@webiny/cognito 0.0.0-unstable.0d717d18dd

package/api/graphql/user.gql.js

@@ -0,0 +1,143 @@
+import { ErrorResponse, NotFoundResponse, Response } from "@webiny/api-graphql/responses.js";
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { GetUserUseCase } from "@webiny/api-core/features/users/GetUser/index.js";
+import NotAuthorizedResponse from "@webiny/api-core/graphql/security/NotAuthorizedResponse.js";
+import { CreateUserUseCase } from "../features/CreateUser/index.js";
+import { UpdateUserUseCase } from "../features/UpdateUser/index.js";
+import { DeleteUserUseCase } from "../features/DeleteUser/index.js";
+class AdminUserSchemaImpl {
+    async execute(builder) {
+        builder.addTypeDefs(`
+            """
+            This input type is used by administrators to create other user's accounts within the same tenant.
+            """
+            input AdminUsersCreateInput {
+                email: String!
+                firstName: String!
+                lastName: String!
+                password: String!
+                avatar: JSON
+                roles: [RefInput!]
+                teams: [RefInput!]
+            }
+
+            """
+            This input type is used by administrators to update other user's accounts within the same tenant.
+            """
+            input AdminUsersUpdateInput {
+                email: String
+                firstName: String
+                lastName: String
+                password: String
+                avatar: JSON
+                roles: [RefInput!]
+                teams: [RefInput!]
+            }
+
+            """
+            This input type is used by the user who is updating his own account
+            """
+            input AdminUsersCurrentUserInput {
+                email: String
+                firstName: String
+                lastName: String
+                password: String
+                avatar: JSON
+            }
+
+            extend type AdminUsersMutation {
+                updateCurrentUser(data: AdminUsersCurrentUserInput!): AdminUsersResponse
+
+                createUser(data: AdminUsersCreateInput!): AdminUsersResponse
+
+                updateUser(id: ID!, data: AdminUsersUpdateInput!): AdminUsersResponse
+
+                deleteUser(id: ID!): AdminUsersBooleanResponse
+            }
+        `);
+        builder.addResolver({
+            path: "AdminUsersMutation.updateCurrentUser",
+            dependencies: [
+                IdentityContext,
+                GetUserUseCase,
+                UpdateUserUseCase
+            ],
+            resolver: (identityContext, getUserUseCase, updateUserUseCase)=>async ({ args })=>{
+                    const identity = identityContext.getIdentity();
+                    if (!identity.isAdmin()) return new NotAuthorizedResponse();
+                    return await identityContext.withoutAuthorization(async ()=>{
+                        const getUserResult = await getUserUseCase.execute({
+                            id: identity.id
+                        });
+                        if (getUserResult.isFail()) return new NotFoundResponse("User not found!");
+                        const user = getUserResult.value;
+                        const updateResult = await updateUserUseCase.execute(user.id, args.data);
+                        if (updateResult.isFail()) return new ErrorResponse({
+                            message: updateResult.error.message,
+                            code: updateResult.error.code,
+                            data: updateResult.error.data
+                        });
+                        return new Response(updateResult.value);
+                    });
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersMutation.createUser",
+            dependencies: [
+                CreateUserUseCase
+            ],
+            resolver: (createUserUseCase)=>async ({ args })=>{
+                    const result = await createUserUseCase.execute(args.data);
+                    if (result.isFail()) return new ErrorResponse({
+                        message: result.error.message,
+                        code: result.error.code,
+                        data: result.error.data
+                    });
+                    return new Response(result.value);
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersMutation.updateUser",
+            dependencies: [
+                UpdateUserUseCase,
+                IdentityContext
+            ],
+            resolver: (updateUserUseCase, identityContext)=>async ({ args })=>{
+                    if (args.id === identityContext.getIdentity().id) return new ErrorResponse({
+                        message: "You're not allowed to update your own account using this API.",
+                        code: "AdminUser/GraphQL/UpdateSelf"
+                    });
+                    const result = await updateUserUseCase.execute(args.id, args.data);
+                    if (result.isFail()) return new ErrorResponse({
+                        message: result.error.message,
+                        code: result.error.code
+                    });
+                    return new Response(result.value);
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersMutation.deleteUser",
+            dependencies: [
+                DeleteUserUseCase
+            ],
+            resolver: (deleteUserUseCase)=>async ({ args })=>{
+                    const result = await deleteUserUseCase.execute(args.id);
+                    if (result.isFail()) return new ErrorResponse({
+                        message: result.error.message,
+                        code: result.error.code,
+                        data: result.error.data
+                    });
+                    return new Response(true);
+                }
+        });
+        return builder;
+    }
+}
+const AdminUsersSchema = CoreGraphQLSchemaFactory.createImplementation({
+    implementation: AdminUserSchemaImpl,
+    dependencies: []
+});
+export { AdminUsersSchema };
+
+//# sourceMappingURL=user.gql.js.map

package/api/graphql/user.gql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api/graphql/user.gql.js","sources":["../../../src/api/graphql/user.gql.ts"],"sourcesContent":["import { ErrorResponse, NotFoundResponse, Response } from \"@webiny/api-graphql/responses.js\";\nimport { CoreGraphQLSchemaFactory } from \"@webiny/api-graphql/graphql/abstractions.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { GetUserUseCase } from \"@webiny/api-core/features/users/GetUser/index.js\";\nimport NotAuthorizedResponse from \"@webiny/api-core/graphql/security/NotAuthorizedResponse.js\";\nimport { CreateUserUseCase } from \"~/api/features/CreateUser/index.js\";\nimport { UpdateUserUseCase } from \"~/api/features/UpdateUser/index.js\";\nimport { DeleteUserUseCase } from \"~/api/features/DeleteUser/index.js\";\n\nclass AdminUserSchemaImpl implements CoreGraphQLSchemaFactory.Interface {\n    async execute(\n        builder: CoreGraphQLSchemaFactory.SchemaBuilder\n    ): CoreGraphQLSchemaFactory.Return {\n        builder.addTypeDefs(/* GraphQL */ `\n            \"\"\"\n            This input type is used by administrators to create other user's accounts within the same tenant.\n            \"\"\"\n            input AdminUsersCreateInput {\n                email: String!\n                firstName: String!\n                lastName: String!\n                password: String!\n                avatar: JSON\n                roles: [RefInput!]\n                teams: [RefInput!]\n            }\n\n            \"\"\"\n            This input type is used by administrators to update other user's accounts within the same tenant.\n            \"\"\"\n            input AdminUsersUpdateInput {\n                email: String\n                firstName: String\n                lastName: String\n                password: String\n                avatar: JSON\n                roles: [RefInput!]\n                teams: [RefInput!]\n            }\n\n            \"\"\"\n            This input type is used by the user who is updating his own account\n            \"\"\"\n            input AdminUsersCurrentUserInput {\n                email: String\n                firstName: String\n                lastName: String\n                password: String\n                avatar: JSON\n            }\n\n            extend type AdminUsersMutation {\n                updateCurrentUser(data: AdminUsersCurrentUserInput!): AdminUsersResponse\n\n                createUser(data: AdminUsersCreateInput!): AdminUsersResponse\n\n                updateUser(id: ID!, data: AdminUsersUpdateInput!): AdminUsersResponse\n\n                deleteUser(id: ID!): AdminUsersBooleanResponse\n            }\n        `);\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.updateCurrentUser\",\n            dependencies: [IdentityContext, GetUserUseCase, UpdateUserUseCase],\n            resolver: (\n                identityContext: IdentityContext.Interface,\n                getUserUseCase: GetUserUseCase.Interface,\n                updateUserUseCase: UpdateUserUseCase.Interface\n            ) => {\n                return async ({ args }) => {\n                    const identity = identityContext.getIdentity();\n                    if (!identity.isAdmin()) {\n                        return new NotAuthorizedResponse();\n                    }\n\n                    // Current user might not have permissions for `adminUsers`.\n                    return await identityContext.withoutAuthorization(async () => {\n                        const getUserResult = await getUserUseCase.execute({ id: identity.id });\n                        if (getUserResult.isFail()) {\n                            // TODO: check if current identity belongs to a different tenant.\n                            // TODO: If so, switch to that other tenant, and update his profile there.\n                            return new NotFoundResponse(\"User not found!\");\n                        }\n\n                        const user = getUserResult.value;\n\n                        // TODO: UpdateCurrentUser should be a dedicated use case\n                        const updateResult = await updateUserUseCase.execute(user.id, args.data);\n                        if (updateResult.isFail()) {\n                            return new ErrorResponse({\n                                message: updateResult.error.message,\n                                code: updateResult.error.code,\n                                data: updateResult.error.data\n                            });\n                        }\n\n                        return new Response(updateResult.value);\n                    });\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.createUser\",\n            dependencies: [CreateUserUseCase],\n            resolver: (createUserUseCase: CreateUserUseCase.Interface) => {\n                return async ({ args }) => {\n                    const result = await createUserUseCase.execute(args.data);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code,\n                            data: result.error.data\n                        });\n                    }\n\n                    return new Response(result.value);\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.updateUser\",\n            dependencies: [UpdateUserUseCase, IdentityContext],\n            resolver: (\n                updateUserUseCase: UpdateUserUseCase.Interface,\n                identityContext: IdentityContext.Interface\n            ) => {\n                return async ({ args }) => {\n                    if (args.id === identityContext.getIdentity().id) {\n                        return new ErrorResponse({\n                            message:\n                                \"You're not allowed to update your own account using this API.\",\n                            code: \"AdminUser/GraphQL/UpdateSelf\"\n                        });\n                    }\n\n                    const result = await updateUserUseCase.execute(args.id, args.data);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code\n                        });\n                    }\n\n                    return new Response(result.value);\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.deleteUser\",\n            dependencies: [DeleteUserUseCase],\n            resolver: (deleteUserUseCase: DeleteUserUseCase.Interface) => {\n                return async ({ args }) => {\n                    const result = await deleteUserUseCase.execute(args.id);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code,\n                            data: result.error.data\n                        });\n                    }\n\n                    return new Response(true);\n                };\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const AdminUsersSchema = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: AdminUserSchemaImpl,\n    dependencies: []\n});\n"],"names":["AdminUserSchemaImpl","builder","IdentityContext","GetUserUseCase","UpdateUserUseCase","identityContext","getUserUseCase","updateUserUseCase","args","identity","NotAuthorizedResponse","getUserResult","NotFoundResponse","user","updateResult","ErrorResponse","Response","CreateUserUseCase","createUserUseCase","result","DeleteUserUseCase","deleteUserUseCase","AdminUsersSchema","CoreGraphQLSchemaFactory"],"mappings":";;;;;;;;AASA,MAAMA;IACF,MAAM,QACFC,OAA+C,EAChB;QAC/BA,QAAQ,WAAW,CAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA+CnC,CAAC;QAEDA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACC;gBAAiBC;gBAAgBC;aAAkB;YAClE,UAAU,CACNC,iBACAC,gBACAC,oBAEO,OAAO,EAAEC,IAAI,EAAE;oBAClB,MAAMC,WAAWJ,gBAAgB,WAAW;oBAC5C,IAAI,CAACI,SAAS,OAAO,IACjB,OAAO,IAAIC;oBAIf,OAAO,MAAML,gBAAgB,oBAAoB,CAAC;wBAC9C,MAAMM,gBAAgB,MAAML,eAAe,OAAO,CAAC;4BAAE,IAAIG,SAAS,EAAE;wBAAC;wBACrE,IAAIE,cAAc,MAAM,IAGpB,OAAO,IAAIC,iBAAiB;wBAGhC,MAAMC,OAAOF,cAAc,KAAK;wBAGhC,MAAMG,eAAe,MAAMP,kBAAkB,OAAO,CAACM,KAAK,EAAE,EAAEL,KAAK,IAAI;wBACvE,IAAIM,aAAa,MAAM,IACnB,OAAO,IAAIC,cAAc;4BACrB,SAASD,aAAa,KAAK,CAAC,OAAO;4BACnC,MAAMA,aAAa,KAAK,CAAC,IAAI;4BAC7B,MAAMA,aAAa,KAAK,CAAC,IAAI;wBACjC;wBAGJ,OAAO,IAAIE,SAASF,aAAa,KAAK;oBAC1C;gBACJ;QAER;QAEAb,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACgB;aAAkB;YACjC,UAAU,CAACC,oBACA,OAAO,EAAEV,IAAI,EAAE;oBAClB,MAAMW,SAAS,MAAMD,kBAAkB,OAAO,CAACV,KAAK,IAAI;oBACxD,IAAIW,OAAO,MAAM,IACb,OAAO,IAAIJ,cAAc;wBACrB,SAASI,OAAO,KAAK,CAAC,OAAO;wBAC7B,MAAMA,OAAO,KAAK,CAAC,IAAI;wBACvB,MAAMA,OAAO,KAAK,CAAC,IAAI;oBAC3B;oBAGJ,OAAO,IAAIH,SAASG,OAAO,KAAK;gBACpC;QAER;QAEAlB,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACG;gBAAmBF;aAAgB;YAClD,UAAU,CACNK,mBACAF,kBAEO,OAAO,EAAEG,IAAI,EAAE;oBAClB,IAAIA,KAAK,EAAE,KAAKH,gBAAgB,WAAW,GAAG,EAAE,EAC5C,OAAO,IAAIU,cAAc;wBACrB,SACI;wBACJ,MAAM;oBACV;oBAGJ,MAAMI,SAAS,MAAMZ,kBAAkB,OAAO,CAACC,KAAK,EAAE,EAAEA,KAAK,IAAI;oBACjE,IAAIW,OAAO,MAAM,IACb,OAAO,IAAIJ,cAAc;wBACrB,SAASI,OAAO,KAAK,CAAC,OAAO;wBAC7B,MAAMA,OAAO,KAAK,CAAC,IAAI;oBAC3B;oBAGJ,OAAO,IAAIH,SAASG,OAAO,KAAK;gBACpC;QAER;QAEAlB,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACmB;aAAkB;YACjC,UAAU,CAACC,oBACA,OAAO,EAAEb,IAAI,EAAE;oBAClB,MAAMW,SAAS,MAAME,kBAAkB,OAAO,CAACb,KAAK,EAAE;oBACtD,IAAIW,OAAO,MAAM,IACb,OAAO,IAAIJ,cAAc;wBACrB,SAASI,OAAO,KAAK,CAAC,OAAO;wBAC7B,MAAMA,OAAO,KAAK,CAAC,IAAI;wBACvB,MAAMA,OAAO,KAAK,CAAC,IAAI;oBAC3B;oBAGJ,OAAO,IAAIH,SAAS;gBACxB;QAER;QAEA,OAAOf;IACX;AACJ;AAEO,MAAMqB,mBAAmBC,yBAAyB,oBAAoB,CAAC;IAC1E,gBAAgBvB;IAChB,cAAc,EAAE;AACpB"}

package/api/index.d.ts

@@ -0,0 +1 @@
+export { CognitoIdpConfig } from "./features/CognitoIdp/index.js";

package/api/index.js

@@ -0,0 +1 @@
+export { CognitoIdpConfig } from "./features/CognitoIdp/index.js";

package/index.d.ts

@@ -0,0 +1 @@
+export { Cognito } from "./Cognito.js";

package/index.js

@@ -0,0 +1 @@
+export { Cognito } from "./Cognito.js";

package/infra/CognitoFederationPulumi.d.ts

@@ -0,0 +1,8 @@
+import { CorePulumi } from "@webiny/project-aws/exports/infra/core.js";
+declare class CognitoFederationPulumiImpl implements CorePulumi.Interface {
+    execute(app: CorePulumi.Params): void;
+}
+declare const _default: typeof CognitoFederationPulumiImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/project-aws/abstractions").ICorePulumi>;
+};
+export default _default;

package/infra/CognitoFederationPulumi.js

@@ -0,0 +1,17 @@
+import { CorePulumi } from "@webiny/project-aws/exports/infra/core.js";
+import { configureAdminCognitoFederation } from "@webiny/project-aws/pulumi/apps/core/cognitoIdentityProviders/configure.js";
+class CognitoFederationPulumiImpl {
+    execute(app) {
+        const raw = process.env.COGNITO_FEDERATION_INFRA_CONFIG;
+        if (!raw) return;
+        const config = JSON.parse(raw);
+        configureAdminCognitoFederation(app, config);
+    }
+}
+const CognitoFederationPulumi = CorePulumi.createImplementation({
+    implementation: CognitoFederationPulumiImpl,
+    dependencies: []
+});
+export default CognitoFederationPulumi;
+
+//# sourceMappingURL=CognitoFederationPulumi.js.map

package/infra/CognitoFederationPulumi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra/CognitoFederationPulumi.js","sources":["../../src/infra/CognitoFederationPulumi.ts"],"sourcesContent":["import { CorePulumi } from \"@webiny/project-aws/exports/infra/core.js\";\nimport {\n    configureAdminCognitoFederation,\n    type CognitoIdentityProvidersConfig\n} from \"@webiny/project-aws/pulumi/apps/core/cognitoIdentityProviders/configure.js\";\n\nclass CognitoFederationPulumiImpl implements CorePulumi.Interface {\n    execute(app: CorePulumi.Params): void {\n        const raw = process.env.COGNITO_FEDERATION_INFRA_CONFIG;\n        if (!raw) {\n            return;\n        }\n\n        const config: CognitoIdentityProvidersConfig = JSON.parse(raw);\n        configureAdminCognitoFederation(app, config);\n    }\n}\n\nexport default CorePulumi.createImplementation({\n    implementation: CognitoFederationPulumiImpl,\n    dependencies: []\n});\n"],"names":["CognitoFederationPulumiImpl","app","raw","process","config","JSON","configureAdminCognitoFederation","CorePulumi"],"mappings":";;AAMA,MAAMA;IACF,QAAQC,GAAsB,EAAQ;QAClC,MAAMC,MAAMC,QAAQ,GAAG,CAAC,+BAA+B;QACvD,IAAI,CAACD,KACD;QAGJ,MAAME,SAAyCC,KAAK,KAAK,CAACH;QAC1DI,gCAAgCL,KAAKG;IACzC;AACJ;AAEA,gCAAeG,WAAW,oBAAoB,CAAC;IAC3C,gBAAgBP;IAChB,cAAc,EAAE;AACpB"}

package/package.json

@@ -0,0 +1,51 @@
+{
+	"name": "@webiny/cognito",
+	"version": "0.0.0-unstable.0d717d18dd",
+	"type": "module",
+	"license": "MIT",
+	"sideEffects": false,
+	"exports": {
+		".": "./index.js",
+		"./*": "./*",
+		"./api": "./api/index.js",
+		"./admin": "./admin/index.js"
+	},
+	"description": "Security plugins for Cognito",
+	"author": "Webiny Ltd.",
+	"dependencies": {
+		"@webiny/admin-ui": "0.0.0-unstable.0d717d18dd",
+		"@webiny/api-core": "0.0.0-unstable.0d717d18dd",
+		"@webiny/api-graphql": "0.0.0-unstable.0d717d18dd",
+		"@webiny/app": "0.0.0-unstable.0d717d18dd",
+		"@webiny/app-admin": "0.0.0-unstable.0d717d18dd",
+		"@webiny/aws-sdk": "0.0.0-unstable.0d717d18dd",
+		"@webiny/feature": "0.0.0-unstable.0d717d18dd",
+		"@webiny/form": "0.0.0-unstable.0d717d18dd",
+		"@webiny/icons": "0.0.0-unstable.0d717d18dd",
+		"@webiny/project": "0.0.0-unstable.0d717d18dd",
+		"@webiny/project-aws": "0.0.0-unstable.0d717d18dd",
+		"@webiny/react-properties": "0.0.0-unstable.0d717d18dd",
+		"@webiny/validation": "0.0.0-unstable.0d717d18dd",
+		"aws-amplify": "6.20.0",
+		"graphql": "16.14.2",
+		"jsonwebtoken": "9.0.3",
+		"lodash": "4.18.1",
+		"mobx": "7.0.0",
+		"mobx-react-lite": "5.0.0",
+		"react": "18.3.1",
+		"zod": "4.4.3"
+	},
+	"devDependencies": {
+		"@types/react": "18.3.31",
+		"@webiny/build-tools": "0.0.0-unstable.0d717d18dd",
+		"@webiny/project-utils": "0.0.0-unstable.0d717d18dd",
+		"@webiny/wcp": "0.0.0-unstable.0d717d18dd",
+		"vitest": "4.1.10"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"webiny": {
+		"publishFrom": "dist"
+	}
+}

package/static/svg/search.43fa797c.svg

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Generator: Adobe Illustrator 19.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
+<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="24px"
+	 height="24px" viewBox="0 0 24 24" enable-background="new 0 0 24 24" xml:space="preserve">
+<g id="Header_x2F_BG" display="none">
+	<rect x="-358" y="-314" display="inline" fill="#F1F1F2" width="520" height="520"/>
+</g>
+<g id="Bounding_Boxes">
+	<g id="ui_x5F_spec_x5F_header_copy_3" display="none">
+	</g>
+	<path fill="none" d="M0,0h24v24H0V0z"/>
+</g>
+<g id="Rounded">
+	<g id="ui_x5F_spec_x5F_header_copy_5" display="none">
+	</g>
+	<path fill="currentColor" d="M15.5,14h-0.79l-0.28-0.27c1.2-1.4,1.82-3.31,1.48-5.34c-0.47-2.78-2.79-5-5.59-5.34c-4.23-0.52-7.79,3.04-7.27,7.27
+		c0.34,2.8,2.56,5.12,5.34,5.59c2.03,0.34,3.94-0.28,5.34-1.48L14,14.71v0.79l4.25,4.25c0.41,0.41,1.08,0.41,1.49,0l0,0
+		c0.41-0.41,0.41-1.08,0-1.49L15.5,14z M9.5,14C7.01,14,5,11.99,5,9.5S7.01,5,9.5,5S14,7.01,14,9.5S11.99,14,9.5,14z"/>
+</g>
+</svg>