@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/cognito/command/hosted/sim-cognito-logout-endpoint.js

@@ -1,23 +1,31 @@
 import { SimCognitoOAuthError } from "../../error/sim-cognito-oauth.error.js";
 import { SimCognitoHostedClient } from "./sim-cognito-hosted-client.js";
+import { SimCognitoSessionChange } from "./sim-cognito-session-change.js";
 /**
  * The `/logout` endpoint of a pool's hosted domain.
  *
  * Real Cognito ends the managed login session in the browser's cookie and
- * sends the user to one of the app client's sign-out URLs. There is no such
- * session here, because every authorize request signs in afresh at the
- * identity provider rather than reusing a cookie, so what is left is the
- * redirect and the check that the URL is one the app client registered.
+ * sends the user to one of the app client's sign-out URLs. Both happen here.
+ * Ending the session is what makes the next authorize request ask for a
+ * password again, and it is why an application's own sign-out has to come
+ * through this endpoint. Clearing its own cookies and revoking the user's
+ * tokens leaves this session where it was.
  *
- * It signs nobody out at the identity provider either, which real Cognito also
- * does not do: a user signed out here is still signed in at Google.
+ * It signs nobody out at the identity provider, which real Cognito also does
+ * not do: a user signed out here is still signed in at Google.
  */
 export class SimCognitoLogoutEndpoint {
     hostedClient = new SimCognitoHostedClient();
     /**
-     * Send the browser to the application's sign-out page.
+     * End the browser's managed login session, and send it to the application's
+     * sign-out page.
+     *
+     * `presentedSession` is the session the browser carried, which the serving
+     * layer reads out of the `cognito` cookie. A request arriving without one is
+     * a sign-out by a browser that holds no session, and it redirects the same
+     * way.
      */
-    handle(pool, input) {
+    handle(pool, input, presentedSession) {
         const client = this.hostedClient.forAuthorize(pool, input.client_id);
         const { logout_uri: logoutUri } = input;
         if (logoutUri === undefined) {
@@ -37,7 +45,8 @@ export class SimCognitoLogoutEndpoint {
                 redirectable: false,
             });
         }
-        return { location: logoutUri };
+        pool.auth.endManagedLoginSession(presentedSession);
+        return { location: logoutUri, session: SimCognitoSessionChange.ended() };
     }
 }
 //# sourceMappingURL=sim-cognito-logout-endpoint.js.map

package/dist/service/cognito/command/hosted/sim-cognito-logout-endpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-logout-endpoint.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/hosted/sim-cognito-logout-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAMxE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,wBAAwB;IAClB,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE7D;;OAEG;IACH,MAAM,CACJ,IAAwB,EACxB,KAA4B;QAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAExC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,kEAAkE;oBAClE,8DAA8D;oBAC9D,kDAAkD;gBACpD,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,eAAe,SAAS,8BAA8B,MAAM,CAAC,EAAE,KAAK;oBACpE,YAAY;gBACd,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-logout-endpoint.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/hosted/sim-cognito-logout-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAM1E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,YAAY,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE7D;;;;;;;;OAQG;IACH,MAAM,CACJ,IAAwB,EACxB,KAA4B,EAC5B,gBAAyB;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAExC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,kEAAkE;oBAClE,8DAA8D;oBAC9D,kDAAkD;gBACpD,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,eAAe,SAAS,8BAA8B,MAAM,CAAC,EAAE,KAAK;oBACpE,YAAY;gBACd,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAEnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/command/hosted/sim-cognito-session-change.d.ts

@@ -0,0 +1,40 @@
+/**
+ * What a hosted request did to the browser's managed login session.
+ */
+export type SimCognitoSessionOutcome = "started" | "reused" | "ended";
+/**
+ * The change a hosted endpoint makes to the browser's managed login session.
+ *
+ * Real managed login keeps the session in the `cognito` cookie on the pool's
+ * domain, and the serving layer here is what sets and clears that cookie. A
+ * test calling an endpoint directly reads the change from here, which is how
+ * it tells a sign-in that took a password from one the session answered.
+ */
+export declare class SimCognitoSessionChange {
+    readonly outcome: SimCognitoSessionOutcome;
+    /**
+     * The session the browser is given, where this request started one.
+     */
+    readonly startedSession: string | undefined;
+    private constructor();
+    /**
+     * A sign-in that took credentials and started a session for the browser.
+     */
+    static started(value: string): SimCognitoSessionChange;
+    /**
+     * A sign-in the browser's own session answered, taking no credentials.
+     *
+     * Nothing is handed back, because the browser already holds the session.
+     * Real Cognito leaves the hour where the first sign-in started it.
+     */
+    static reused(): SimCognitoSessionChange;
+    /**
+     * A sign-out, which leaves the browser holding no session.
+     */
+    static ended(): SimCognitoSessionChange;
+    /**
+     * Whether this request took the session out of the browser.
+     */
+    get endsSession(): boolean;
+}
+//# sourceMappingURL=sim-cognito-session-change.d.ts.map

package/dist/service/cognito/command/hosted/sim-cognito-session-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-session-change.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/hosted/sim-cognito-session-change.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtE;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAElD;;OAEG;IACH,SAAgB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnD,OAAO,eAMN;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,CAErD;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAEvC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,IAAI,uBAAuB,CAEtC;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,OAAO,CAEzB;CACF"}

package/dist/service/cognito/command/hosted/sim-cognito-session-change.js

@@ -0,0 +1,47 @@
+/**
+ * The change a hosted endpoint makes to the browser's managed login session.
+ *
+ * Real managed login keeps the session in the `cognito` cookie on the pool's
+ * domain, and the serving layer here is what sets and clears that cookie. A
+ * test calling an endpoint directly reads the change from here, which is how
+ * it tells a sign-in that took a password from one the session answered.
+ */
+export class SimCognitoSessionChange {
+    outcome;
+    /**
+     * The session the browser is given, where this request started one.
+     */
+    startedSession;
+    constructor(outcome, startedSession) {
+        this.outcome = outcome;
+        this.startedSession = startedSession;
+    }
+    /**
+     * A sign-in that took credentials and started a session for the browser.
+     */
+    static started(value) {
+        return new SimCognitoSessionChange("started", value);
+    }
+    /**
+     * A sign-in the browser's own session answered, taking no credentials.
+     *
+     * Nothing is handed back, because the browser already holds the session.
+     * Real Cognito leaves the hour where the first sign-in started it.
+     */
+    static reused() {
+        return new SimCognitoSessionChange("reused", undefined);
+    }
+    /**
+     * A sign-out, which leaves the browser holding no session.
+     */
+    static ended() {
+        return new SimCognitoSessionChange("ended", undefined);
+    }
+    /**
+     * Whether this request took the session out of the browser.
+     */
+    get endsSession() {
+        return this.outcome === "ended";
+    }
+}
+//# sourceMappingURL=sim-cognito-session-change.js.map

package/dist/service/cognito/command/hosted/sim-cognito-session-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-session-change.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/hosted/sim-cognito-session-change.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAClB,OAAO,CAA2B;IAElD;;OAEG;IACa,cAAc,CAAqB;IAEnD,YACE,OAAiC,EACjC,cAAkC;QAElC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;IAClC,CAAC;CACF"}

package/dist/service/cognito/command/sim-cognito-commands.d.ts

@@ -5,6 +5,7 @@ import { SimCognitoRegistrations } from "../user-pool/sim-cognito-registrations.
 import type { SimCognitoUserPoolStore } from "../user-pool/sim-cognito-user-pool-store.js";
 import type { SimCognitoTriggerFunctions } from "../user-pool/trigger/sim-cognito-trigger-functions.js";
 import type { SimCognitoDomainRegistry } from "../registry/sim-cognito-domain-registry.js";
+import type { SimWafProtection } from "../../wafv2/association/sim-waf-protection.js";
 import { SimCognitoAuthCommands } from "./auth/sim-cognito-auth-commands.js";
 import { SimCognitoDomainCommands } from "./domain/sim-cognito-domain-commands.js";
 import { SimCognitoHostedCommands } from "./hosted/sim-cognito-hosted-commands.js";
@@ -30,6 +31,7 @@ interface SimCognitoCommandsProperties {
     readonly pools: SimCognitoUserPoolStore;
     readonly domains: SimCognitoDomainRegistry;
     readonly triggerFunctions: SimCognitoTriggerFunctions;
+    readonly webAcls: SimWafProtection;
 }
 /**
  * The command handlers of one simulated Cognito scope.
@@ -62,6 +64,12 @@ export declare class SimCognitoCommands {
      * AWS operation creates.
      */
     readonly registrations: SimCognitoRegistrations;
+    /**
+     * The web ACLs in front of this scope's pools. Held here because a request
+     * to a hosted domain reaches it without a Command, the way a fronting
+     * service reaches AWS WAF.
+     */
+    readonly webAcls: SimWafProtection;
     constructor(properties: SimCognitoCommandsProperties);
 }
 export {};

package/dist/service/cognito/command/sim-cognito-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAGnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAGxG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAGrG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAElG,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IACnD,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IACjD,SAAgB,aAAa,EAAE,+BAA+B,CAAC;IAC/D,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAC7C,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,SAAgB,iBAAiB,EAAE,kCAAkC,CAAC;IACtE,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IAEjD;;;OAGG;IACH,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD,YAAY,UAAU,EAAE,4BAA4B,EA8GnD;CACF"}
+{"version":3,"file":"sim-cognito-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAGnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAGxG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAGrG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAElG,UAAU,4BAA4B;IACpC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,SAAgB,SAAS,EAAE,0BAA0B,CAAC;IACtD,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,OAAO,EAAE,gCAAgC,CAAC;IAC1D,SAAgB,WAAW,EAAE,6BAA6B,CAAC;IAC3D,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IACnD,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IACjD,SAAgB,aAAa,EAAE,+BAA+B,CAAC;IAC/D,SAAgB,WAAW,EAAE,4BAA4B,CAAC;IAC1D,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAC/C,SAAgB,MAAM,EAAE,uBAAuB,CAAC;IAChD,SAAgB,eAAe,EAAE,iCAAiC,CAAC;IACnE,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAC7C,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,SAAgB,iBAAiB,EAAE,kCAAkC,CAAC;IACtE,SAAgB,MAAM,EAAE,wBAAwB,CAAC;IAEjD;;;OAGG;IACH,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD;;;;OAIG;IACH,SAAgB,OAAO,EAAE,gBAAgB,CAAC;IAE1C,YAAY,UAAU,EAAE,4BAA4B,EAkHnD;CACF"}

package/dist/service/cognito/command/sim-cognito-commands.js

@@ -59,8 +59,15 @@ export class SimCognitoCommands {
      * AWS operation creates.
      */
     registrations;
+    /**
+     * The web ACLs in front of this scope's pools. Held here because a request
+     * to a hosted domain reaches it without a Command, the way a fronting
+     * service reaches AWS WAF.
+     */
+    webAcls;
     constructor(properties) {
         const { accountRegionScope, iam, clock, pools, domains, triggerFunctions } = properties;
+        this.webAcls = properties.webAcls;
         const authorizer = new SimCognitoAuthorizer({ iam, accountRegionScope });
         const resolver = new SimCognitoRequestResolver({ pools, authorizer });
         const authResolver = new SimCognitoAuthResolver({ resolver, pools });
@@ -91,6 +98,7 @@ export class SimCognitoCommands {
             pools,
             poolFactory,
             authorizer,
+            webAcls: properties.webAcls,
         });
         this.userPoolMfa = new SimCognitoUserPoolMfaCommands({ pools, authorizer });
         this.listUserPools = new SimCognitoListUserPools({ pools, authorizer });

package/dist/service/cognito/command/sim-cognito-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAWlG;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,WAAW,CAAgC;IAC3C,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,OAAO,CAA4B;IACnC,MAAM,CAA2B;IACjC,aAAa,CAAkC;IAC/C,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAC7B,OAAO,CAA2B;IAClC,iBAAiB,CAAqC;IACtD,MAAM,CAA2B;IAEjD;;;OAGG;IACa,aAAa,CAA0B;IAEvD,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,GACxE,UAAU,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAChD,kBAAkB;YAClB,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW;YACX,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa;YACb,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC;YAC/C,UAAU,EAAE,kBAAkB,CAAC,UAAU;YACzC,KAAK;YACL,WAAW;YACX,aAAa;SACd,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,SAAS;YACT,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC3C,QAAQ;YACR,SAAS;YACT,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,+BAA+B,CAAC;YACvD,YAAY;YACZ,QAAQ;YACR,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC;YACrC,QAAQ;YACR,YAAY;YACZ,KAAK;YACL,KAAK;YACL,QAAQ;YACR,WAAW;YACX,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,KAAK;YACL,OAAO;YACP,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,kCAAkC,CAAC;YAC9D,QAAQ;YACR,KAAK;SACN,CAAC,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,WAAW;YACX,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-commands.js","sourceRoot":"","sources":["../../../../src/service/cognito/command/sim-cognito-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAGtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mDAAmD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAYlG;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,SAAS,CAA6B;IACtC,WAAW,CAAgC;IAC3C,aAAa,CAA0B;IACvC,OAAO,CAAmC;IAC1C,WAAW,CAAgC;IAC3C,KAAK,CAAyB;IAC9B,OAAO,CAA4B;IACnC,MAAM,CAA2B;IACjC,aAAa,CAAkC;IAC/C,WAAW,CAA+B;IAC1C,SAAS,CAAsB;IAC/B,MAAM,CAA0B;IAChC,eAAe,CAAoC;IACnD,UAAU,CAAuB;IACjC,IAAI,CAAyB;IAC7B,OAAO,CAA2B;IAClC,iBAAiB,CAAqC;IACtD,MAAM,CAA2B;IAEjD;;;OAGG;IACa,aAAa,CAA0B;IAEvD;;;;OAIG;IACa,OAAO,CAAmB;IAE1C,YAAY,UAAwC;QAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,GACxE,UAAU,CAAC;QAEb,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAElC,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,IAAI,yBAAyB,CAAC;YAChD,kBAAkB;YAClB,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,WAAW;YACX,UAAU;YACV,OAAO,EAAE,UAAU,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAgC,CAAC;YAClD,KAAK;YACL,aAAa;YACb,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC;YAC/C,UAAU,EAAE,kBAAkB,CAAC,UAAU;YACzC,KAAK;YACL,WAAW;YACX,aAAa;SACd,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC;YACtC,QAAQ;YACR,SAAS;YACT,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC3C,QAAQ;YACR,SAAS;YACT,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,+BAA+B,CAAC;YACvD,YAAY;YACZ,QAAQ;YACR,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,iCAAiC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC;YACrC,QAAQ;YACR,YAAY;YACZ,KAAK;YACL,KAAK;YACL,QAAQ;YACR,WAAW;YACX,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,KAAK;YACL,OAAO;YACP,UAAU;YACV,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,kCAAkC,CAAC;YAC9D,QAAQ;YACR,KAAK;SACN,CAAC,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,WAAW;YACX,WAAW;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.d.ts

@@ -1,12 +1,14 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCognitoUserPoolFactory } from "../../user-pool/sim-cognito-user-pool-factory.js";
 import type { SimCognitoUserPoolStore } from "../../user-pool/sim-cognito-user-pool-store.js";
+import type { SimWafProtection } from "../../../wafv2/association/sim-waf-protection.js";
 import type { SimCognitoAuthorizer } from "../authorize/sim-cognito-authorizer.js";
 import type { SimCreateUserPoolCommand, SimCreateUserPoolCommandOutput, SimDeleteUserPoolCommand, SimDeleteUserPoolCommandOutput, SimDescribeUserPoolCommand, SimDescribeUserPoolCommandOutput, SimUpdateUserPoolCommand, SimUpdateUserPoolCommandOutput } from "./user-pool.command.js";
 interface SimCognitoUserPoolCommandsProperties {
     readonly pools: SimCognitoUserPoolStore;
     readonly poolFactory: SimCognitoUserPoolFactory;
     readonly authorizer: SimCognitoAuthorizer;
+    readonly webAcls: SimWafProtection;
 }
 interface SimCognitoCommandOptions {
     readonly caller?: SimAwsCaller;
@@ -19,6 +21,7 @@ export declare class SimCognitoUserPoolCommands {
     private readonly pools;
     private readonly poolFactory;
     private readonly authorizer;
+    private readonly webAcls;
     private readonly view;
     private readonly unsimulatedOptions;
     private readonly unsimulatedIdentity;
@@ -49,6 +52,10 @@ export declare class SimCognitoUserPoolCommands {
     describe(command: SimDescribeUserPoolCommand, options?: SimCognitoCommandOptions): SimDescribeUserPoolCommandOutput;
     /**
      * Delete a user pool, and with it every app client in it.
+     *
+     * A web ACL in front of the pool is let go of, as it is on AWS: the
+     * association names a pool that no longer exists, and nothing is left
+     * holding it.
      */
     delete(command: SimDeleteUserPoolCommand, options?: SimCognitoCommandOptions): SimDeleteUserPoolCommandOutput;
 }

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAGlG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAKnF,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAC0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CACU;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACU;IAE7C,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAehC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CA+BhC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,wBAAwB,GACjC,gCAAgC,CAalC;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAsBhC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAGlG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAKnF,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAC0B;IAC7D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CACU;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CACU;IAE7C,YAAY,UAAU,EAAE,oCAAoC,EAK3D;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAehC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CA+BhC;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,wBAAwB,GACjC,gCAAgC,CAalC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,8BAA8B,CAuBhC;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.js

@@ -13,6 +13,7 @@ export class SimCognitoUserPoolCommands {
     pools;
     poolFactory;
     authorizer;
+    webAcls;
     view = new SimCognitoUserPoolView();
     unsimulatedOptions = new SimCognitoUnsimulatedUserPoolOptions("CreateUserPool");
     unsimulatedIdentity = new SimCognitoUnsimulatedUserPoolIdentity();
@@ -21,6 +22,7 @@ export class SimCognitoUserPoolCommands {
         this.pools = properties.pools;
         this.poolFactory = properties.poolFactory;
         this.authorizer = properties.authorizer;
+        this.webAcls = properties.webAcls;
     }
     /**
      * Create a user pool.
@@ -87,6 +89,10 @@ export class SimCognitoUserPoolCommands {
     }
     /**
      * Delete a user pool, and with it every app client in it.
+     *
+     * A web ACL in front of the pool is let go of, as it is on AWS: the
+     * association names a pool that no longer exists, and nothing is left
+     * holding it.
      */
     delete(command, options) {
         const userPoolId = requireSimCognitoUserPoolId(command.input.UserPoolId);
@@ -98,6 +104,7 @@ export class SimCognitoUserPoolCommands {
                 `first, as real Cognito wants.`);
         }
         this.pools.remove(pool);
+        this.webAcls.release(pool.arn.value);
         return { $metadata: {} };
     }
 }

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAG/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAsBzE;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAA0B;IAC/B,WAAW,CAA4B;IACvC,UAAU,CAAuB;IACjC,IAAI,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACpC,kBAAkB,GACjC,IAAI,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;IAC5C,mBAAmB,GAClC,IAAI,qCAAqC,EAAE,CAAC;IAC7B,kBAAkB,GACjC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YAAY,UAAgD;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QAEH,wEAAwE;QACxE,wDAAwD;QACxD,yEAAyE;QACzE,WAAW;QACX,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9C,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,qDAAqD;QACrD,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAmC,EACnC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,8BAA8B,EAC9B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,0CAA0C;gBAC/D,+DAA+D;gBAC/D,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAEvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAI/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAuBzE;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAA0B;IAC/B,WAAW,CAA4B;IACvC,UAAU,CAAuB;IACjC,OAAO,CAAmB;IAC1B,IAAI,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACpC,kBAAkB,GACjC,IAAI,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;IAC5C,mBAAmB,GAClC,IAAI,qCAAqC,EAAE,CAAC;IAC7B,kBAAkB,GACjC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YAAY,UAAgD;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAAC;YAC9C,KAAK;YACL,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QAEH,wEAAwE;QACxE,wDAAwD;QACxD,yEAAyE;QACzE,WAAW;QACX,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9C,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,qDAAqD;QACrD,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAmC,EACnC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,8BAA8B,EAC9B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAiC,EACjC,OAAkC;QAElC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,4BAA4B,EAC5B,UAAU,EACV,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,mCAAmC,CAC3C,aAAa,UAAU,0CAA0C;gBAC/D,+DAA+D;gBAC/D,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAErC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-page-markup.d.ts

@@ -9,10 +9,10 @@ export type SimCognitoPageParameters = Readonly<Record<string, string>>;
 /**
  * The HTML the simulated managed login pages are built from.
  *
- * There is no styling and there is no script. The pages exist so that a
- * browser in a local development server can complete a sign-up and a sign-in,
- * and so that a test can post the same forms. Matching what real managed login
- * looks like would be work no test could tell apart from this.
+ * The pages exist so that a browser in a local development server can complete
+ * a sign-up and a sign-in, and so that a test can post the same forms. Every
+ * page carries `simCognitoPageStyle`, which approximates what real managed
+ * login looks like. There is no script on any of them.
  *
  * Every value that reaches the page goes through `escaped`. A `state` is
  * whatever the application put in it, and it is written back into a hidden

package/dist/service/cognito/serve/page/sim-cognito-page-markup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page-markup.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-markup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAUxE;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAc1C;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,wBAAwB,GAAG,QAAQ,CAOrE;IAED;;OAEG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,SAAS,GAAG,MAAM,CAQxD;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAQnD;IAED;;OAEG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,MAAM,GACX,MAAM,CAIR;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5B;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,UAAQ,GAAG,MAAM,CAMlE;IAED;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI7B;CACF"}
+{"version":3,"file":"sim-cognito-page-markup.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-markup.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAUxE;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAgB1C;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,wBAAwB,GAAG,QAAQ,CAOrE;IAED;;OAEG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,SAAS,GAAG,MAAM,CAQxD;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAQnD;IAED;;OAEG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,MAAM,GACX,MAAM,CAIR;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5B;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,UAAQ,GAAG,MAAM,CAMlE;IAED;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI7B;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-page-markup.js

@@ -1,3 +1,4 @@
+import { simCognitoPageStyle } from "./sim-cognito-page-style.js";
 const escapes = new Map([
     ["&", "&"],
     ["<", "&lt;"],
@@ -8,10 +9,10 @@ const escapes = new Map([
 /**
  * The HTML the simulated managed login pages are built from.
  *
- * There is no styling and there is no script. The pages exist so that a
- * browser in a local development server can complete a sign-up and a sign-in,
- * and so that a test can post the same forms. Matching what real managed login
- * looks like would be work no test could tell apart from this.
+ * The pages exist so that a browser in a local development server can complete
+ * a sign-up and a sign-in, and so that a test can post the same forms. Every
+ * page carries `simCognitoPageStyle`, which approximates what real managed
+ * login looks like. There is no script on any of them.
  *
  * Every value that reaches the page goes through `escaped`. A `state` is
  * whatever the application put in it, and it is written back into a hidden
@@ -24,9 +25,11 @@ export class SimCognitoPageMarkup {
      */
     page(title, body) {
         const html = `<!doctype html>\n<html lang="en">\n<head>\n` +
-            `<meta charset="utf-8">\n<title>${this.escaped(title)}</title>\n` +
-            `</head>\n<body>\n<h1>${this.escaped(title)}</h1>\n${body}\n` +
-            `</body>\n</html>\n`;
+            `<meta charset="utf-8">\n` +
+            `<meta name="viewport" content="width=device-width, initial-scale=1">\n` +
+            `<title>${this.escaped(title)}</title>\n${simCognitoPageStyle}\n` +
+            `</head>\n<body>\n<main>\n<h1>${this.escaped(title)}</h1>\n${body}\n` +
+            `</main>\n</body>\n</html>\n`;
         return new Response(html, {
             status: 200,
             headers: {

package/dist/service/cognito/serve/page/sim-cognito-page-markup.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-page-markup.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-markup.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;IACtB,CAAC,GAAG,EAAE,OAAO,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,QAAQ,CAAC;IACf,CAAC,GAAG,EAAE,OAAO,CAAC;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;OAEG;IACH,IAAI,CAAC,KAAa,EAAE,IAAY;QAC9B,MAAM,IAAI,GACR,6CAA6C;YAC7C,kCAAkC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY;YACjE,wBAAwB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI;YAC7D,oBAAoB,CAAC;QAEvB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,UAAU;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAY,EAAE,UAAoC;QACzD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEzD,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;YAC7B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,MAAc,EAAE,IAAY;QAC/B,OAAO,+BAA+B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC;IACnF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAG,MAAM;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEvC,OAAO,CACL,kBAAkB,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY;YACjE,cAAc,WAAW,WAAW,WAAW,IAAI;YACnD,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAoC;QACzC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;aAC9B,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,8BAA8B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;YACpD,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CACtC;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI,CACF,IAAY,EACZ,UAAoC,EACpC,IAAY;QAEZ,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEzD,OAAO,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;IAC5F,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,OAAO,sBAAsB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,cAAc,GAAG,KAAK;QACxD,OAAO,CACL,kCAAkC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;YACxD,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG;YAC1E,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE;YACjD,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-page-markup.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-markup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAWlE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;IACtB,CAAC,GAAG,EAAE,OAAO,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,QAAQ,CAAC;IACf,CAAC,GAAG,EAAE,OAAO,CAAC;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;OAEG;IACH,IAAI,CAAC,KAAa,EAAE,IAAY;QAC9B,MAAM,IAAI,GACR,6CAA6C;YAC7C,0BAA0B;YAC1B,wEAAwE;YACxE,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,mBAAmB,IAAI;YACjE,gCAAgC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI;YACrE,6BAA6B,CAAC;QAEhC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,UAAU;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAY,EAAE,UAAoC;QACzD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEzD,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;YAC7B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,MAAc,EAAE,IAAY;QAC/B,OAAO,+BAA+B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC;IACnF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAG,MAAM;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEvC,OAAO,CACL,kBAAkB,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY;YACjE,cAAc,WAAW,WAAW,WAAW,IAAI;YACnD,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAoC;QACzC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;aAC9B,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,8BAA8B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;YACpD,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CACtC;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI,CACF,IAAY,EACZ,UAAoC,EACpC,IAAY;QAEZ,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEzD,OAAO,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;IAC5F,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,OAAO,sBAAsB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,cAAc,GAAG,KAAK;QACxD,OAAO,CACL,kCAAkC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;YACxD,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG;YAC1E,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE;YACjD,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/serve/page/sim-cognito-page-style.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Styling for the managed login pages.
+ *
+ * Held inline in each page. There is no asset route to serve and no second
+ * request from the browser.
+ *
+ * The values approximate real managed login, measured from a live sign-in
+ * page. A card centred on the page, a bold heading, labels above full-width
+ * fields, and a full-width primary button. A close match is no aim of this.
+ * Real managed login is built on Cloudscape and carries components these
+ * pages have no equivalent for.
+ *
+ * The second submit button on a page is the one carrying `formnovalidate`,
+ * and it is styled as the secondary of the two.
+ */
+export declare const simCognitoPageStyle = "<style>\nbody {\n  margin: 0;\n  min-height: 100vh;\n  padding: 24px;\n  box-sizing: border-box;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  background: #f9f9fa;\n  color: #000716;\n  font: 400 14px/20px \"Helvetica Neue\", Roboto, Arial, sans-serif;\n}\nmain {\n  box-sizing: border-box;\n  width: 402px;\n  max-width: 100%;\n  padding: 24px;\n  background: #fff;\n  border: 1px solid #c6c6cd;\n  border-radius: 8px;\n}\nh1 { margin: 0 0 16px; font-size: 24px; line-height: 30px; }\np { margin: 0 0 16px; }\np:last-child { margin-bottom: 0; }\nlabel { display: block; margin-bottom: 4px; font-weight: 700; }\ninput:not([type=\"hidden\"]) {\n  box-sizing: border-box;\n  width: 100%;\n  padding: 5px 12px;\n  border: 1px solid #7d8998;\n  border-radius: 8px;\n  font: inherit;\n  color: #414d5c;\n}\nbutton {\n  box-sizing: border-box;\n  width: 100%;\n  padding: 4px 20px;\n  border: 2px solid #0972d3;\n  border-radius: 8px;\n  background: #0972d3;\n  color: #fff;\n  font: inherit;\n  font-weight: 700;\n  cursor: pointer;\n}\nbutton[formnovalidate] { background: #fff; color: #0972d3; }\na { color: #0972d3; text-decoration: none; }\na:hover { text-decoration: underline; }\n.message {\n  padding: 8px 12px;\n  border: 1px solid #7d8998;\n  border-radius: 8px;\n  background: #f9f9fa;\n}\n</style>";
+//# sourceMappingURL=sim-cognito-page-style.d.ts.map

package/dist/service/cognito/serve/page/sim-cognito-page-style.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-style.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-style.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mBAAmB,uzCAwDvB,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-page-style.js

@@ -0,0 +1,73 @@
+/**
+ * Styling for the managed login pages.
+ *
+ * Held inline in each page. There is no asset route to serve and no second
+ * request from the browser.
+ *
+ * The values approximate real managed login, measured from a live sign-in
+ * page. A card centred on the page, a bold heading, labels above full-width
+ * fields, and a full-width primary button. A close match is no aim of this.
+ * Real managed login is built on Cloudscape and carries components these
+ * pages have no equivalent for.
+ *
+ * The second submit button on a page is the one carrying `formnovalidate`,
+ * and it is styled as the secondary of the two.
+ */
+export const simCognitoPageStyle = `<style>
+body {
+  margin: 0;
+  min-height: 100vh;
+  padding: 24px;
+  box-sizing: border-box;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: #f9f9fa;
+  color: #000716;
+  font: 400 14px/20px "Helvetica Neue", Roboto, Arial, sans-serif;
+}
+main {
+  box-sizing: border-box;
+  width: 402px;
+  max-width: 100%;
+  padding: 24px;
+  background: #fff;
+  border: 1px solid #c6c6cd;
+  border-radius: 8px;
+}
+h1 { margin: 0 0 16px; font-size: 24px; line-height: 30px; }
+p { margin: 0 0 16px; }
+p:last-child { margin-bottom: 0; }
+label { display: block; margin-bottom: 4px; font-weight: 700; }
+input:not([type="hidden"]) {
+  box-sizing: border-box;
+  width: 100%;
+  padding: 5px 12px;
+  border: 1px solid #7d8998;
+  border-radius: 8px;
+  font: inherit;
+  color: #414d5c;
+}
+button {
+  box-sizing: border-box;
+  width: 100%;
+  padding: 4px 20px;
+  border: 2px solid #0972d3;
+  border-radius: 8px;
+  background: #0972d3;
+  color: #fff;
+  font: inherit;
+  font-weight: 700;
+  cursor: pointer;
+}
+button[formnovalidate] { background: #fff; color: #0972d3; }
+a { color: #0972d3; text-decoration: none; }
+a:hover { text-decoration: underline; }
+.message {
+  padding: 8px 12px;
+  border: 1px solid #7d8998;
+  border-radius: 8px;
+  background: #f9f9fa;
+}
+</style>`;
+//# sourceMappingURL=sim-cognito-page-style.js.map

package/dist/service/cognito/serve/page/sim-cognito-page-style.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-page-style.js","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-page-style.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAwD1B,CAAC"}

package/dist/service/cognito/serve/sim-cognito-authorize-route.d.ts

@@ -0,0 +1,27 @@
+import type { SimCognitoDomainRequest } from "./sim-cognito-domain-request.js";
+/**
+ * What a served `/oauth2/authorize` request is answered with.
+ *
+ * Three requests reach this one path. An application sends the browser here to
+ * start a sign-in, the sign-in form posts back here to finish one, and a
+ * browser holding a managed login session arrives here and is signed in
+ * without being asked anything. They are one endpoint because real Cognito
+ * serves them as one, and the parameters are read the same way whichever
+ * arrived.
+ */
+export declare class SimCognitoAuthorizeRoute {
+    private readonly response;
+    private readonly pageRequest;
+    private readonly pages;
+    private readonly sessionCookie;
+    /**
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     */
+    handle(request: SimCognitoDomainRequest): Promise<Response>;
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    private refused;
+}
+//# sourceMappingURL=sim-cognito-authorize-route.d.ts.map

package/dist/service/cognito/serve/sim-cognito-authorize-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authorize-route.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-authorize-route.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAI/E;;;;;;;;;GASG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAE/D;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiBhE;IAED;;OAEG;IACH,OAAO,CAAC,OAAO;CAchB"}

package/dist/service/cognito/serve/sim-cognito-authorize-route.js

@@ -0,0 +1,41 @@
+import { SimCognitoManagedLogin } from "./page/sim-cognito-managed-login.js";
+import { SimCognitoPageRequest } from "./page/sim-cognito-page-request.js";
+import { SimCognitoOAuthResponse } from "./sim-cognito-oauth-response.js";
+import { SimCognitoSessionCookie } from "./sim-cognito-session-cookie.js";
+/**
+ * What a served `/oauth2/authorize` request is answered with.
+ *
+ * Three requests reach this one path. An application sends the browser here to
+ * start a sign-in, the sign-in form posts back here to finish one, and a
+ * browser holding a managed login session arrives here and is signed in
+ * without being asked anything. They are one endpoint because real Cognito
+ * serves them as one, and the parameters are read the same way whichever
+ * arrived.
+ */
+export class SimCognitoAuthorizeRoute {
+    response = new SimCognitoOAuthResponse();
+    pageRequest = new SimCognitoPageRequest();
+    pages = new SimCognitoManagedLogin();
+    sessionCookie = new SimCognitoSessionCookie();
+    /**
+     * Sign a user in and send the browser back to the application with a code,
+     * or serve the form that asks who is signing in.
+     */
+    async handle(request) {
+        const parameters = this.pageRequest.values(request.serviceRequest, request.url);
+        try {
+            return this.response.redirect(await request.cognito.hostedAuthorize(request.pool, parameters, this.sessionCookie.read(request.serviceRequest.request)));
+        }
+        catch (error) {
+            return this.refused(request, parameters, error);
+        }
+    }
+    /**
+     * Answer a refused sign-in, on the form or at the application.
+     */
+    refused(request, parameters, error) {
+        return (this.pages.refusedSignIn(request, parameters, error) ??
+            this.response.refusedRedirect(error, parameters["redirect_uri"], parameters["state"]));
+    }
+}
+//# sourceMappingURL=sim-cognito-authorize-route.js.map

package/dist/service/cognito/serve/sim-cognito-authorize-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-authorize-route.js","sourceRoot":"","sources":["../../../../src/service/cognito/serve/sim-cognito-authorize-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzC,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACrC,aAAa,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,GAAG,CACZ,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CACnC,OAAO,CAAC,IAAI,EACZ,UAAU,EACV,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CACxD,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO,CACb,OAAgC,EAChC,UAAoC,EACpC,KAAc;QAEd,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAC3B,KAAK,EACL,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,OAAO,CAAC,CACpB,CACF,CAAC;IACJ,CAAC;CACF"}