@kensio/yulin 1.18.0 → 1.18.2

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts

@@ -1,4 +1,4 @@
-import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../../cloudformation/resource/sim-cfn-resource.js";
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 import type { SimCloudFrontDistribution } from "../../distribution/sim-cloudfront-distribution.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
@@ -7,6 +7,12 @@ interface SimCfnCfDistroCreatorProperties {
 }
 /**
  * Creates simulated CloudFront Distributions from CloudFormation Resources.
+ *
+ * A `WebACLId` naming a web ACL this simulation does not hold is left out and
+ * recorded. CloudFront has no association Resource, so the reference lives on
+ * the Distribution itself, and refusing it would take the Distribution down
+ * over a web ACL that was never the point of the template. The site a local
+ * dev server and a suite of tests make requests to has to survive that.
  */
 export declare class SimCfnCfDistroCreator {
     private readonly cloudFront;
@@ -15,7 +21,7 @@ export declare class SimCfnCfDistroCreator {
      * Create a simulated CloudFront Distribution from an
      * AWS::CloudFront::Distribution Resource.
      */
-    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimCloudFrontDistribution>;
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, context: SimCloudFormationResourceCreateContext): Promise<SimCloudFrontDistribution>;
 }
 export {};
 //# sourceMappingURL=sim-cfn-cf-distro-creator.d.ts.map

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AACnG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAsCpC;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AACnG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAIlH,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,yBAAyB,CAAC,CAwCpC;CACF"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -1,7 +1,14 @@
 import { assertDefined, assertNotNull, } from "../../../../util/type-guard/defined.js";
 import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-validator.js";
+import { simCfnCfDistroWithoutAbsentWebAcl } from "./sim-cfn-cf-distro-web-acl.js";
 /**
  * Creates simulated CloudFront Distributions from CloudFormation Resources.
+ *
+ * A `WebACLId` naming a web ACL this simulation does not hold is left out and
+ * recorded. CloudFront has no association Resource, so the reference lives on
+ * the Distribution itself, and refusing it would take the Distribution down
+ * over a web ACL that was never the point of the template. The site a local
+ * dev server and a suite of tests make requests to has to survive that.
  */
 export class SimCfnCfDistroCreator {
     cloudFront;
@@ -12,7 +19,7 @@ export class SimCfnCfDistroCreator {
      * Create a simulated CloudFront Distribution from an
      * AWS::CloudFront::Distribution Resource.
      */
-    async create(resource, properties) {
+    async create(resource, properties, context) {
         const distributionConfigValue = properties["DistributionConfig"];
         assertDefined(distributionConfigValue, `AWS::CloudFront::Distribution ${resource.logicalId} DistributionConfig`);
         assertNotNull(distributionConfigValue, `AWS::CloudFront::Distribution ${resource.logicalId} DistributionConfig`);
@@ -20,10 +27,9 @@ export class SimCfnCfDistroCreator {
             logicalId: resource.logicalId,
             distributionConfig: distributionConfigValue,
         });
-        const distributionConfig = validator.validate();
         const output = await this.cloudFront.createDistribution({
             input: {
-                DistributionConfig: distributionConfig,
+                DistributionConfig: simCfnCfDistroWithoutAbsentWebAcl(resource, validator.validate(), context.simAws),
             },
         });
         const distributionId = output.Distribution?.Id;

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-creator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAMxF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAgB;IAE3C,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,uBAAuB,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAEjE,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QACF,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,kBAAkB,EAAE,uBAAuB;SAC5C,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACtD,KAAK,EAAE;gBACL,kBAAkB,EAAE,kBAAkB;aACvC;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,aAAa,CACX,cAAc,EACd,iCAAiC,QAAQ,CAAC,SAAS,0BAA0B,CAC9E,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAE5E,aAAa,CACX,YAAY,EACZ,wCAAwC,cAAc,yCAAyC,CAChG,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-creator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAQhD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AAMnF;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAgB;IAE3C,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC,EACrC,OAA+C;QAE/C,MAAM,uBAAuB,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAEjE,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QACF,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,kBAAkB,EAAE,uBAAuB;SAC5C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACtD,KAAK,EAAE;gBACL,kBAAkB,EAAE,iCAAiC,CACnD,QAAQ,EACR,SAAS,CAAC,QAAQ,EAAE,EACpB,OAAO,CAAC,MAAM,CACf;aACF;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,aAAa,CACX,cAAc,EACd,iCAAiC,QAAQ,CAAC,SAAS,0BAA0B,CAC9E,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAE5E,aAAa,CACX,YAAY,EACZ,wCAAwC,cAAc,yCAAyC,CAChG,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;CACF"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.d.ts

@@ -0,0 +1,25 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.command.js";
+/**
+ * The DistributionConfig to deploy, without a `WebACLId` naming a web ACL this
+ * simulation does not hold.
+ *
+ * `CreateDistribution` refuses such a `WebACLId`, as real CloudFront refuses
+ * one, and a Distribution deployed from a template is the one place that
+ * refusal costs more than it is worth. A stack naming a web ACL from a real
+ * account is ordinary. So is one whose web ACL lost a rule this simulation
+ * cannot evaluate. Neither says anything about the site the Distribution
+ * serves, and a Distribution that failed to deploy takes every request a local
+ * dev server and a test suite make with it.
+ *
+ * So the property is left out and recorded on `stack.ignoredProperties`. The
+ * Distribution deploys and serves every request, including the ones the web
+ * ACL was written to block. A test that cares reads the record.
+ *
+ * A `WebACLId` naming a web ACL that is here goes through untouched, wrong
+ * scope and all, so a `REGIONAL` web ACL on a Distribution still fails the
+ * deployment the way real CloudFront fails it.
+ */
+export declare function simCfnCfDistroWithoutAbsentWebAcl(resource: SimCfnResource, distributionConfig: SimCloudFrontDistributionConfig, simAws: SimAws): SimCloudFrontDistributionConfig;
+//# sourceMappingURL=sim-cfn-cf-distro-web-acl.d.ts.map

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cf-distro-web-acl.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AAIxH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,cAAc,EACxB,kBAAkB,EAAE,+BAA+B,EACnD,MAAM,EAAE,MAAM,GACb,+BAA+B,CAmBjC"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.js

@@ -0,0 +1,36 @@
+import { simCfWebAclArn } from "../../web-acl/sim-cf-distribution-web-acl.js";
+import { makeSimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl-resolver.factory.js";
+/**
+ * The DistributionConfig to deploy, without a `WebACLId` naming a web ACL this
+ * simulation does not hold.
+ *
+ * `CreateDistribution` refuses such a `WebACLId`, as real CloudFront refuses
+ * one, and a Distribution deployed from a template is the one place that
+ * refusal costs more than it is worth. A stack naming a web ACL from a real
+ * account is ordinary. So is one whose web ACL lost a rule this simulation
+ * cannot evaluate. Neither says anything about the site the Distribution
+ * serves, and a Distribution that failed to deploy takes every request a local
+ * dev server and a test suite make with it.
+ *
+ * So the property is left out and recorded on `stack.ignoredProperties`. The
+ * Distribution deploys and serves every request, including the ones the web
+ * ACL was written to block. A test that cares reads the record.
+ *
+ * A `WebACLId` naming a web ACL that is here goes through untouched, wrong
+ * scope and all, so a `REGIONAL` web ACL on a Distribution still fails the
+ * deployment the way real CloudFront fails it.
+ */
+export function simCfnCfDistroWithoutAbsentWebAcl(resource, distributionConfig, simAws) {
+    const webAclArn = simCfWebAclArn(distributionConfig);
+    if (webAclArn === undefined) {
+        return distributionConfig;
+    }
+    if (makeSimCfWebAclResolver(simAws)(webAclArn) !== undefined) {
+        return distributionConfig;
+    }
+    resource.ignoreProperty("DistributionConfig.WebACLId", `web ACL ${webAclArn} is not held by this simulation, so the ` +
+        `Distribution is deployed with nothing in front of it and serves every ` +
+        `request that web ACL would have decided`);
+    return { ...distributionConfig, WebACLId: undefined };
+}
+//# sourceMappingURL=sim-cfn-cf-distro-web-acl.js.map

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cf-distro-web-acl.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-web-acl.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAAwB,EACxB,kBAAmD,EACnD,MAAc;IAEd,MAAM,SAAS,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAErD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,QAAQ,CAAC,cAAc,CACrB,6BAA6B,EAC7B,WAAW,SAAS,0CAA0C;QAC5D,wEAAwE;QACxE,yCAAyC,CAC5C,CAAC;IAEF,OAAO,EAAE,GAAG,kBAAkB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC"}

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cloudfront-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAU3D;;GAEG;AACH,qBAAa,0CAA2C,YAAW,4BAA4B;IAC7F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAuC;IACpF,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAqC;IAChF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA+B;IAEpE,YAAY,UAAU,EAAE,aAAa,EAapC;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuC7B;IAED;;;OAGG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CA4Bf;YAEa,cAAc;CAa7B"}
+{"version":3,"file":"sim-cfn-cloudfront-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAU3D;;GAEG;AACH,qBAAa,0CAA2C,YAAW,4BAA4B;IAC7F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAuC;IACpF,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAqC;IAChF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA+B;IAEpE,YAAY,UAAU,EAAE,aAAa,EAapC;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyB7B;IAED;;;OAGG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CA4Bf;YAEa,cAAc;CAa7B"}

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js

@@ -34,21 +34,22 @@ export class SimCloudFrontCloudFormationResourceFactory {
      * Create a simulated CloudFront resource from a CloudFormation Resource.
      */
     async create(resourceTypeName, resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
         switch (resourceTypeName) {
             case "Distribution": {
-                return await this.distroCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.distroCreator.create(resource, properties, context);
             }
             case "Function": {
-                return await this.functionCreator.create(resource, context.resolvedProperties ?? resource.properties, context);
+                return await this.functionCreator.create(resource, properties, context);
             }
             case "ResponseHeadersPolicy": {
-                return this.responseHeadersPolicyCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return this.responseHeadersPolicyCreator.create(resource, properties);
             }
             case "OriginAccessControl": {
-                return this.originAccessControlCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return this.originAccessControlCreator.create(resource, properties);
             }
             case "KeyValueStore": {
-                return await this.keyValueStoreCreator.create(resource, context.resolvedProperties ?? resource.properties);
+                return await this.keyValueStoreCreator.create(resource, properties);
             }
             default: {
                 throw new Error(`Unsupported sim CloudFront CloudFormation Resource ${resourceTypeName}`);

package/dist/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cloudfront-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACpC,UAAU,CAAgB;IAC1B,aAAa,CAAwB;IACrC,eAAe,CAAmB;IAClC,aAAa,CAAwB;IACrC,4BAA4B,CAAuC;IACnE,0BAA0B,CAAqC;IAC/D,oBAAoB,CAA+B;IAEpE,YAAY,UAAyB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,4BAA4B;YAC/B,IAAI,oCAAoC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,0BAA0B,GAAG,IAAI,kCAAkC,CAAC;YACvE,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,4BAA4B,CAAC;YAC3D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CACpC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CACtC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,EACjD,OAAO,CACR,CAAC;YACJ,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAC7C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAC3C,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,EAAE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,WAAW,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAEvB,CAAC;QACd,aAAa,CACX,kBAAkB,EAClB,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cloudfront-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/cfn/sim-cfn-cloudfront-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;GAEG;AACH,MAAM,OAAO,0CAA0C;IACpC,UAAU,CAAgB;IAC1B,aAAa,CAAwB;IACrC,eAAe,CAAmB;IAClC,aAAa,CAAwB;IACrC,4BAA4B,CAAuC;IACnE,0BAA0B,CAAqC;IAC/D,oBAAoB,CAA+B;IAEpE,YAAY,UAAyB;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,GAAG,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,4BAA4B;YAC/B,IAAI,oCAAoC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,0BAA0B,GAAG,IAAI,kCAAkC,CAAC;YACvE,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,4BAA4B,CAAC;YAC3D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QAErE,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACtE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,EAAE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB;QAExB,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,sDAAsD,gBAAgB,WAAW,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAEvB,CAAC;QACd,aAAa,CACX,kBAAkB,EAClB,uDAAuD,QAAQ,CAAC,SAAS,EAAE,CAC5E,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAmC5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CA6D/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kDAAkD,CAAC;AAyC5G,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IAEH,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED;;OAEG;IACH,yBAAyB,IAAI,mCAAmC,CAiE/D;IAED;;;OAGG;IACH,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js

@@ -1,5 +1,6 @@
 import { SimCfnCognitoGeneratedName } from "../sim-cfn-cognito-generated-name.js";
 import { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+import { SimCfnCognitoRefreshTokenRotation } from "./sim-cfn-cognito-refresh-token-rotation.js";
 import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validity-units.js";
 /**
  * The AWS::Cognito::UserPoolClient properties this simulation deploys.
@@ -9,6 +10,10 @@ import { SimCfnCognitoTokenValidityUnits } from "./sim-cfn-cognito-token-validit
  * for, which scopes, which URL it may be sent back to, and which identity
  * provider it may sign a user in through.
  *
+ * `RefreshTokenRotation` is among them, because it decides which operation
+ * renews a session: a client deployed with rotation is renewed with
+ * `GetTokensFromRefreshToken` rather than `REFRESH_TOKEN_AUTH`.
+ *
  * The managed login branding properties are not, because managed login is a
  * set of web pages rather than anything this simulation answers.
  */
@@ -21,6 +26,7 @@ const simulatedProperties = [
     "AccessTokenValidity",
     "IdTokenValidity",
     "RefreshTokenValidity",
+    "RefreshTokenRotation",
     "TokenValidityUnits",
     "AllowedOAuthFlows",
     "AllowedOAuthFlowsUserPoolClient",
@@ -66,6 +72,10 @@ export class SimCfnCognitoClientProperties {
             AccessTokenValidity: this.number(this.properties["AccessTokenValidity"], "AccessTokenValidity"),
             IdTokenValidity: this.number(this.properties["IdTokenValidity"], "IdTokenValidity"),
             RefreshTokenValidity: this.number(this.properties["RefreshTokenValidity"], "RefreshTokenValidity"),
+            RefreshTokenRotation: new SimCfnCognitoRefreshTokenRotation({
+                resource: this.resource,
+                propertyParser: this.propertyParser,
+            }).parse(this.properties["RefreshTokenRotation"]),
             TokenValidityUnits: new SimCfnCognitoTokenValidityUnits({
                 resource: this.resource,
                 propertyParser: this.propertyParser,

package/dist/service/cognito/cfn/client/sim-cfn-cognito-client-properties.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cognito-client-properties.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-client-properties.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAE5F;;;;;;;;;;;;;;GAcG;AACH,MAAM,mBAAmB,GAAG;IAC1B,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,iCAAiC;IACjC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,4BAA4B;CAC7B,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAChE,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,YAAY,UAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAExC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CACjD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,0BAA0B,EAAE,IAAI,CAAC,MAAM,CACrC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;YACD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,qBAAqB,CACtB;YACD,eAAe,EAAE,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,iBAAiB,CAClB;YACD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAC/B,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACvC,sBAAsB,CACvB;YACD,oBAAoB,EAAE,IAAI,iCAAiC,CAAC;gBAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;YACjD,kBAAkB,EAAE,IAAI,+BAA+B,CAAC;gBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAC/C,+BAA+B,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe,CAClE,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAClD,iCAAiC,CAClC;YACD,iBAAiB,EAAE,IAAI,CAAC,WAAW,CACjC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACpC,mBAAmB,CACpB;YACD,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,YAAY,EAAE,IAAI,CAAC,WAAW,CAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf;YACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;YACzE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAC7B,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACrC,oBAAoB,CACrB;YACD,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAC1C,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAC7C,4BAA4B,CAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAEO,WAAW,CACjB,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CACZ,KAAsC,EACtC,KAAa;QAEb,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts

@@ -0,0 +1,27 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCognitoRefreshTokenRotationType } from "../../user-pool/client/sim-cognito-refresh-token-rotation.js";
+import type { SimCfnCognitoPropertyParser } from "../sim-cfn-cognito-property-parser.js";
+interface SimCfnCognitoRefreshTokenRotationProperties {
+    readonly resource: SimCfnResource;
+    readonly propertyParser: SimCfnCognitoPropertyParser;
+}
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export declare class SimCfnCognitoRefreshTokenRotation {
+    private readonly resource;
+    private readonly propertyParser;
+    constructor(properties: SimCfnCognitoRefreshTokenRotationProperties);
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value: SimCfnTemplateValue | undefined): SimCognitoRefreshTokenRotationType | undefined;
+}
+export {};
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.d.ts.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8DAA8D,CAAC;AACvH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAOzF,UAAU,2CAA2C;IACnD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;;OAGG;IACH,KAAK,CACH,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,kCAAkC,GAAG,SAAS,CA8BhD;CACF"}

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js

@@ -0,0 +1,35 @@
+/**
+ * The `RefreshTokenRotation` fields, which are both of them.
+ */
+const modelledFields = ["Feature", "RetryGracePeriodSeconds"];
+/**
+ * Reads the `RefreshTokenRotation` property of an AWS::Cognito::UserPoolClient
+ * Resource into the shape CreateUserPoolClient takes.
+ *
+ * What each field may be is left to the client, which is where the same
+ * request from an SDK caller is checked.
+ */
+export class SimCfnCognitoRefreshTokenRotation {
+    resource;
+    propertyParser;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.propertyParser = properties.propertyParser;
+    }
+    /**
+     * Whether the client rotates its refresh tokens, or undefined when the
+     * template says nothing about it.
+     */
+    parse(value) {
+        const rotation = this.propertyParser.optionalRecord(this.resource, value, "RefreshTokenRotation");
+        if (rotation === undefined) {
+            return undefined;
+        }
+        this.propertyParser.ignoreUnmodelledKeys(this.resource, rotation, modelledFields, "RefreshTokenRotation ");
+        return {
+            Feature: this.propertyParser.optionalString(this.resource, rotation["Feature"], "RefreshTokenRotation Feature"),
+            RetryGracePeriodSeconds: this.propertyParser.optionalNumber(this.resource, rotation["RetryGracePeriodSeconds"], "RefreshTokenRotation RetryGracePeriodSeconds"),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-cognito-refresh-token-rotation.js.map

package/dist/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-cognito-refresh-token-rotation.js","sourceRoot":"","sources":["../../../../../src/service/cognito/cfn/client/sim-cfn-cognito-refresh-token-rotation.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAO9D;;;;;;GAMG;AACH,MAAM,OAAO,iCAAiC;IAC3B,QAAQ,CAAiB;IACzB,cAAc,CAA8B;IAE7D,YAAY,UAAuD;QACjE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,KAAsC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACjD,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,sBAAsB,CACvB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,oBAAoB,CACtC,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR,cAAc,EACd,uBAAuB,CACxB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzC,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,SAAS,CAAC,EACnB,8BAA8B,CAC/B;YACD,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACzD,IAAI,CAAC,QAAQ,EACb,QAAQ,CAAC,yBAAyB,CAAC,EACnC,8CAA8C,CAC/C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/auth/auth.command.d.ts

@@ -121,6 +121,37 @@ export interface SimRespondToAuthChallengeCommand {
     readonly input: SimRespondToAuthChallengeCommandInput;
 }
 export type SimRespondToAuthChallengeCommandOutput = SimCognitoAuthenticationOutput;
+/**
+ * The GetTokensFromRefreshToken inputs this simulation reads, and the ones it
+ * refuses.
+ *
+ * There is no `SECRET_HASH` and no username: the refresh token is what says
+ * whose session this is, and the client secret itself is what proves the
+ * caller, as it does on real Cognito.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GetTokensFromRefreshTokenCommand/
+ */
+export interface SimGetTokensFromRefreshTokenCommandInput {
+    readonly RefreshToken?: string | undefined;
+    readonly ClientId?: string | undefined;
+    readonly ClientSecret?: string | undefined;
+    readonly DeviceKey?: string | undefined;
+    readonly ClientMetadata?: Readonly<Record<string, string>> | undefined;
+}
+/**
+ * Minimal structural sim Cognito GetTokensFromRefreshToken command.
+ */
+export interface SimGetTokensFromRefreshTokenCommand {
+    readonly input: SimGetTokensFromRefreshTokenCommandInput;
+}
+/**
+ * What a token refresh answers with, which is the tokens and nothing else:
+ * this operation runs no challenge, so it never answers with one.
+ */
+export interface SimGetTokensFromRefreshTokenCommandOutput {
+    readonly AuthenticationResult?: SimCognitoAuthenticationResultType | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
 /**
  * The GlobalSignOut inputs this simulation reads.
  *

package/dist/service/cognito/command/auth/auth.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"auth.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/auth.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,MAAM,iCAAiC,GAAG,8BAA8B,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC;CAC5D;AAED,MAAM,MAAM,2CAA2C,GACrD,8BAA8B,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts

@@ -6,6 +6,7 @@ import type { SimCognitoUserPoolTriggers } from "../../user-pool/trigger/sim-cog
 import type { SimCognitoRequestResolver } from "../sim-cognito-request-resolver.js";
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
@@ -44,6 +45,7 @@ export declare class SimCognitoAuthCommands {
     readonly adminRespondToChallenge: SimCognitoAdminRespondToChallenge;
     readonly initiateAuth: SimCognitoInitiateAuth;
     readonly respondToChallenge: SimCognitoRespondToChallenge;
+    readonly getTokensFromRefreshToken: SimCognitoGetTokensFromRefreshToken;
     readonly signOut: SimCognitoSignOutCommands;
     constructor(properties: SimCognitoAuthCommandsProperties);
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAOxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EAqDvD;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AAC5G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,uBAAuB,EAAE,iCAAiC,CAAC;IAC3E,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,yBAAyB,EAAE,mCAAmC,CAAC;IAC/E,SAAgB,OAAO,EAAE,yBAAyB,CAAC;IAEnD,YAAY,UAAU,EAAE,gCAAgC,EA8DvD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js

@@ -1,6 +1,7 @@
 import { SimCognitoAdminInitiateAuth } from "./sim-cognito-admin-initiate-auth.js";
 import { SimCognitoAdminRespondToChallenge } from "./sim-cognito-admin-respond-to-challenge.js";
 import { SimCognitoAuthFlowRunner } from "./sim-cognito-auth-flow-runner.js";
+import { SimCognitoGetTokensFromRefreshToken } from "./sim-cognito-get-tokens-from-refresh-token.js";
 import { SimCognitoChallengeResponses } from "./sim-cognito-challenge-responses.js";
 import { SimCognitoInitiateAuth } from "./sim-cognito-initiate-auth.js";
 import { SimCognitoMfaChallenge } from "./sim-cognito-mfa-challenge.js";
@@ -9,6 +10,7 @@ import { SimCognitoNewPasswordChallenge } from "./sim-cognito-new-password-chall
 import { SimCognitoNewPasswordResponse } from "./sim-cognito-new-password-response.js";
 import { SimCognitoPasswordSignIn } from "./sim-cognito-password-sign-in.js";
 import { SimCognitoRefreshSignIn } from "./sim-cognito-refresh-sign-in.js";
+import { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
 import { SimCognitoRespondToChallenge } from "./sim-cognito-respond-to-challenge.js";
 import { SimCognitoSignInCompletion } from "./sim-cognito-sign-in-completion.js";
 import { SimCognitoSignOutCommands } from "./sim-cognito-sign-out.js";
@@ -28,6 +30,7 @@ export class SimCognitoAuthCommands {
     adminRespondToChallenge;
     initiateAuth;
     respondToChallenge;
+    getTokensFromRefreshToken;
     signOut;
     constructor(properties) {
         const { resolver, authResolver, pools, clock, triggers, tokenIssuer, messenger, } = properties;
@@ -39,6 +42,10 @@ export class SimCognitoAuthCommands {
             triggers,
             mfaChallenge: new SimCognitoMfaChallenge({ messenger, clock }),
         });
+        // Both refresh operations answer the same way once the token is accepted,
+        // and which app client the refresh went through is what decides whether a
+        // new refresh token comes back.
+        const refreshedTokens = new SimCognitoRefreshedTokens({ tokenIssuer });
         const flowRunner = new SimCognitoAuthFlowRunner({
             passwordSignIn: new SimCognitoPasswordSignIn({
                 authResolver,
@@ -46,7 +53,7 @@ export class SimCognitoAuthCommands {
                 challenge: new SimCognitoNewPasswordChallenge({ clock }),
                 triggers,
             }),
-            refreshSignIn: new SimCognitoRefreshSignIn({ tokenIssuer, clock }),
+            refreshSignIn: new SimCognitoRefreshSignIn({ refreshedTokens, clock }),
         });
         const responses = new SimCognitoChallengeResponses({
             newPassword: new SimCognitoNewPasswordResponse({
@@ -72,6 +79,11 @@ export class SimCognitoAuthCommands {
             authResolver,
             responses,
         });
+        this.getTokensFromRefreshToken = new SimCognitoGetTokensFromRefreshToken({
+            authResolver,
+            refreshedTokens,
+            clock,
+        });
         this.signOut = new SimCognitoSignOutCommands({ resolver, pools, clock });
     }
 }

package/dist/service/cognito/command/auth/sim-cognito-auth-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAuBtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,GACV,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,UAAU;gBACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;gBACxD,QAAQ;aACT,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-auth-commands.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-auth-commands.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAErG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAuBtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IACjB,iBAAiB,CAA8B;IAC/C,uBAAuB,CAAoC;IAC3D,YAAY,CAAyB;IACrC,kBAAkB,CAA+B;IACjD,yBAAyB,CAAsC;IAC/D,OAAO,CAA4B;IAEnD,YAAY,UAA4C;QACtD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,GACV,GAAG,UAAU,CAAC;QACf,yEAAyE;QACzE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC;YAChD,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC9C,cAAc,EAAE,IAAI,wBAAwB,CAAC;gBAC3C,YAAY;gBACZ,UAAU;gBACV,SAAS,EAAE,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;gBACxD,QAAQ;aACT,CAAC;YACF,aAAa,EAAE,IAAI,uBAAuB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC;YACjD,WAAW,EAAE,IAAI,6BAA6B,CAAC;gBAC7C,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC;YACF,GAAG,EAAE,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;SACpE,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CAAC;YACvD,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAAC;YACnE,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC;YAC7C,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,4BAA4B,CAAC;YACzD,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,yBAAyB,GAAG,IAAI,mCAAmC,CAAC;YACvE,YAAY;YACZ,eAAe;YACf,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.d.ts

@@ -0,0 +1,35 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoAuthResolver } from "./sim-cognito-auth-resolver.js";
+import type { SimCognitoRefreshedTokens } from "./sim-cognito-refreshed-tokens.js";
+import type { SimGetTokensFromRefreshTokenCommand, SimGetTokensFromRefreshTokenCommandOutput } from "./auth.command.js";
+interface SimCognitoGetTokensFromRefreshTokenProperties {
+    readonly authResolver: SimCognitoAuthResolver;
+    readonly refreshedTokens: SimCognitoRefreshedTokens;
+    readonly clock: SimClock;
+}
+/**
+ * The GetTokensFromRefreshToken command.
+ *
+ * This is what renews a session on an app client that rotates its refresh
+ * tokens, and it renews one on a client that does not just as well. Like
+ * `InitiateAuth` it is what a browser or mobile app calls, so no IAM
+ * permission is involved and no caller is read.
+ *
+ * The request names no user and carries no `SECRET_HASH`. The refresh token is
+ * what says whose session this is, and the client secret is what proves the
+ * caller, which is why a confidential client sends `ClientSecret` here rather
+ * than a hash computed over a username it does not have.
+ */
+export declare class SimCognitoGetTokensFromRefreshToken {
+    private readonly authResolver;
+    private readonly refreshedTokens;
+    private readonly clock;
+    private readonly unsimulated;
+    constructor(properties: SimCognitoGetTokensFromRefreshTokenProperties);
+    /**
+     * Renew a session from the refresh token it holds.
+     */
+    handle(command: SimGetTokensFromRefreshTokenCommand): Promise<SimGetTokensFromRefreshTokenCommandOutput>;
+}
+export {};
+//# sourceMappingURL=sim-cognito-get-tokens-from-refresh-token.d.ts.map

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-get-tokens-from-refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EACV,mCAAmC,EACnC,yCAAyC,EAC1C,MAAM,mBAAmB,CAAC;AAE3B,UAAU,6CAA6C;IACrD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,mCAAmC;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAEF,YAAY,UAAU,EAAE,6CAA6C,EAIpE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,yCAAyC,CAAC,CA0BpD;CACF"}

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.js

@@ -0,0 +1,51 @@
+import { requireSimCognitoRefreshTokenInput } from "../../user-pool/auth/sim-cognito-refresh-token-input.js";
+import { requireSimCognitoClientSecret } from "../../user-pool/client/sim-cognito-client-secret.js";
+import { SimCognitoUnsimulatedInput } from "../sim-cognito-unsimulated-input.js";
+/**
+ * The GetTokensFromRefreshToken command.
+ *
+ * This is what renews a session on an app client that rotates its refresh
+ * tokens, and it renews one on a client that does not just as well. Like
+ * `InitiateAuth` it is what a browser or mobile app calls, so no IAM
+ * permission is involved and no caller is read.
+ *
+ * The request names no user and carries no `SECRET_HASH`. The refresh token is
+ * what says whose session this is, and the client secret is what proves the
+ * caller, which is why a confidential client sends `ClientSecret` here rather
+ * than a hash computed over a username it does not have.
+ */
+export class SimCognitoGetTokensFromRefreshToken {
+    authResolver;
+    refreshedTokens;
+    clock;
+    unsimulated = new SimCognitoUnsimulatedInput("GetTokensFromRefreshToken");
+    constructor(properties) {
+        this.authResolver = properties.authResolver;
+        this.refreshedTokens = properties.refreshedTokens;
+        this.clock = properties.clock;
+    }
+    /**
+     * Renew a session from the refresh token it holds.
+     */
+    async handle(command) {
+        const { input } = command;
+        const { pool, client } = this.authResolver.client(input.ClientId);
+        this.unsimulated.refuse("DeviceKey", input.DeviceKey, "device remembering, which signs a known device in without its second factor");
+        requireSimCognitoClientSecret(client, input.ClientSecret);
+        const refreshToken = pool.auth.requireRefreshToken({
+            value: requireSimCognitoRefreshTokenInput(input.RefreshToken),
+            clientId: client.id,
+            now: this.clock.now(),
+        });
+        return {
+            $metadata: {},
+            AuthenticationResult: await this.refreshedTokens.issue({
+                pool,
+                client,
+                refreshToken,
+                clientMetadata: input.ClientMetadata,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-get-tokens-from-refresh-token.js.map

package/dist/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-get-tokens-from-refresh-token.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/auth/sim-cognito-get-tokens-from-refresh-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yDAAyD,CAAC;AAC7G,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAcjF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mCAAmC;IAC7B,YAAY,CAAyB;IACrC,eAAe,CAA4B;IAC3C,KAAK,CAAW;IAChB,WAAW,GAAG,IAAI,0BAA0B,CAC3D,2BAA2B,CAC5B,CAAC;IAEF,YAAY,UAAyD;QACnE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C;QAE5C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,WAAW,CAAC,MAAM,CACrB,WAAW,EACX,KAAK,CAAC,SAAS,EACf,6EAA6E,CAC9E,CAAC;QACF,6BAA6B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACjD,KAAK,EAAE,kCAAkC,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7D,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBACrD,IAAI;gBACJ,MAAM;gBACN,YAAY;gBACZ,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}