@vardario/cognito-client 0.1.2 → 0.1.4

package/lib/cognito-client.js

@@ -1,623 +0,0 @@
-"use strict";
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CognitoClient = exports.CognitoIdentityProvider = exports.CognitoServiceTarget = void 0;
-var addSeconds_1 = __importDefault(require("date-fns/addSeconds"));
-var hash_js_1 = require("hash.js");
-var jsbn_1 = require("jsbn");
-var randombytes_1 = __importDefault(require("randombytes"));
-var error_1 = require("./error");
-var utils_1 = require("./utils");
-/**
- * List of used and supported Cognito API calls.
- * @see https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_Operations.html for more details
- */
-var CognitoServiceTarget;
-(function (CognitoServiceTarget) {
-    CognitoServiceTarget["InitiateAuth"] = "InitiateAuth";
-    CognitoServiceTarget["RespondToAuthChallenge"] = "RespondToAuthChallenge";
-    CognitoServiceTarget["SignUp"] = "SignUp";
-    CognitoServiceTarget["ConfirmSignUp"] = "ConfirmSignUp";
-    CognitoServiceTarget["ChangePassword"] = "ChangePassword";
-    CognitoServiceTarget["RevokeToken"] = "RevokeToken";
-    CognitoServiceTarget["ForgotPassword"] = "ForgotPassword";
-    CognitoServiceTarget["ConfirmForgotPassword"] = "ConfirmForgotPassword";
-    CognitoServiceTarget["ResendConfirmationCode"] = "ResendConfirmationCode";
-    CognitoServiceTarget["UpdateUserAttributes"] = "UpdateUserAttributes";
-    CognitoServiceTarget["VerifyUserAttribute"] = "VerifyUserAttribute";
-})(CognitoServiceTarget = exports.CognitoServiceTarget || (exports.CognitoServiceTarget = {}));
-/**
- * Cognito supported federated identities public providers.
- * @see https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html for more information.
- */
-var CognitoIdentityProvider;
-(function (CognitoIdentityProvider) {
-    CognitoIdentityProvider["Cognito"] = "COGNITO";
-    CognitoIdentityProvider["Google"] = "Google";
-    CognitoIdentityProvider["Facebook"] = "Facebook";
-    CognitoIdentityProvider["Amazon"] = "LoginWithAmazon";
-    CognitoIdentityProvider["Apple"] = "SignInWithApple";
-})(CognitoIdentityProvider = exports.CognitoIdentityProvider || (exports.CognitoIdentityProvider = {}));
-/**
- * Lightweight AWS Cogito client without any AWS SDK dependencies.
- */
-var CognitoClient = /** @class */ (function () {
-    function CognitoClient(_a) {
-        var userPoolId = _a.userPoolId, userPoolClientId = _a.userPoolClientId, endpoint = _a.endpoint, sessionStorage = _a.sessionStorage, oAuth = _a.oAuth2;
-        var _b = userPoolId.split('_'), cognitoPoolRegion = _b[0], cognitoPoolName = _b[1];
-        this.cognitoEndpoint = (endpoint || "https://cognito-idp.".concat(cognitoPoolRegion, ".amazonaws.com")).replace(/\/$/, '');
-        this.cognitoPoolName = cognitoPoolName;
-        this.userPoolClientId = userPoolClientId;
-        this.sessionStorage = sessionStorage;
-        this.oAuth = oAuth;
-    }
-    CognitoClient.getDecodedTokenFromSession = function (session) {
-        var idToken = (0, utils_1.decodeJwt)(session.idToken).payload;
-        var accessToken = (0, utils_1.decodeJwt)(session.accessToken).payload;
-        return {
-            idToken: idToken,
-            accessToken: accessToken,
-        };
-    };
-    CognitoClient.prototype.cognitoRequest = function (body, serviceTarget) {
-        return __awaiter(this, void 0, void 0, function () {
-            var respondToAuthChallenge, errorMessage;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, fetch(this.cognitoEndpoint, {
-                            headers: {
-                                'x-amz-target': "AWSCognitoIdentityProviderService.".concat(serviceTarget),
-                                'content-type': 'application/x-amz-json-1.1',
-                            },
-                            method: 'POST',
-                            body: JSON.stringify(body),
-                        })];
-                    case 1:
-                        respondToAuthChallenge = _a.sent();
-                        if (!(respondToAuthChallenge.status < 200 || respondToAuthChallenge.status > 299)) return [3 /*break*/, 3];
-                        return [4 /*yield*/, respondToAuthChallenge.json()];
-                    case 2:
-                        errorMessage = (_a.sent());
-                        throw (0, error_1.getAuthError)(errorMessage);
-                    case 3: return [2 /*return*/, respondToAuthChallenge.json()];
-                }
-            });
-        });
-    };
-    CognitoClient.authResultToSession = function (authenticationResult) {
-        return {
-            accessToken: authenticationResult.AccessToken,
-            idToken: authenticationResult.IdToken,
-            expiresIn: (0, addSeconds_1.default)(new Date(), authenticationResult.ExpiresIn).getTime(),
-            refreshToken: authenticationResult.RefreshToken,
-        };
-    };
-    /**
-     *
-     * Performs user authentication with username and password through ALLOW_USER_SRP_AUTH .
-     * @see https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html for more details
-     *
-     * @param username Username
-     * @param password Password
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.authenticateUserSrp = function (username, password) {
-        return __awaiter(this, void 0, void 0, function () {
-            var smallA, A, initiateAuthPayload, challenge, B, salt, U, hkdf, _a, signature, timeStamp, respondToAuthChallengePayload, AuthenticationResult, session;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        smallA = (0, utils_1.generateSmallA)();
-                        A = (0, utils_1.generateA)(smallA);
-                        initiateAuthPayload = {
-                            AuthFlow: 'USER_SRP_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                USERNAME: username,
-                                SRP_A: A.toString(16),
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        challenge = (_b.sent());
-                        B = new jsbn_1.BigInteger(challenge.ChallengeParameters.SRP_B, 16);
-                        salt = new jsbn_1.BigInteger(challenge.ChallengeParameters.SALT, 16);
-                        U = (0, utils_1.calculateU)(A, B);
-                        hkdf = (0, utils_1.getPasswordAuthenticationKey)(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, password, B, U, smallA, salt);
-                        _a = (0, utils_1.calculateSignature)(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, challenge.ChallengeParameters.SECRET_BLOCK, hkdf), signature = _a.signature, timeStamp = _a.timeStamp;
-                        respondToAuthChallengePayload = {
-                            ChallengeName: 'PASSWORD_VERIFIER',
-                            ClientId: this.userPoolClientId,
-                            ChallengeResponses: {
-                                PASSWORD_CLAIM_SECRET_BLOCK: challenge.ChallengeParameters.SECRET_BLOCK,
-                                PASSWORD_CLAIM_SIGNATURE: signature,
-                                USERNAME: challenge.ChallengeParameters.USER_ID_FOR_SRP,
-                                TIMESTAMP: timeStamp,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(respondToAuthChallengePayload, CognitoServiceTarget.RespondToAuthChallenge)];
-                    case 2:
-                        AuthenticationResult = (_b.sent()).AuthenticationResult;
-                        session = CognitoClient.authResultToSession(AuthenticationResult);
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
-        });
-    };
-    /**
-     *
-     * Performs user authentication with username and password through USER_PASSWORD_AUTH .
-     * @see https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html for more details
-     *
-     * @param username Username
-     * @param password Password
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.authenticateUser = function (username, password) {
-        return __awaiter(this, void 0, void 0, function () {
-            var initiateAuthPayload, AuthenticationResult, session;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        initiateAuthPayload = {
-                            AuthFlow: 'USER_PASSWORD_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                USERNAME: username,
-                                PASSWORD: password,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        AuthenticationResult = (_a.sent()).AuthenticationResult;
-                        session = CognitoClient.authResultToSession(AuthenticationResult);
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.refreshSession = function (session) {
-        return __awaiter(this, void 0, void 0, function () {
-            var refreshTokenPayload, AuthenticationResult, newSession;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        refreshTokenPayload = {
-                            AuthFlow: 'REFRESH_TOKEN_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                REFRESH_TOKEN: session.refreshToken,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(refreshTokenPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        AuthenticationResult = (_a.sent()).AuthenticationResult;
-                        newSession = CognitoClient.authResultToSession(__assign(__assign({}, AuthenticationResult), { RefreshToken: session.refreshToken }));
-                        this.sessionStorage.setSession(newSession);
-                        return [2 /*return*/, newSession];
-                }
-            });
-        });
-    };
-    /**
-     * Returns the current auth session.
-     * The auth session is only defined when we previously had a successful user authentication.
-     * This function will also take care to refresh the session with the refresh token in case
-     * the current session has expired.
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.getSession = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var session;
-            return __generator(this, function (_a) {
-                session = this.sessionStorage.getSession();
-                if (session) {
-                    if (new Date().getTime() >= session.expiresIn) {
-                        return [2 /*return*/, this.refreshSession(session)];
-                    }
-                }
-                return [2 /*return*/, session];
-            });
-        });
-    };
-    /**
-     *
-     * @param username Username
-     * @param password Password
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.signUp = function (username, password, userAttributes) {
-        return __awaiter(this, void 0, void 0, function () {
-            var signUpPayload, data;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        signUpPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                            Password: password,
-                            UserAttributes: userAttributes,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(signUpPayload, CognitoServiceTarget.SignUp)];
-                    case 1:
-                        data = _a.sent();
-                        return [2 /*return*/, {
-                                id: data.UserSub,
-                                confirmed: data.UserConfirmed,
-                            }];
-                }
-            });
-        });
-    };
-    /**
-     * Confirms the user registration via verification code.
-     *
-     * @param username Username
-     * @param code Confirmation code the user gets through the registration E-Mail
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.confirmSignUp = function (username, code) {
-        return __awaiter(this, void 0, void 0, function () {
-            var confirmSignUpPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        confirmSignUpPayload = {
-                            ClientId: this.userPoolClientId,
-                            ConfirmationCode: code,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(confirmSignUpPayload, CognitoServiceTarget.ConfirmSignUp)];
-                    case 1:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     *
-     * @param currentPassword Current user password.
-     * @param newPassword  New user password.
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.changePassword = function (currentPassword, newPassword) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, changePasswordPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        changePasswordPayload = {
-                            PreviousPassword: currentPassword,
-                            ProposedPassword: newPassword,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(changePasswordPayload, CognitoServiceTarget.ChangePassword)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.updateUserAttributes = function (userAttributes) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, updateUserAttributesPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        updateUserAttributesPayload = {
-                            UserAttributes: userAttributes,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(updateUserAttributesPayload, CognitoServiceTarget.UpdateUserAttributes)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.verifyUserAttribute = function (attributeName, code) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, verifyUserAttributePayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        verifyUserAttributePayload = {
-                            AttributeName: attributeName,
-                            Code: code,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(verifyUserAttributePayload, CognitoServiceTarget.VerifyUserAttribute)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Sign out the user and remove the current user session.
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.signOut = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, revokeTokenPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        revokeTokenPayload = {
-                            Token: session.refreshToken,
-                            ClientId: this.userPoolClientId,
-                        };
-                        this.sessionStorage.setSession(undefined);
-                        return [4 /*yield*/, this.cognitoRequest(revokeTokenPayload, CognitoServiceTarget.RevokeToken)];
-                    case 2:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Request forgot password.
-     * @param username Username
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.forgotPassword = function (username) {
-        return __awaiter(this, void 0, void 0, function () {
-            var forgotPasswordPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        forgotPasswordPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(forgotPasswordPayload, CognitoServiceTarget.ForgotPassword)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Confirms the new password via the given code send via cognito triggered by @see forgotPassword .
-     *
-     * @param username Username
-     * @param newPassword New password
-     * @param confirmationCode Confirmation code which the user got through E-mail
-     *
-     * @throws {AuthException}
-     */
-    CognitoClient.prototype.confirmForgotPassword = function (username, newPassword, confirmationCode) {
-        return __awaiter(this, void 0, void 0, function () {
-            var confirmForgotPasswordPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        confirmForgotPasswordPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                            ConfirmationCode: confirmationCode,
-                            Password: newPassword,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(confirmForgotPasswordPayload, CognitoServiceTarget.ConfirmForgotPassword)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Triggers cognito to resend the confirmation code
-     * @param username Username
-     */
-    CognitoClient.prototype.resendConfirmationCode = function (username) {
-        return __awaiter(this, void 0, void 0, function () {
-            var resendConfirmationCodePayLoad;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        resendConfirmationCodePayLoad = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(resendConfirmationCodePayLoad, CognitoServiceTarget.ResendConfirmationCode)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Returns a link to Cognito`s Hosted UI for OAuth2 authentication.
-     * This method works in conjunction with @see handleCodeFlow .
-     *
-     * @param identityProvider When provided, this will generate a link which
-     * tells Cognito`s Hosted UI to redirect to the given federated identity provider.
-     *
-     * @throws {Error}
-     */
-    CognitoClient.prototype.generateOAuthSignInUrl = function (identityProvider) {
-        if (this.oAuth === undefined) {
-            throw Error('You have to define oAuth options to use generateFederatedSignUrl');
-        }
-        var state = (0, randombytes_1.default)(32).toString('hex');
-        var pkce = (0, randombytes_1.default)(128).toString('hex');
-        var code_challenge = Buffer.from((0, hash_js_1.sha256)().update(pkce).digest())
-            .toString('base64')
-            .replace(/\+/g, '-')
-            .replace(/\//g, '_')
-            .replace(/=+$/, '');
-        var queryParams = new URLSearchParams();
-        queryParams.append('redirect_uri', this.oAuth.redirectUrl);
-        queryParams.append('response_type', this.oAuth.responseType);
-        queryParams.append('client_id', this.userPoolClientId);
-        identityProvider && queryParams.append('identity_provider', identityProvider);
-        queryParams.append('scope', this.oAuth.scopes.join(' '));
-        queryParams.append('state', state);
-        queryParams.append('code_challenge', code_challenge);
-        queryParams.append('code_challenge_method', 'S256');
-        this.sessionStorage.setOauthVerificationParams({
-            state: state,
-            pkce: pkce,
-        });
-        return "".concat(this.oAuth.cognitoDomain, "/oauth2/authorize?").concat(queryParams.toString());
-    };
-    /**
-     *
-     * Handles Cognito`s OAuth2 code flow after redirection from Cognito`s Hosted UI.
-     * The method call assumes that @see generateOAuthSignInUrl was used to
-     * generated the link to the Hosted UI.
-     *
-     * @param returnUrl The full return URL from redirection after a successful OAuth2
-     * authentication.
-     *
-     * @throws {Error}
-     */
-    CognitoClient.prototype.handleCodeFlow = function (returnUrl) {
-        return __awaiter(this, void 0, void 0, function () {
-            var url, code, state, oAuthVerificationParams, urlParams, tokenEndpoint, response, _a, access_token, refresh_token, id_token, expires_in, token_type, error, session;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        if (this.oAuth === undefined) {
-                            throw Error('You have to define oAuth options to use handleCodeFlow');
-                        }
-                        url = new URL(returnUrl);
-                        code = url.searchParams.get('code');
-                        state = url.searchParams.get('state');
-                        if (code === null || state === null) {
-                            throw Error('code or state parameter is missing from return url.');
-                        }
-                        oAuthVerificationParams = this.sessionStorage.getOauthVerificationParams();
-                        if (oAuthVerificationParams === undefined) {
-                            throw new Error('OAuth verification parameters are missing, did you forgot to call generateOAuthSignInUrl ?');
-                        }
-                        if (oAuthVerificationParams.state !== state) {
-                            throw new Error('state parameter does not match with previous value generated by previous call of generateOAuthSignInUrl .');
-                        }
-                        urlParams = new URLSearchParams();
-                        urlParams.append('grant_type', 'authorization_code');
-                        urlParams.append('code', code);
-                        urlParams.append('client_id', this.userPoolClientId);
-                        urlParams.append('redirect_uri', this.oAuth.redirectUrl);
-                        urlParams.append('code_verifier', oAuthVerificationParams.pkce);
-                        tokenEndpoint = "".concat(this.oAuth.cognitoDomain, "/oauth2/token");
-                        return [4 /*yield*/, fetch(tokenEndpoint, {
-                                method: 'POST',
-                                headers: {
-                                    'Content-Type': 'application/x-www-form-urlencoded',
-                                },
-                                body: urlParams.toString(),
-                            })];
-                    case 1:
-                        response = _b.sent();
-                        return [4 /*yield*/, response.json()];
-                    case 2:
-                        _a = _b.sent(), access_token = _a.access_token, refresh_token = _a.refresh_token, id_token = _a.id_token, expires_in = _a.expires_in, token_type = _a.token_type, error = _a.error;
-                        if (error) {
-                            throw new Error(error);
-                        }
-                        session = CognitoClient.authResultToSession({
-                            AccessToken: access_token,
-                            RefreshToken: refresh_token,
-                            IdToken: id_token,
-                            ExpiresIn: expires_in,
-                            TokenType: token_type,
-                        });
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
-        });
-    };
-    return CognitoClient;
-}());
-exports.CognitoClient = CognitoClient;

package/lib/cognito-client.test.d.ts

@@ -1 +0,0 @@
-import 'isomorphic-fetch';