@liflig/cdk-cloudfront-auth 1.8.41 → 1.9.1

package/dist/generate-secret/index.js

@@ -1 +1 @@
-(()=>{"use strict";var e={d:(r,t)=>{for(var o in t)e.o(t,o)&&!e.o(r,o)&&Object.defineProperty(r,o,{enumerable:!0,get:t[o]})},o:(e,r)=>Object.prototype.hasOwnProperty.call(e,r),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},r={};e.r(r),e.d(r,{handler:()=>o});const t=require("node:crypto"),o=async e=>{switch(e.RequestType){case"Delete":return{PhysicalResourceId:e.PhysicalResourceId};case"Create":case"Update":return{PhysicalResourceId:"generate-secret",Data:{Value:(0,t.randomBytes)(16).toString("hex")}}}};var a=exports;for(var s in r)a[s]=r[s];r.__esModule&&Object.defineProperty(a,"__esModule",{value:!0})})();
+var R=Object.create;var{getPrototypeOf:p,defineProperty:a,getOwnPropertyNames:l,getOwnPropertyDescriptor:g}=Object,u=Object.prototype.hasOwnProperty;function y(e){return this[e]}var P,I,E=(e,t,r)=>{var s=e!=null&&typeof e==="object";if(s){var i=t?P??=new WeakMap:I??=new WeakMap,o=i.get(e);if(o)return o}r=e!=null?R(p(e)):{};let c=t||!e||!e.__esModule?a(r,"default",{value:e,enumerable:!0}):r;for(let n of l(e))if(!u.call(c,n))a(c,n,{get:y.bind(e,n),enumerable:!0});if(s)i.set(e,c);return c},m=(e)=>{var t=(d??=new WeakMap).get(e),r;if(t)return t;if(t=a({},"__esModule",{value:!0}),e&&typeof e==="object"||typeof e==="function"){for(var s of l(e))if(!u.call(t,s))a(t,s,{get:y.bind(e,s),enumerable:!(r=g(e,s))||r.enumerable})}return d.set(e,t),t},d,H=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var D=(e)=>e;function q(e,t){this[e]=D.bind(null,t)}var v=(e,t)=>{for(var r in t)a(e,r,{get:t[r],enumerable:!0,configurable:!0,set:q.bind(t,r)})};var C={};v(C,{handler:()=>x});module.exports=m(C);var h=require("node:crypto"),x=async(e)=>{switch(e.RequestType){case"Delete":return{PhysicalResourceId:e.PhysicalResourceId};case"Create":case"Update":return{PhysicalResourceId:"generate-secret",Data:{Value:h.randomBytes(16).toString("hex")}}}};

package/dist/http-headers/index.js

@@ -1 +1,21 @@
-(()=>{"use strict";var e={8232(e,o){o.qg=function(e,o){const c=new n,u=e.length;if(u<2)return c;const a=o?.decode||i;let l=0;do{const o=t(e,l,u);if(-1===o)break;const n=r(e,l,u);if(o>n){l=e.lastIndexOf(";",o-1)+1;continue}const i=s(e,l,o);void 0===c[i]&&(c[i]=a(s(e,o+1,n))),l=n+1}while(l<u);return c};Object.prototype.toString;const n=(()=>{const e=function(){};return e.prototype=Object.create(null),e})();function r(e,o,n){const r=e.indexOf(";",o);return-1===r?n:r}function t(e,o,n){const r=e.indexOf("=",o);return r<n?r:-1}function s(e,o,n){let r=o,t=n;do{const o=e.charCodeAt(r);if(32!==o&&9!==o)break}while(++r<t);for(;t>r;){const o=e.charCodeAt(t-1);if(32!==o&&9!==o)break;t--}return e.slice(r,t)}function i(e){if(-1===e.indexOf("%"))return e;try{return decodeURIComponent(e)}catch(o){return e}}}},o={};function n(r){var t=o[r];if(void 0!==t)return t.exports;var s=o[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.d=(e,o)=>{for(var r in o)n.o(o,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:o[r]})},n.o=(e,o)=>Object.prototype.hasOwnProperty.call(e,o),n.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var r={};n.r(r),n.d(r,{handler:()=>d});const t=require("node:fs"),s=require("node:path"),i=require("node:url");var c,u=n(8232);!function(e){e[e.none=0]="none",e[e.error=10]="error",e[e.warn=20]="warn",e[e.info=30]="info",e[e.debug=40]="debug"}(c||(c={}));class a{logLevel;constructor(e){this.logLevel=e}jsonify(e){return e.map(e=>{if("object"==typeof e)try{return JSON.stringify(e)}catch{return e}return e})}info(...e){this.logLevel>=c.info&&console.log(...this.jsonify(e))}warn(...e){this.logLevel>=c.warn&&console.warn(...this.jsonify(e))}error(...e){this.logLevel>=c.error&&console.error(...this.jsonify(e))}debug(...e){this.logLevel>=c.debug&&console.trace(...this.jsonify(e))}}const l=(0,i.fileURLToPath)("file:///home/runner/work/cdk-cloudfront-auth/cdk-cloudfront-auth/src/handlers/util/config.ts"),f=s.dirname(l);const d=function(){let e;return async o=>{e||(e=function(){const e=process.env.LAMBDA_TASK_ROOT||f,o=s.join(e,"config.json");console.log("Loading config from",o);const n=JSON.parse((0,t.readFileSync)(o,"utf-8")),r=`https://cognito-idp.${/^(\S+?)_\S+$/.exec(n.userPoolId)[1]}.amazonaws.com/${n.userPoolId}`,i=`${r}/.well-known/jwks.json`;return{nonceMaxAge:Number.parseInt((0,u.qg)(n.cookieSettings.nonce.toLowerCase())["max-age"],10)||86400,...n,tokenIssuer:r,tokenJwksUri:i,logger:new a(c[n.logLevel])}}()),e.logger.debug("Handling event:",o);const n=function(e,o){if(!o)throw new Error("Expected response value");return{...o,headers:{...o.headers??{},...(n=e.httpHeaders,Object.entries(n).reduce((e,[o,n])=>Object.assign(e,{[o.toLowerCase()]:[{key:o,value:n}]}),{}))}};var n}(e,await(async(e,o)=>o.Records[0].cf.response)(0,o));return e.logger.debug("Returning response:",n),n}}();var g=exports;for(var p in r)g[p]=r[p];r.__esModule&&Object.defineProperty(g,"__esModule",{value:!0})})();
+var L=Object.create;var{getPrototypeOf:m,defineProperty:C,getOwnPropertyNames:W,getOwnPropertyDescriptor:d}=Object,Y=Object.prototype.hasOwnProperty;function z(u){return this[u]}var S,_,B=(u,t,r)=>{var n=u!=null&&typeof u==="object";if(n){var H=t?S??=new WeakMap:_??=new WeakMap,f=H.get(u);if(f)return f}r=u!=null?L(m(u)):{};let g=t||!u||!u.__esModule?C(r,"default",{value:u,enumerable:!0}):r;for(let h of W(u))if(!Y.call(g,h))C(g,h,{get:z.bind(u,h),enumerable:!0});if(n)H.set(u,g);return g},v=(u)=>{var t=(G??=new WeakMap).get(u),r;if(t)return t;if(t=C({},"__esModule",{value:!0}),u&&typeof u==="object"||typeof u==="function"){for(var n of W(u))if(!Y.call(t,n))C(t,n,{get:z.bind(u,n),enumerable:!(r=d(u,n))||r.enumerable})}return G.set(u,t),t},G,c=(u,t)=>()=>(t||u((t={exports:{}}).exports,t),t.exports);var I=(u)=>u;function e(u,t){this[u]=I.bind(null,t)}var o=(u,t)=>{for(var r in t)C(u,r,{get:t[r],enumerable:!0,configurable:!0,set:e.bind(t,r)})};var Z=c((F)=>{Object.defineProperty(F,"__esModule",{value:!0});F.parseCookie=Q;F.parse=Q;F.stringifyCookie=ru;F.stringifySetCookie=p;F.serialize=p;F.parseSetCookie=fu;F.stringifySetCookie=p;F.serialize=p;var K=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,P=/^[\u0021-\u003A\u003C-\u007E]*$/,x=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,k=/^[\u0020-\u003A\u003D-\u007E]*$/,uu=/^-?\d+$/,nu=Object.prototype.toString,tu=(()=>{let u=function(){};return u.prototype=Object.create(null),u})();function Q(u,t){let r=new tu,n=u.length;if(n<2)return r;let H=t?.decode||X,f=0;do{let g=O(u,f,n);if(g===-1)break;let h=s(u,f,n);if(g>h){f=u.lastIndexOf(";",g-1)+1;continue}let y=l(u,f,g);if(r[y]===void 0)r[y]=H(l(u,g+1,h));f=h+1}while(f<n);return r}function ru(u,t){let r=t?.encode||encodeURIComponent,n=[];for(let H of Object.keys(u)){let f=u[H];if(f===void 0)continue;if(!K.test(H))throw TypeError(`cookie name is invalid: ${H}`);let g=r(f);if(!P.test(g))throw TypeError(`cookie val is invalid: ${f}`);n.push(`${H}=${g}`)}return n.join("; ")}function p(u,t,r){let n=typeof u==="object"?u:{...r,name:u,value:String(t)},f=(typeof t==="object"?t:r)?.encode||encodeURIComponent;if(!K.test(n.name))throw TypeError(`argument name is invalid: ${n.name}`);let g=n.value?f(n.value):"";if(!P.test(g))throw TypeError(`argument val is invalid: ${n.value}`);let h=n.name+"="+g;if(n.maxAge!==void 0){if(!Number.isInteger(n.maxAge))throw TypeError(`option maxAge is invalid: ${n.maxAge}`);h+="; Max-Age="+n.maxAge}if(n.domain){if(!x.test(n.domain))throw TypeError(`option domain is invalid: ${n.domain}`);h+="; Domain="+n.domain}if(n.path){if(!k.test(n.path))throw TypeError(`option path is invalid: ${n.path}`);h+="; Path="+n.path}if(n.expires){if(!gu(n.expires)||!Number.isFinite(n.expires.valueOf()))throw TypeError(`option expires is invalid: ${n.expires}`);h+="; Expires="+n.expires.toUTCString()}if(n.httpOnly)h+="; HttpOnly";if(n.secure)h+="; Secure";if(n.partitioned)h+="; Partitioned";if(n.priority)switch(typeof n.priority==="string"?n.priority.toLowerCase():void 0){case"low":h+="; Priority=Low";break;case"medium":h+="; Priority=Medium";break;case"high":h+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${n.priority}`)}if(n.sameSite)switch(typeof n.sameSite==="string"?n.sameSite.toLowerCase():n.sameSite){case!0:case"strict":h+="; SameSite=Strict";break;case"lax":h+="; SameSite=Lax";break;case"none":h+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${n.sameSite}`)}return h}function fu(u,t){let r=t?.decode||X,n=u.length,H=s(u,0,n),f=O(u,0,H),g=f===-1?{name:"",value:r(l(u,0,H))}:{name:l(u,0,f),value:r(l(u,f+1,H))},h=H+1;while(h<n){let y=s(u,h,n),w=O(u,h,y),q=w===-1?l(u,h,y):l(u,h,w),R=w===-1?void 0:l(u,w+1,y);switch(q.toLowerCase()){case"httponly":g.httpOnly=!0;break;case"secure":g.secure=!0;break;case"partitioned":g.partitioned=!0;break;case"domain":g.domain=R;break;case"path":g.path=R;break;case"max-age":if(R&&uu.test(R))g.maxAge=Number(R);break;case"expires":if(!R)break;let D=new Date(R);if(Number.isFinite(D.valueOf()))g.expires=D;break;case"priority":if(!R)break;let b=R.toLowerCase();if(b==="low"||b==="medium"||b==="high")g.priority=b;break;case"samesite":if(!R)break;let T=R.toLowerCase();if(T==="lax"||T==="strict"||T==="none")g.sameSite=T;break}h=y+1}return g}function s(u,t,r){let n=u.indexOf(";",t);return n===-1?r:n}function O(u,t,r){let n=u.indexOf("=",t);return n<r?n:-1}function l(u,t,r){let n=t,H=r;do{let f=u.charCodeAt(n);if(f!==32&&f!==9)break}while(++n<H);while(H>n){let f=u.charCodeAt(H-1);if(f!==32&&f!==9)break;H--}return u.slice(n,H)}function X(u){if(u.indexOf("%")===-1)return u;try{return decodeURIComponent(u)}catch(t){return u}}function gu(u){return nu.call(u)==="[object Date]"}});var lu={};o(lu,{handler:()=>yu});module.exports=v(lu);var J=`<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta
+      name="viewport"
+      content="width=device-width, initial-scale=1, shrink-to-fit=no"
+    />
+  </head>
+  <body>
+    <h1>\${title}</h1>
+    <p>\${message}</p>
+    <p>
+      \${details} [log region: \${region}]
+    </p>
+    <p>
+      <a href="\${linkHref}">\${linkText}</a>
+    </p>
+  </body>
+</html>
+`;var A=require("node:fs"),$=B(require("node:path")),M=require("node:url"),N=B(Z(),1);var a;((f)=>{f[f.none=0]="none";f[f.error=10]="error";f[f.warn=20]="warn";f[f.info=30]="info";f[f.debug=40]="debug"})(a||={});class j{logLevel;constructor(u){this.logLevel=u}jsonify(u){return u.map((t)=>{if(typeof t==="object")try{return JSON.stringify(t)}catch{return t}return t})}info(...u){if(this.logLevel>=30)console.log(...this.jsonify(u))}warn(...u){if(this.logLevel>=20)console.warn(...this.jsonify(u))}error(...u){if(this.logLevel>=10)console.error(...this.jsonify(u))}debug(...u){if(this.logLevel>=40)console.trace(...this.jsonify(u))}}var hu=M.fileURLToPath("file:///home/runner/work/cdk-cloudfront-auth/cdk-cloudfront-auth/src/handlers/util/config.ts"),Hu=$.dirname(hu);function E(){let t=process.env.LAMBDA_TASK_ROOT||Hu,r=$.join(t,"config.json");console.log("Loading config from",r);let n=JSON.parse(A.readFileSync(r,"utf-8")),f=`https://cognito-idp.${/^(\S+?)_\S+$/.exec(n.userPoolId)[1]}.amazonaws.com/${n.userPoolId}`,g=`${f}/.well-known/jwks.json`;return{nonceMaxAge:Number.parseInt(N.parse(n.cookieSettings.nonce.toLowerCase())["max-age"],10)||86400,...n,tokenIssuer:f,tokenJwksUri:g,logger:new j(a[n.logLevel])}}function Ru(u){return Object.entries(u).reduce((t,[r,n])=>Object.assign(t,{[r.toLowerCase()]:[{key:r,value:n}]}),{})}function au(u,t){let r=t?.cookies?{"set-cookie":t.cookies.map((n)=>({key:"set-cookie",value:n}))}:{};return{status:"307",statusDescription:"Temporary Redirect",headers:{location:[{key:"location",value:u}],...r}}}function ju(u){return{body:Fu(u),status:u.statusCode??"500",headers:{"content-type":[{key:"Content-Type",value:"text/html; charset=UTF-8"}]}}}function Fu(u){let t={...u,region:process.env.AWS_REGION};return J.replace(/\${([^}]*)}/g,(r,n)=>t[n]||"")}function U(u,t){if(!t)throw Error("Expected response value");return{...t,headers:{...t.headers??{},...Ru(u.httpHeaders)}}}function Eu(u){let t;return async(r)=>{if(!t)t=E();t.logger.debug("Handling event:",r);let n=U(t,await u(t,r));return t.logger.debug("Returning response:",n),n}}function V(u){let t;return async(r)=>{if(!t)t=E();t.logger.debug("Handling event:",r);let n=U(t,await u(t,r));return t.logger.debug("Returning response:",n),n}}var yu=V(async(u,t)=>t.Records[0].cf.response);