@kensio/yulin 1.18.1 → 1.19.0

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,sBAAsB,CAmBzD;IAED;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,kBAAkB,GAAG,iCAAiC,CAOrE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,sBAAsB,CAwBzD;IAED;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,kBAAkB,GAAG,iCAAiC,CAOrE;CACF"}

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.js

@@ -17,6 +17,10 @@ export class SimCognitoUserPoolView {
      * `LambdaConfig` is reported only by a pool that was created with one, and
      * carries the triggers that pool runs.
      *
+     * `Policies` carries the pool's `SignInPolicy` only where it was created
+     * with one, as real Cognito reports it. A pool that named no policy signs
+     * its users in with a password.
+     *
      * `MfaConfiguration` is what the pool was asked for, and no pool here
      * challenges for a second factor whatever it says. Which factors a pool
      * offers is not reported here on real Cognito either:
@@ -38,12 +42,16 @@ export class SimCognitoUserPoolView {
      * it is what decides whether `SignUp` is allowed at all.
      */
     describe(pool) {
+        const signInPolicy = pool.settings.signInPolicy.toOutput();
         return {
             Id: pool.id,
             Name: pool.name,
             Arn: pool.arn.value,
             AccountRecoverySetting: pool.settings.accountRecovery.toOutput(),
-            Policies: { PasswordPolicy: pool.settings.passwordPolicy.toOutput() },
+            Policies: {
+                PasswordPolicy: pool.settings.passwordPolicy.toOutput(),
+                ...(signInPolicy !== undefined && { SignInPolicy: signInPolicy }),
+            },
             DeletionProtection: pool.settings.deletionProtection.value,
             LambdaConfig: pool.settings.lambdaConfig.toOutput(),
             MfaConfiguration: pool.settings.mfa.configuration.value,

package/dist/service/cognito/command/user-pool/sim-cognito-user-pool-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,IAAwB;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;YACnB,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE;YAChE,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE;YACrE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK;YAC1D,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE;YACnD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK;YACvD,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,EAAE;YACrE,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE;YACvE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YAC/D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;YACjD,sBAAsB,EAAE,IAAI,CAAC,SAAS;YACtC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAwB;QAChC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-view.js","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/sim-cognito-user-pool-view.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,QAAQ,CAAC,IAAwB;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAE3D,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;YACnB,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE;YAChE,QAAQ,EAAE;gBACR,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE;gBACvD,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;aAClE;YACD,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK;YAC1D,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE;YACnD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK;YACvD,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,EAAE;YACrE,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE;YACvE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YAC/D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;YACjD,sBAAsB,EAAE,IAAI,CAAC,SAAS;YACtC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAwB;QAChC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/command/user-pool/user-pool-mfa.command.d.ts

@@ -11,15 +11,14 @@ import type { SimCognitoUserPoolMfaType } from "../../user-pool/mfa/sim-cognito-
  * message is delivered here, so the IAM role that would send one is never
  * assumed.
  *
- * `WebAuthnConfiguration` is refused because a passkey is presented through
- * the `USER_AUTH` flow, which this simulation refuses as a flow of its own.
+ * `WebAuthnConfiguration` is read and recorded. It is what a passkey is
+ * registered against, and what one is presented to at a sign-in.
  *
  * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/SetUserPoolMfaConfigCommand/
  */
 export interface SimSetUserPoolMfaConfigCommandInput extends SimCognitoUserPoolMfaType {
     readonly UserPoolId?: string | undefined;
     readonly EmailMfaConfiguration?: object | undefined;
-    readonly WebAuthnConfiguration?: object | undefined;
 }
 /**
  * Minimal structural sim Cognito SetUserPoolMfaConfig command.

package/dist/service/cognito/command/user-pool/user-pool-mfa.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-pool-mfa.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/user-pool-mfa.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAElG;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IACpF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,WAAW,oCAAqC,SAAQ,yBAAyB;IACrF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,oCAAqC,SAAQ,yBAAyB;IACrF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"user-pool-mfa.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/command/user-pool/user-pool-mfa.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAElG;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IACpF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,WAAW,oCAAqC,SAAQ,yBAAyB;IACrF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,oCAAqC,SAAQ,yBAAyB;IACrF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/cognito/error/sim-cognito-managed-login.error.d.ts

@@ -19,4 +19,28 @@ export declare class SimCognitoManagedLoginRequired extends SimCognitoOAuthError
  * its sign-in form.
  */
 export declare function isSimCognitoManagedLoginRequired(error: unknown): error is SimCognitoManagedLoginRequired;
+/**
+ * An authorize request that has been asked for a passkey and has yet to
+ * present one.
+ *
+ * Real managed login runs the WebAuthn ceremony in the browser at this point,
+ * with the person's own authenticator, and posts the credential back. These
+ * pages serve no script, so the serving layer answers with a page carrying the
+ * challenge, and whatever holds the passkey presents it in the next request.
+ *
+ * The session is the challenge the pool issued, and the credential coming back
+ * has to have signed it.
+ */
+export declare class SimCognitoPasskeyRequired extends SimCognitoOAuthError {
+    /** The user the challenge was issued for. */
+    readonly username: string;
+    /** The challenge session a credential answers. */
+    readonly session: string;
+    constructor(username: string, session: string);
+}
+/**
+ * Whether an authorize request was one managed login would have asked for a
+ * passkey on.
+ */
+export declare function isSimCognitoPasskeyRequired(error: unknown): error is SimCognitoPasskeyRequired;
 //# sourceMappingURL=sim-cognito-managed-login.error.d.ts.map

package/dist/service/cognito/error/sim-cognito-managed-login.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-managed-login.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-managed-login.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,qBAAa,8BAA+B,SAAQ,oBAAoB;IACtE,cASC;CACF;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,8BAA8B,CAEzC"}
+{"version":3,"file":"sim-cognito-managed-login.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-managed-login.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,qBAAa,8BAA+B,SAAQ,oBAAoB;IACtE,cASC;CACF;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,8BAA8B,CAEzC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,SAAQ,oBAAoB;IACjE,6CAA6C;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC,kDAAkD;IAClD,SAAgB,OAAO,EAAE,MAAM,CAAC;IAEhC,YAAY,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAY5C;CACF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,yBAAyB,CAEpC"}

package/dist/service/cognito/error/sim-cognito-managed-login.error.js

@@ -29,4 +29,41 @@ export class SimCognitoManagedLoginRequired extends SimCognitoOAuthError {
 export function isSimCognitoManagedLoginRequired(error) {
     return error instanceof SimCognitoManagedLoginRequired;
 }
+/**
+ * An authorize request that has been asked for a passkey and has yet to
+ * present one.
+ *
+ * Real managed login runs the WebAuthn ceremony in the browser at this point,
+ * with the person's own authenticator, and posts the credential back. These
+ * pages serve no script, so the serving layer answers with a page carrying the
+ * challenge, and whatever holds the passkey presents it in the next request.
+ *
+ * The session is the challenge the pool issued, and the credential coming back
+ * has to have signed it.
+ */
+export class SimCognitoPasskeyRequired extends SimCognitoOAuthError {
+    /** The user the challenge was issued for. */
+    username;
+    /** The challenge session a credential answers. */
+    session;
+    constructor(username, session) {
+        super({
+            code: "invalid_request",
+            description: "This request asked to sign in with a passkey, so the pool has " +
+                "issued a challenge and needs the credential answering it. Read the " +
+                "credential off the pool with SimCognitoUserPool.webAuthnAssertion, " +
+                "and post it back as credential with the passkey_session it answers.",
+            redirectable: false,
+        });
+        this.username = username;
+        this.session = session;
+    }
+}
+/**
+ * Whether an authorize request was one managed login would have asked for a
+ * passkey on.
+ */
+export function isSimCognitoPasskeyRequired(error) {
+    return error instanceof SimCognitoPasskeyRequired;
+}
 //# sourceMappingURL=sim-cognito-managed-login.error.js.map

package/dist/service/cognito/error/sim-cognito-managed-login.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-managed-login.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-managed-login.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,8BAA+B,SAAQ,oBAAoB;IACtE;QACE,KAAK,CAAC;YACJ,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,iEAAiE;gBACjE,iEAAiE;gBACjE,wDAAwD;YAC1D,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,KAAK,YAAY,8BAA8B,CAAC;AACzD,CAAC"}
+{"version":3,"file":"sim-cognito-managed-login.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-managed-login.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,8BAA+B,SAAQ,oBAAoB;IACtE;QACE,KAAK,CAAC;YACJ,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,iEAAiE;gBACjE,iEAAiE;gBACjE,wDAAwD;YAC1D,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,KAAK,YAAY,8BAA8B,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAA0B,SAAQ,oBAAoB;IACjE,6CAA6C;IAC7B,QAAQ,CAAS;IAEjC,kDAAkD;IAClC,OAAO,CAAS;IAEhC,YAAY,QAAgB,EAAE,OAAe;QAC3C,KAAK,CAAC;YACJ,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,gEAAgE;gBAChE,qEAAqE;gBACrE,qEAAqE;gBACrE,qEAAqE;YACvE,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,OAAO,KAAK,YAAY,yBAAyB,CAAC;AACpD,CAAC"}

package/dist/service/cognito/error/sim-cognito-web-authn.error.d.ts

@@ -0,0 +1,56 @@
+import { SimCognitoError } from "./sim-cognito.error.js";
+/**
+ * Simulated Cognito WebAuthnConfigurationMissingException error.
+ *
+ * Real Cognito reports a passkey operation against a pool that has no relying
+ * party id this way. A passkey is registered against a domain, so a pool that
+ * names none has nothing to register one against.
+ */
+export declare class SimCognitoWebAuthnConfigurationMissingException extends SimCognitoError {
+    readonly name = "WebAuthnConfigurationMissingException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito WebAuthnChallengeNotFoundException error.
+ *
+ * Real Cognito reports a credential answering a challenge it never issued this
+ * way, which covers a registration nobody started and one already completed.
+ */
+export declare class SimCognitoWebAuthnChallengeNotFoundException extends SimCognitoError {
+    readonly name = "WebAuthnChallengeNotFoundException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito WebAuthnRelyingPartyMismatchException error.
+ *
+ * Real Cognito reports a credential signed for another relying party this way.
+ * The relying party is inside what the authenticator signed, so a credential
+ * made for one domain cannot be replayed at another.
+ */
+export declare class SimCognitoWebAuthnRelyingPartyMismatchException extends SimCognitoError {
+    readonly name = "WebAuthnRelyingPartyMismatchException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito WebAuthnOriginNotAllowedException error.
+ *
+ * Real Cognito reports a credential collected at an origin the pool does not
+ * allow this way. The origin is in the client data the authenticator signed
+ * over, and a passkey is presented from the relying party's own site.
+ */
+export declare class SimCognitoWebAuthnOriginNotAllowedException extends SimCognitoError {
+    readonly name = "WebAuthnOriginNotAllowedException";
+    constructor(message: string);
+}
+/**
+ * Simulated Cognito WebAuthnCredentialNotSupportedException error.
+ *
+ * Real Cognito reports a credential it cannot use this way. Here that is one
+ * whose public key it cannot read, or one signed with an algorithm other than
+ * the ECDSA over P-256 the registration asked for.
+ */
+export declare class SimCognitoWebAuthnCredentialNotSupportedException extends SimCognitoError {
+    readonly name = "WebAuthnCredentialNotSupportedException";
+    constructor(message: string);
+}
+//# sourceMappingURL=sim-cognito-web-authn.error.d.ts.map

package/dist/service/cognito/error/sim-cognito-web-authn.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-web-authn.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-web-authn.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;;;;GAMG;AACH,qBAAa,+CAAgD,SAAQ,eAAe;IAClF,SAAyB,IAAI,2CAA2C;IAExE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,4CAA6C,SAAQ,eAAe;IAC/E,SAAyB,IAAI,wCAAwC;IAErE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,+CAAgD,SAAQ,eAAe;IAClF,SAAyB,IAAI,2CAA2C;IAExE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,2CAA4C,SAAQ,eAAe;IAC9E,SAAyB,IAAI,uCAAuC;IAEpE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,iDAAkD,SAAQ,eAAe;IACpF,SAAyB,IAAI,6CAA6C;IAE1E,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/cognito/error/sim-cognito-web-authn.error.js

@@ -0,0 +1,66 @@
+import { SimCognitoError } from "./sim-cognito.error.js";
+/**
+ * Simulated Cognito WebAuthnConfigurationMissingException error.
+ *
+ * Real Cognito reports a passkey operation against a pool that has no relying
+ * party id this way. A passkey is registered against a domain, so a pool that
+ * names none has nothing to register one against.
+ */
+export class SimCognitoWebAuthnConfigurationMissingException extends SimCognitoError {
+    name = "WebAuthnConfigurationMissingException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito WebAuthnChallengeNotFoundException error.
+ *
+ * Real Cognito reports a credential answering a challenge it never issued this
+ * way, which covers a registration nobody started and one already completed.
+ */
+export class SimCognitoWebAuthnChallengeNotFoundException extends SimCognitoError {
+    name = "WebAuthnChallengeNotFoundException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito WebAuthnRelyingPartyMismatchException error.
+ *
+ * Real Cognito reports a credential signed for another relying party this way.
+ * The relying party is inside what the authenticator signed, so a credential
+ * made for one domain cannot be replayed at another.
+ */
+export class SimCognitoWebAuthnRelyingPartyMismatchException extends SimCognitoError {
+    name = "WebAuthnRelyingPartyMismatchException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito WebAuthnOriginNotAllowedException error.
+ *
+ * Real Cognito reports a credential collected at an origin the pool does not
+ * allow this way. The origin is in the client data the authenticator signed
+ * over, and a passkey is presented from the relying party's own site.
+ */
+export class SimCognitoWebAuthnOriginNotAllowedException extends SimCognitoError {
+    name = "WebAuthnOriginNotAllowedException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated Cognito WebAuthnCredentialNotSupportedException error.
+ *
+ * Real Cognito reports a credential it cannot use this way. Here that is one
+ * whose public key it cannot read, or one signed with an algorithm other than
+ * the ECDSA over P-256 the registration asked for.
+ */
+export class SimCognitoWebAuthnCredentialNotSupportedException extends SimCognitoError {
+    name = "WebAuthnCredentialNotSupportedException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+//# sourceMappingURL=sim-cognito-web-authn.error.js.map

package/dist/service/cognito/error/sim-cognito-web-authn.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-web-authn.error.js","sourceRoot":"","sources":["../../../../src/service/cognito/error/sim-cognito-web-authn.error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,OAAO,+CAAgD,SAAQ,eAAe;IACzD,IAAI,GAAG,uCAAuC,CAAC;IAExE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,4CAA6C,SAAQ,eAAe;IACtD,IAAI,GAAG,oCAAoC,CAAC;IAErE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,+CAAgD,SAAQ,eAAe;IACzD,IAAI,GAAG,uCAAuC,CAAC;IAExE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,2CAA4C,SAAQ,eAAe;IACrD,IAAI,GAAG,mCAAmC,CAAC;IAEpE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,iDAAkD,SAAQ,eAAe;IAC3D,IAAI,GAAG,yCAAyC,CAAC;IAE1E,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/cognito/index.d.ts

@@ -7,18 +7,26 @@ export { SimCognitoDeletionProtection, type SimCognitoDeletionProtectionValue, }
 export { SimCognitoAdminCreateUserConfig, type SimCognitoAdminCreateUserConfigType, } from "./user-pool/sim-cognito-admin-create-user-config.js";
 export { SimCognitoMfaConfiguration, type SimCognitoMfaConfigurationValue, } from "./user-pool/mfa/sim-cognito-mfa-configuration.js";
 export { SimCognitoUserPoolMfa, type SimCognitoSoftwareTokenMfaConfigType, type SimCognitoUserPoolMfaType, } from "./user-pool/mfa/sim-cognito-user-pool-mfa.js";
+export { SimCognitoWebAuthnConfiguration, type SimCognitoWebAuthnConfigurationType, type SimCognitoWebAuthnUserVerification, } from "./user-pool/mfa/sim-cognito-web-authn-configuration.js";
 export { SimCognitoAutoVerifiedAttributes } from "./user-pool/sim-cognito-auto-verified-attributes.js";
-export { SimCognitoPasswordPolicy, type SimCognitoPasswordPolicyType, type SimCognitoSignInPolicyType, type SimCognitoUserPoolPoliciesType, } from "./user-pool/sim-cognito-password-policy.js";
+export { SimCognitoPasswordPolicy, type SimCognitoPasswordPolicyType, type SimCognitoUserPoolPoliciesType, } from "./user-pool/sim-cognito-password-policy.js";
+export { SimCognitoSignInPolicy, type SimCognitoFirstAuthFactor, type SimCognitoSignInPolicyType, } from "./user-pool/sim-cognito-sign-in-policy.js";
 export { SimCognitoUserPoolClient } from "./user-pool/client/sim-cognito-user-pool-client.js";
 export type { SimCognitoUserPoolClientId } from "./user-pool/client/sim-cognito-user-pool-client-id.js";
+export { SimCognitoAuthSessionValidity } from "./user-pool/client/sim-cognito-auth-session-validity.js";
 export { SimCognitoExplicitAuthFlows } from "./user-pool/client/sim-cognito-explicit-auth-flows.js";
 export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cognito-prevent-user-existence-errors.js";
 export { SimCognitoTokenLifetime, type SimCognitoTokenValidityUnit, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, type SimCognitoTokenValidityInput, type SimCognitoTokenValidityUnitsType, } from "./user-pool/client/sim-cognito-token-validity.js";
+export { SimCognitoRefreshTokenRotation, type SimCognitoRefreshTokenRotationType, } from "./user-pool/client/sim-cognito-refresh-token-rotation.js";
 export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
 export { SimCognitoFederation } from "./sim-cognito-federation.js";
 export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
 export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
+export { SimCognitoUserWebAuthn } from "./user-pool/user/web-authn/sim-cognito-user-web-authn.js";
+export { SimCognitoWebAuthnDevice } from "./user-pool/user/web-authn/sim-cognito-web-authn-device.js";
+export { SimCognitoWebAuthnCredential, type SimCognitoWebAuthnCredentialDescription, } from "./user-pool/user/web-authn/sim-cognito-web-authn-credential.js";
+export type { SimCognitoWebAuthnCreationOptions, SimCognitoWebAuthnDocumentValue, SimCognitoWebAuthnCredentialDescriptor, SimCognitoWebAuthnCredentialDocument, SimCognitoWebAuthnRequestOptions, } from "./user-pool/user/web-authn/sim-cognito-web-authn-document.js";
 export { SimCognitoConfirmationCode } from "./user-pool/user/sim-cognito-confirmation-code.js";
 export { SimCognitoUserPasswordReset } from "./user-pool/user/sim-cognito-user-password-reset.js";
 export type { SimCognitoUsername } from "./user-pool/user/sim-cognito-username.js";
@@ -52,6 +60,7 @@ export { SimCognitoTriggerOccasion } from "./user-pool/trigger/sim-cognito-trigg
 export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
 export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
 export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
+export { SimCognitoWebAuthnChallengeNotFoundException, SimCognitoWebAuthnConfigurationMissingException, SimCognitoWebAuthnCredentialNotSupportedException, SimCognitoWebAuthnOriginNotAllowedException, SimCognitoWebAuthnRelyingPartyMismatchException, } from "./error/sim-cognito-web-authn.error.js";
 export { isSimCognitoOAuthError, SimCognitoOAuthError, type SimCognitoOAuthErrorCode, } from "./error/sim-cognito-oauth.error.js";
 export { SimCognitoAliasExistsException, SimCognitoCodeMismatchException, SimCognitoDuplicateProviderException, SimCognitoEnableSoftwareTokenMfaException, SimCognitoError, SimCognitoExpiredCodeException, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoPasswordResetRequiredException, SimCognitoResourceNotFoundException, SimCognitoSoftwareTokenMfaNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, SimCognitoUserPoolAlreadyExists, SimCognitoUserPoolClientAlreadyExists, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/cognito/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,YAAY,EACV,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,GACzC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,KAAK,+BAA+B,GACrC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,qBAAqB,EACrB,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,GAC/B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,yBAAyB,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,GACnC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACxC,wCAAwC,GACzC,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,KAAK,gCAAgC,GACtC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,EAClC,KAAK,uCAAuC,GAC7C,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,GACnC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,KAAK,8BAA8B,GACpC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,0BAA0B,GAChC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,GAClC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sDAAsD,CAAC;AAC9D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,wBAAwB,GAC9B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,yCAAyC,EACzC,eAAe,EACf,8BAA8B,EAC9B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,wCAAwC,EACxC,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,wCAAwC,GAC9C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,YAAY,EACV,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,4BAA4B,EAC5B,KAAK,iCAAiC,GACvC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,GACzC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,KAAK,+BAA+B,GACrC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,qBAAqB,EACrB,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,GAC/B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,GACxC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,GACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,yDAAyD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,GACtC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,GACxC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4DAA4D,CAAC;AACtG,OAAO,EACL,4BAA4B,EAC5B,KAAK,uCAAuC,GAC7C,MAAM,gEAAgE,CAAC;AACxE,YAAY,EACV,iCAAiC,EACjC,+BAA+B,EAC/B,sCAAsC,EACtC,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,yBAAyB,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,GACnC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACxC,wCAAwC,GACzC,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,KAAK,gCAAgC,GACtC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,GACjC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,EAC5B,KAAK,gCAAgC,GACtC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,EAClC,KAAK,uCAAuC,GAC7C,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,GACnC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,KAAK,8BAA8B,GACpC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,0BAA0B,GAChC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,GAClC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sDAAsD,CAAC;AAC9D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,4CAA4C,EAC5C,+CAA+C,EAC/C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,GAChD,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,wBAAwB,GAC9B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,yCAAyC,EACzC,eAAe,EACf,8BAA8B,EAC9B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,wCAAwC,EACxC,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/index.js

@@ -5,17 +5,24 @@ export { SimCognitoDeletionProtection, } from "./user-pool/sim-cognito-deletion-
 export { SimCognitoAdminCreateUserConfig, } from "./user-pool/sim-cognito-admin-create-user-config.js";
 export { SimCognitoMfaConfiguration, } from "./user-pool/mfa/sim-cognito-mfa-configuration.js";
 export { SimCognitoUserPoolMfa, } from "./user-pool/mfa/sim-cognito-user-pool-mfa.js";
+export { SimCognitoWebAuthnConfiguration, } from "./user-pool/mfa/sim-cognito-web-authn-configuration.js";
 export { SimCognitoAutoVerifiedAttributes } from "./user-pool/sim-cognito-auto-verified-attributes.js";
 export { SimCognitoPasswordPolicy, } from "./user-pool/sim-cognito-password-policy.js";
+export { SimCognitoSignInPolicy, } from "./user-pool/sim-cognito-sign-in-policy.js";
 export { SimCognitoUserPoolClient } from "./user-pool/client/sim-cognito-user-pool-client.js";
+export { SimCognitoAuthSessionValidity } from "./user-pool/client/sim-cognito-auth-session-validity.js";
 export { SimCognitoExplicitAuthFlows } from "./user-pool/client/sim-cognito-explicit-auth-flows.js";
 export { SimCognitoPreventUserExistenceErrors } from "./user-pool/client/sim-cognito-prevent-user-existence-errors.js";
 export { SimCognitoTokenLifetime, } from "./user-pool/client/sim-cognito-token-lifetime.js";
 export { SimCognitoTokenValidity, } from "./user-pool/client/sim-cognito-token-validity.js";
+export { SimCognitoRefreshTokenRotation, } from "./user-pool/client/sim-cognito-refresh-token-rotation.js";
 export { SimCognitoUserDirectory } from "./sim-cognito-user-directory.js";
 export { SimCognitoFederation } from "./sim-cognito-federation.js";
 export { SimCognitoAuthentication } from "./sim-cognito-authentication.js";
 export { SimCognitoUser } from "./user-pool/user/sim-cognito-user.js";
+export { SimCognitoUserWebAuthn } from "./user-pool/user/web-authn/sim-cognito-user-web-authn.js";
+export { SimCognitoWebAuthnDevice } from "./user-pool/user/web-authn/sim-cognito-web-authn-device.js";
+export { SimCognitoWebAuthnCredential, } from "./user-pool/user/web-authn/sim-cognito-web-authn-credential.js";
 export { SimCognitoConfirmationCode } from "./user-pool/user/sim-cognito-confirmation-code.js";
 export { SimCognitoUserPasswordReset } from "./user-pool/user/sim-cognito-user-password-reset.js";
 export { SimCognitoUserStatus, } from "./user-pool/user/sim-cognito-user-status.js";
@@ -45,6 +52,7 @@ export { SimCognitoTriggerOccasion } from "./user-pool/trigger/sim-cognito-trigg
 export { SimCognitoAuthSession } from "./user-pool/auth/sim-cognito-auth-session.js";
 export { SimCognitoIssuedToken } from "./user-pool/auth/sim-cognito-issued-token.js";
 export { SimCognitoPoolAuth } from "./user-pool/auth/sim-cognito-pool-auth.js";
+export { SimCognitoWebAuthnChallengeNotFoundException, SimCognitoWebAuthnConfigurationMissingException, SimCognitoWebAuthnCredentialNotSupportedException, SimCognitoWebAuthnOriginNotAllowedException, SimCognitoWebAuthnRelyingPartyMismatchException, } from "./error/sim-cognito-web-authn.error.js";
 export { isSimCognitoOAuthError, SimCognitoOAuthError, } from "./error/sim-cognito-oauth.error.js";
 export { SimCognitoAliasExistsException, SimCognitoCodeMismatchException, SimCognitoDuplicateProviderException, SimCognitoEnableSoftwareTokenMfaException, SimCognitoError, SimCognitoExpiredCodeException, SimCognitoGroupExistsException, SimCognitoInvalidParameterException, SimCognitoInvalidPasswordException, SimCognitoNotAuthorizedException, SimCognitoPasswordResetRequiredException, SimCognitoResourceNotFoundException, SimCognitoSoftwareTokenMfaNotFoundException, SimCognitoUsernameExistsException, SimCognitoUserNotConfirmedException, SimCognitoUserNotFoundException, SimCognitoUserPoolAlreadyExists, SimCognitoUserPoolClientAlreadyExists, } from "./error/sim-cognito.error.js";
 //# sourceMappingURL=index.js.map

package/dist/service/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAK1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,GAEhC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,0BAA0B,GAE3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,qBAAqB,GAGtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,GAIzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAElG,OAAO,EACL,oBAAoB,GAErB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EACL,yBAAyB,GAE1B,MAAM,oDAAoD,CAAC;AAO5D,OAAO,EACL,2BAA2B,GAE5B,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,GAEnC,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,GAE1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,GAE3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,GAEvB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,EACL,uBAAuB,GAExB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,GAGrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,yCAAyC,EACzC,eAAe,EACf,8BAA8B,EAC9B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,wCAAwC,EACxC,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/cognito/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAK1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,4BAA4B,GAE7B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,+BAA+B,GAEhC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,0BAA0B,GAE3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,qBAAqB,GAGtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,+BAA+B,GAGhC,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,EACL,wBAAwB,GAGzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,sBAAsB,GAGvB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,yDAAyD,CAAC;AACxG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,iEAAiE,CAAC;AACvH,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,uBAAuB,GAGxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,8BAA8B,GAE/B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4DAA4D,CAAC;AACtG,OAAO,EACL,4BAA4B,GAE7B,MAAM,gEAAgE,CAAC;AAQxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAElG,OAAO,EACL,oBAAoB,GAErB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EACL,yBAAyB,GAE1B,MAAM,oDAAoD,CAAC;AAO5D,OAAO,EACL,2BAA2B,GAE5B,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,GAExB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,4BAA4B,GAE7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4DAA4D,CAAC;AAChH,OAAO,EACL,kCAAkC,GAEnC,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EACL,yBAAyB,GAE1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,0BAA0B,GAE3B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,sBAAsB,GAEvB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,GAE5B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,EACL,uBAAuB,GAExB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,oBAAoB,GAGrB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qBAAqB,GAEtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EACL,4BAA4B,GAE7B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,4CAA4C,EAC5C,+CAA+C,EAC/C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,GAChD,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,yCAAyC,EACzC,eAAe,EACf,8BAA8B,EAC9B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,gCAAgC,EAChC,wCAAwC,EACxC,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,8BAA8B,CAAC"}

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-auth-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CA4CpD"}
+{"version":3,"file":"sim-cognito-sdk-auth-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAmDpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.js

@@ -24,6 +24,10 @@ export function simCognitoSdkAuthRoutes(simCognito) {
             "RespondToAuthChallengeCommand",
             async (command) => await simCognito.respondToAuthChallenge(command),
         ],
+        [
+            "GetTokensFromRefreshTokenCommand",
+            async (command) => await simCognito.getTokensFromRefreshToken(command),
+        ],
         [
             "GlobalSignOutCommand",
             async (command) => await simCognito.globalSignOut(command),

package/dist/service/cognito/sdk/sim-cognito-sdk-auth-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-auth-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAW/B;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAsC;IAEtC,OAAO;QACL;YACE,0BAA0B;YAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,iBAAiB,CAChC,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oCAAoC;YACpC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,2BAA2B,CAC1C,OAAgD,EAChD,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,qBAAqB;YACrB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,YAAY,CAAC,OAAiC,CAAC;SACnE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,CAC5C;SACJ;QACD;YACE,sBAAsB;YACtB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,aAAa,CAAC,OAAkC,CAAC;SACrE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cognito-sdk-auth-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAY/B;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAsC;IAEtC,OAAO;QACL;YACE,0BAA0B;YAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,iBAAiB,CAChC,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,oCAAoC;YACpC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,2BAA2B,CAC1C,OAAgD,EAChD,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;QACD;YACE,qBAAqB;YACrB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,YAAY,CAAC,OAAiC,CAAC;SACnE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,CAC5C;SACJ;QACD;YACE,kCAAkC;YAClC,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,yBAAyB,CACxC,OAA8C,CAC/C;SACJ;QACD;YACE,sBAAsB;YACtB,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,aAAa,CAAC,OAAkC,CAAC;SACrE;QACD;YACE,+BAA+B;YAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,UAAU,CAAC,sBAAsB,CACrC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts

@@ -5,8 +5,8 @@ import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provide
  *
  * The routes are grouped the way the operations themselves are, into pools and
  * their app clients, the users and groups in them, the domain and identity
- * providers they federate through, and signing in, so that adding an operation
- * touches the group it belongs to.
+ * providers they federate through, signing in, and the passkeys a user
+ * registers, so that adding an operation touches the group it belongs to.
  */
 export declare class SimCognitoSdkCommandRouter implements SimSdkCommandRouter {
     private readonly routes;

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAMtF;;;;;;;GAOG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAOjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAOtF;;;;;;;GAOG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAQjD;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js

@@ -2,13 +2,14 @@ import { simCognitoSdkAuthRoutes } from "./sim-cognito-sdk-auth-routes.js";
 import { simCognitoSdkDirectoryRoutes } from "./sim-cognito-sdk-directory-routes.js";
 import { simCognitoSdkFederationRoutes } from "./sim-cognito-sdk-federation-routes.js";
 import { simCognitoSdkPoolRoutes } from "./sim-cognito-sdk-pool-routes.js";
+import { simCognitoSdkWebAuthnRoutes } from "./sim-cognito-sdk-web-authn-routes.js";
 /**
  * Routes intercepted SDK Commands to one scoped simulated Cognito.
  *
  * The routes are grouped the way the operations themselves are, into pools and
  * their app clients, the users and groups in them, the domain and identity
- * providers they federate through, and signing in, so that adding an operation
- * touches the group it belongs to.
+ * providers they federate through, signing in, and the passkeys a user
+ * registers, so that adding an operation touches the group it belongs to.
  */
 export class SimCognitoSdkCommandRouter {
     routes;
@@ -18,6 +19,7 @@ export class SimCognitoSdkCommandRouter {
             ...simCognitoSdkDirectoryRoutes(simCognito),
             ...simCognitoSdkAuthRoutes(simCognito),
             ...simCognitoSdkFederationRoutes(simCognito),
+            ...simCognitoSdkWebAuthnRoutes(simCognito),
         ]);
     }
     /**

package/dist/service/cognito/sdk/sim-cognito-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,4BAA4B,CAAC,UAAU,CAAC;YAC3C,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,6BAA6B,CAAC,UAAU,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-command-router.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAA0C;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,4BAA4B,CAAC,UAAU,CAAC;YAC3C,GAAG,uBAAuB,CAAC,UAAU,CAAC;YACtC,GAAG,6BAA6B,CAAC,UAAU,CAAC;YAC5C,GAAG,2BAA2B,CAAC,UAAU,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.d.ts

@@ -0,0 +1,11 @@
+import type { SimSdkCommandRoute } from "../../../sdk/index.js";
+import type { SimCognitoIdentityProvider } from "../sim-cognito-identity-provider.js";
+/**
+ * The SDK Command routes for a user's passkeys.
+ *
+ * None of them reads a caller from the SDK context, because real Cognito
+ * authorizes all four with the user's own access token and no IAM policy at
+ * all.
+ */
+export declare function simCognitoSdkWebAuthnRoutes(simCognito: SimCognitoIdentityProvider): readonly (readonly [string, SimSdkCommandRoute])[];
+//# sourceMappingURL=sim-cognito-sdk-web-authn-routes.d.ts.map

package/dist/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-web-authn-routes.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAOhE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,0BAA0B,GACrC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,CA+BpD"}

package/dist/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.js

@@ -0,0 +1,28 @@
+/**
+ * The SDK Command routes for a user's passkeys.
+ *
+ * None of them reads a caller from the SDK context, because real Cognito
+ * authorizes all four with the user's own access token and no IAM policy at
+ * all.
+ */
+export function simCognitoSdkWebAuthnRoutes(simCognito) {
+    return [
+        [
+            "StartWebAuthnRegistrationCommand",
+            async (command) => await simCognito.startWebAuthnRegistration(command),
+        ],
+        [
+            "CompleteWebAuthnRegistrationCommand",
+            async (command) => await simCognito.completeWebAuthnRegistration(command),
+        ],
+        [
+            "ListWebAuthnCredentialsCommand",
+            async (command) => await simCognito.listWebAuthnCredentials(command),
+        ],
+        [
+            "DeleteWebAuthnCredentialCommand",
+            async (command) => await simCognito.deleteWebAuthnCredential(command),
+        ],
+    ];
+}
+//# sourceMappingURL=sim-cognito-sdk-web-authn-routes.js.map

package/dist/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sdk-web-authn-routes.js","sourceRoot":"","sources":["../../../../src/service/cognito/sdk/sim-cognito-sdk-web-authn-routes.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAsC;IAEtC,OAAO;QACL;YACE,kCAAkC;YAClC,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,yBAAyB,CACxC,OAA8C,CAC/C;SACJ;QACD;YACE,qCAAqC;YACrC,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,4BAA4B,CAC3C,OAAiD,CAClD;SACJ;QACD;YACE,gCAAgC;YAChC,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,uBAAuB,CACtC,OAA4C,CAC7C;SACJ;QACD;YACE,iCAAiC;YACjC,KAAK,EAAE,OAAO,EAAoB,EAAE,CAClC,MAAM,UAAU,CAAC,wBAAwB,CACvC,OAA6C,CAC9C;SACJ;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cognito/serve/page/sim-cognito-managed-login.d.ts

@@ -13,6 +13,7 @@ import type { SimCognitoPageParameters } from "./sim-cognito-page-markup.js";
 export declare class SimCognitoManagedLogin {
     private readonly pageRequest;
     private readonly signInPage;
+    private readonly passkeyPage;
     private readonly signUpPage;
     private readonly confirmPage;
     private readonly forgotPasswordPage;
@@ -29,8 +30,9 @@ export declare class SimCognitoManagedLogin {
      * Answer a refused authorize request on the sign-in form, where the form is
      * what real managed login would have answered with.
      *
-     * A request carrying no credentials gets the empty form. One the person
-     * filled in wrongly gets it back with the refusal on it, because a wrong
+     * A request carrying no credentials gets the empty form. One asking for a
+     * passkey gets the page that asks for the credential. One the person filled
+     * in wrongly gets the form back with the refusal on it, because a wrong
      * password is theirs to correct rather than the application's to be told
      * about. Every other refusal belongs to the application, and nothing here
      * answers it.

package/dist/service/cognito/serve/page/sim-cognito-managed-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-managed-login.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAIhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAa7E;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqC;IAEvE;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3C;IAED;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiBpE;IAED;;;;;;;;;OASG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,wBAAwB,EACpC,KAAK,EAAE,OAAO,GACb,QAAQ,GAAG,SAAS,CActB;IAED,OAAO,CAAC,MAAM;CAMf"}
+{"version":3,"file":"sim-cognito-managed-login.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/serve/page/sim-cognito-managed-login.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAKhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAa7E;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IACzE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqC;IAEvE;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3C;IAED;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiBpE;IAED;;;;;;;;;;OAUG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,wBAAwB,EACpC,KAAK,EAAE,OAAO,GACb,QAAQ,GAAG,SAAS,CAkBtB;IAED,OAAO,CAAC,MAAM;CAMf"}

package/dist/service/cognito/serve/page/sim-cognito-managed-login.js

@@ -1,8 +1,9 @@
-import { isSimCognitoManagedLoginRequired } from "../../error/sim-cognito-managed-login.error.js";
+import { isSimCognitoManagedLoginRequired, isSimCognitoPasskeyRequired, } from "../../error/sim-cognito-managed-login.error.js";
 import { isSimCognitoOAuthError } from "../../error/sim-cognito-oauth.error.js";
 import { SimCognitoConfirmPage } from "./sim-cognito-confirm-page.js";
 import { SimCognitoForgotPasswordPage } from "./sim-cognito-forgot-password-page.js";
 import { SimCognitoPageForm } from "./sim-cognito-page-form.js";
+import { SimCognitoPasskeyPage } from "./sim-cognito-passkey-page.js";
 import { simCognitoForgotPasswordPath, simCognitoIsLocalSignIn, simCognitoPagePaths, simCognitoResetPasswordPath, simCognitoSignUpPath, } from "./sim-cognito-page-paths.js";
 import { SimCognitoResetPasswordPage } from "./sim-cognito-reset-password-page.js";
 import { SimCognitoPageRequest } from "./sim-cognito-page-request.js";
@@ -21,6 +22,7 @@ import { SimCognitoSignUpPage } from "./sim-cognito-sign-up-page.js";
 export class SimCognitoManagedLogin {
     pageRequest = new SimCognitoPageRequest();
     signInPage = new SimCognitoSignInPage();
+    passkeyPage = new SimCognitoPasskeyPage();
     signUpPage = new SimCognitoSignUpPage();
     confirmPage = new SimCognitoConfirmPage();
     forgotPasswordPage = new SimCognitoForgotPasswordPage();
@@ -55,8 +57,9 @@ export class SimCognitoManagedLogin {
      * Answer a refused authorize request on the sign-in form, where the form is
      * what real managed login would have answered with.
      *
-     * A request carrying no credentials gets the empty form. One the person
-     * filled in wrongly gets it back with the refusal on it, because a wrong
+     * A request carrying no credentials gets the empty form. One asking for a
+     * passkey gets the page that asks for the credential. One the person filled
+     * in wrongly gets the form back with the refusal on it, because a wrong
      * password is theirs to correct rather than the application's to be told
      * about. Every other refusal belongs to the application, and nothing here
      * answers it.
@@ -65,6 +68,9 @@ export class SimCognitoManagedLogin {
         if (isSimCognitoManagedLoginRequired(error)) {
             return this.signInPage.render(request.pool, parameters);
         }
+        if (isSimCognitoPasskeyRequired(error)) {
+            return this.passkeyPage.render(parameters, error.username, error.session);
+        }
         if (isSimCognitoOAuthError(error) || !simCognitoIsLocalSignIn(parameters)) {
             return undefined;
         }