutput>;
-    /**
-     * Handle a DeleteUserPool Command from the SDK.
-     */
-    deleteUserPool(command: simCognitoCommands.SimDeleteUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimDeleteUserPoolCommandOutput>;
-    /**
-     * Handle a SetUserPoolMfaConfig Command from the SDK.
+     * The web ACLs in front of this scope's pools, as a served request sees
+     * them.
      *
-     * This is the second call real CloudFormation makes when a template declares
-     * a pool with MFA, and the only place the factors behind an `MfaConfiguration`
-     * are set.
-     */
-    setUserPoolMfaConfig(command: simCognitoCommands.SimSetUserPoolMfaConfigCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimSetUserPoolMfaConfigCommandOutput>;
-    /**
-     * Handle a GetUserPoolMfaConfig Command from the SDK.
-     */
-    getUserPoolMfaConfig(command: simCognitoCommands.SimGetUserPoolMfaConfigCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimGetUserPoolMfaConfigCommandOutput>;
-    /**
-     * Handle a ListUserPools Command from the SDK.
+     * The simulator's own accessor rather than a Cognito operation: a request to
+     * a pool's hosted domain is served without a Command, so this is how the
+     * serving layer reaches whatever a web ACL decided about it.
      */
-    listUserPools(command: simCognitoCommands.SimListUserPoolsCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimListUserPoolsCommandOutput>;
+    webAcls(): SimWafProtection;
     /**
      * Get this service's CloudFormation Resource factory.
      */

package/dist/service/cognito/sim-cognito-identity-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-identity-provider.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAChG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EACV,oCAAoC,EACpC,8BAA8B,EAC/B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAM/E,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,sDAAsD,CAAC;AAE9D,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAEvD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAEnD;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CACxD;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,0BAA2B,SAAQ,oBAAoB;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IAEH,YAAY,UAAU,GAAE,oCAAyC,EA6BhE;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAW,EAAE,MAAM,GAClB,wBAAwB,GAAG,SAAS,CAEtC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE3E;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE/D;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAE/C;IAED;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,YAAY,EAAE,8BAA8B,GAC3C,kBAAkB,CAEpB;IAED;;;;;;OAMG;IACH,sBAAsB,CACpB,YAAY,EAAE,oCAAoC,GACjD,wBAAwB,CAE1B;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;;;;;OAMG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,EACnD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-cognito-identity-provider.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EACV,oCAAoC,EACpC,8BAA8B,EAC/B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAM/E,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,sDAAsD,CAAC;AAE9D,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAEvD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAEnD;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAEvD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,0BAA2B,SAAQ,mBAAmB;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IAEH,YAAY,UAAU,GAAE,oCAAyC,EA+BhE;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAW,EAAE,MAAM,GAClB,wBAAwB,GAAG,SAAS,CAEtC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE3E;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE/D;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAE/C;IAED;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,YAAY,EAAE,8BAA8B,GAC3C,kBAAkB,CAEpB;IAED;;;;;;OAMG;IACH,sBAAsB,CACpB,YAAY,EAAE,oCAAoC,GACjD,wBAAwB,CAE1B;IAED;;;;;;;OAOG;IACH,OAAO,IAAI,gBAAgB,CAE1B;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/cognito/sim-cognito-identity-provider.js

@@ -1,12 +1,13 @@
 import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimWafNoProtection, } from "../wafv2/association/sim-waf-protection.js";
 import { SimCognitoCfnResourceFactory } from "./cfn/sim-cfn-cognito-resource-factory.js";
 import { SimCognitoCommands } from "./command/sim-cognito-commands.js";
 import { SimCognitoDomainRegistry } from "./registry/sim-cognito-domain-registry.js";
 import { SimCognitoUserPoolRegistry } from "./registry/sim-cognito-user-pool-registry.js";
 import { SimCognitoSdkCommandRouter } from "./sdk/sim-cognito-sdk-command-router.js";
-import { SimCognitoAppClients } from "./sim-cognito-app-clients.js";
+import { SimCognitoUserPools } from "./sim-cognito-user-pools.js";
 import { requireSimCognitoUserPoolId, } from "./user-pool/sim-cognito-user-pool-id.js";
 import { SimCognitoUserPoolStore } from "./user-pool/sim-cognito-user-pool-store.js";
 import { SimCognitoNoTriggerFunctions, } from "./user-pool/trigger/sim-cognito-trigger-functions.js";
@@ -26,7 +27,7 @@ import { SimCognitoNoTriggerFunctions, } from "./user-pool/trigger/sim-cognito-t
  * Only user pools are simulated. Cognito identity pools, which hand out AWS
  * credentials, are a different service and are not simulated at all.
  */
-export class SimCognitoIdentityProvider extends SimCognitoAppClients {
+export class SimCognitoIdentityProvider extends SimCognitoUserPools {
     pools;
     userPoolRegistry;
     domainRegistry;
@@ -35,7 +36,7 @@ export class SimCognitoIdentityProvider extends SimCognitoAppClients {
         cognito: this,
     });
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), userPoolRegistry = new SimCognitoUserPoolRegistry(), domainRegistry = new SimCognitoDomainRegistry(), triggerFunctions = new SimCognitoNoTriggerFunctions(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), userPoolRegistry = new SimCognitoUserPoolRegistry(), domainRegistry = new SimCognitoDomainRegistry(), triggerFunctions = new SimCognitoNoTriggerFunctions(), webAcls = new SimWafNoProtection(), } = properties;
         const pools = new SimCognitoUserPoolStore({
             registry: userPoolRegistry,
             domains: domainRegistry,
@@ -48,6 +49,7 @@ export class SimCognitoIdentityProvider extends SimCognitoAppClients {
                 pools,
                 domains: domainRegistry,
                 triggerFunctions,
+                webAcls,
             }),
             background,
         });
@@ -121,57 +123,15 @@ export class SimCognitoIdentityProvider extends SimCognitoAppClients {
         return this.commands.registrations.userPoolClient(registration);
     }
     /**
-     * Handle a CreateUserPool Command from the SDK.
-     */
-    async createUserPool(command, options) {
-        await this.background.sequence();
-        return this.commands.userPools.create(command, options);
-    }
-    /**
-     * Handle a DescribeUserPool Command from the SDK.
-     */
-    async describeUserPool(command, options) {
-        await this.background.sequence();
-        return this.commands.userPools.describe(command, options);
-    }
-    /**
-     * Handle an UpdateUserPool Command from the SDK.
-     */
-    async updateUserPool(command, options) {
-        await this.background.sequence();
-        return this.commands.userPools.update(command, options);
-    }
-    /**
-     * Handle a DeleteUserPool Command from the SDK.
-     */
-    async deleteUserPool(command, options) {
-        await this.background.sequence();
-        return this.commands.userPools.delete(command, options);
-    }
-    /**
-     * Handle a SetUserPoolMfaConfig Command from the SDK.
+     * The web ACLs in front of this scope's pools, as a served request sees
+     * them.
      *
-     * This is the second call real CloudFormation makes when a template declares
-     * a pool with MFA, and the only place the factors behind an `MfaConfiguration`
-     * are set.
-     */
-    async setUserPoolMfaConfig(command, options) {
-        await this.background.sequence();
-        return this.commands.userPoolMfa.set(command, options);
-    }
-    /**
-     * Handle a GetUserPoolMfaConfig Command from the SDK.
-     */
-    async getUserPoolMfaConfig(command, options) {
-        await this.background.sequence();
-        return this.commands.userPoolMfa.get(command, options);
-    }
-    /**
-     * Handle a ListUserPools Command from the SDK.
+     * The simulator's own accessor rather than a Cognito operation: a request to
+     * a pool's hosted domain is served without a Command, so this is how the
+     * serving layer reaches whatever a web ACL decided about it.
      */
-    async listUserPools(command, options) {
-        await this.background.sequence();
-        return this.commands.listUserPools.handle(command, options);
+    webAcls() {
+        return this.commands.webAcls;
     }
     /**
      * Get this service's CloudFormation Resource factory.

package/dist/service/cognito/sim-cognito-identity-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-identity-provider.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAUpE,OAAO,EACL,2BAA2B,GAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAgC9D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IACjD,KAAK,CAA0B;IAC/B,gBAAgB,CAA6B;IAC7C,cAAc,CAA2B;IACzC,SAAS,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,GAAG,IAAI,4BAA4B,CAAC;QAC7D,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,gBAAgB,GAAG,IAAI,0BAA0B,EAAE,EACnD,cAAc,GAAG,IAAI,wBAAwB,EAAE,EAC/C,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,GACtD,GAAG,UAAU,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,QAAQ,EAAE,IAAI,kBAAkB,CAAC;gBAC/B,kBAAkB;gBAClB,GAAG;gBACH,KAAK,EAAE,UAAU;gBACjB,KAAK;gBACL,OAAO,EAAE,cAAc;gBACvB,gBAAgB;aACjB,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAkC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,YAA4C;QAE5C,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CACpB,YAAkD;QAElD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD,EACnD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-identity-provider.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-identity-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,kBAAkB,GAEnB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AASlE,OAAO,EACL,2BAA2B,GAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAuC9D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,0BAA2B,SAAQ,mBAAmB;IAChD,KAAK,CAA0B;IAC/B,gBAAgB,CAA6B;IAC7C,cAAc,CAA2B;IACzC,SAAS,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,GAAG,IAAI,4BAA4B,CAAC;QAC7D,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,gBAAgB,GAAG,IAAI,0BAA0B,EAAE,EACnD,cAAc,GAAG,IAAI,wBAAwB,EAAE,EAC/C,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,EACrD,OAAO,GAAG,IAAI,kBAAkB,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,QAAQ,EAAE,IAAI,kBAAkB,CAAC;gBAC/B,kBAAkB;gBAClB,GAAG;gBACH,KAAK,EAAE,UAAU;gBACjB,KAAK;gBACL,OAAO,EAAE,cAAc;gBACvB,gBAAgB;gBAChB,OAAO;aACR,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,8BAA8B,CAC5B,WAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,wBAAwB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAkC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,YAA4C;QAE5C,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CACpB,YAAkD;QAElD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/cognito/sim-cognito-user-pools.d.ts

@@ -0,0 +1,55 @@
+import type { BackgroundScheduler } from "../../util/background/background.js";
+import type * as simCognitoCommands from "./command/sim-cognito-command.types.js";
+import type { SimCognitoCommands } from "./command/sim-cognito-commands.js";
+import { SimCognitoAppClients } from "./sim-cognito-app-clients.js";
+import type { SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-user-directory.js";
+export type { SimCognitoIdentityProviderRequestOptions } from "./sim-cognito-user-directory.js";
+interface SimCognitoUserPoolsProperties {
+    readonly commands: SimCognitoCommands;
+    readonly background: BackgroundScheduler;
+}
+/**
+ * The pool operations of simulated Cognito: creating a pool, reading and
+ * changing its settings, deleting it, and listing the pools a scope holds.
+ *
+ * They are a class of their own for the reason the rest of the chain is: one
+ * class holding every Cognito operation had outgrown reading in one sitting,
+ * and `SimCognitoIdentityProvider` above this holds the wiring the whole
+ * service is built from.
+ */
+export declare abstract class SimCognitoUserPools extends SimCognitoAppClients {
+    protected constructor(properties: SimCognitoUserPoolsProperties);
+    /**
+     * Handle a CreateUserPool Command from the SDK.
+     */
+    createUserPool(command: simCognitoCommands.SimCreateUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimCreateUserPoolCommandOutput>;
+    /**
+     * Handle a DescribeUserPool Command from the SDK.
+     */
+    describeUserPool(command: simCognitoCommands.SimDescribeUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimDescribeUserPoolCommandOutput>;
+    /**
+     * Handle an UpdateUserPool Command from the SDK.
+     */
+    updateUserPool(command: simCognitoCommands.SimUpdateUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimUpdateUserPoolCommandOutput>;
+    /**
+     * Handle a DeleteUserPool Command from the SDK.
+     */
+    deleteUserPool(command: simCognitoCommands.SimDeleteUserPoolCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimDeleteUserPoolCommandOutput>;
+    /**
+     * Handle a SetUserPoolMfaConfig Command from the SDK.
+     *
+     * This is the second call real CloudFormation makes when a template declares
+     * a pool with MFA, and the only place the factors behind an `MfaConfiguration`
+     * are set.
+     */
+    setUserPoolMfaConfig(command: simCognitoCommands.SimSetUserPoolMfaConfigCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimSetUserPoolMfaConfigCommandOutput>;
+    /**
+     * Handle a GetUserPoolMfaConfig Command from the SDK.
+     */
+    getUserPoolMfaConfig(command: simCognitoCommands.SimGetUserPoolMfaConfigCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimGetUserPoolMfaConfigCommandOutput>;
+    /**
+     * Handle a ListUserPools Command from the SDK.
+     */
+    listUserPools(command: simCognitoCommands.SimListUserPoolsCommand, options?: SimCognitoIdentityProviderRequestOptions): Promise<simCognitoCommands.SimListUserPoolsCommandOutput>;
+}
+//# sourceMappingURL=sim-cognito-user-pools.d.ts.map

package/dist/service/cognito/sim-cognito-user-pools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pools.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-pools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,KAAK,kBAAkB,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,YAAY,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAEhG,UAAU,6BAA6B;IACrC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,8BAAsB,mBAAoB,SAAQ,oBAAoB;IACpE,SAAS,aAAa,UAAU,EAAE,6BAA6B,EAE9D;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,kBAAkB,CAAC,0BAA0B,EACtD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAG9D;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,kBAAkB,CAAC,wBAAwB,EACpD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAG5D;IAED;;;;;;OAMG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,kBAAkB,CAAC,8BAA8B,EAC1D,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAGlE;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,kBAAkB,CAAC,uBAAuB,EACnD,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAG3D;CACF"}

package/dist/service/cognito/sim-cognito-user-pools.js

@@ -0,0 +1,69 @@
+import { SimCognitoAppClients } from "./sim-cognito-app-clients.js";
+/**
+ * The pool operations of simulated Cognito: creating a pool, reading and
+ * changing its settings, deleting it, and listing the pools a scope holds.
+ *
+ * They are a class of their own for the reason the rest of the chain is: one
+ * class holding every Cognito operation had outgrown reading in one sitting,
+ * and `SimCognitoIdentityProvider` above this holds the wiring the whole
+ * service is built from.
+ */
+export class SimCognitoUserPools extends SimCognitoAppClients {
+    constructor(properties) {
+        super(properties);
+    }
+    /**
+     * Handle a CreateUserPool Command from the SDK.
+     */
+    async createUserPool(command, options) {
+        await this.background.sequence();
+        return this.commands.userPools.create(command, options);
+    }
+    /**
+     * Handle a DescribeUserPool Command from the SDK.
+     */
+    async describeUserPool(command, options) {
+        await this.background.sequence();
+        return this.commands.userPools.describe(command, options);
+    }
+    /**
+     * Handle an UpdateUserPool Command from the SDK.
+     */
+    async updateUserPool(command, options) {
+        await this.background.sequence();
+        return this.commands.userPools.update(command, options);
+    }
+    /**
+     * Handle a DeleteUserPool Command from the SDK.
+     */
+    async deleteUserPool(command, options) {
+        await this.background.sequence();
+        return this.commands.userPools.delete(command, options);
+    }
+    /**
+     * Handle a SetUserPoolMfaConfig Command from the SDK.
+     *
+     * This is the second call real CloudFormation makes when a template declares
+     * a pool with MFA, and the only place the factors behind an `MfaConfiguration`
+     * are set.
+     */
+    async setUserPoolMfaConfig(command, options) {
+        await this.background.sequence();
+        return this.commands.userPoolMfa.set(command, options);
+    }
+    /**
+     * Handle a GetUserPoolMfaConfig Command from the SDK.
+     */
+    async getUserPoolMfaConfig(command, options) {
+        await this.background.sequence();
+        return this.commands.userPoolMfa.get(command, options);
+    }
+    /**
+     * Handle a ListUserPools Command from the SDK.
+     */
+    async listUserPools(command, options) {
+        await this.background.sequence();
+        return this.commands.listUserPools.handle(command, options);
+    }
+}
+//# sourceMappingURL=sim-cognito-user-pools.js.map

package/dist/service/cognito/sim-cognito-user-pools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-pools.js","sourceRoot":"","sources":["../../../src/service/cognito/sim-cognito-user-pools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAUpE;;;;;;;;GAQG;AACH,MAAM,OAAgB,mBAAoB,SAAQ,oBAAoB;IACpE,YAAsB,UAAyC;QAC7D,KAAK,CAAC,UAAU,CAAC,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAsD,EACtD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAoD,EACpD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAA0D,EAC1D,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmD,EACnD,OAAkD;QAElD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.d.ts

@@ -0,0 +1,24 @@
+import type { SimCognitoManagedLoginSession } from "./sim-cognito-managed-login-session.js";
+/**
+ * The managed login sessions one simulated user pool has going.
+ *
+ * A session belongs to the pool's domain rather than to an app client, as a
+ * real one does: a browser that signed in for one app client is a returning
+ * browser to every other app client of the same pool.
+ */
+export declare class SimCognitoManagedLoginSessionStore {
+    private readonly sessions;
+    /**
+     * Remember a session a sign-in started for a browser.
+     */
+    add(session: SimCognitoManagedLoginSession): void;
+    /**
+     * The session a browser presented, if this pool still holds it.
+     */
+    find(value: string | undefined, now: Date): SimCognitoManagedLoginSession | undefined;
+    /**
+     * Forget a session, because the browser holding it has signed out.
+     */
+    end(value: string | undefined): void;
+}
+//# sourceMappingURL=sim-cognito-managed-login-session-store.d.ts.map

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-managed-login-session-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F;;;;;;GAMG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAE7E;;OAEG;IACH,GAAG,CAAC,OAAO,EAAE,6BAA6B,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,IAAI,CACF,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,GAAG,EAAE,IAAI,GACR,6BAA6B,GAAG,SAAS,CAkB3C;IAED;;OAEG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAMnC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.js

@@ -0,0 +1,43 @@
+/**
+ * The managed login sessions one simulated user pool has going.
+ *
+ * A session belongs to the pool's domain rather than to an app client, as a
+ * real one does: a browser that signed in for one app client is a returning
+ * browser to every other app client of the same pool.
+ */
+export class SimCognitoManagedLoginSessionStore {
+    sessions = new Map();
+    /**
+     * Remember a session a sign-in started for a browser.
+     */
+    add(session) {
+        this.sessions.set(session.value, session);
+    }
+    /**
+     * The session a browser presented, if this pool still holds it.
+     */
+    find(value, now) {
+        if (value === undefined) {
+            return undefined;
+        }
+        const session = this.sessions.get(value);
+        if (session === undefined) {
+            return undefined;
+        }
+        if (session.isExpiredAt(now)) {
+            this.sessions.delete(value);
+            return undefined;
+        }
+        return session;
+    }
+    /**
+     * Forget a session, because the browser holding it has signed out.
+     */
+    end(value) {
+        if (value === undefined) {
+            return;
+        }
+        this.sessions.delete(value);
+    }
+}
+//# sourceMappingURL=sim-cognito-managed-login-session-store.js.map

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-managed-login-session-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-managed-login-session-store.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,kCAAkC;IAC5B,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE7E;;OAEG;IACH,GAAG,CAAC,OAAsC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,CACF,KAAyB,EACzB,GAAS;QAET,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,KAAyB;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session.d.ts

@@ -0,0 +1,24 @@
+interface SimCognitoManagedLoginSessionProperties {
+    readonly username: string;
+    readonly startedAt: Date;
+}
+/**
+ * One managed login session, which is what signs a returning browser in
+ * without asking for a password again.
+ *
+ * Real managed login keeps this in the `cognito` cookie on the pool's domain.
+ * The value is opaque, and the user it signed in is all it carries, because a
+ * sign-in from the session issues a code the same way the first sign-in did.
+ */
+export declare class SimCognitoManagedLoginSession {
+    readonly value: string;
+    readonly username: string;
+    readonly startedAt: Date;
+    constructor(properties: SimCognitoManagedLoginSessionProperties);
+    /**
+     * Whether this session has run out by a given moment.
+     */
+    isExpiredAt(now: Date): boolean;
+}
+export {};
+//# sourceMappingURL=sim-cognito-managed-login-session.d.ts.map

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-managed-login-session.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-managed-login-session.ts"],"names":[],"mappings":"AAYA,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,6BAA6B;IACxC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,SAAS,EAAE,IAAI,CAAC;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAI9D;IAED;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAM9B;CACF"}

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session.js

@@ -0,0 +1,36 @@
+import { randomUUID } from "node:crypto";
+/**
+ * How long a managed login session lasts.
+ *
+ * Real Cognito gives the browser an hour, and nothing configures that. Signing
+ * in from the session leaves the hour where it started, so a browser signing
+ * in from the same cookie all morning is asked for credentials again at the
+ * end of the first hour.
+ */
+const sessionMinutes = 60;
+/**
+ * One managed login session, which is what signs a returning browser in
+ * without asking for a password again.
+ *
+ * Real managed login keeps this in the `cognito` cookie on the pool's domain.
+ * The value is opaque, and the user it signed in is all it carries, because a
+ * sign-in from the session issues a code the same way the first sign-in did.
+ */
+export class SimCognitoManagedLoginSession {
+    value;
+    username;
+    startedAt;
+    constructor(properties) {
+        this.value = randomUUID();
+        this.username = properties.username;
+        this.startedAt = properties.startedAt;
+    }
+    /**
+     * Whether this session has run out by a given moment.
+     */
+    isExpiredAt(now) {
+        const expiresAt = new Date(this.startedAt.getTime() + sessionMinutes * 60_000);
+        return now.getTime() >= expiresAt.getTime();
+    }
+}
+//# sourceMappingURL=sim-cognito-managed-login-session.js.map

package/dist/service/cognito/user-pool/auth/sim-cognito-managed-login-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-managed-login-session.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/auth/sim-cognito-managed-login-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAO1B;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA6B;IACxB,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,SAAS,CAAO;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAS;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM,CACnD,CAAC;QAEF,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;CACF"}