@vardario/cognito-client 0.1.3 → 0.1.5

package/lib/cognito-client.js

@@ -1,67 +1,14 @@
-"use strict";
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CognitoClient = exports.CognitoIdentityProvider = exports.CognitoServiceTarget = void 0;
-var addSeconds_1 = __importDefault(require("date-fns/addSeconds"));
-var hash_js_1 = require("hash.js");
-var jsbn_1 = require("jsbn");
-var randombytes_1 = __importDefault(require("randombytes"));
-var error_1 = require("./error");
-var utils_1 = require("./utils");
+import addSeconds from 'date-fns/addSeconds';
+import { sha256 } from 'hash.js';
+import { BigInteger } from 'jsbn';
+import randomBytes from 'randombytes';
+import { AuthError, AuthException, getAuthError } from './error.js';
+import { calculateSignature, calculateU, decodeJwt, generateA, generateSmallA, getPasswordAuthenticationKey, } from './utils.js';
 /**
  * List of used and supported Cognito API calls.
  * @see https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_Operations.html for more details
  */
-var CognitoServiceTarget;
+export var CognitoServiceTarget;
 (function (CognitoServiceTarget) {
     CognitoServiceTarget["InitiateAuth"] = "InitiateAuth";
     CognitoServiceTarget["RespondToAuthChallenge"] = "RespondToAuthChallenge";
@@ -74,73 +21,62 @@ var CognitoServiceTarget;
     CognitoServiceTarget["ResendConfirmationCode"] = "ResendConfirmationCode";
     CognitoServiceTarget["UpdateUserAttributes"] = "UpdateUserAttributes";
     CognitoServiceTarget["VerifyUserAttribute"] = "VerifyUserAttribute";
-})(CognitoServiceTarget = exports.CognitoServiceTarget || (exports.CognitoServiceTarget = {}));
+})(CognitoServiceTarget || (CognitoServiceTarget = {}));
 /**
  * Cognito supported federated identities public providers.
  * @see https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html for more information.
  */
-var CognitoIdentityProvider;
+export var CognitoIdentityProvider;
 (function (CognitoIdentityProvider) {
     CognitoIdentityProvider["Cognito"] = "COGNITO";
     CognitoIdentityProvider["Google"] = "Google";
     CognitoIdentityProvider["Facebook"] = "Facebook";
     CognitoIdentityProvider["Amazon"] = "LoginWithAmazon";
     CognitoIdentityProvider["Apple"] = "SignInWithApple";
-})(CognitoIdentityProvider = exports.CognitoIdentityProvider || (exports.CognitoIdentityProvider = {}));
+})(CognitoIdentityProvider || (CognitoIdentityProvider = {}));
 /**
  * Lightweight AWS Cogito client without any AWS SDK dependencies.
  */
-var CognitoClient = /** @class */ (function () {
-    function CognitoClient(_a) {
-        var userPoolId = _a.userPoolId, userPoolClientId = _a.userPoolClientId, endpoint = _a.endpoint, sessionStorage = _a.sessionStorage, oAuth = _a.oAuth2;
-        var _b = userPoolId.split('_'), cognitoPoolRegion = _b[0], cognitoPoolName = _b[1];
-        this.cognitoEndpoint = (endpoint || "https://cognito-idp.".concat(cognitoPoolRegion, ".amazonaws.com")).replace(/\/$/, '');
+export class CognitoClient {
+    constructor({ userPoolId, userPoolClientId, endpoint, sessionStorage, oAuth2: oAuth }) {
+        const [cognitoPoolRegion, cognitoPoolName] = userPoolId.split('_');
+        this.cognitoEndpoint = (endpoint || `https://cognito-idp.${cognitoPoolRegion}.amazonaws.com`).replace(/\/$/, '');
         this.cognitoPoolName = cognitoPoolName;
         this.userPoolClientId = userPoolClientId;
         this.sessionStorage = sessionStorage;
         this.oAuth = oAuth;
     }
-    CognitoClient.getDecodedTokenFromSession = function (session) {
-        var idToken = (0, utils_1.decodeJwt)(session.idToken).payload;
-        var accessToken = (0, utils_1.decodeJwt)(session.accessToken).payload;
+    static getDecodedTokenFromSession(session) {
+        const { payload: idToken } = decodeJwt(session.idToken);
+        const { payload: accessToken } = decodeJwt(session.accessToken);
         return {
-            idToken: idToken,
-            accessToken: accessToken,
+            idToken,
+            accessToken,
         };
-    };
-    CognitoClient.prototype.cognitoRequest = function (body, serviceTarget) {
-        return __awaiter(this, void 0, void 0, function () {
-            var respondToAuthChallenge, errorMessage;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, fetch(this.cognitoEndpoint, {
-                            headers: {
-                                'x-amz-target': "AWSCognitoIdentityProviderService.".concat(serviceTarget),
-                                'content-type': 'application/x-amz-json-1.1',
-                            },
-                            method: 'POST',
-                            body: JSON.stringify(body),
-                        })];
-                    case 1:
-                        respondToAuthChallenge = _a.sent();
-                        if (!(respondToAuthChallenge.status < 200 || respondToAuthChallenge.status > 299)) return [3 /*break*/, 3];
-                        return [4 /*yield*/, respondToAuthChallenge.json()];
-                    case 2:
-                        errorMessage = (_a.sent());
-                        throw (0, error_1.getAuthError)(errorMessage);
-                    case 3: return [2 /*return*/, respondToAuthChallenge.json()];
-                }
-            });
+    }
+    async cognitoRequest(body, serviceTarget) {
+        const respondToAuthChallenge = await fetch(this.cognitoEndpoint, {
+            headers: {
+                'x-amz-target': `AWSCognitoIdentityProviderService.${serviceTarget}`,
+                'content-type': 'application/x-amz-json-1.1',
+            },
+            method: 'POST',
+            body: JSON.stringify(body),
         });
-    };
-    CognitoClient.authResultToSession = function (authenticationResult) {
+        if (respondToAuthChallenge.status < 200 || respondToAuthChallenge.status > 299) {
+            const errorMessage = (await respondToAuthChallenge.json());
+            throw getAuthError(errorMessage);
+        }
+        return respondToAuthChallenge.json();
+    }
+    static authResultToSession(authenticationResult) {
         return {
             accessToken: authenticationResult.AccessToken,
             idToken: authenticationResult.IdToken,
-            expiresIn: (0, addSeconds_1.default)(new Date(), authenticationResult.ExpiresIn).getTime(),
+            expiresIn: addSeconds(new Date(), authenticationResult.ExpiresIn).getTime(),
             refreshToken: authenticationResult.RefreshToken,
         };
-    };
+    }
     /**
      *
      * Performs user authentication with username and password through ALLOW_USER_SRP_AUTH .
@@ -150,52 +86,40 @@ var CognitoClient = /** @class */ (function () {
      * @param password Password
      * @throws {AuthException}
      */
-    CognitoClient.prototype.authenticateUserSrp = function (username, password) {
-        return __awaiter(this, void 0, void 0, function () {
-            var smallA, A, initiateAuthPayload, challenge, B, salt, U, hkdf, _a, signature, timeStamp, respondToAuthChallengePayload, AuthenticationResult, session;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        smallA = (0, utils_1.generateSmallA)();
-                        A = (0, utils_1.generateA)(smallA);
-                        initiateAuthPayload = {
-                            AuthFlow: 'USER_SRP_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                USERNAME: username,
-                                SRP_A: A.toString(16),
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        challenge = (_b.sent());
-                        B = new jsbn_1.BigInteger(challenge.ChallengeParameters.SRP_B, 16);
-                        salt = new jsbn_1.BigInteger(challenge.ChallengeParameters.SALT, 16);
-                        U = (0, utils_1.calculateU)(A, B);
-                        hkdf = (0, utils_1.getPasswordAuthenticationKey)(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, password, B, U, smallA, salt);
-                        _a = (0, utils_1.calculateSignature)(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, challenge.ChallengeParameters.SECRET_BLOCK, hkdf), signature = _a.signature, timeStamp = _a.timeStamp;
-                        respondToAuthChallengePayload = {
-                            ChallengeName: 'PASSWORD_VERIFIER',
-                            ClientId: this.userPoolClientId,
-                            ChallengeResponses: {
-                                PASSWORD_CLAIM_SECRET_BLOCK: challenge.ChallengeParameters.SECRET_BLOCK,
-                                PASSWORD_CLAIM_SIGNATURE: signature,
-                                USERNAME: challenge.ChallengeParameters.USER_ID_FOR_SRP,
-                                TIMESTAMP: timeStamp,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(respondToAuthChallengePayload, CognitoServiceTarget.RespondToAuthChallenge)];
-                    case 2:
-                        AuthenticationResult = (_b.sent()).AuthenticationResult;
-                        session = CognitoClient.authResultToSession(AuthenticationResult);
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
-        });
-    };
+    async authenticateUserSrp(username, password) {
+        const smallA = generateSmallA();
+        const A = generateA(smallA);
+        const initiateAuthPayload = {
+            AuthFlow: 'USER_SRP_AUTH',
+            ClientId: this.userPoolClientId,
+            AuthParameters: {
+                USERNAME: username,
+                SRP_A: A.toString(16),
+            },
+            ClientMetadata: {},
+        };
+        const challenge = (await this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth));
+        const B = new BigInteger(challenge.ChallengeParameters.SRP_B, 16);
+        const salt = new BigInteger(challenge.ChallengeParameters.SALT, 16);
+        const U = calculateU(A, B);
+        const hkdf = getPasswordAuthenticationKey(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, password, B, U, smallA, salt);
+        const { signature, timeStamp } = calculateSignature(this.cognitoPoolName, challenge.ChallengeParameters.USER_ID_FOR_SRP, challenge.ChallengeParameters.SECRET_BLOCK, hkdf);
+        const respondToAuthChallengePayload = {
+            ChallengeName: 'PASSWORD_VERIFIER',
+            ClientId: this.userPoolClientId,
+            ChallengeResponses: {
+                PASSWORD_CLAIM_SECRET_BLOCK: challenge.ChallengeParameters.SECRET_BLOCK,
+                PASSWORD_CLAIM_SIGNATURE: signature,
+                USERNAME: challenge.ChallengeParameters.USER_ID_FOR_SRP,
+                TIMESTAMP: timeStamp,
+            },
+            ClientMetadata: {},
+        };
+        const { AuthenticationResult } = await this.cognitoRequest(respondToAuthChallengePayload, CognitoServiceTarget.RespondToAuthChallenge);
+        const session = CognitoClient.authResultToSession(AuthenticationResult);
+        this.sessionStorage.setSession(session);
+        return session;
+    }
     /**
      *
      * Performs user authentication with username and password through USER_PASSWORD_AUTH .
@@ -205,55 +129,38 @@ var CognitoClient = /** @class */ (function () {
      * @param password Password
      * @throws {AuthException}
      */
-    CognitoClient.prototype.authenticateUser = function (username, password) {
-        return __awaiter(this, void 0, void 0, function () {
-            var initiateAuthPayload, AuthenticationResult, session;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        initiateAuthPayload = {
-                            AuthFlow: 'USER_PASSWORD_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                USERNAME: username,
-                                PASSWORD: password,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        AuthenticationResult = (_a.sent()).AuthenticationResult;
-                        session = CognitoClient.authResultToSession(AuthenticationResult);
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.refreshSession = function (session) {
-        return __awaiter(this, void 0, void 0, function () {
-            var refreshTokenPayload, AuthenticationResult, newSession;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        refreshTokenPayload = {
-                            AuthFlow: 'REFRESH_TOKEN_AUTH',
-                            ClientId: this.userPoolClientId,
-                            AuthParameters: {
-                                REFRESH_TOKEN: session.refreshToken,
-                            },
-                            ClientMetadata: {},
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(refreshTokenPayload, CognitoServiceTarget.InitiateAuth)];
-                    case 1:
-                        AuthenticationResult = (_a.sent()).AuthenticationResult;
-                        newSession = CognitoClient.authResultToSession(__assign(__assign({}, AuthenticationResult), { RefreshToken: session.refreshToken }));
-                        this.sessionStorage.setSession(newSession);
-                        return [2 /*return*/, newSession];
-                }
-            });
+    async authenticateUser(username, password) {
+        const initiateAuthPayload = {
+            AuthFlow: 'USER_PASSWORD_AUTH',
+            ClientId: this.userPoolClientId,
+            AuthParameters: {
+                USERNAME: username,
+                PASSWORD: password,
+            },
+            ClientMetadata: {},
+        };
+        const { AuthenticationResult } = (await this.cognitoRequest(initiateAuthPayload, CognitoServiceTarget.InitiateAuth));
+        const session = CognitoClient.authResultToSession(AuthenticationResult);
+        this.sessionStorage.setSession(session);
+        return session;
+    }
+    async refreshSession(session) {
+        const refreshTokenPayload = {
+            AuthFlow: 'REFRESH_TOKEN_AUTH',
+            ClientId: this.userPoolClientId,
+            AuthParameters: {
+                REFRESH_TOKEN: session.refreshToken,
+            },
+            ClientMetadata: {},
+        };
+        const { AuthenticationResult } = (await this.cognitoRequest(refreshTokenPayload, CognitoServiceTarget.InitiateAuth));
+        const newSession = CognitoClient.authResultToSession({
+            ...AuthenticationResult,
+            RefreshToken: session.refreshToken,
         });
-    };
+        this.sessionStorage.setSession(newSession);
+        return newSession;
+    }
     /**
      * Returns the current auth session.
      * The auth session is only defined when we previously had a successful user authentication.
@@ -262,20 +169,15 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.getSession = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var session;
-            return __generator(this, function (_a) {
-                session = this.sessionStorage.getSession();
-                if (session) {
-                    if (new Date().getTime() >= session.expiresIn) {
-                        return [2 /*return*/, this.refreshSession(session)];
-                    }
-                }
-                return [2 /*return*/, session];
-            });
-        });
-    };
+    async getSession() {
+        const session = this.sessionStorage.getSession();
+        if (session) {
+            if (new Date().getTime() >= session.expiresIn) {
+                return this.refreshSession(session);
+            }
+        }
+        return session;
+    }
     /**
      *
      * @param username Username
@@ -283,29 +185,19 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.signUp = function (username, password, userAttributes) {
-        return __awaiter(this, void 0, void 0, function () {
-            var signUpPayload, data;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        signUpPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                            Password: password,
-                            UserAttributes: userAttributes,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(signUpPayload, CognitoServiceTarget.SignUp)];
-                    case 1:
-                        data = _a.sent();
-                        return [2 /*return*/, {
-                                id: data.UserSub,
-                                confirmed: data.UserConfirmed,
-                            }];
-                }
-            });
-        });
-    };
+    async signUp(username, password, userAttributes) {
+        const signUpPayload = {
+            ClientId: this.userPoolClientId,
+            Username: username,
+            Password: password,
+            UserAttributes: userAttributes,
+        };
+        const data = await this.cognitoRequest(signUpPayload, CognitoServiceTarget.SignUp);
+        return {
+            id: data.UserSub,
+            confirmed: data.UserConfirmed,
+        };
+    }
     /**
      * Confirms the user registration via verification code.
      *
@@ -314,25 +206,14 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.confirmSignUp = function (username, code) {
-        return __awaiter(this, void 0, void 0, function () {
-            var confirmSignUpPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        confirmSignUpPayload = {
-                            ClientId: this.userPoolClientId,
-                            ConfirmationCode: code,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(confirmSignUpPayload, CognitoServiceTarget.ConfirmSignUp)];
-                    case 1:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async confirmSignUp(username, code) {
+        const confirmSignUpPayload = {
+            ClientId: this.userPoolClientId,
+            ConfirmationCode: code,
+            Username: username,
+        };
+        const result = await this.cognitoRequest(confirmSignUpPayload, CognitoServiceTarget.ConfirmSignUp);
+    }
     /**
      *
      * @param currentPassword Current user password.
@@ -340,130 +221,71 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.changePassword = function (currentPassword, newPassword) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, changePasswordPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        changePasswordPayload = {
-                            PreviousPassword: currentPassword,
-                            ProposedPassword: newPassword,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(changePasswordPayload, CognitoServiceTarget.ChangePassword)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.updateUserAttributes = function (userAttributes) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, updateUserAttributesPayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        updateUserAttributesPayload = {
-                            UserAttributes: userAttributes,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(updateUserAttributesPayload, CognitoServiceTarget.UpdateUserAttributes)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    CognitoClient.prototype.verifyUserAttribute = function (attributeName, code) {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, verifyUserAttributePayload, result;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        verifyUserAttributePayload = {
-                            AttributeName: attributeName,
-                            Code: code,
-                            AccessToken: session.accessToken,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(verifyUserAttributePayload, CognitoServiceTarget.VerifyUserAttribute)];
-                    case 2:
-                        result = _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async changePassword(currentPassword, newPassword) {
+        const session = await this.getSession();
+        if (session === undefined) {
+            throw new AuthException('User must be authenticated', AuthError.UserNotAuthenticated);
+        }
+        const changePasswordPayload = {
+            PreviousPassword: currentPassword,
+            ProposedPassword: newPassword,
+            AccessToken: session.accessToken,
+        };
+        const result = await this.cognitoRequest(changePasswordPayload, CognitoServiceTarget.ChangePassword);
+    }
+    async updateUserAttributes(userAttributes) {
+        const session = await this.getSession();
+        if (session === undefined) {
+            throw new AuthException('User must be authenticated', AuthError.UserNotAuthenticated);
+        }
+        const updateUserAttributesPayload = {
+            UserAttributes: userAttributes,
+            AccessToken: session.accessToken,
+        };
+        const result = await this.cognitoRequest(updateUserAttributesPayload, CognitoServiceTarget.UpdateUserAttributes);
+    }
+    async verifyUserAttribute(attributeName, code) {
+        const session = await this.getSession();
+        if (session === undefined) {
+            throw new AuthException('User must be authenticated', AuthError.UserNotAuthenticated);
+        }
+        const verifyUserAttributePayload = {
+            AttributeName: attributeName,
+            Code: code,
+            AccessToken: session.accessToken,
+        };
+        const result = await this.cognitoRequest(verifyUserAttributePayload, CognitoServiceTarget.VerifyUserAttribute);
+    }
     /**
      * Sign out the user and remove the current user session.
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.signOut = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var session, revokeTokenPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSession()];
-                    case 1:
-                        session = _a.sent();
-                        if (session === undefined) {
-                            throw new error_1.AuthException('User must be authenticated', error_1.AuthError.UserNotAuthenticated);
-                        }
-                        revokeTokenPayload = {
-                            Token: session.refreshToken,
-                            ClientId: this.userPoolClientId,
-                        };
-                        this.sessionStorage.setSession(undefined);
-                        return [4 /*yield*/, this.cognitoRequest(revokeTokenPayload, CognitoServiceTarget.RevokeToken)];
-                    case 2:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async signOut() {
+        const session = await this.getSession();
+        if (session === undefined) {
+            throw new AuthException('User must be authenticated', AuthError.UserNotAuthenticated);
+        }
+        const revokeTokenPayload = {
+            Token: session.refreshToken,
+            ClientId: this.userPoolClientId,
+        };
+        this.sessionStorage.setSession(undefined);
+        await this.cognitoRequest(revokeTokenPayload, CognitoServiceTarget.RevokeToken);
+    }
     /**
      * Request forgot password.
      * @param username Username
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.forgotPassword = function (username) {
-        return __awaiter(this, void 0, void 0, function () {
-            var forgotPasswordPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        forgotPasswordPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(forgotPasswordPayload, CognitoServiceTarget.ForgotPassword)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async forgotPassword(username) {
+        const forgotPasswordPayload = {
+            ClientId: this.userPoolClientId,
+            Username: username,
+        };
+        await this.cognitoRequest(forgotPasswordPayload, CognitoServiceTarget.ForgotPassword);
+    }
     /**
      * Confirms the new password via the given code send via cognito triggered by @see forgotPassword .
      *
@@ -473,48 +295,26 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {AuthException}
      */
-    CognitoClient.prototype.confirmForgotPassword = function (username, newPassword, confirmationCode) {
-        return __awaiter(this, void 0, void 0, function () {
-            var confirmForgotPasswordPayload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        confirmForgotPasswordPayload = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                            ConfirmationCode: confirmationCode,
-                            Password: newPassword,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(confirmForgotPasswordPayload, CognitoServiceTarget.ConfirmForgotPassword)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async confirmForgotPassword(username, newPassword, confirmationCode) {
+        const confirmForgotPasswordPayload = {
+            ClientId: this.userPoolClientId,
+            Username: username,
+            ConfirmationCode: confirmationCode,
+            Password: newPassword,
+        };
+        await this.cognitoRequest(confirmForgotPasswordPayload, CognitoServiceTarget.ConfirmForgotPassword);
+    }
     /**
      * Triggers cognito to resend the confirmation code
      * @param username Username
      */
-    CognitoClient.prototype.resendConfirmationCode = function (username) {
-        return __awaiter(this, void 0, void 0, function () {
-            var resendConfirmationCodePayLoad;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        resendConfirmationCodePayLoad = {
-                            ClientId: this.userPoolClientId,
-                            Username: username,
-                        };
-                        return [4 /*yield*/, this.cognitoRequest(resendConfirmationCodePayLoad, CognitoServiceTarget.ResendConfirmationCode)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
+    async resendConfirmationCode(username) {
+        const resendConfirmationCodePayLoad = {
+            ClientId: this.userPoolClientId,
+            Username: username,
+        };
+        await this.cognitoRequest(resendConfirmationCodePayLoad, CognitoServiceTarget.ResendConfirmationCode);
+    }
     /**
      * Returns a link to Cognito`s Hosted UI for OAuth2 authentication.
      * This method works in conjunction with @see handleCodeFlow .
@@ -524,18 +324,18 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {Error}
      */
-    CognitoClient.prototype.generateOAuthSignInUrl = function (identityProvider) {
+    generateOAuthSignInUrl(identityProvider) {
         if (this.oAuth === undefined) {
             throw Error('You have to define oAuth options to use generateFederatedSignUrl');
         }
-        var state = (0, randombytes_1.default)(32).toString('hex');
-        var pkce = (0, randombytes_1.default)(128).toString('hex');
-        var code_challenge = Buffer.from((0, hash_js_1.sha256)().update(pkce).digest())
+        const state = randomBytes(32).toString('hex');
+        const pkce = randomBytes(128).toString('hex');
+        const code_challenge = Buffer.from(sha256().update(pkce).digest())
             .toString('base64')
             .replace(/\+/g, '-')
             .replace(/\//g, '_')
             .replace(/=+$/, '');
-        var queryParams = new URLSearchParams();
+        const queryParams = new URLSearchParams();
         queryParams.append('redirect_uri', this.oAuth.redirectUrl);
         queryParams.append('response_type', this.oAuth.responseType);
         queryParams.append('client_id', this.userPoolClientId);
@@ -545,11 +345,11 @@ var CognitoClient = /** @class */ (function () {
         queryParams.append('code_challenge', code_challenge);
         queryParams.append('code_challenge_method', 'S256');
         this.sessionStorage.setOauthVerificationParams({
-            state: state,
-            pkce: pkce,
+            state,
+            pkce,
         });
-        return "".concat(this.oAuth.cognitoDomain, "/oauth2/authorize?").concat(queryParams.toString());
-    };
+        return `${this.oAuth.cognitoDomain}/oauth2/authorize?${queryParams.toString()}`;
+    }
     /**
      *
      * Handles Cognito`s OAuth2 code flow after redirection from Cognito`s Hosted UI.
@@ -561,63 +361,49 @@ var CognitoClient = /** @class */ (function () {
      *
      * @throws {Error}
      */
-    CognitoClient.prototype.handleCodeFlow = function (returnUrl) {
-        return __awaiter(this, void 0, void 0, function () {
-            var url, code, state, oAuthVerificationParams, urlParams, tokenEndpoint, response, _a, access_token, refresh_token, id_token, expires_in, token_type, error, session;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        if (this.oAuth === undefined) {
-                            throw Error('You have to define oAuth options to use handleCodeFlow');
-                        }
-                        url = new URL(returnUrl);
-                        code = url.searchParams.get('code');
-                        state = url.searchParams.get('state');
-                        if (code === null || state === null) {
-                            throw Error('code or state parameter is missing from return url.');
-                        }
-                        oAuthVerificationParams = this.sessionStorage.getOauthVerificationParams();
-                        if (oAuthVerificationParams === undefined) {
-                            throw new Error('OAuth verification parameters are missing, did you forgot to call generateOAuthSignInUrl ?');
-                        }
-                        if (oAuthVerificationParams.state !== state) {
-                            throw new Error('state parameter does not match with previous value generated by previous call of generateOAuthSignInUrl .');
-                        }
-                        urlParams = new URLSearchParams();
-                        urlParams.append('grant_type', 'authorization_code');
-                        urlParams.append('code', code);
-                        urlParams.append('client_id', this.userPoolClientId);
-                        urlParams.append('redirect_uri', this.oAuth.redirectUrl);
-                        urlParams.append('code_verifier', oAuthVerificationParams.pkce);
-                        tokenEndpoint = "".concat(this.oAuth.cognitoDomain, "/oauth2/token");
-                        return [4 /*yield*/, fetch(tokenEndpoint, {
-                                method: 'POST',
-                                headers: {
-                                    'Content-Type': 'application/x-www-form-urlencoded',
-                                },
-                                body: urlParams.toString(),
-                            })];
-                    case 1:
-                        response = _b.sent();
-                        return [4 /*yield*/, response.json()];
-                    case 2:
-                        _a = _b.sent(), access_token = _a.access_token, refresh_token = _a.refresh_token, id_token = _a.id_token, expires_in = _a.expires_in, token_type = _a.token_type, error = _a.error;
-                        if (error) {
-                            throw new Error(error);
-                        }
-                        session = CognitoClient.authResultToSession({
-                            AccessToken: access_token,
-                            RefreshToken: refresh_token,
-                            IdToken: id_token,
-                            ExpiresIn: expires_in,
-                            TokenType: token_type,
-                        });
-                        this.sessionStorage.setSession(session);
-                        return [2 /*return*/, session];
-                }
-            });
+    async handleCodeFlow(returnUrl) {
+        if (this.oAuth === undefined) {
+            throw Error('You have to define oAuth options to use handleCodeFlow');
+        }
+        const url = new URL(returnUrl);
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        if (code === null || state === null) {
+            throw Error('code or state parameter is missing from return url.');
+        }
+        const oAuthVerificationParams = this.sessionStorage.getOauthVerificationParams();
+        if (oAuthVerificationParams === undefined) {
+            throw new Error('OAuth verification parameters are missing, did you forgot to call generateOAuthSignInUrl ?');
+        }
+        if (oAuthVerificationParams.state !== state) {
+            throw new Error('state parameter does not match with previous value generated by previous call of generateOAuthSignInUrl .');
+        }
+        const urlParams = new URLSearchParams();
+        urlParams.append('grant_type', 'authorization_code');
+        urlParams.append('code', code);
+        urlParams.append('client_id', this.userPoolClientId);
+        urlParams.append('redirect_uri', this.oAuth.redirectUrl);
+        urlParams.append('code_verifier', oAuthVerificationParams.pkce);
+        const tokenEndpoint = `${this.oAuth.cognitoDomain}/oauth2/token`;
+        const response = await fetch(tokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: urlParams.toString(),
         });
-    };
-    return CognitoClient;
-}());
-exports.CognitoClient = CognitoClient;
+        const { access_token, refresh_token, id_token, expires_in, token_type, error } = await response.json();
+        if (error) {
+            throw new Error(error);
+        }
+        const session = CognitoClient.authResultToSession({
+            AccessToken: access_token,
+            RefreshToken: refresh_token,
+            IdToken: id_token,
+            ExpiresIn: expires_in,
+            TokenType: token_type,
+        });
+        this.sessionStorage.setSession(session);
+        return session;
+    }
+}