@ttoss/cloud-auth 0.3.0 → 0.4.0

package/coverage/lcov.info

@@ -0,0 +1,235 @@
+TN:
+SF:src/config.ts
+FNF:0
+FNH:0
+DA:1,1
+LF:1
+LH:1
+BRF:0
+BRH:0
+end_of_record
+TN:
+SF:src/index.ts
+FNF:0
+FNH:0
+DA:1,1
+DA:2,1
+LF:2
+LH:2
+BRDA:1,0,0,2
+BRDA:1,1,0,1
+BRDA:1,2,0,0
+BRDA:1,3,0,1
+BRDA:1,4,0,0
+BRDA:1,5,0,0
+BRDA:1,6,0,1
+BRF:7
+BRH:4
+end_of_record
+TN:
+SF:src/template.ts
+FN:16,createAuthTemplate
+FNF:1
+FNH:1
+FNDA:11,createAuthTemplate
+DA:1,1
+DA:2,1
+DA:3,1
+DA:4,1
+DA:5,1
+DA:6,1
+DA:7,1
+DA:8,1
+DA:9,1
+DA:10,1
+DA:11,1
+DA:12,1
+DA:13,1
+DA:14,1
+DA:15,1
+DA:16,1
+DA:17,11
+DA:18,11
+DA:19,11
+DA:20,11
+DA:21,11
+DA:22,11
+DA:23,11
+DA:24,11
+DA:25,11
+DA:26,11
+DA:27,11
+DA:28,11
+DA:29,11
+DA:30,11
+DA:31,11
+DA:32,11
+DA:33,11
+DA:34,11
+DA:35,11
+DA:36,11
+DA:37,11
+DA:38,11
+DA:39,11
+DA:40,11
+DA:41,11
+DA:42,11
+DA:43,11
+DA:44,11
+DA:45,11
+DA:46,11
+DA:47,11
+DA:48,11
+DA:49,8
+DA:50,11
+DA:51,11
+DA:52,11
+DA:53,11
+DA:54,11
+DA:55,11
+DA:56,11
+DA:57,11
+DA:58,11
+DA:59,11
+DA:60,11
+DA:61,11
+DA:62,11
+DA:63,11
+DA:64,11
+DA:65,11
+DA:66,11
+DA:67,11
+DA:68,11
+DA:69,11
+DA:70,11
+DA:71,11
+DA:72,11
+DA:73,11
+DA:74,11
+DA:75,11
+DA:76,11
+DA:77,11
+DA:78,11
+DA:79,11
+DA:80,11
+DA:81,11
+DA:82,11
+DA:83,11
+DA:84,11
+DA:85,11
+DA:86,11
+DA:87,11
+DA:88,11
+DA:89,11
+DA:90,11
+DA:91,11
+DA:92,11
+DA:93,11
+DA:94,11
+DA:95,11
+DA:96,11
+DA:97,11
+DA:98,11
+DA:99,11
+DA:100,11
+DA:101,11
+DA:102,11
+DA:103,11
+DA:104,11
+DA:105,11
+DA:106,11
+DA:107,11
+DA:108,11
+DA:109,11
+DA:110,11
+DA:111,11
+DA:112,11
+DA:113,11
+DA:114,11
+DA:115,11
+DA:116,11
+DA:117,11
+DA:118,11
+DA:119,11
+DA:120,11
+DA:121,11
+DA:122,11
+DA:123,11
+DA:124,11
+DA:125,11
+DA:126,11
+DA:127,11
+DA:128,10
+DA:129,10
+DA:130,10
+DA:131,10
+DA:132,10
+DA:133,10
+DA:134,10
+DA:135,10
+DA:136,10
+DA:137,10
+DA:138,10
+DA:139,10
+DA:140,10
+DA:141,10
+DA:142,10
+DA:143,10
+DA:144,10
+DA:145,10
+DA:146,10
+DA:147,10
+DA:148,10
+DA:149,1
+DA:150,1
+DA:151,1
+DA:152,1
+DA:153,1
+DA:154,1
+DA:155,1
+DA:156,1
+DA:157,1
+DA:158,1
+DA:159,1
+DA:160,1
+DA:161,1
+DA:162,10
+DA:163,10
+DA:164,0
+DA:165,0
+DA:166,10
+DA:167,10
+DA:168,10
+DA:169,10
+DA:170,10
+DA:171,10
+DA:172,10
+DA:173,10
+DA:174,10
+DA:175,10
+DA:176,10
+DA:177,10
+DA:178,10
+DA:179,10
+DA:180,10
+DA:181,10
+DA:182,11
+DA:183,11
+DA:184,11
+DA:185,1
+DA:186,1
+DA:187,1
+DA:188,1
+DA:189,1
+LF:189
+LH:187
+BRDA:16,0,0,11
+BRDA:48,1,0,9
+BRDA:49,2,0,8
+BRDA:50,3,0,3
+BRDA:127,4,0,10
+BRDA:148,5,0,1
+BRDA:163,6,0,0
+BRF:7
+BRH:6
+end_of_record

package/dist/esm/index.js

@@ -7,13 +7,20 @@ var PASSWORD_MINIMUM_LENGTH = 8;
 var CognitoUserPoolLogicalId = "CognitoUserPool";
 var CognitoUserPoolClientLogicalId = "CognitoUserPoolClient";
 var CognitoIdentityPoolLogicalId = "CognitoIdentityPool";
-var createAuthTemplate = () => {
+var createAuthTemplate = ({
+  autoVerifiedAttributes = ["email"],
+  identityPool = true,
+  roles,
+  schema
+} = {}) => {
+  const AutoVerifiedAttributes = Array.isArray(autoVerifiedAttributes) && autoVerifiedAttributes.length > 0 ? autoVerifiedAttributes : void 0;
   const template = {
+    AWSTemplateFormatVersion: "2010-09-09",
     Resources: {
       [CognitoUserPoolLogicalId]: {
         Type: "AWS::Cognito::UserPool",
         Properties: {
-          AutoVerifiedAttributes: ["email"],
+          AutoVerifiedAttributes,
           Policies: {
             PasswordPolicy: {
               MinimumLength: PASSWORD_MINIMUM_LENGTH,
@@ -24,6 +31,7 @@ var createAuthTemplate = () => {
               TemporaryPasswordValidityDays: 30
             }
           },
+          Schema: schema,
           UsernameAttributes: ["email"],
           UsernameConfiguration: {
             CaseSensitive: false
@@ -41,22 +49,6 @@ var createAuthTemplate = () => {
             Ref: "CognitoUserPool"
           }
         }
-      },
-      [CognitoIdentityPoolLogicalId]: {
-        Type: "AWS::Cognito::IdentityPool",
-        Properties: {
-          AllowUnauthenticatedIdentities: true,
-          CognitoIdentityProviders: [
-            {
-              ClientId: {
-                Ref: CognitoUserPoolClientLogicalId
-              },
-              ProviderName: {
-                "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
-              }
-            }
-          ]
-        }
       }
     },
     Outputs: {
@@ -92,25 +84,60 @@ var createAuthTemplate = () => {
             "Fn::Join": [":", [{ Ref: "AWS::StackName" }, "AppClientId"]]
           }
         }
-      },
-      IdentityPoolId: {
-        Description: "You use this value on Amplify Auth `identityPoolId`.",
-        Value: {
-          Ref: CognitoIdentityPoolLogicalId
-        },
-        Export: {
-          Name: {
-            "Fn::Join": [
-              ":",
-              [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
-            ]
-          }
-        }
       }
     }
   };
+  if (identityPool) {
+    template.Resources[CognitoIdentityPoolLogicalId] = {
+      Type: "AWS::Cognito::IdentityPool",
+      Properties: {
+        AllowUnauthenticatedIdentities: true,
+        CognitoIdentityProviders: [
+          {
+            ClientId: {
+              Ref: CognitoUserPoolClientLogicalId
+            },
+            ProviderName: {
+              "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
+            }
+          }
+        ]
+      }
+    };
+    if (roles) {
+      template.Resources.CognitoIdentityPoolRoleAttachment = {
+        Type: "AWS::Cognito::IdentityPoolRoleAttachment",
+        Properties: {
+          IdentityPoolId: {
+            Ref: CognitoIdentityPoolLogicalId
+          },
+          Roles: roles
+        }
+      };
+    }
+    if (!template.Outputs) {
+      template.Outputs = {};
+    }
+    template.Outputs.IdentityPoolId = {
+      Description: "You use this value on Amplify Auth `identityPoolId`.",
+      Value: {
+        Ref: CognitoIdentityPoolLogicalId
+      },
+      Export: {
+        Name: {
+          "Fn::Join": [
+            ":",
+            [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
+          ]
+        }
+      }
+    };
+  }
   return template;
 };
+createAuthTemplate.CognitoUserPoolLogicalId = CognitoUserPoolLogicalId;
+createAuthTemplate.CognitoUserPoolClientLogicalId = CognitoUserPoolClientLogicalId;
+createAuthTemplate.CognitoIdentityPoolLogicalId = CognitoIdentityPoolLogicalId;
 export {
   PASSWORD_MINIMUM_LENGTH,
   createAuthTemplate

package/dist/index.d.ts

@@ -1,111 +1,40 @@
+import { CloudFormationTemplate } from '@ttoss/cloudformation';
+
 declare const PASSWORD_MINIMUM_LENGTH = 8;
 
-declare const createAuthTemplate: () => {
-    Resources: {
-        CognitoUserPool: {
-            Type: string;
-            Properties: {
-                AutoVerifiedAttributes: string[];
-                Policies: {
-                    PasswordPolicy: {
-                        MinimumLength: number;
-                        RequireLowercase: boolean;
-                        RequireNumbers: boolean;
-                        RequireSymbols: boolean;
-                        RequireUppercase: boolean;
-                        TemporaryPasswordValidityDays: number;
-                    };
-                };
-                UsernameAttributes: string[];
-                UsernameConfiguration: {
-                    CaseSensitive: boolean;
-                };
-                UserPoolName: {
-                    Ref: string;
-                };
-            };
-        };
-        CognitoUserPoolClient: {
-            Type: string;
-            Properties: {
-                SupportedIdentityProviders: string[];
-                UserPoolId: {
-                    Ref: string;
-                };
-            };
-        };
+type Role = string | {
+    'Fn::ImportValue': string;
+};
+declare const createAuthTemplate: {
+    ({ autoVerifiedAttributes, identityPool, roles, schema, }?: {
+        autoVerifiedAttributes?: false | ("email" | "phone_number")[] | null | undefined;
+        identityPool?: boolean | undefined;
+        roles?: {
+            authenticated?: Role | undefined;
+            unauthenticated?: Role | undefined;
+        } | undefined;
         /**
-         * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypool.html
+         * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-schemaattribute.html
          */
-        CognitoIdentityPool: {
-            Type: string;
-            Properties: {
-                AllowUnauthenticatedIdentities: boolean;
-                CognitoIdentityProviders: {
-                    ClientId: {
-                        Ref: string;
-                    };
-                    ProviderName: {
-                        'Fn::GetAtt': string[];
-                    };
-                }[];
-            };
-        };
-    };
-    Outputs: {
-        Region: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        UserPoolId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        AppClientId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        IdentityPoolId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-    };
+        schema?: {
+            AttributeDataType?: "Boolean" | "DateTime" | "Number" | "String" | undefined;
+            DeveloperOnlyAttribute?: boolean | undefined;
+            Mutable?: boolean | undefined;
+            Name?: string | undefined;
+            NumberAttributeConstraints?: {
+                MaxValue?: string | undefined;
+                MinValue?: string | undefined;
+            } | undefined;
+            Required?: boolean | undefined;
+            StringAttributeConstraints?: {
+                MaxLength: string;
+                MinLength: string;
+            } | undefined;
+        }[] | undefined;
+    }): CloudFormationTemplate;
+    CognitoUserPoolLogicalId: string;
+    CognitoUserPoolClientLogicalId: string;
+    CognitoIdentityPoolLogicalId: string;
 };
 
 export { PASSWORD_MINIMUM_LENGTH, createAuthTemplate };

package/dist/index.js

@@ -33,13 +33,20 @@ var PASSWORD_MINIMUM_LENGTH = 8;
 var CognitoUserPoolLogicalId = "CognitoUserPool";
 var CognitoUserPoolClientLogicalId = "CognitoUserPoolClient";
 var CognitoIdentityPoolLogicalId = "CognitoIdentityPool";
-var createAuthTemplate = () => {
+var createAuthTemplate = ({
+  autoVerifiedAttributes = ["email"],
+  identityPool = true,
+  roles,
+  schema
+} = {}) => {
+  const AutoVerifiedAttributes = Array.isArray(autoVerifiedAttributes) && autoVerifiedAttributes.length > 0 ? autoVerifiedAttributes : void 0;
   const template = {
+    AWSTemplateFormatVersion: "2010-09-09",
     Resources: {
       [CognitoUserPoolLogicalId]: {
         Type: "AWS::Cognito::UserPool",
         Properties: {
-          AutoVerifiedAttributes: ["email"],
+          AutoVerifiedAttributes,
           Policies: {
             PasswordPolicy: {
               MinimumLength: PASSWORD_MINIMUM_LENGTH,
@@ -50,6 +57,7 @@ var createAuthTemplate = () => {
               TemporaryPasswordValidityDays: 30
             }
           },
+          Schema: schema,
           UsernameAttributes: ["email"],
           UsernameConfiguration: {
             CaseSensitive: false
@@ -67,22 +75,6 @@ var createAuthTemplate = () => {
             Ref: "CognitoUserPool"
           }
         }
-      },
-      [CognitoIdentityPoolLogicalId]: {
-        Type: "AWS::Cognito::IdentityPool",
-        Properties: {
-          AllowUnauthenticatedIdentities: true,
-          CognitoIdentityProviders: [
-            {
-              ClientId: {
-                Ref: CognitoUserPoolClientLogicalId
-              },
-              ProviderName: {
-                "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
-              }
-            }
-          ]
-        }
       }
     },
     Outputs: {
@@ -118,25 +110,60 @@ var createAuthTemplate = () => {
             "Fn::Join": [":", [{ Ref: "AWS::StackName" }, "AppClientId"]]
           }
         }
-      },
-      IdentityPoolId: {
-        Description: "You use this value on Amplify Auth `identityPoolId`.",
-        Value: {
-          Ref: CognitoIdentityPoolLogicalId
-        },
-        Export: {
-          Name: {
-            "Fn::Join": [
-              ":",
-              [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
-            ]
-          }
-        }
       }
     }
   };
+  if (identityPool) {
+    template.Resources[CognitoIdentityPoolLogicalId] = {
+      Type: "AWS::Cognito::IdentityPool",
+      Properties: {
+        AllowUnauthenticatedIdentities: true,
+        CognitoIdentityProviders: [
+          {
+            ClientId: {
+              Ref: CognitoUserPoolClientLogicalId
+            },
+            ProviderName: {
+              "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
+            }
+          }
+        ]
+      }
+    };
+    if (roles) {
+      template.Resources.CognitoIdentityPoolRoleAttachment = {
+        Type: "AWS::Cognito::IdentityPoolRoleAttachment",
+        Properties: {
+          IdentityPoolId: {
+            Ref: CognitoIdentityPoolLogicalId
+          },
+          Roles: roles
+        }
+      };
+    }
+    if (!template.Outputs) {
+      template.Outputs = {};
+    }
+    template.Outputs.IdentityPoolId = {
+      Description: "You use this value on Amplify Auth `identityPoolId`.",
+      Value: {
+        Ref: CognitoIdentityPoolLogicalId
+      },
+      Export: {
+        Name: {
+          "Fn::Join": [
+            ":",
+            [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
+          ]
+        }
+      }
+    };
+  }
   return template;
 };
+createAuthTemplate.CognitoUserPoolLogicalId = CognitoUserPoolLogicalId;
+createAuthTemplate.CognitoUserPoolClientLogicalId = CognitoUserPoolClientLogicalId;
+createAuthTemplate.CognitoIdentityPoolLogicalId = CognitoIdentityPoolLogicalId;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   PASSWORD_MINIMUM_LENGTH,

package/jest.config.ts

@@ -0,0 +1,5 @@
+import { jestConfig } from '@ttoss/config';
+
+const config = jestConfig({});
+
+export default config;

package/package.json

@@ -1,20 +1,24 @@
 {
   "name": "@ttoss/cloud-auth",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "main": "./dist/index.js",
   "module": "./dist/esm/index.js",
   "scripts": {
-    "build": "tsup"
+    "build": "tsup",
+    "test": "jest"
   },
   "typings": "./dist/index.d.ts",
+  "dependencies": {
+    "@ttoss/cloudformation": "^0.4.0"
+  },
   "devDependencies": {
-    "@ttoss/config": "^1.25.0",
-    "@types/jest": "^29.2.4",
+    "@ttoss/config": "^1.27.0",
+    "@types/jest": "^29.2.5",
     "jest": "^29.3.1",
     "typescript": "^4.9.4"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "b697061d84f3b079619befbfb150e587f455dd1c"
+  "gitHead": "2bf304efc726a34b95859bb9b6fe8749c1a16844"
 }