@sudoplatform/sudo-user 11.0.0 → 12.0.1

package/lib/user/auth-provider.js

@@ -1,42 +1,22 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.TESTAuthenticationProvider = exports.TESTAuthenticationInfo = exports.LocalAuthenticationProvider = exports.LocalAuthenticationInfo = void 0;
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-var _uuid = require("uuid");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
+import * as JWT from 'jsonwebtoken';
+import { v4 } from 'uuid';
 /**
  * Authentication info consisting of a JWT signed using the TEST registration key.
  */
-class TESTAuthenticationInfo {
-  constructor(jwt) {
-    this.jwt = jwt;
-
-    _defineProperty(this, "type", 'TEST');
-  }
-
-  isValid() {
-    return true;
-  }
-
-  encode() {
-    return this.jwt;
-  }
-
-  getUsername() {
-    return '';
-  }
-
+export class TESTAuthenticationInfo {
+    constructor(jwt) {
+        this.jwt = jwt;
+        this.type = 'TEST';
+    }
+    isValid() {
+        return true;
+    }
+    encode() {
+        return this.jwt;
+    }
+    getUsername() {
+        return '';
+    }
 }
 /**
  * Authentication provider for generating authentication info using a TEST registration key.
@@ -46,70 +26,50 @@ class TESTAuthenticationInfo {
  * @param keyId key ID of the TEST registration key which is obtained from the admin console.
  * @param attributes additional attributes to be added to the issued authentication info.
  */
-
-
-exports.TESTAuthenticationInfo = TESTAuthenticationInfo;
-
-class TESTAuthenticationProvider {
-  constructor(name, privateKey, keyId = 'register_key', attributes) {
-    this.name = name;
-    this.privateKey = privateKey;
-    this.keyId = keyId;
-    this.attributes = attributes;
-
-    _defineProperty(this, "testRegistrationIssuer", 'testRegisterIssuer');
-
-    _defineProperty(this, "testRegistrationAudience", 'testRegisterAudience');
-  }
-
-  async getAuthenticationInfo() {
-    const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
-      jwtid: (0, _uuid.v4)(),
-      audience: this.testRegistrationAudience,
-      expiresIn: '60s',
-      notBefore: '0m',
-      subject: `${this.name}-${(0, _uuid.v4)()}`,
-      issuer: this.testRegistrationIssuer,
-      header: {
-        alg: 'RS256',
-        kid: this.keyId
-      },
-      algorithm: 'RS256'
-    });
-    return new TESTAuthenticationInfo(jwt);
-  }
-
-  reset() {// Not implemented
-  }
-
+export class TESTAuthenticationProvider {
+    constructor(name, privateKey, keyId = 'register_key', attributes) {
+        this.name = name;
+        this.privateKey = privateKey;
+        this.keyId = keyId;
+        this.attributes = attributes;
+        this.testRegistrationIssuer = 'testRegisterIssuer';
+        this.testRegistrationAudience = 'testRegisterAudience';
+    }
+    async getAuthenticationInfo() {
+        const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
+            jwtid: v4(),
+            audience: this.testRegistrationAudience,
+            expiresIn: '60s',
+            notBefore: '0m',
+            subject: `${this.name}-${v4()}`,
+            issuer: this.testRegistrationIssuer,
+            header: { alg: 'RS256', kid: this.keyId },
+            algorithm: 'RS256',
+        });
+        return new TESTAuthenticationInfo(jwt);
+    }
+    reset() {
+        // Not implemented
+    }
 }
 /**
  * Authentication info consisting of a JWT signed using the locally stored private key.
  */
-
-
-exports.TESTAuthenticationProvider = TESTAuthenticationProvider;
-
-class LocalAuthenticationInfo {
-  constructor(jwt, username) {
-    this.jwt = jwt;
-    this.username = username;
-
-    _defineProperty(this, "type", 'FSSO');
-  }
-
-  isValid() {
-    return true;
-  }
-
-  encode() {
-    return this.jwt;
-  }
-
-  getUsername() {
-    return this.username;
-  }
-
+export class LocalAuthenticationInfo {
+    constructor(jwt, username) {
+        this.jwt = jwt;
+        this.username = username;
+        this.type = 'FSSO';
+    }
+    isValid() {
+        return true;
+    }
+    encode() {
+        return this.jwt;
+    }
+    getUsername() {
+        return this.username;
+    }
 }
 /**
  * Authentication info consisting of a JWT signed using the locally stored private key.
@@ -120,39 +80,29 @@ class LocalAuthenticationInfo {
  * @param username username to be associated with the issued authentication info.
  * @param attributes additional attributes to be added to the issued authentication info.
  */
-
-
-exports.LocalAuthenticationInfo = LocalAuthenticationInfo;
-
-class LocalAuthenticationProvider {
-  constructor(name, privateKey, keyId, username, attributes) {
-    this.name = name;
-    this.privateKey = privateKey;
-    this.keyId = keyId;
-    this.username = username;
-    this.attributes = attributes;
-  }
-
-  async getAuthenticationInfo() {
-    const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
-      jwtid: (0, _uuid.v4)(),
-      audience: 'identity-service',
-      expiresIn: '60s',
-      notBefore: '0m',
-      subject: this.username,
-      issuer: this.name,
-      header: {
-        alg: 'RS256',
-        kid: this.keyId
-      },
-      algorithm: 'RS256'
-    });
-    return new LocalAuthenticationInfo(jwt, this.username);
-  }
-
-  reset() {// Not implemented
-  }
-
+export class LocalAuthenticationProvider {
+    constructor(name, privateKey, keyId, username, attributes) {
+        this.name = name;
+        this.privateKey = privateKey;
+        this.keyId = keyId;
+        this.username = username;
+        this.attributes = attributes;
+    }
+    async getAuthenticationInfo() {
+        const jwt = JWT.sign(this.attributes ? this.attributes : {}, this.privateKey, {
+            jwtid: v4(),
+            audience: 'identity-service',
+            expiresIn: '60s',
+            notBefore: '0m',
+            subject: this.username,
+            issuer: this.name,
+            header: { alg: 'RS256', kid: this.keyId },
+            algorithm: 'RS256',
+        });
+        return new LocalAuthenticationInfo(jwt, this.username);
+    }
+    reset() {
+        // Not implemented
+    }
 }
-
-exports.LocalAuthenticationProvider = LocalAuthenticationProvider;
+//# sourceMappingURL=auth-provider.js.map

package/lib/user/auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../../src/user/auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAA;AA2CzB;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAGjC,YAAoB,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;QAFtB,SAAI,GAAW,MAAM,CAAA;IAEI,CAAC;IAEnC,OAAO;QACL,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IAGrC,YACU,IAAY,EACZ,UAAkB,EAClB,QAAgB,cAAc,EAC9B,UAAgC;QAHhC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,UAAK,GAAL,KAAK,CAAyB;QAC9B,eAAU,GAAV,UAAU,CAAsB;QANjC,2BAAsB,GAAW,oBAAoB,CAAA;QACrD,6BAAwB,GAAW,sBAAsB,CAAA;IAM/D,CAAC;IAEJ,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EACtC,IAAI,CAAC,UAAU,EACf;YACE,KAAK,EAAE,EAAE,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,wBAAwB;YACvC,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,sBAAsB;YACnC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,OAAO;SACnB,CACF,CAAA;QACD,OAAO,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,KAAK;QACH,kBAAkB;IACpB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAGlC,YAAoB,GAAW,EAAU,QAAgB;QAArC,QAAG,GAAH,GAAG,CAAQ;QAAU,aAAQ,GAAR,QAAQ,CAAQ;QAFhD,SAAI,GAAW,MAAM,CAAA;IAE8B,CAAC;IAE7D,OAAO;QACL,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IACtC,YACU,IAAY,EACZ,UAAkB,EAClB,KAAa,EACb,QAAgB,EAChB,UAAgC;QAJhC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAClB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAsB;IACvC,CAAC;IAEJ,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAClB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EACtC,IAAI,CAAC,UAAU,EACf;YACE,KAAK,EAAE,EAAE,EAAE;YACX,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YACzC,SAAS,EAAE,OAAO;SACnB,CACF,CAAA;QACD,OAAO,IAAI,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC;IAED,KAAK;QACH,kBAAkB;IACpB,CAAC;CACF"}

package/lib/user/auth.js

@@ -1,183 +1,131 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.DefaultRefreshTokenLifetime = exports.CognitoAuthUI = void 0;
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var _amazonCognitoAuthJs = require("amazon-cognito-auth-js");
-
-var _apiKeyNames = require("../core/api-key-names");
-
-var _resolvablePromise = require("../utils/resolvable-promise");
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-var _userKeyNames = require("./user-key-names");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-const DefaultRefreshTokenLifetime = 60;
-exports.DefaultRefreshTokenLifetime = DefaultRefreshTokenLifetime;
-
-class CognitoAuthUI {
-  constructor(authenticationStore, federatedSignInConfig, keyManager, logger, launchUriFn) {
-    this.authenticationStore = authenticationStore;
-    this.federatedSignInConfig = federatedSignInConfig;
-    this.keyManager = keyManager;
-    this.launchUriFn = launchUriFn;
-
-    _defineProperty(this, "auth", void 0);
-
-    _defineProperty(this, "tokensRefreshedPromise", void 0);
-
-    _defineProperty(this, "refreshTokenLifetime", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    this.authenticationStore.subscribe(this);
-    this.auth = this.initCognitoAuthSDK();
-    const refreshTokenLifetime = this.federatedSignInConfig.refreshTokenLifetime;
-    this.refreshTokenLifetime = refreshTokenLifetime ?? DefaultRefreshTokenLifetime;
-    this.logger = logger;
-  }
-
-  initCognitoAuthSDK() {
-    const cognitoAuthConfig = {
-      ClientId: this.federatedSignInConfig.appClientId,
-      AppWebDomain: this.federatedSignInConfig.webDomain,
-      IdentityProvider: this.federatedSignInConfig.identityProvider,
-      RedirectUriSignIn: this.federatedSignInConfig.signInRedirectUri,
-      RedirectUriSignOut: this.federatedSignInConfig.signOutRedirectUri,
-      TokenScopesArray: ['openid'],
-      Storage: this.authenticationStore,
-      LaunchUri: this.launchUriFn
-    };
-    const auth = new _amazonCognitoAuthJs.CognitoAuth(cognitoAuthConfig);
-    auth.useCodeGrantFlow();
-    auth.userhandler = {
-      onSuccess: result => {
-        this.logger.info('Successfully signed in.', {
-          result
-        });
-      },
-      onFailure: error => {
-        this.logger.error(new _sudoCommon.AuthenticationError(error).message);
-      }
-    };
-    return auth;
-  }
-
-  presentFederatedSignInUI() {
-    this.auth.getSession();
-  }
-
-  async processFederatedSignInTokens(url) {
-    this.tokensRefreshedPromise = (0, _resolvablePromise.createResolvablePromise)();
-    this.auth.parseCognitoWebResponse(url);
-    const authDetails = await this.tokensRefreshedPromise;
-    await this.storeTokensInKeyManager(authDetails);
-    return authDetails.authenticationTokens;
-  }
-  /**
-   * This function is called when the authentication store notifies subscribers of an item update.
-   *
-   * @param itemName the name of the item being updated
-   */
-
-
-  update(itemName) {
-    if (itemName === 'idToken') {
-      const authTokens = this.getAuthTokens();
-      const userId = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.userId);
-
-      if (authTokens && userId) {
-        this.tokensRefreshedPromise?.resolve({
-          authenticationTokens: authTokens,
-          userId
-        });
-      }
+import { AuthenticationError } from '@sudoplatform/sudo-common';
+import { CognitoAuth } from 'amazon-cognito-auth-js';
+import { apiKeyNames } from '../core/api-key-names';
+import { createResolvablePromise, } from '../utils/resolvable-promise';
+import * as JWT from 'jsonwebtoken';
+import { userKeyNames } from './user-key-names';
+export const DefaultRefreshTokenLifetime = 60;
+export class CognitoAuthUI {
+    constructor(authenticationStore, federatedSignInConfig, keyManager, logger, launchUriFn) {
+        this.authenticationStore = authenticationStore;
+        this.federatedSignInConfig = federatedSignInConfig;
+        this.keyManager = keyManager;
+        this.launchUriFn = launchUriFn;
+        this.authenticationStore.subscribe(this);
+        this.auth = this.initCognitoAuthSDK();
+        const refreshTokenLifetime = this.federatedSignInConfig.refreshTokenLifetime;
+        this.refreshTokenLifetime =
+            refreshTokenLifetime ?? DefaultRefreshTokenLifetime;
+        this.logger = logger;
     }
-
-    this.logger.debug('Updated: ', {
-      itemName
-    });
-  }
-
-  reset() {
-    const cognitoAuthAny = this.auth;
-    cognitoAuthAny.clearCachedTokensScopes();
-    cognitoAuthAny.signInUserSession = null;
-    cognitoAuthAny.signInUserSession = cognitoAuthAny.getCachedSession();
-  }
-
-  presentSignOutUI() {
-    const signOutUrl = this.auth.getFQDNSignOut();
-    this.auth.launchUri(signOutUrl);
-  }
-
-  async storeRefreshTokenLifetime(refreshTokenLifetime) {
-    const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshTokenExpiry);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
-  }
-
-  getAuthTokens() {
-    const idToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.idToken);
-    const accessToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.accessToken);
-    const refreshToken = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.refreshToken);
-    const tokenExpiry = this.getTokenExpiry();
-
-    if (idToken && accessToken && refreshToken && tokenExpiry) {
-      return {
-        idToken: idToken,
-        accessToken: accessToken,
-        refreshToken: refreshToken,
-        tokenExpiry: tokenExpiry.getTime()
-      };
-    } else {
-      return undefined;
+    initCognitoAuthSDK() {
+        const cognitoAuthConfig = {
+            ClientId: this.federatedSignInConfig.appClientId,
+            AppWebDomain: this.federatedSignInConfig.webDomain,
+            IdentityProvider: this.federatedSignInConfig.identityProvider,
+            RedirectUriSignIn: this.federatedSignInConfig.signInRedirectUri,
+            RedirectUriSignOut: this.federatedSignInConfig.signOutRedirectUri,
+            TokenScopesArray: ['openid'],
+            Storage: this.authenticationStore,
+            LaunchUri: this.launchUriFn,
+        };
+        const auth = new CognitoAuth(cognitoAuthConfig);
+        auth.useCodeGrantFlow();
+        auth.userhandler = {
+            onSuccess: (result) => {
+                this.logger.info('Successfully signed in.', { result });
+            },
+            onFailure: (error) => {
+                this.logger.error(new AuthenticationError(error).message);
+            },
+        };
+        return auth;
     }
-  }
-
-  getTokenExpiry() {
-    const expiry = this.authenticationStore.getItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    return expiry ? new Date(Number(expiry) * 1000) : undefined;
-  }
-  /**
-   * Store the authentication tokens and user id of the signed in user in the key manager.
-   */
-
-
-  async storeTokensInKeyManager(authDetails) {
-    await this.keyManager.removeItem(_userKeyNames.userKeyNames.userId);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.idToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.accessToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    const authTokens = authDetails.authenticationTokens;
-    await this.keyManager.addString(_userKeyNames.userKeyNames.userId, authDetails.userId);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.idToken, authTokens.idToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.accessToken, authTokens.accessToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshToken, authTokens.refreshToken);
-    const decoded = JWT.decode(authTokens.idToken, {
-      complete: true
-    });
-
-    if (decoded) {
-      const tokenExpiry = decoded.payload['exp'];
-      await this.keyManager.addString(_apiKeyNames.apiKeyNames.tokenExpiry, tokenExpiry);
+    presentFederatedSignInUI() {
+        this.auth.getSession();
+    }
+    async processFederatedSignInTokens(url) {
+        this.tokensRefreshedPromise =
+            createResolvablePromise();
+        this.auth.parseCognitoWebResponse(url);
+        const authDetails = await this.tokensRefreshedPromise;
+        await this.storeTokensInKeyManager(authDetails);
+        return authDetails.authenticationTokens;
+    }
+    /**
+     * This function is called when the authentication store notifies subscribers of an item update.
+     *
+     * @param itemName the name of the item being updated
+     */
+    update(itemName) {
+        if (itemName === 'idToken') {
+            const authTokens = this.getAuthTokens();
+            const userId = this.authenticationStore.getItem(apiKeyNames.userId);
+            if (authTokens && userId) {
+                this.tokensRefreshedPromise?.resolve({
+                    authenticationTokens: authTokens,
+                    userId,
+                });
+            }
+        }
+        this.logger.debug('Updated: ', { itemName });
+    }
+    reset() {
+        const cognitoAuthAny = this.auth;
+        cognitoAuthAny.clearCachedTokensScopes();
+        cognitoAuthAny.signInUserSession = null;
+        cognitoAuthAny.signInUserSession = cognitoAuthAny.getCachedSession();
+    }
+    presentSignOutUI() {
+        const signOutUrl = this.auth.getFQDNSignOut();
+        this.auth.launchUri(signOutUrl);
+    }
+    async storeRefreshTokenLifetime(refreshTokenLifetime) {
+        const tokenLifetime = refreshTokenLifetime * 24 * 60 * 60 * 1000 + new Date().getTime();
+        await this.keyManager.removeItem(apiKeyNames.refreshTokenExpiry);
+        await this.keyManager.addString(apiKeyNames.refreshTokenExpiry, tokenLifetime.toString());
+    }
+    getAuthTokens() {
+        const idToken = this.authenticationStore.getItem(apiKeyNames.idToken);
+        const accessToken = this.authenticationStore.getItem(apiKeyNames.accessToken);
+        const refreshToken = this.authenticationStore.getItem(apiKeyNames.refreshToken);
+        const tokenExpiry = this.getTokenExpiry();
+        if (idToken && accessToken && refreshToken && tokenExpiry) {
+            return {
+                idToken: idToken,
+                accessToken: accessToken,
+                refreshToken: refreshToken,
+                tokenExpiry: tokenExpiry.getTime(),
+            };
+        }
+        else {
+            return undefined;
+        }
+    }
+    getTokenExpiry() {
+        const expiry = this.authenticationStore.getItem(apiKeyNames.tokenExpiry);
+        return expiry ? new Date(Number(expiry) * 1000) : undefined;
+    }
+    /**
+     * Store the authentication tokens and user id of the signed in user in the key manager.
+     */
+    async storeTokensInKeyManager(authDetails) {
+        await this.keyManager.removeItem(userKeyNames.userId);
+        await this.keyManager.removeItem(apiKeyNames.idToken);
+        await this.keyManager.removeItem(apiKeyNames.accessToken);
+        await this.keyManager.removeItem(apiKeyNames.refreshToken);
+        await this.keyManager.removeItem(apiKeyNames.tokenExpiry);
+        const authTokens = authDetails.authenticationTokens;
+        await this.keyManager.addString(userKeyNames.userId, authDetails.userId);
+        await this.keyManager.addString(apiKeyNames.idToken, authTokens.idToken);
+        await this.keyManager.addString(apiKeyNames.accessToken, authTokens.accessToken);
+        await this.keyManager.addString(apiKeyNames.refreshToken, authTokens.refreshToken);
+        const decoded = JWT.decode(authTokens.idToken, { complete: true });
+        if (decoded) {
+            const tokenExpiry = decoded.payload['exp'];
+            await this.keyManager.addString(apiKeyNames.tokenExpiry, tokenExpiry);
+        }
+        await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
     }
-
-    await this.storeRefreshTokenLifetime(this.refreshTokenLifetime);
-  }
-
 }
-
-exports.CognitoAuthUI = CognitoAuthUI;
+//# sourceMappingURL=auth.js.map

package/lib/user/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/user/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAU,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAKnD,OAAO,EACL,uBAAuB,GAExB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAgC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAE7C,MAAM,OAAO,aAAa;IAMxB,YACU,mBAAwC,EACxC,qBAA4C,EAC5C,UAAsB,EAC9B,MAAc,EACN,WAAmC;QAJnC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QAEtB,gBAAW,GAAX,WAAW,CAAwB;QAE3C,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAErC,MAAM,oBAAoB,GAAG,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,CAAA;QAC5E,IAAI,CAAC,oBAAoB;YACvB,oBAAoB,IAAI,2BAA2B,CAAA;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEO,kBAAkB;QACxB,MAAM,iBAAiB,GAAG;YACxB,QAAQ,EAAE,IAAI,CAAC,qBAAqB,CAAC,WAAW;YAChD,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,SAAS;YAClD,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,gBAAgB;YAC7D,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,iBAAiB;YAC/D,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB;YACjE,gBAAgB,EAAE,CAAC,QAAQ,CAAC;YAC5B,OAAO,EAAE,IAAI,CAAC,mBAAmB;YACjC,SAAS,EAAE,IAAI,CAAC,WAAW;SAC5B,CAAA;QAED,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAA;QAC/C,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAEvB,IAAI,CAAC,WAAW,GAAG;YACjB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACzD,CAAC;YAED,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;YAC3D,CAAC;SACF,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,wBAAwB;QACtB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,GAAW;QAEX,IAAI,CAAC,sBAAsB;YACzB,uBAAuB,EAAyB,CAAA;QAClD,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAA;QACrD,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAA;QAC/C,OAAO,WAAW,CAAC,oBAAoB,CAAA;IACzC,CAAC;IACD;;;;OAIG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,QAAQ,KAAK,SAAS,EAAE;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,UAAU,IAAI,MAAM,EAAE;gBACxB,IAAI,CAAC,sBAAsB,EAAE,OAAO,CAAC;oBACnC,oBAAoB,EAAE,UAAU;oBAChC,MAAM;iBACP,CAAC,CAAA;aACH;SACF;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAW,CAAA;QACvC,cAAc,CAAC,uBAAuB,EAAE,CAAA;QACxC,cAAc,CAAC,iBAAiB,GAAG,IAAI,CAAA;QACvC,cAAc,CAAC,iBAAiB,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAA;IACtE,CAAC;IAED,gBAAgB;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAA;QAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,oBAA4B;QAE5B,MAAM,aAAa,GACjB,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;QAChE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,WAAW,CAAC,kBAAkB,EAC9B,aAAa,CAAC,QAAQ,EAAE,CACzB,CAAA;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAClD,WAAW,CAAC,WAAW,CACxB,CAAA;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CACnD,WAAW,CAAC,YAAY,CACzB,CAAA;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAEzC,IAAI,OAAO,IAAI,WAAW,IAAI,YAAY,IAAI,WAAW,EAAE;YACzD,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE;aACnC,CAAA;SACF;aAAM;YACL,OAAO,SAAS,CAAA;SACjB;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QACxE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CACnC,WAAkC;QAElC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;QAC1D,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QAEzD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAA;QACnD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,WAAW,CAAC,WAAW,EACvB,UAAU,CAAC,WAAW,CACvB,CAAA;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC7B,WAAW,CAAC,YAAY,EACxB,UAAU,CAAC,YAAY,CACxB,CAAA;QAED,MAAM,OAAO,GAAQ,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACvE,IAAI,OAAO,EAAE;YACX,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1C,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;SACtE;QACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACjE,CAAC;CACF"}

package/lib/user/error.js

@@ -1,46 +1,28 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.IdentityServiceConfigNotFoundError = exports.AlreadyRegisteredError = void 0;
-
 class UserError extends Error {
-  constructor(msg) {
-    super(msg);
-    this.name = this.constructor.name;
-
-    if (Error.captureStackTrace) {
-      Error.captureStackTrace(this, this.constructor);
+    constructor(msg) {
+        super(msg);
+        this.name = this.constructor.name;
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
     }
-  }
-
 }
 /**
  * Indicates the user associated with the client is already registered.
  */
-
-
-class AlreadyRegisteredError extends UserError {
-  constructor() {
-    super('User is already registered.');
-  }
-
+export class AlreadyRegisteredError extends UserError {
+    constructor() {
+        super('User is already registered.');
+    }
 }
 /**
  * Indicates the configuration related to Identity Service is not found. This may indicate that Identity Service
  * is not deployed into your runtime instance or the config file that
  * you are using is invalid.
  */
-
-
-exports.AlreadyRegisteredError = AlreadyRegisteredError;
-
-class IdentityServiceConfigNotFoundError extends UserError {
-  constructor() {
-    super('Identity service configuration not found.');
-  }
-
+export class IdentityServiceConfigNotFoundError extends UserError {
+    constructor() {
+        super('Identity service configuration not found.');
+    }
 }
-
-exports.IdentityServiceConfigNotFoundError = IdentityServiceConfigNotFoundError;
+//# sourceMappingURL=error.js.map

package/lib/user/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/user/error.ts"],"names":[],"mappings":"AAAA,MAAM,SAAU,SAAQ,KAAK;IAC3B,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;QACjC,IAAI,KAAK,CAAC,iBAAiB,EAAE;YAC3B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;SAChD;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,SAAS;IACnD;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACtC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kCAAmC,SAAQ,SAAS;IAC/D;QACE,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACpD,CAAC;CACF"}