@vardario/cognito-client 4.0.5 → 4.0.7

package/lib/browser.js

@@ -582,7 +582,7 @@ var N = BigInt(
   "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
 );
 var g = BigInt("0x2");
-var k = BigInt("0x" + await hashHexString(`${padHex(N)}${padHex(g)}`));
+var k = BigInt("0x538282c4354742d7cbbde2359fcf67f9f5b3a6b08791e5011b43b8a5b66d9ee6");
 function padHex(bigInt) {
   const HEX_MSB_REGEX = /^[89a-f]/i;
   const isNegative = bigInt < 0n;
@@ -1111,15 +1111,17 @@ var CognitoClient = class {
    *
    * @throws {Error}
    */
-  async handleCodeFlow(returnUrl, pkce) {
+  async handleCodeFlow(returnUrl, pkce, state) {
     if (this.oAuth === void 0) {
       throw Error("You have to define oAuth options to use handleCodeFlow");
     }
     const url = new URL(returnUrl);
     const code = url.searchParams.get("code");
-    const state = url.searchParams.get("state");
-    if (code === null || state === null) {
-      throw Error("code or state parameter is missing from return url.");
+    if (code === null) {
+      throw Error("code parameter is missing from return url.");
+    }
+    if (url.searchParams.get("state") !== state) {
+      throw Error("State parameter does not match.");
     }
     const urlParams = new URLSearchParams();
     urlParams.append("grant_type", "authorization_code");

package/lib/cognito-client.d.ts

@@ -452,7 +452,7 @@ export declare class CognitoClient {
      *
      * @throws {Error}
      */
-    handleCodeFlow(returnUrl: string, pkce: string): Promise<Session>;
+    handleCodeFlow(returnUrl: string, pkce: string, state: string): Promise<Session>;
     /**
      * Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation when your user signs out of your app. This results in the following behavior.
      * @param accessToken Access token of the current user.

package/lib/cognito-client.js

@@ -408,15 +408,17 @@ export class CognitoClient {
      *
      * @throws {Error}
      */
-    async handleCodeFlow(returnUrl, pkce) {
+    async handleCodeFlow(returnUrl, pkce, state) {
         if (this.oAuth === undefined) {
             throw Error('You have to define oAuth options to use handleCodeFlow');
         }
         const url = new URL(returnUrl);
         const code = url.searchParams.get('code');
-        const state = url.searchParams.get('state');
-        if (code === null || state === null) {
-            throw Error('code or state parameter is missing from return url.');
+        if (code === null) {
+            throw Error('code parameter is missing from return url.');
+        }
+        if (url.searchParams.get('state') !== state) {
+            throw Error('State parameter does not match.');
         }
         const urlParams = new URLSearchParams();
         urlParams.append('grant_type', 'authorization_code');

package/lib/utils.js

@@ -39,7 +39,7 @@ const N = BigInt('0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1' +
     'BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31' +
     '43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF');
 const g = BigInt('0x2');
-const k = BigInt('0x' + (await hashHexString(`${padHex(N)}${padHex(g)}`)));
+const k = BigInt('0x538282c4354742d7cbbde2359fcf67f9f5b3a6b08791e5011b43b8a5b66d9ee6');
 export function padHex(bigInt) {
     const HEX_MSB_REGEX = /^[89a-f]/i;
     const isNegative = bigInt < 0n;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vardario/cognito-client",
-  "version": "4.0.5",
+  "version": "4.0.7",
   "description": "",
   "license": "MIT",
   "author": "Sahin Vardar",
@@ -27,6 +27,7 @@
   "devDependencies": {
     "@aws-sdk/client-cognito-identity-provider": "^3.465.0",
     "@types/jsdom": "^21.1.5",
+    "@types/node": "^20",
     "@typescript-eslint/eslint-plugin": "^6.11.0",
     "@typescript-eslint/parser": "^6.11.0",
     "esbuild": "^0.20.2",