@openhi/constructs 0.0.146 → 0.0.148

package/lib/pre-token-generation.handler.js

@@ -3281,6 +3281,28 @@ async function resolvePlatformRoles(tenantId, workspaceId, userId) {
   }
   return Array.from(codes);
 }
+function placeholderClaims() {
+  return {
+    ohi_tid: "placeholder-tenant-id",
+    ohi_wid: "placeholder-workspace-id",
+    ohi_uid: "placeholder-user-id",
+    ohi_uname: "placeholder"
+  };
+}
+function stampClaims(event, claims) {
+  if (!event.response) {
+    event.response = {};
+  }
+  const response = event.response;
+  response.claimsAndScopeOverrideDetails = {
+    accessTokenGeneration: {
+      claimsToAddOrOverride: { ...claims }
+    },
+    idTokenGeneration: {
+      claimsToAddOrOverride: { ...claims }
+    }
+  };
+}
 var handler = async (event, _context) => {
   try {
     const cognitoSub = event.request?.userAttributes?.sub;
@@ -3290,32 +3312,21 @@ var handler = async (event, _context) => {
       );
       return event;
     }
-    let claims = await resolveClaims(cognitoSub);
-    if (!claims) {
-      claims = {
-        ohi_tid: "placeholder-tenant-id",
-        ohi_wid: "placeholder-workspace-id",
-        ohi_uid: "placeholder-user-id",
-        ohi_uname: "placeholder"
-      };
-    }
-    if (!event.response) {
-      event.response = {};
-    }
-    const response = event.response;
-    response.claimsAndScopeOverrideDetails = {
-      accessTokenGeneration: {
-        claimsToAddOrOverride: { ...claims }
-      },
-      idTokenGeneration: {
-        claimsToAddOrOverride: { ...claims }
-      }
-    };
+    const resolved = await resolveClaims(cognitoSub);
+    stampClaims(event, resolved ?? placeholderClaims());
   } catch (err) {
     console.warn(
-      "PreTokenGeneration: unexpected error; returning event unchanged",
+      "PreTokenGeneration: unexpected error; stamping placeholder claims",
       err
     );
+    try {
+      stampClaims(event, placeholderClaims());
+    } catch (stampErr) {
+      console.warn(
+        "PreTokenGeneration: failed to stamp placeholder claims after error; returning event unchanged",
+        stampErr
+      );
+    }
   }
   return event;
 };