@vardario/cognito-client 2.1.0 → 3.0.0

package/lib/cognito-client.d.ts

@@ -272,7 +272,8 @@ export declare enum CognitoServiceTarget {
     ConfirmForgotPassword = "ConfirmForgotPassword",
     ResendConfirmationCode = "ResendConfirmationCode",
     UpdateUserAttributes = "UpdateUserAttributes",
-    VerifyUserAttribute = "VerifyUserAttribute"
+    VerifyUserAttribute = "VerifyUserAttribute",
+    GlobalSignOut = "GlobalSignOut"
 }
 /**
  * Cognito supported federated identities public providers.
@@ -341,8 +342,8 @@ export declare class CognitoClient {
     /**
      * Returns a new session based on the given refresh token.
      *
-     * @param refreshToken
-     * @param username
+     * @param refreshToken  Refresh token from a previous session.
+     * @param username Username is required when using a client secret and needs to be the cognito user id.
      * @returns @see Session
      * @throws {InitiateAuthException}
      */
@@ -395,11 +396,13 @@ export declare class CognitoClient {
      */
     verifyUserAttribute(attributeName: string, code: string, accessToken: string): Promise<void>;
     /**
-     * Sign out the user and remove the current user session.
+     * Revokes all of the access tokens generated by, and at the same time as, the specified refresh token. After a token is revoked, you can't use the revoked token to access Amazon Cognito user APIs, or to authorize access to your resource server.
      *
+     * @param refreshToken Refresh token from a previous session.
+     * @param username Username is required when using a client secret and needs to be the cognito user id.
      * @throws {RevokeTokenException}
      */
-    signOut(refreshToken: string): Promise<void>;
+    revokeToken(refreshToken: string): Promise<void>;
     /**
      * Request forgot password.
      * @param username Username
@@ -450,4 +453,9 @@ export declare class CognitoClient {
      * @throws {Error}
      */
     handleCodeFlow(returnUrl: string, pkce: string): Promise<Session>;
+    /**
+     * Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation when your user signs out of your app. This results in the following behavior.
+     * @param accessToken Access token of the current user.
+     */
+    globalSignOut(accessToken: string): Promise<void>;
 }

package/lib/cognito-client.js

@@ -20,6 +20,7 @@ export var CognitoServiceTarget;
     CognitoServiceTarget["ResendConfirmationCode"] = "ResendConfirmationCode";
     CognitoServiceTarget["UpdateUserAttributes"] = "UpdateUserAttributes";
     CognitoServiceTarget["VerifyUserAttribute"] = "VerifyUserAttribute";
+    CognitoServiceTarget["GlobalSignOut"] = "GlobalSignOut";
 })(CognitoServiceTarget || (CognitoServiceTarget = {}));
 /**
  * Cognito supported federated identities public providers.
@@ -167,8 +168,8 @@ export class CognitoClient {
     /**
      * Returns a new session based on the given refresh token.
      *
-     * @param refreshToken
-     * @param username
+     * @param refreshToken  Refresh token from a previous session.
+     * @param username Username is required when using a client secret and needs to be the cognito user id.
      * @returns @see Session
      * @throws {InitiateAuthException}
      */
@@ -274,14 +275,17 @@ export class CognitoClient {
         await cognitoRequest(verifyUserAttributePayload, CognitoServiceTarget.VerifyUserAttribute, this.cognitoEndpoint);
     }
     /**
-     * Sign out the user and remove the current user session.
+     * Revokes all of the access tokens generated by, and at the same time as, the specified refresh token. After a token is revoked, you can't use the revoked token to access Amazon Cognito user APIs, or to authorize access to your resource server.
      *
+     * @param refreshToken Refresh token from a previous session.
+     * @param username Username is required when using a client secret and needs to be the cognito user id.
      * @throws {RevokeTokenException}
      */
-    async signOut(refreshToken) {
+    async revokeToken(refreshToken) {
         const revokeTokenPayload = {
             Token: refreshToken,
-            ClientId: this.userPoolClientId
+            ClientId: this.userPoolClientId,
+            ClientSecret: this.clientSecret
         };
         await cognitoRequest(revokeTokenPayload, CognitoServiceTarget.RevokeToken, this.cognitoEndpoint);
     }
@@ -414,4 +418,14 @@ export class CognitoClient {
         });
         return session;
     }
+    /**
+     * Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation when your user signs out of your app. This results in the following behavior.
+     * @param accessToken Access token of the current user.
+     */
+    async globalSignOut(accessToken) {
+        const globalSignOutPayload = {
+            AccessToken: accessToken
+        };
+        await cognitoRequest(globalSignOutPayload, CognitoServiceTarget.GlobalSignOut, this.cognitoEndpoint);
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vardario/cognito-client",
-  "version": "2.1.0",
+  "version": "3.0.0",
   "description": "",
   "license": "MIT",
   "author": "Sahin Vardar",
@@ -16,8 +16,9 @@
   "scripts": {
     "build": "tsc --build",
     "format": "prettier --plugin-search-dir . --write . && prettier-package-json --write && eslint --fix .",
+    "integration-test": "vitest run integration",
     "prepare": "husky install",
-    "test": "vitest run",
+    "test": "vitest run unit",
     "watch": "tsc --build --watch"
   },
   "dependencies": {
@@ -27,7 +28,7 @@
     "jsbn": "^1.1.0"
   },
   "devDependencies": {
-    "@aws-sdk/client-cognito-identity-provider": "^3.454.0",
+    "@aws-sdk/client-cognito-identity-provider": "^3.465.0",
     "@types/jsbn": "^1.2.33",
     "@types/jsdom": "^21.1.5",
     "@types/randombytes": "^2.0.3",