@vardario/cognito-client 0.1.3 → 0.1.4

package/lib/session-storage/session-storage.d.ts

@@ -1,14 +0,0 @@
-import { Session } from '../cognito-client';
-export interface OAuthVerificationParams {
-    pkce: string;
-    state: string;
-}
-/**
- * Session storage interface class.
- */
-export declare abstract class SessionStorage {
-    abstract getSession(): Session | undefined;
-    abstract setSession(session: Session | undefined): void;
-    abstract setOauthVerificationParams(oAuthParams: OAuthVerificationParams): void;
-    abstract getOauthVerificationParams(): OAuthVerificationParams | undefined;
-}

package/lib/session-storage/session-storage.js

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SessionStorage = void 0;
-/**
- * Session storage interface class.
- */
-var SessionStorage = /** @class */ (function () {
-    function SessionStorage() {
-    }
-    return SessionStorage;
-}());
-exports.SessionStorage = SessionStorage;

package/lib/session-storage/session-storage.test.d.ts

@@ -1 +0,0 @@
-export {};

package/lib/session-storage/session-storage.test.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-var crypto_1 = require("crypto");
-var test_utils_1 = require("../test-utils");
-var cookie_session_storage_1 = require("./cookie-session-storage");
-var local_storage_session_storage_1 = require("./local-storage-session-storage");
-var memory_session_storage_1 = require("./memory-session-storage");
-(0, test_utils_1.setupJsDom)();
-var sessionStorages = [
-    new memory_session_storage_1.MemorySessionStorage(),
-    new local_storage_session_storage_1.LocalStorageSessionStorage({ storageName: 'session' }),
-    new cookie_session_storage_1.CookieSessionStorage({
-        domain: 'localhost',
-        cookieName: 'session',
-    }),
-];
-var session = {
-    accessToken: (0, crypto_1.randomBytes)(128).toString('base64'),
-    expiresIn: 600,
-    idToken: (0, crypto_1.randomBytes)(128).toString('base64'),
-    refreshToken: (0, crypto_1.randomBytes)(128).toString('base64'),
-};
-var oAuthVerificationParams = {
-    pkce: (0, crypto_1.randomBytes)(128).toString('base64'),
-    state: (0, crypto_1.randomBytes)(128).toString('base64'),
-};
-test('SessionStorage', function () {
-    sessionStorages.forEach(function (sessionStorage) {
-        sessionStorage.setSession(session);
-        expect(sessionStorage.getSession()).toStrictEqual(session);
-        sessionStorage.setOauthVerificationParams(oAuthVerificationParams);
-        expect(sessionStorage.getOauthVerificationParams()).toStrictEqual(oAuthVerificationParams);
-    });
-});

package/lib/test-utils.d.ts

@@ -1,17 +0,0 @@
-export declare const user: {
-    email: string;
-    password: string;
-    givenName: string;
-    familyName: string;
-};
-export declare const newUser: {
-    email: string;
-    password: string;
-    givenName: string;
-    familyName: string;
-};
-export declare function setupCognito(endpoint: string): Promise<{
-    userPoolId: string;
-    userPoolClientId: string;
-}>;
-export declare function setupJsDom(): void;

package/lib/test-utils.js

@@ -1,138 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupJsDom = exports.setupCognito = exports.newUser = exports.user = void 0;
-var client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
-var jsdom_1 = require("jsdom");
-exports.user = {
-    email: 'sahin@test.com',
-    password: 'password',
-    givenName: 'Sahin',
-    familyName: 'Sahin',
-};
-exports.newUser = {
-    email: 'john@test.com',
-    password: 'password',
-    givenName: 'John',
-    familyName: 'John',
-};
-function setupCognito(endpoint) {
-    var _a, _b, _c, _d, _e;
-    return __awaiter(this, void 0, void 0, function () {
-        var awsCognitoClient, createPoolResult, createUserPoolClientResult, createUserResult, setUserPasswordResult;
-        return __generator(this, function (_f) {
-            switch (_f.label) {
-                case 0:
-                    awsCognitoClient = new client_cognito_identity_provider_1.CognitoIdentityProviderClient({
-                        endpoint: endpoint,
-                        credentials: {
-                            accessKeyId: 'test',
-                            secretAccessKey: 'test',
-                        },
-                        region: 'eu-central-1',
-                    });
-                    return [4 /*yield*/, awsCognitoClient.send(new client_cognito_identity_provider_1.CreateUserPoolCommand({
-                            PoolName: 'TestPool',
-                            Schema: [
-                                {
-                                    Name: 'email',
-                                    AttributeDataType: client_cognito_identity_provider_1.AttributeDataType.STRING,
-                                    Required: true,
-                                },
-                                {
-                                    Name: 'givenName',
-                                    AttributeDataType: client_cognito_identity_provider_1.AttributeDataType.STRING,
-                                    Required: true,
-                                },
-                                {
-                                    Name: 'familyName',
-                                    AttributeDataType: client_cognito_identity_provider_1.AttributeDataType.STRING,
-                                    Required: true,
-                                },
-                            ],
-                        }))];
-                case 1:
-                    createPoolResult = _f.sent();
-                    return [4 /*yield*/, awsCognitoClient.send(new client_cognito_identity_provider_1.CreateUserPoolClientCommand({
-                            ClientName: 'TestClient',
-                            UserPoolId: (_a = createPoolResult.UserPool) === null || _a === void 0 ? void 0 : _a.Id,
-                        }))];
-                case 2:
-                    createUserPoolClientResult = _f.sent();
-                    return [4 /*yield*/, awsCognitoClient.send(new client_cognito_identity_provider_1.AdminCreateUserCommand({
-                            UserPoolId: (_b = createPoolResult.UserPool) === null || _b === void 0 ? void 0 : _b.Id,
-                            Username: exports.user.email,
-                            MessageAction: 'SUPPRESS',
-                            UserAttributes: [
-                                {
-                                    Name: 'givenName',
-                                    Value: exports.user.givenName,
-                                },
-                                {
-                                    Name: 'familyName',
-                                    Value: exports.user.familyName,
-                                },
-                            ],
-                        }))];
-                case 3:
-                    createUserResult = _f.sent();
-                    return [4 /*yield*/, awsCognitoClient.send(new client_cognito_identity_provider_1.AdminSetUserPasswordCommand({
-                            UserPoolId: (_c = createPoolResult.UserPool) === null || _c === void 0 ? void 0 : _c.Id,
-                            Username: exports.user.email,
-                            Password: exports.user.password,
-                            Permanent: true,
-                        }))];
-                case 4:
-                    setUserPasswordResult = _f.sent();
-                    return [2 /*return*/, {
-                            userPoolId: (_d = createPoolResult.UserPool) === null || _d === void 0 ? void 0 : _d.Id,
-                            userPoolClientId: (_e = createUserPoolClientResult.UserPoolClient) === null || _e === void 0 ? void 0 : _e.ClientId,
-                        }];
-            }
-        });
-    });
-}
-exports.setupCognito = setupCognito;
-function setupJsDom() {
-    var dom = new jsdom_1.JSDOM('', {
-        url: 'http://localhost',
-    });
-    global.document = dom.window.document;
-    global.window = dom.window;
-}
-exports.setupJsDom = setupJsDom;

package/lib/utils.d.ts

@@ -1,20 +0,0 @@
-/// <reference types="node" />
-import { BigInteger } from 'jsbn';
-export declare function padHex(bigInt: BigInteger): string;
-export declare function hashHexString(str: string): string;
-export declare function hashBuffer(buffer: Buffer): string;
-export declare function generateSmallA(): BigInteger;
-export declare function generateA(smallA: BigInteger): BigInteger;
-export declare function calculateU(A: BigInteger, B: BigInteger): BigInteger;
-export declare function calculateS(X: BigInteger, B: BigInteger, U: BigInteger, smallA: BigInteger): BigInteger;
-export declare function calculateHKDF(ikm: Buffer, salt: Buffer): number[];
-export declare function getPasswordAuthenticationKey(poolName: string, username: string, password: string, B: BigInteger, U: BigInteger, smallA: BigInteger, salt: BigInteger): number[];
-export declare function calculateSignature(poolName: string, userId: string, secretBlock: string, hkdf: number[]): {
-    signature: string;
-    timeStamp: string;
-};
-export declare function decodeJwt<T = unknown>(jwt: string): {
-    header: any;
-    payload: T;
-    signature: string;
-};

package/lib/utils.js

@@ -1,128 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.decodeJwt = exports.calculateSignature = exports.getPasswordAuthenticationKey = exports.calculateHKDF = exports.calculateS = exports.calculateU = exports.generateA = exports.generateSmallA = exports.hashBuffer = exports.hashHexString = exports.padHex = void 0;
-var formatInTimeZone_1 = __importDefault(require("date-fns-tz/formatInTimeZone"));
-var hash_js_1 = require("hash.js");
-var jsbn_1 = require("jsbn");
-var randombytes_1 = __importDefault(require("randombytes"));
-var initN = 'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1' +
-    '29024E088A67CC74020BBEA63B139B22514A08798E3404DD' +
-    'EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245' +
-    'E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' +
-    'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D' +
-    'C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F' +
-    '83655D23DCA3AD961C62F356208552BB9ED529077096966D' +
-    '670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B' +
-    'E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9' +
-    'DE2BCBF6955817183995497CEA956AE515D2261898FA0510' +
-    '15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64' +
-    'ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7' +
-    'ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B' +
-    'F12FFA06D98A0864D87602733EC86A64521F2B18177B200C' +
-    'BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31' +
-    '43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF';
-var N = new jsbn_1.BigInteger(initN, 16);
-var g = new jsbn_1.BigInteger('2', 16);
-var k = new jsbn_1.BigInteger(hashHexString("".concat(padHex(N)).concat(padHex(g))), 16);
-function padHex(bigInt) {
-    var HEX_MSB_REGEX = /^[89a-f]/i;
-    var isNegative = bigInt.compareTo(jsbn_1.BigInteger.ZERO) < 0;
-    var hexStr = bigInt.abs().toString(16);
-    hexStr = hexStr.length % 2 !== 0 ? "0".concat(hexStr) : hexStr;
-    hexStr = HEX_MSB_REGEX.test(hexStr) ? "00".concat(hexStr) : hexStr;
-    if (isNegative) {
-        var invertedNibbles = hexStr
-            .split('')
-            .map(function (x) {
-            var invertedNibble = ~parseInt(x, 16) & 0xf;
-            return '0123456789ABCDEF'.charAt(invertedNibble);
-        })
-            .join('');
-        var flippedBitsBI = new jsbn_1.BigInteger(invertedNibbles, 16).add(jsbn_1.BigInteger.ONE);
-        hexStr = flippedBitsBI.toString(16);
-        if (hexStr.toUpperCase().startsWith('FF8')) {
-            hexStr = hexStr.substring(2);
-        }
-    }
-    return hexStr;
-}
-exports.padHex = padHex;
-function hashHexString(str) {
-    return hashBuffer(Buffer.from(str, 'hex'));
-}
-exports.hashHexString = hashHexString;
-function hashBuffer(buffer) {
-    var hash = (0, hash_js_1.sha256)().update(buffer).digest('hex');
-    return new Array(64 - hash.length).join('0') + hash;
-}
-exports.hashBuffer = hashBuffer;
-function generateSmallA() {
-    return new jsbn_1.BigInteger((0, randombytes_1.default)(128).toString('hex'), 16);
-}
-exports.generateSmallA = generateSmallA;
-function generateA(smallA) {
-    var A = g.modPow(smallA, N);
-    return A;
-}
-exports.generateA = generateA;
-function calculateU(A, B) {
-    return new jsbn_1.BigInteger(hashHexString(padHex(A) + padHex(B)), 16);
-}
-exports.calculateU = calculateU;
-function calculateS(X, B, U, smallA) {
-    var gModPowXN = g.modPow(X, N);
-    var bMinusKMult = B.subtract(k.multiply(gModPowXN));
-    return bMinusKMult.modPow(smallA.add(U.multiply(X)), N).mod(N);
-}
-exports.calculateS = calculateS;
-function calculateHKDF(ikm, salt) {
-    var infoBitsBuffer = Buffer.concat([
-        Buffer.from('Caldera Derived Key', 'utf8'),
-        Buffer.from(String.fromCharCode(1), 'utf8'),
-    ]);
-    var prk = (0, hash_js_1.hmac)(hash_js_1.sha256, salt)
-        .update(ikm)
-        .digest();
-    var hmacResult = (0, hash_js_1.hmac)(hash_js_1.sha256, prk)
-        .update(infoBitsBuffer)
-        .digest();
-    return hmacResult.slice(0, 16);
-}
-exports.calculateHKDF = calculateHKDF;
-function getPasswordAuthenticationKey(poolName, username, password, B, U, smallA, salt) {
-    var usernamePassword = "".concat(poolName).concat(username, ":").concat(password);
-    var usernamePasswordHash = hashBuffer(Buffer.from(usernamePassword, 'utf-8'));
-    var X = new jsbn_1.BigInteger(hashHexString(padHex(salt) + usernamePasswordHash), 16);
-    var S = calculateS(X, B, U, smallA);
-    return calculateHKDF(Buffer.from(padHex(S), 'hex'), Buffer.from(padHex(U), 'hex'));
-}
-exports.getPasswordAuthenticationKey = getPasswordAuthenticationKey;
-function calculateSignature(poolName, userId, secretBlock, hkdf) {
-    var timeStamp = (0, formatInTimeZone_1.default)(new Date(), 'UTC', "EEE MMM d HH:mm:ss 'UTC' yyyy");
-    var concatBuffer = Buffer.concat([
-        Buffer.from(poolName, 'utf8'),
-        Buffer.from(userId, 'utf8'),
-        Buffer.from(secretBlock, 'base64'),
-        Buffer.from(timeStamp, 'utf8'),
-    ]);
-    var signature = Buffer.from((0, hash_js_1.hmac)(hash_js_1.sha256, hkdf)
-        .update(concatBuffer)
-        .digest()).toString('base64');
-    return {
-        signature: signature,
-        timeStamp: timeStamp,
-    };
-}
-exports.calculateSignature = calculateSignature;
-function decodeJwt(jwt) {
-    var _a = jwt.split('.'), header = _a[0], payload = _a[1], signature = _a[2];
-    return {
-        header: JSON.parse(Buffer.from(header, 'base64').toString('utf-8')),
-        payload: JSON.parse(Buffer.from(payload, 'base64').toString('utf-8')),
-        signature: signature,
-    };
-}
-exports.decodeJwt = decodeJwt;