@ttoss/cloud-auth 0.3.1 → 0.5.0

package/coverage/lcov.info

@@ -0,0 +1,237 @@
+TN:
+SF:src/config.ts
+FNF:0
+FNH:0
+DA:1,1
+LF:1
+LH:1
+BRF:0
+BRH:0
+end_of_record
+TN:
+SF:src/index.ts
+FNF:0
+FNH:0
+DA:1,1
+DA:2,1
+LF:2
+LH:2
+BRDA:1,0,0,2
+BRDA:1,1,0,1
+BRDA:1,2,0,0
+BRDA:1,3,0,1
+BRDA:1,4,0,0
+BRDA:1,5,0,0
+BRDA:1,6,0,1
+BRF:7
+BRH:4
+end_of_record
+TN:
+SF:src/template.ts
+FN:16,createAuthTemplate
+FNF:1
+FNH:1
+FNDA:12,createAuthTemplate
+DA:1,1
+DA:2,1
+DA:3,1
+DA:4,1
+DA:5,1
+DA:6,1
+DA:7,1
+DA:8,1
+DA:9,1
+DA:10,1
+DA:11,1
+DA:12,1
+DA:13,1
+DA:14,1
+DA:15,1
+DA:16,1
+DA:17,12
+DA:18,12
+DA:19,12
+DA:20,12
+DA:21,12
+DA:22,12
+DA:23,12
+DA:24,12
+DA:25,12
+DA:26,12
+DA:27,12
+DA:28,12
+DA:29,12
+DA:30,12
+DA:31,12
+DA:32,12
+DA:33,12
+DA:34,12
+DA:35,12
+DA:36,12
+DA:37,12
+DA:38,12
+DA:39,12
+DA:40,12
+DA:41,12
+DA:42,12
+DA:43,12
+DA:44,12
+DA:45,12
+DA:46,12
+DA:47,12
+DA:48,12
+DA:49,12
+DA:50,12
+DA:51,9
+DA:52,12
+DA:53,12
+DA:54,12
+DA:55,12
+DA:56,12
+DA:57,12
+DA:58,12
+DA:59,12
+DA:60,12
+DA:61,12
+DA:62,12
+DA:63,12
+DA:64,12
+DA:65,12
+DA:66,12
+DA:67,12
+DA:68,12
+DA:69,12
+DA:70,12
+DA:71,12
+DA:72,12
+DA:73,12
+DA:74,12
+DA:75,12
+DA:76,12
+DA:77,12
+DA:78,12
+DA:79,12
+DA:80,12
+DA:81,12
+DA:82,12
+DA:83,12
+DA:84,12
+DA:85,12
+DA:86,12
+DA:87,12
+DA:88,12
+DA:89,12
+DA:90,12
+DA:91,12
+DA:92,12
+DA:93,12
+DA:94,12
+DA:95,12
+DA:96,12
+DA:97,12
+DA:98,12
+DA:99,12
+DA:100,12
+DA:101,12
+DA:102,12
+DA:103,12
+DA:104,12
+DA:105,12
+DA:106,12
+DA:107,12
+DA:108,12
+DA:109,12
+DA:110,12
+DA:111,12
+DA:112,12
+DA:113,12
+DA:114,12
+DA:115,12
+DA:116,12
+DA:117,12
+DA:118,12
+DA:119,12
+DA:120,12
+DA:121,12
+DA:122,12
+DA:123,12
+DA:124,12
+DA:125,12
+DA:126,12
+DA:127,12
+DA:128,12
+DA:129,12
+DA:130,11
+DA:131,11
+DA:132,11
+DA:133,11
+DA:134,11
+DA:135,11
+DA:136,11
+DA:137,11
+DA:138,11
+DA:139,11
+DA:140,11
+DA:141,11
+DA:142,11
+DA:143,11
+DA:144,11
+DA:145,11
+DA:146,11
+DA:147,11
+DA:148,11
+DA:149,11
+DA:150,11
+DA:151,1
+DA:152,1
+DA:153,1
+DA:154,1
+DA:155,1
+DA:156,1
+DA:157,1
+DA:158,1
+DA:159,1
+DA:160,1
+DA:161,1
+DA:162,1
+DA:163,1
+DA:164,11
+DA:165,11
+DA:166,0
+DA:167,0
+DA:168,11
+DA:169,11
+DA:170,11
+DA:171,11
+DA:172,11
+DA:173,11
+DA:174,11
+DA:175,11
+DA:176,11
+DA:177,11
+DA:178,11
+DA:179,11
+DA:180,11
+DA:181,11
+DA:182,11
+DA:183,11
+DA:184,12
+DA:185,12
+DA:186,12
+DA:187,1
+DA:188,1
+DA:189,1
+DA:190,1
+DA:191,1
+LF:191
+LH:189
+BRDA:16,0,0,12
+BRDA:50,1,0,10
+BRDA:51,2,0,9
+BRDA:52,3,0,3
+BRDA:129,4,0,11
+BRDA:150,5,0,1
+BRDA:165,6,0,0
+BRF:7
+BRH:6
+end_of_record

package/dist/esm/index.js

@@ -7,13 +7,21 @@ var PASSWORD_MINIMUM_LENGTH = 8;
 var CognitoUserPoolLogicalId = "CognitoUserPool";
 var CognitoUserPoolClientLogicalId = "CognitoUserPoolClient";
 var CognitoIdentityPoolLogicalId = "CognitoIdentityPool";
-var createAuthTemplate = () => {
+var createAuthTemplate = ({
+  autoVerifiedAttributes = ["email"],
+  identityPool = true,
+  roles,
+  schema,
+  usernameAttributes = ["email"]
+} = {}) => {
+  const AutoVerifiedAttributes = Array.isArray(autoVerifiedAttributes) && autoVerifiedAttributes.length > 0 ? autoVerifiedAttributes : [];
   const template = {
+    AWSTemplateFormatVersion: "2010-09-09",
     Resources: {
       [CognitoUserPoolLogicalId]: {
         Type: "AWS::Cognito::UserPool",
         Properties: {
-          AutoVerifiedAttributes: ["email"],
+          AutoVerifiedAttributes,
           Policies: {
             PasswordPolicy: {
               MinimumLength: PASSWORD_MINIMUM_LENGTH,
@@ -24,7 +32,8 @@ var createAuthTemplate = () => {
               TemporaryPasswordValidityDays: 30
             }
           },
-          UsernameAttributes: ["email"],
+          Schema: schema,
+          UsernameAttributes: usernameAttributes,
           UsernameConfiguration: {
             CaseSensitive: false
           },
@@ -41,22 +50,6 @@ var createAuthTemplate = () => {
             Ref: "CognitoUserPool"
           }
         }
-      },
-      [CognitoIdentityPoolLogicalId]: {
-        Type: "AWS::Cognito::IdentityPool",
-        Properties: {
-          AllowUnauthenticatedIdentities: true,
-          CognitoIdentityProviders: [
-            {
-              ClientId: {
-                Ref: CognitoUserPoolClientLogicalId
-              },
-              ProviderName: {
-                "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
-              }
-            }
-          ]
-        }
       }
     },
     Outputs: {
@@ -92,25 +85,60 @@ var createAuthTemplate = () => {
             "Fn::Join": [":", [{ Ref: "AWS::StackName" }, "AppClientId"]]
           }
         }
-      },
-      IdentityPoolId: {
-        Description: "You use this value on Amplify Auth `identityPoolId`.",
-        Value: {
-          Ref: CognitoIdentityPoolLogicalId
-        },
-        Export: {
-          Name: {
-            "Fn::Join": [
-              ":",
-              [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
-            ]
-          }
-        }
       }
     }
   };
+  if (identityPool) {
+    template.Resources[CognitoIdentityPoolLogicalId] = {
+      Type: "AWS::Cognito::IdentityPool",
+      Properties: {
+        AllowUnauthenticatedIdentities: true,
+        CognitoIdentityProviders: [
+          {
+            ClientId: {
+              Ref: CognitoUserPoolClientLogicalId
+            },
+            ProviderName: {
+              "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
+            }
+          }
+        ]
+      }
+    };
+    if (roles) {
+      template.Resources.CognitoIdentityPoolRoleAttachment = {
+        Type: "AWS::Cognito::IdentityPoolRoleAttachment",
+        Properties: {
+          IdentityPoolId: {
+            Ref: CognitoIdentityPoolLogicalId
+          },
+          Roles: roles
+        }
+      };
+    }
+    if (!template.Outputs) {
+      template.Outputs = {};
+    }
+    template.Outputs.IdentityPoolId = {
+      Description: "You use this value on Amplify Auth `identityPoolId`.",
+      Value: {
+        Ref: CognitoIdentityPoolLogicalId
+      },
+      Export: {
+        Name: {
+          "Fn::Join": [
+            ":",
+            [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
+          ]
+        }
+      }
+    };
+  }
   return template;
 };
+createAuthTemplate.CognitoUserPoolLogicalId = CognitoUserPoolLogicalId;
+createAuthTemplate.CognitoUserPoolClientLogicalId = CognitoUserPoolClientLogicalId;
+createAuthTemplate.CognitoIdentityPoolLogicalId = CognitoIdentityPoolLogicalId;
 export {
   PASSWORD_MINIMUM_LENGTH,
   createAuthTemplate

package/dist/index.d.ts

@@ -1,111 +1,41 @@
+import { CloudFormationTemplate } from '@ttoss/cloudformation';
+
 declare const PASSWORD_MINIMUM_LENGTH = 8;
 
-declare const createAuthTemplate: () => {
-    Resources: {
-        CognitoUserPool: {
-            Type: string;
-            Properties: {
-                AutoVerifiedAttributes: string[];
-                Policies: {
-                    PasswordPolicy: {
-                        MinimumLength: number;
-                        RequireLowercase: boolean;
-                        RequireNumbers: boolean;
-                        RequireSymbols: boolean;
-                        RequireUppercase: boolean;
-                        TemporaryPasswordValidityDays: number;
-                    };
-                };
-                UsernameAttributes: string[];
-                UsernameConfiguration: {
-                    CaseSensitive: boolean;
-                };
-                UserPoolName: {
-                    Ref: string;
-                };
-            };
-        };
-        CognitoUserPoolClient: {
-            Type: string;
-            Properties: {
-                SupportedIdentityProviders: string[];
-                UserPoolId: {
-                    Ref: string;
-                };
-            };
-        };
+type Role = string | {
+    'Fn::ImportValue': string;
+};
+declare const createAuthTemplate: {
+    ({ autoVerifiedAttributes, identityPool, roles, schema, usernameAttributes, }?: {
+        autoVerifiedAttributes?: false | ("email" | "phone_number")[] | null | undefined;
+        identityPool?: boolean | undefined;
+        roles?: {
+            authenticated?: Role | undefined;
+            unauthenticated?: Role | undefined;
+        } | undefined;
         /**
-         * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypool.html
+         * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-schemaattribute.html
          */
-        CognitoIdentityPool: {
-            Type: string;
-            Properties: {
-                AllowUnauthenticatedIdentities: boolean;
-                CognitoIdentityProviders: {
-                    ClientId: {
-                        Ref: string;
-                    };
-                    ProviderName: {
-                        'Fn::GetAtt': string[];
-                    };
-                }[];
-            };
-        };
-    };
-    Outputs: {
-        Region: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        UserPoolId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        AppClientId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-        IdentityPoolId: {
-            Description: string;
-            Value: {
-                Ref: string;
-            };
-            Export: {
-                Name: {
-                    'Fn::Join': (string | (string | {
-                        Ref: string;
-                    })[])[];
-                };
-            };
-        };
-    };
+        schema?: {
+            AttributeDataType?: "Boolean" | "DateTime" | "Number" | "String" | undefined;
+            DeveloperOnlyAttribute?: boolean | undefined;
+            Mutable?: boolean | undefined;
+            Name?: string | undefined;
+            NumberAttributeConstraints?: {
+                MaxValue?: string | undefined;
+                MinValue?: string | undefined;
+            } | undefined;
+            Required?: boolean | undefined;
+            StringAttributeConstraints?: {
+                MaxLength: string;
+                MinLength: string;
+            } | undefined;
+        }[] | undefined;
+        usernameAttributes?: ("email" | "phone_number")[] | null | undefined;
+    }): CloudFormationTemplate;
+    CognitoUserPoolLogicalId: string;
+    CognitoUserPoolClientLogicalId: string;
+    CognitoIdentityPoolLogicalId: string;
 };
 
 export { PASSWORD_MINIMUM_LENGTH, createAuthTemplate };

package/dist/index.js

@@ -33,13 +33,21 @@ var PASSWORD_MINIMUM_LENGTH = 8;
 var CognitoUserPoolLogicalId = "CognitoUserPool";
 var CognitoUserPoolClientLogicalId = "CognitoUserPoolClient";
 var CognitoIdentityPoolLogicalId = "CognitoIdentityPool";
-var createAuthTemplate = () => {
+var createAuthTemplate = ({
+  autoVerifiedAttributes = ["email"],
+  identityPool = true,
+  roles,
+  schema,
+  usernameAttributes = ["email"]
+} = {}) => {
+  const AutoVerifiedAttributes = Array.isArray(autoVerifiedAttributes) && autoVerifiedAttributes.length > 0 ? autoVerifiedAttributes : [];
   const template = {
+    AWSTemplateFormatVersion: "2010-09-09",
     Resources: {
       [CognitoUserPoolLogicalId]: {
         Type: "AWS::Cognito::UserPool",
         Properties: {
-          AutoVerifiedAttributes: ["email"],
+          AutoVerifiedAttributes,
           Policies: {
             PasswordPolicy: {
               MinimumLength: PASSWORD_MINIMUM_LENGTH,
@@ -50,7 +58,8 @@ var createAuthTemplate = () => {
               TemporaryPasswordValidityDays: 30
             }
           },
-          UsernameAttributes: ["email"],
+          Schema: schema,
+          UsernameAttributes: usernameAttributes,
           UsernameConfiguration: {
             CaseSensitive: false
           },
@@ -67,22 +76,6 @@ var createAuthTemplate = () => {
             Ref: "CognitoUserPool"
           }
         }
-      },
-      [CognitoIdentityPoolLogicalId]: {
-        Type: "AWS::Cognito::IdentityPool",
-        Properties: {
-          AllowUnauthenticatedIdentities: true,
-          CognitoIdentityProviders: [
-            {
-              ClientId: {
-                Ref: CognitoUserPoolClientLogicalId
-              },
-              ProviderName: {
-                "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
-              }
-            }
-          ]
-        }
       }
     },
     Outputs: {
@@ -118,25 +111,60 @@ var createAuthTemplate = () => {
             "Fn::Join": [":", [{ Ref: "AWS::StackName" }, "AppClientId"]]
           }
         }
-      },
-      IdentityPoolId: {
-        Description: "You use this value on Amplify Auth `identityPoolId`.",
-        Value: {
-          Ref: CognitoIdentityPoolLogicalId
-        },
-        Export: {
-          Name: {
-            "Fn::Join": [
-              ":",
-              [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
-            ]
-          }
-        }
       }
     }
   };
+  if (identityPool) {
+    template.Resources[CognitoIdentityPoolLogicalId] = {
+      Type: "AWS::Cognito::IdentityPool",
+      Properties: {
+        AllowUnauthenticatedIdentities: true,
+        CognitoIdentityProviders: [
+          {
+            ClientId: {
+              Ref: CognitoUserPoolClientLogicalId
+            },
+            ProviderName: {
+              "Fn::GetAtt": [CognitoUserPoolLogicalId, "ProviderName"]
+            }
+          }
+        ]
+      }
+    };
+    if (roles) {
+      template.Resources.CognitoIdentityPoolRoleAttachment = {
+        Type: "AWS::Cognito::IdentityPoolRoleAttachment",
+        Properties: {
+          IdentityPoolId: {
+            Ref: CognitoIdentityPoolLogicalId
+          },
+          Roles: roles
+        }
+      };
+    }
+    if (!template.Outputs) {
+      template.Outputs = {};
+    }
+    template.Outputs.IdentityPoolId = {
+      Description: "You use this value on Amplify Auth `identityPoolId`.",
+      Value: {
+        Ref: CognitoIdentityPoolLogicalId
+      },
+      Export: {
+        Name: {
+          "Fn::Join": [
+            ":",
+            [{ Ref: "AWS::StackName" }, "CognitoIdentityPoolId"]
+          ]
+        }
+      }
+    };
+  }
   return template;
 };
+createAuthTemplate.CognitoUserPoolLogicalId = CognitoUserPoolLogicalId;
+createAuthTemplate.CognitoUserPoolClientLogicalId = CognitoUserPoolClientLogicalId;
+createAuthTemplate.CognitoIdentityPoolLogicalId = CognitoIdentityPoolLogicalId;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   PASSWORD_MINIMUM_LENGTH,

package/jest.config.ts

@@ -0,0 +1,5 @@
+import { jestConfig } from '@ttoss/config';
+
+const config = jestConfig({});
+
+export default config;

package/package.json

@@ -1,20 +1,24 @@
 {
   "name": "@ttoss/cloud-auth",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "main": "./dist/index.js",
   "module": "./dist/esm/index.js",
   "scripts": {
-    "build": "tsup"
+    "build": "tsup",
+    "test": "jest"
   },
   "typings": "./dist/index.d.ts",
+  "dependencies": {
+    "@ttoss/cloudformation": "^0.4.0"
+  },
   "devDependencies": {
-    "@ttoss/config": "^1.26.0",
-    "@types/jest": "^29.2.4",
+    "@ttoss/config": "^1.27.0",
+    "@types/jest": "^29.2.5",
     "jest": "^29.3.1",
     "typescript": "^4.9.4"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "98cf227311c2f28ab73520c793bfe0bf0df27530"
+  "gitHead": "6c5898425e2847fed46511ae1e573ff8dc3eb1d4"
 }