@kensio/yulin 1.18.2 → 1.19.1

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.d.ts

@@ -1,3 +1,4 @@
+import { SimCognitoAuthSessionValidity } from "./sim-cognito-auth-session-validity.js";
 import { SimCognitoExplicitAuthFlows } from "./sim-cognito-explicit-auth-flows.js";
 import { SimCognitoOAuthSettings, type SimCognitoOAuthSettingsType } from "./sim-cognito-oauth-settings.js";
 import { SimCognitoPreventUserExistenceErrors } from "./sim-cognito-prevent-user-existence-errors.js";
@@ -12,6 +13,7 @@ import { SimCognitoTokenValidity, type SimCognitoTokenValidityInput } from "./si
  */
 export interface SimCognitoUserPoolClientSettingsProperties extends SimCognitoTokenValidityInput, SimCognitoOAuthSettingsType {
     readonly ClientName?: string | undefined;
+    readonly AuthSessionValidity?: number | undefined;
     readonly ExplicitAuthFlows?: readonly string[] | undefined;
     readonly PreventUserExistenceErrors?: string | undefined;
     readonly RefreshTokenRotation?: SimCognitoRefreshTokenRotationType | undefined;
@@ -30,6 +32,10 @@ export declare class SimCognitoUserPoolClientSettings {
     readonly explicitAuthFlows: SimCognitoExplicitAuthFlows;
     readonly preventUserExistenceErrors: SimCognitoPreventUserExistenceErrors;
     readonly tokenValidity: SimCognitoTokenValidity;
+    /**
+     * How long a challenge this client issued can be answered for.
+     */
+    readonly authSessionValidity: SimCognitoAuthSessionValidity;
     /**
      * Whether this client rotates its refresh tokens, which decides what
      * renews a session made through it.

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client-settings.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,0CACf,SAAQ,4BAA4B,EAAE,2BAA2B;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,qBAAa,gCAAgC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,0BAA0B,EAAE,oCAAoC,CAAC;IACjF,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD;;;OAGG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;OAEG;IACH,SAAgB,KAAK,EAAE,uBAAuB,CAAC;IAE/C,YAAY,UAAU,EAAE,0CAA0C,EAgBjE;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client-settings.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,EACvB,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,8BAA8B,EAC9B,KAAK,kCAAkC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,0CACf,SAAQ,4BAA4B,EAAE,2BAA2B;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,oBAAoB,CAAC,EAC1B,kCAAkC,GAClC,SAAS,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,qBAAa,gCAAgC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/D,SAAgB,0BAA0B,EAAE,oCAAoC,CAAC;IACjF,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IAEvD;;OAEG;IACH,SAAgB,mBAAmB,EAAE,6BAA6B,CAAC;IAEnE;;;OAGG;IACH,SAAgB,oBAAoB,EAAE,8BAA8B,CAAC;IAErE;;OAEG;IACH,SAAgB,KAAK,EAAE,uBAAuB,CAAC;IAE/C,YAAY,UAAU,EAAE,0CAA0C,EAmBjE;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.js

@@ -1,4 +1,5 @@
 import { SimCognitoName } from "../sim-cognito-name.js";
+import { SimCognitoAuthSessionValidity } from "./sim-cognito-auth-session-validity.js";
 import { SimCognitoExplicitAuthFlows } from "./sim-cognito-explicit-auth-flows.js";
 import { SimCognitoOAuthSettings, } from "./sim-cognito-oauth-settings.js";
 import { SimCognitoPreventUserExistenceErrors } from "./sim-cognito-prevent-user-existence-errors.js";
@@ -18,6 +19,10 @@ export class SimCognitoUserPoolClientSettings {
     explicitAuthFlows;
     preventUserExistenceErrors;
     tokenValidity;
+    /**
+     * How long a challenge this client issued can be answered for.
+     */
+    authSessionValidity;
     /**
      * Whether this client rotates its refresh tokens, which decides what
      * renews a session made through it.
@@ -35,6 +40,7 @@ export class SimCognitoUserPoolClientSettings {
         this.explicitAuthFlows = new SimCognitoExplicitAuthFlows(properties.ExplicitAuthFlows);
         this.preventUserExistenceErrors = new SimCognitoPreventUserExistenceErrors(properties.PreventUserExistenceErrors);
         this.tokenValidity = new SimCognitoTokenValidity(properties);
+        this.authSessionValidity = new SimCognitoAuthSessionValidity(properties.AuthSessionValidity);
         this.refreshTokenRotation = new SimCognitoRefreshTokenRotation(properties.RefreshTokenRotation);
         this.oauth = new SimCognitoOAuthSettings(properties);
     }

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client-settings.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,8BAA8B,GAE/B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AAmBzC;;;;;;;;GAQG;AACH,MAAM,OAAO,gCAAgC;IAC3B,IAAI,CAAS;IACb,iBAAiB,CAA8B;IAC/C,0BAA0B,CAAuC;IACjE,aAAa,CAA0B;IAEvD;;;OAGG;IACa,oBAAoB,CAAiC;IAErE;;OAEG;IACa,KAAK,CAA0B;IAE/C,YAAY,UAAsD;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC;YAC7B,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,UAAU,CAAC,UAAU;SAC7B,CAAC,CAAC,KAAK,CAAC;QACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CACtD,UAAU,CAAC,iBAAiB,CAC7B,CAAC;QACF,IAAI,CAAC,0BAA0B,GAAG,IAAI,oCAAoC,CACxE,UAAU,CAAC,0BAA0B,CACtC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAC5D,UAAU,CAAC,oBAAoB,CAChC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client-settings.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EACL,8BAA8B,GAE/B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AAoBzC;;;;;;;;GAQG;AACH,MAAM,OAAO,gCAAgC;IAC3B,IAAI,CAAS;IACb,iBAAiB,CAA8B;IAC/C,0BAA0B,CAAuC;IACjE,aAAa,CAA0B;IAEvD;;OAEG;IACa,mBAAmB,CAAgC;IAEnE;;;OAGG;IACa,oBAAoB,CAAiC;IAErE;;OAEG;IACa,KAAK,CAA0B;IAE/C,YAAY,UAAsD;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC;YAC7B,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,UAAU,CAAC,UAAU;SAC7B,CAAC,CAAC,KAAK,CAAC;QACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,2BAA2B,CACtD,UAAU,CAAC,iBAAiB,CAC7B,CAAC;QACF,IAAI,CAAC,0BAA0B,GAAG,IAAI,oCAAoC,CACxE,UAAU,CAAC,0BAA0B,CACtC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,mBAAmB,GAAG,IAAI,6BAA6B,CAC1D,UAAU,CAAC,mBAAmB,CAC/B,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,IAAI,8BAA8B,CAC5D,UAAU,CAAC,oBAAoB,CAChC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.d.ts

@@ -1,5 +1,6 @@
 import type { SimClock } from "../../../../util/clock/sim-clock.js";
 import type { SimCognitoUserPoolId } from "../sim-cognito-user-pool-id.js";
+import type { SimCognitoAuthSessionValidity } from "./sim-cognito-auth-session-validity.js";
 import type { SimCognitoExplicitAuthFlows } from "./sim-cognito-explicit-auth-flows.js";
 import type { SimCognitoPreventUserExistenceErrors } from "./sim-cognito-prevent-user-existence-errors.js";
 import type { SimCognitoRefreshTokenRotation } from "./sim-cognito-refresh-token-rotation.js";
@@ -51,6 +52,11 @@ export declare class SimCognitoUserPoolClient {
      * How long each kind of token this client is given lasts.
      */
     get tokenValidity(): SimCognitoTokenValidity;
+    /**
+     * How long a challenge this client issued can be answered for, which is
+     * what decides when an unfinished sign-in through it runs out.
+     */
+    get authSessionValidity(): SimCognitoAuthSessionValidity;
     /**
      * Whether this client rotates its refresh tokens, and how long it goes on
      * honouring one it rotated out.

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,EAAE,EAAE,0BAA0B,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,EAAE,EAAE,0BAA0B,CAAC;IAC/C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;;OAGG;IACH,SAAgB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,kCAAkC,EAQzD;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,2BAA2B,CAEnD;IAED;;OAEG;IACH,IAAI,0BAA0B,IAAI,oCAAoC,CAErE;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,uBAAuB,CAE3C;IAED;;;OAGG;IACH,IAAI,oBAAoB,IAAI,8BAA8B,CAEzD;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,uBAAuB,CAEnC;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,gCAAgC,GAAG,IAAI,CAGvD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAC5F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,EAAE,EAAE,0BAA0B,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,EAAE,EAAE,0BAA0B,CAAC;IAC/C,SAAgB,UAAU,EAAE,oBAAoB,CAAC;IACjD,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;;OAGG;IACH,SAAgB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,kCAAkC,EAQzD;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,2BAA2B,CAEnD;IAED;;OAEG;IACH,IAAI,0BAA0B,IAAI,oCAAoC,CAErE;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,uBAAuB,CAE3C;IAED;;;OAGG;IACH,IAAI,mBAAmB,IAAI,6BAA6B,CAEvD;IAED;;;OAGG;IACH,IAAI,oBAAoB,IAAI,8BAA8B,CAEzD;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,uBAAuB,CAEnC;IAED;;;OAGG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,gCAAgC,GAAG,IAAI,CAGvD;CACF"}

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.js

@@ -51,6 +51,13 @@ export class SimCognitoUserPoolClient {
     get tokenValidity() {
         return this.clientSettings.tokenValidity;
     }
+    /**
+     * How long a challenge this client issued can be answered for, which is
+     * what decides when an unfinished sign-in through it runs out.
+     */
+    get authSessionValidity() {
+        return this.clientSettings.authSessionValidity;
+    }
     /**
      * Whether this client rotates its refresh tokens, and how long it goes on
      * honouring one it rotated out.

package/dist/service/cognito/user-pool/client/sim-cognito-user-pool-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-client.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAkBA;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IACnB,EAAE,CAA6B;IAC/B,UAAU,CAAuB;IACjC,YAAY,CAAO;IAEnC;;;OAGG;IACa,MAAM,CAAqB;IAE1B,KAAK,CAAW;IACzB,cAAc,CAAmC;IACjD,YAAY,CAAO;IAE3B,YAAY,UAA8C;QACxD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAA0C;QAC/C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-client.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/client/sim-cognito-user-pool-client.ts"],"names":[],"mappings":"AAmBA;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IACnB,EAAE,CAA6B;IAC/B,UAAU,CAAuB;IACjC,YAAY,CAAO;IAEnC;;;OAGG;IACa,MAAM,CAAqB;IAE1B,KAAK,CAAW;IACzB,cAAc,CAAmC;IACjD,YAAY,CAAO;IAE3B,YAAY,UAA8C;QACxD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,QAA0C;QAC/C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-relying-party.d.ts

@@ -0,0 +1,16 @@
+import type { SimCognitoUserPool } from "../sim-cognito-user-pool.js";
+/**
+ * The relying party a pool registers and presents passkeys against.
+ *
+ * A passkey belongs to a domain. A pool that configured a `RelyingPartyId`
+ * uses that, and one that did not falls back to its own hosted domain, which
+ * is what real Cognito falls back to. A pool with neither has nothing to
+ * register a passkey against and nothing to present one to, and real Cognito
+ * refuses that with `WebAuthnConfigurationMissingException`.
+ */
+export declare function requireSimCognitoRelyingParty(pool: SimCognitoUserPool): string;
+/**
+ * Whether the pool asks an authenticator to check who is holding it.
+ */
+export declare function simCognitoUserVerification(pool: SimCognitoUserPool): string;
+//# sourceMappingURL=sim-cognito-relying-party.d.ts.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-relying-party.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-relying-party.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-relying-party.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAQtE;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,kBAAkB,GACvB,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAI3E"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-relying-party.js

@@ -0,0 +1,32 @@
+import { SimCognitoWebAuthnConfigurationMissingException } from "../../error/sim-cognito-web-authn.error.js";
+/**
+ * What an authenticator is asked to check when the pool has said nothing,
+ * which is the value real Cognito applies.
+ */
+const defaultUserVerification = "preferred";
+/**
+ * The relying party a pool registers and presents passkeys against.
+ *
+ * A passkey belongs to a domain. A pool that configured a `RelyingPartyId`
+ * uses that, and one that did not falls back to its own hosted domain, which
+ * is what real Cognito falls back to. A pool with neither has nothing to
+ * register a passkey against and nothing to present one to, and real Cognito
+ * refuses that with `WebAuthnConfigurationMissingException`.
+ */
+export function requireSimCognitoRelyingParty(pool) {
+    const relyingPartyId = pool.settings.mfa.webAuthn?.relyingPartyId ?? pool.auth.domain?.hostname;
+    if (relyingPartyId === undefined) {
+        throw new SimCognitoWebAuthnConfigurationMissingException(`The user pool ${pool.id} registers passkeys against no relying party: ` +
+            `give it a hosted domain with CreateUserPoolDomain, or set one with ` +
+            `SetUserPoolMfaConfig WebAuthnConfiguration RelyingPartyId, which an ` +
+            `AWS::Cognito::UserPool Resource deploys as WebAuthnRelyingPartyID.`);
+    }
+    return relyingPartyId;
+}
+/**
+ * Whether the pool asks an authenticator to check who is holding it.
+ */
+export function simCognitoUserVerification(pool) {
+    return (pool.settings.mfa.webAuthn?.userVerification ?? defaultUserVerification);
+}
+//# sourceMappingURL=sim-cognito-relying-party.js.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-relying-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-relying-party.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-relying-party.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAG7G;;;GAGG;AACH,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAwB;IAExB,MAAM,cAAc,GAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;IAE3E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,+CAA+C,CACvD,iBAAiB,IAAI,CAAC,EAAE,gDAAgD;YACtE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAwB;IACjE,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,IAAI,uBAAuB,CACxE,CAAC;AACJ,CAAC"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.d.ts

@@ -1,4 +1,5 @@
 import { SimCognitoMfaConfiguration } from "./sim-cognito-mfa-configuration.js";
+import { SimCognitoWebAuthnConfiguration, type SimCognitoWebAuthnConfigurationType } from "./sim-cognito-web-authn-configuration.js";
 /**
  * Whether a pool offers a time-based one-time password as a second factor.
  */
@@ -31,6 +32,16 @@ export interface SimCognitoUserPoolMfaType {
     readonly MfaConfiguration?: string | undefined;
     readonly SoftwareTokenMfaConfiguration?: SimCognitoSoftwareTokenMfaConfigType | undefined;
     readonly SmsMfaConfiguration?: SimCognitoSmsMfaConfigType | undefined;
+    /**
+     * How the pool registers passkeys, which is the relying party ID they are
+     * registered against and whether an authenticator has to check who is
+     * holding it.
+     *
+     * It sits among the MFA settings because that is where real Cognito puts
+     * it, and a passkey with user verification is what counts towards MFA
+     * there.
+     */
+    readonly WebAuthnConfiguration?: SimCognitoWebAuthnConfigurationType | undefined;
 }
 /**
  * The multi-factor authentication one simulated user pool is configured for:
@@ -75,6 +86,11 @@ export declare class SimCognitoUserPoolMfa {
      * leaves what it would challenge with alone, as it does on real Cognito.
      */
     keepFactorsOf(replaced: SimCognitoUserPoolMfa): void;
+    /**
+     * How the pool registers passkeys, where a `SetUserPoolMfaConfig` request
+     * said. A pool no such request has reached has no answer to give.
+     */
+    get webAuthn(): SimCognitoWebAuthnConfiguration | undefined;
     /**
      * This configuration as `GetUserPoolMfaConfig` reports it.
      */

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-mfa.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,6BAA6B,CAAC,EACnC,oCAAoC,GACpC,SAAS,CAAC;IACd,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACvE;AAgDD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;;IAgBhC,YAAY,aAAa,EAAE,0BAA0B,EAEpD;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,0BAA0B,CAE9C;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAM1C;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAGnD;IAED;;OAEG;IACH,QAAQ,IAAI,yBAAyB,CAQpC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-mfa.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,0CAA0C,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,6BAA6B,CAAC,EACnC,oCAAoC,GACpC,SAAS,CAAC;IACd,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAEtE;;;;;;;;OAQG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAC3B,mCAAmC,GACnC,SAAS,CAAC;CACf;AAgED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;;IAsBhC,YAAY,aAAa,EAAE,0BAA0B,EAEpD;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,0BAA0B,CAE9C;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAO1C;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAInD;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,+BAA+B,GAAG,SAAS,CAE1D;IAED;;OAEG;IACH,QAAQ,IAAI,yBAAyB,CAWpC;CACF"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.js

@@ -1,5 +1,6 @@
 import { requireSimCognitoVerificationWording, simCognitoLongestSmsMessage, } from "../message/sim-cognito-verification-wording.js";
 import { SimCognitoMfaConfiguration } from "./sim-cognito-mfa-configuration.js";
+import { SimCognitoWebAuthnConfiguration, } from "./sim-cognito-web-authn-configuration.js";
 /**
  * Whether a request asked for a time-based one-time password, and nothing
  * where it named no such factor at all.
@@ -11,6 +12,17 @@ function softwareTokenIn(input) {
     }
     return requested.Enabled ?? false;
 }
+/**
+ * How a request asked for passkeys to be registered, and nothing where it
+ * configured them at all.
+ */
+function webAuthnIn(input) {
+    const requested = input.WebAuthnConfiguration;
+    if (requested === undefined) {
+        return undefined;
+    }
+    return new SimCognitoWebAuthnConfiguration(requested);
+}
 /**
  * What a request asked for in a text message carrying a code, and nothing
  * where it configured no such factor at all.
@@ -60,6 +72,11 @@ export class SimCognitoUserPoolMfa {
      * configured the factor at all.
      */
     #sms;
+    /**
+     * How the pool would register a passkey, where a request configured that at
+     * all.
+     */
+    #webAuthn;
     constructor(configuration) {
         this.#configuration = configuration;
     }
@@ -80,6 +97,7 @@ export class SimCognitoUserPoolMfa {
         this.#configuration = new SimCognitoMfaConfiguration(input.MfaConfiguration);
         this.#softwareToken = softwareTokenIn(input);
         this.#sms = smsIn(input);
+        this.#webAuthn = webAuthnIn(input);
     }
     /**
      * Whether the pool offers a second factor sent as a text message.
@@ -97,6 +115,14 @@ export class SimCognitoUserPoolMfa {
     keepFactorsOf(replaced) {
         this.#softwareToken = replaced.#softwareToken;
         this.#sms = replaced.#sms;
+        this.#webAuthn = replaced.#webAuthn;
+    }
+    /**
+     * How the pool registers passkeys, where a `SetUserPoolMfaConfig` request
+     * said. A pool no such request has reached has no answer to give.
+     */
+    get webAuthn() {
+        return this.#webAuthn;
     }
     /**
      * This configuration as `GetUserPoolMfaConfig` reports it.
@@ -108,6 +134,9 @@ export class SimCognitoUserPoolMfa {
                 SoftwareTokenMfaConfiguration: { Enabled: this.#softwareToken },
             }),
             ...(this.#sms !== undefined && { SmsMfaConfiguration: this.#sms }),
+            ...(this.#webAuthn !== undefined && {
+                WebAuthnConfiguration: this.#webAuthn.toOutput(),
+            }),
         };
     }
 }

package/dist/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-mfa.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,2BAA2B,GAC5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAwChF;;;GAGG;AACH,SAAS,eAAe,CACtB,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,6BAA6B,CAAC;IAEtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,KAAK,CACZ,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE5C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAEnD,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI;YAC3B,wBAAwB,EAAE,oCAAoC,CAC5D,0BAA0B,EAC1B,OAAO,EACP,2BAA2B,CAC5B;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IAChC,cAAc,CAA6B;IAE3C;;;;OAIG;IACH,cAAc,CAAsB;IAEpC;;;OAGG;IACH,IAAI,CAAyC;IAE7C,YAAY,aAAyC;QACnD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAgC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAA0B,CAClD,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAA+B;QAC3C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK;YAC3C,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,6BAA6B,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;aAChE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-mfa.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-user-pool-mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,2BAA2B,GAC5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EACL,+BAA+B,GAEhC,MAAM,0CAA0C,CAAC;AAqDlD;;;GAGG;AACH,SAAS,eAAe,CACtB,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,6BAA6B,CAAC;IAEtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,qBAAqB,CAAC;IAE9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,+BAA+B,CAAC,SAAS,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,KAAK,CACZ,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE5C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,wBAAwB,CAAC;IAEnD,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI;YAC3B,wBAAwB,EAAE,oCAAoC,CAC5D,0BAA0B,EAC1B,OAAO,EACP,2BAA2B,CAC5B;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IAChC,cAAc,CAA6B;IAE3C;;;;OAIG;IACH,cAAc,CAAsB;IAEpC;;;OAGG;IACH,IAAI,CAAyC;IAE7C;;;OAGG;IACH,SAAS,CAA8C;IAEvD,YAAY,aAAyC;QACnD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAAgC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,0BAA0B,CAClD,KAAK,CAAC,gBAAgB,CACvB,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAA+B;QAC3C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK;YAC3C,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,6BAA6B,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;aAChE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI;gBAClC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aACjD,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.d.ts

@@ -0,0 +1,46 @@
+/**
+ * How a pool registers passkeys, in the shape `SetUserPoolMfaConfig` and
+ * `GetUserPoolMfaConfig` carry it.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_WebAuthnConfigurationType.html
+ */
+export interface SimCognitoWebAuthnConfigurationType {
+    readonly RelyingPartyId?: string | undefined;
+    readonly UserVerification?: string | undefined;
+}
+export type SimCognitoWebAuthnUserVerification = "required" | "preferred";
+/**
+ * The passkey configuration of one simulated user pool.
+ *
+ * Two values, both of which decide what a passkey means rather than how a
+ * sign-in runs. The relying party ID is the name a passkey is registered
+ * against, and it authenticates for that name and the hosts under it. The user
+ * verification preference decides whether an authenticator that checks nobody
+ * may register at all, and `required` is what makes a passkey count towards
+ * MFA on real Cognito.
+ *
+ * They arrive through `SetUserPoolMfaConfig` rather than `CreateUserPool`,
+ * which is why an `AWS::Cognito::UserPool` Resource carrying
+ * `WebAuthnRelyingPartyID` is deployed in two calls here as it is on real
+ * CloudFormation.
+ *
+ * `StartWebAuthnRegistration` reads both, and a pool that names no relying
+ * party has nothing to register a passkey against.
+ */
+export declare class SimCognitoWebAuthnConfiguration {
+    readonly relyingPartyId: string | undefined;
+    readonly userVerification: SimCognitoWebAuthnUserVerification | undefined;
+    constructor(configuration: SimCognitoWebAuthnConfigurationType);
+    /**
+     * A relying party ID is a domain, and Cognito takes one of between one and
+     * 127 characters. A pool configured with an empty one would register
+     * passkeys against nothing.
+     */
+    private static relyingPartyIn;
+    private static verificationIn;
+    /**
+     * The configuration as `GetUserPoolMfaConfig` reports it.
+     */
+    toOutput(): SimCognitoWebAuthnConfigurationType;
+}
+//# sourceMappingURL=sim-cognito-web-authn-configuration.d.ts.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-web-authn-configuration.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,MAAM,kCAAkC,GAAG,UAAU,GAAG,WAAW,CAAC;AAS1E;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,+BAA+B;IAC1C,SAAgB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnD,SAAgB,gBAAgB,EAC5B,kCAAkC,GAClC,SAAS,CAAC;IAEd,YAAY,aAAa,EAAE,mCAAmC,EAO7D;IAED;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAqB7B,OAAO,CAAC,MAAM,CAAC,cAAc;IAuB7B;;OAEG;IACH,QAAQ,IAAI,mCAAmC,CAS9C;CACF"}

package/dist/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.js

@@ -0,0 +1,73 @@
+import { SimCognitoInvalidParameterException } from "../../error/sim-cognito.error.js";
+const userVerificationValues = [
+    "required",
+    "preferred",
+];
+const relyingPartyIdLength = { least: 1, most: 127 };
+/**
+ * The passkey configuration of one simulated user pool.
+ *
+ * Two values, both of which decide what a passkey means rather than how a
+ * sign-in runs. The relying party ID is the name a passkey is registered
+ * against, and it authenticates for that name and the hosts under it. The user
+ * verification preference decides whether an authenticator that checks nobody
+ * may register at all, and `required` is what makes a passkey count towards
+ * MFA on real Cognito.
+ *
+ * They arrive through `SetUserPoolMfaConfig` rather than `CreateUserPool`,
+ * which is why an `AWS::Cognito::UserPool` Resource carrying
+ * `WebAuthnRelyingPartyID` is deployed in two calls here as it is on real
+ * CloudFormation.
+ *
+ * `StartWebAuthnRegistration` reads both, and a pool that names no relying
+ * party has nothing to register a passkey against.
+ */
+export class SimCognitoWebAuthnConfiguration {
+    relyingPartyId;
+    userVerification;
+    constructor(configuration) {
+        this.relyingPartyId = SimCognitoWebAuthnConfiguration.relyingPartyIn(configuration.RelyingPartyId);
+        this.userVerification = SimCognitoWebAuthnConfiguration.verificationIn(configuration.UserVerification);
+    }
+    /**
+     * A relying party ID is a domain, and Cognito takes one of between one and
+     * 127 characters. A pool configured with an empty one would register
+     * passkeys against nothing.
+     */
+    static relyingPartyIn(requested) {
+        if (requested === undefined) {
+            return undefined;
+        }
+        if (requested.length < relyingPartyIdLength.least ||
+            requested.length > relyingPartyIdLength.most) {
+            throw new SimCognitoInvalidParameterException("WebAuthnConfiguration RelyingPartyId must be between " +
+                `${String(relyingPartyIdLength.least)} and ` +
+                `${String(relyingPartyIdLength.most)} characters long`);
+        }
+        return requested;
+    }
+    static verificationIn(requested) {
+        if (requested === undefined) {
+            return undefined;
+        }
+        if (!userVerificationValues.includes(requested)) {
+            throw new SimCognitoInvalidParameterException(`WebAuthnConfiguration UserVerification '${requested}' is not a ` +
+                `Cognito user verification preference: use one of ${userVerificationValues.join(" or ")}`);
+        }
+        return requested;
+    }
+    /**
+     * The configuration as `GetUserPoolMfaConfig` reports it.
+     */
+    toOutput() {
+        return {
+            ...(this.relyingPartyId !== undefined && {
+                RelyingPartyId: this.relyingPartyId,
+            }),
+            ...(this.userVerification !== undefined && {
+                UserVerification: this.userVerification,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-cognito-web-authn-configuration.js.map

package/dist/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-web-authn-configuration.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/mfa/sim-cognito-web-authn-configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAevF,MAAM,sBAAsB,GAAkD;IAC5E,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAErD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,+BAA+B;IAC1B,cAAc,CAAqB;IACnC,gBAAgB,CAElB;IAEd,YAAY,aAAkD;QAC5D,IAAI,CAAC,cAAc,GAAG,+BAA+B,CAAC,cAAc,CAClE,aAAa,CAAC,cAAc,CAC7B,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,+BAA+B,CAAC,cAAc,CACpE,aAAa,CAAC,gBAAgB,CAC/B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,cAAc,CAC3B,SAA6B;QAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,SAAS,CAAC,MAAM,GAAG,oBAAoB,CAAC,KAAK;YAC7C,SAAS,CAAC,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAC5C,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,uDAAuD;gBACrD,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO;gBAC5C,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,cAAc,CAC3B,SAA6B;QAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,CAAC,sBAAsB,CAAC,QAAQ,CAC9B,SAA+C,CAChD,EACD,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,2CAA2C,SAAS,aAAa;gBAC/D,oDAAoD,sBAAsB,CAAC,IAAI,CAC7E,MAAM,CACP,EAAE,CACN,CAAC;QACJ,CAAC;QAED,OAAO,SAA+C,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI;gBACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-password-policy.d.ts

@@ -1,3 +1,4 @@
+import type { SimCognitoSignInPolicyType } from "./sim-cognito-sign-in-policy.js";
 /**
  * A user pool password policy, in the shape Cognito reports it.
  *
@@ -12,15 +13,6 @@ export interface SimCognitoPasswordPolicyType {
     readonly PasswordHistorySize?: number | undefined;
     readonly TemporaryPasswordValidityDays?: number | undefined;
 }
-/**
- * The sign-in policy of a user pool, which chooses the first factor a user
- * may authenticate with.
- *
- * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignInPolicyType.html
- */
-export interface SimCognitoSignInPolicyType {
-    readonly AllowedFirstAuthFactors?: readonly string[] | undefined;
-}
 /**
  * The policies of a user pool, as Cognito groups them.
  *

package/dist/service/cognito/user-pool/sim-cognito-password-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-password-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7D;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAChE;AAKD;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,6BAA6B,EAAE,MAAM,CAAC;IAEtD,YAAY,MAAM,GAAE,4BAAiC,EAepD;IAED,OAAO,CAAC,MAAM,CAAC,aAAa;IAmB5B;;OAEG;IACH,QAAQ,IAAI,4BAA4B,CASvC;CACF"}
+{"version":3,"file":"sim-cognito-password-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAElF;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7D;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAChE;AAKD;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,iBAAiB,EAAE,OAAO,CAAC;IAC3C,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,eAAe,EAAE,OAAO,CAAC;IACzC,SAAgB,6BAA6B,EAAE,MAAM,CAAC;IAEtD,YAAY,MAAM,GAAE,4BAAiC,EAepD;IAED,OAAO,CAAC,MAAM,CAAC,aAAa;IAmB5B;;OAEG;IACH,QAAQ,IAAI,4BAA4B,CASvC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-password-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-password-policy.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAqCpF,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClD,MAAM,kCAAkC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IACnB,aAAa,CAAS;IACtB,iBAAiB,CAAU;IAC3B,iBAAiB,CAAU;IAC3B,eAAe,CAAU;IACzB,eAAe,CAAU;IACzB,6BAA6B,CAAS;IAEtD,YAAY,MAAM,GAAiC,EAAE;QACnD,IAAI,CAAC,aAAa,GAAG,wBAAwB,CAAC,aAAa,CACzD,eAAe,EACf,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,6BAA6B,GAAG,wBAAwB,CAAC,aAAa,CACzE,+BAA+B,EAC/B,MAAM,CAAC,6BAA6B,IAAI,CAAC,EACzC,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,KAAa,EACb,KAAa,EACb,KAAwD;QAExD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK;YACnB,KAAK,GAAG,KAAK,CAAC,IAAI,EAClB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,KAAK,kCAAkC;gBACvD,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B;SAClE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-password-policy.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-password-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AA4BpF,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClD,MAAM,kCAAkC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IACnB,aAAa,CAAS;IACtB,iBAAiB,CAAU;IAC3B,iBAAiB,CAAU;IAC3B,eAAe,CAAU;IACzB,eAAe,CAAU;IACzB,6BAA6B,CAAS;IAEtD,YAAY,MAAM,GAAiC,EAAE;QACnD,IAAI,CAAC,aAAa,GAAG,wBAAwB,CAAC,aAAa,CACzD,eAAe,EACf,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,6BAA6B,GAAG,wBAAwB,CAAC,aAAa,CACzE,+BAA+B,EAC/B,MAAM,CAAC,6BAA6B,IAAI,CAAC,EACzC,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,KAAa,EACb,KAAa,EACb,KAAwD;QAExD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,KAAK;YACnB,KAAK,GAAG,KAAK,CAAC,IAAI,EAClB,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,kBAAkB,KAAK,kCAAkC;gBACvD,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B;SAClE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-sign-in-policy.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The sign-in policy of a user pool, which chooses the factors a user may
+ * authenticate with first.
+ *
+ * https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignInPolicyType.html
+ */
+export interface SimCognitoSignInPolicyType {
+    readonly AllowedFirstAuthFactors?: readonly string[] | undefined;
+}
+/**
+ * A factor a user pool can offer at the first authentication prompt.
+ *
+ * `PASSWORD` covers both the plain-password and the SRP flows, which is what
+ * AWS says about the value.
+ */
+export type SimCognitoFirstAuthFactor = "PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN";
+/**
+ * The factors one simulated user pool allows at the first prompt.
+ *
+ * A pool created without a sign-in policy allows a password and says nothing
+ * about it, which is how real Cognito reports one. A pool created with a
+ * policy carries the factors it named, and reports them back under `Policies`.
+ *
+ * A `USER_AUTH` sign-in reads these to decide what it can offer, and answers
+ * with the ones this user could actually present. `PASSWORD` and `WEB_AUTHN`
+ * are presented here. A code sent by email or by text is not, and a sign-in
+ * choosing one is refused in words that say what could not be done.
+ *
+ * The validation is real Cognito's. The four factor names are the ones it
+ * accepts, a list may name five of them at most, and a policy offering
+ * passkeys and nothing else is refused because AWS states that `WEB_AUTHN`
+ * "must be accompanied by at least one other option".
+ */
+export declare class SimCognitoSignInPolicy {
+    #private;
+    constructor(policy?: SimCognitoSignInPolicyType);
+    private static factorsIn;
+    private static requireCount;
+    private static requireKnown;
+    /**
+     * Refuse a policy offering passkeys and nothing else, as real Cognito
+     * refuses one. A passkey has to be registered from a session that already
+     * exists, so a pool with no other way in would have nobody able to register.
+     *
+     * The companion has to be a different factor, so naming `WEB_AUTHN` twice
+     * leaves the pool as shut as naming it once does.
+     */
+    private static requireCompanionForPasskeys;
+    /**
+     * The factors a sign-in may offer, which is what the policy named or the
+     * password a pool with no policy allows.
+     */
+    get factors(): readonly SimCognitoFirstAuthFactor[];
+    /**
+     * The policy as Cognito reports it on the pool, and nothing where the pool
+     * was created without one.
+     */
+    toOutput(): SimCognitoSignInPolicyType | undefined;
+}
+//# sourceMappingURL=sim-cognito-sign-in-policy.d.ts.map

package/dist/service/cognito/user-pool/sim-cognito-sign-in-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-sign-in-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-sign-in-policy.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAClE;AAED;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,WAAW,GACX,SAAS,GACT,WAAW,CAAC;AAiBhB;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,sBAAsB;;IASjC,YAAY,MAAM,CAAC,EAAE,0BAA0B,EAS9C;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAYxB,OAAO,CAAC,MAAM,CAAC,YAAY;IAgB3B,OAAO,CAAC,MAAM,CAAC,YAAY;IAW3B;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,2BAA2B;IAW1C;;;OAGG;IACH,IAAI,OAAO,IAAI,SAAS,yBAAyB,EAAE,CAElD;IAED;;;OAGG;IACH,QAAQ,IAAI,0BAA0B,GAAG,SAAS,CAMjD;CACF"}