@webiny/cognito 0.0.0-unstable.3c5210ad37

package/api/features/UpdateUser/UpdateUserUseCase.js

@@ -0,0 +1,88 @@
+import { Result } from "@webiny/feature/api";
+import { UpdateUserUseCase as CoreUpdateUser } from "@webiny/api-core/features/UpdateUser";
+import { GetUserUseCase } from "@webiny/api-core/features/GetUser";
+import { NotAuthorizedError, UserValidationError } from "@webiny/api-core/features/users/shared/errors.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { UpdateUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { Username } from "../../domain/Username.js";
+import { CognitoUpdateUserError } from "../../domain/errors.js";
+import { updateAdminUserValidation } from "./schema.js";
+import { CognitoService } from "../CognitoService/index.js";
+const defaultUpdateAttributes = {
+  family_name: "lastName",
+  given_name: "firstName",
+  preferred_username: "email"
+};
+class UpdateUserUseCaseImpl {
+  constructor(identityContext, cognitoService, updateUserUseCase, getUserUseCase) {
+    this.identityContext = identityContext;
+    this.cognitoService = cognitoService;
+    this.updateUserUseCase = updateUserUseCase;
+    this.getUserUseCase = getUserUseCase;
+    this.updateAttributes = defaultUpdateAttributes;
+  }
+  async execute(id, input) {
+    const permission = await this.identityContext.getPermission("adminUsers.user");
+    if (!permission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+
+    // Validate input (including password)
+    const validation = updateAdminUserValidation.safeParse(input);
+    if (!validation.success) {
+      return Result.fail(new UserValidationError(validation.error.errors[0].message));
+    }
+    const data = validation.data;
+    const {
+      password,
+      ...userDataWithoutPassword
+    } = data;
+
+    // Get original user to know the email before update
+    const getUserResult = await this.getUserUseCase.execute({
+      id
+    });
+    if (getUserResult.isFail()) {
+      return Result.fail(getUserResult.error);
+    }
+    const originalUser = getUserResult.value;
+
+    // Update user in api-core
+    const updateUserResult = await this.updateUserUseCase.execute(id, userDataWithoutPassword);
+    if (updateUserResult.isFail()) {
+      return Result.fail(updateUserResult.error);
+    }
+    const updatedUser = updateUserResult.value;
+
+    // Update user in Cognito
+    try {
+      // Build new attributes
+      const attributes = {};
+      Object.keys(this.updateAttributes).forEach(attr => {
+        const mappedAttr = this.updateAttributes[attr];
+        const attrValue = typeof mappedAttr === "function" ? mappedAttr(updatedUser) : updatedUser[mappedAttr];
+        attributes[attr] = attrValue;
+      });
+
+      // If email changed, set email_verified to true
+      if (originalUser.email !== updatedUser.email) {
+        attributes["email_verified"] = "true";
+      }
+      await this.cognitoService.updateUserAttributes(Username.fromUser(originalUser), attributes);
+
+      // Update password if provided
+      if (password) {
+        await this.cognitoService.setPermanentPassword(Username.fromUser(updatedUser), password);
+      }
+      return Result.ok(updatedUser);
+    } catch (cognitoError) {
+      return Result.fail(new CognitoUpdateUserError(cognitoError));
+    }
+  }
+}
+export const UpdateUserUseCase = UseCaseAbstraction.createImplementation({
+  implementation: UpdateUserUseCaseImpl,
+  dependencies: [IdentityContext, CognitoService, CoreUpdateUser, GetUserUseCase]
+});
+
+//# sourceMappingURL=UpdateUserUseCase.js.map

package/api/features/UpdateUser/UpdateUserUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Result","UpdateUserUseCase","CoreUpdateUser","GetUserUseCase","NotAuthorizedError","UserValidationError","IdentityContext","UseCaseAbstraction","Username","CognitoUpdateUserError","updateAdminUserValidation","CognitoService","defaultUpdateAttributes","family_name","given_name","preferred_username","UpdateUserUseCaseImpl","constructor","identityContext","cognitoService","updateUserUseCase","getUserUseCase","updateAttributes","execute","id","input","permission","getPermission","fail","validation","safeParse","success","error","errors","message","data","password","userDataWithoutPassword","getUserResult","isFail","originalUser","value","updateUserResult","updatedUser","attributes","Object","keys","forEach","attr","mappedAttr","attrValue","email","updateUserAttributes","fromUser","setPermanentPassword","ok","cognitoError","createImplementation","implementation","dependencies"],"sources":["UpdateUserUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { UpdateUserUseCase as CoreUpdateUser } from \"@webiny/api-core/features/UpdateUser\";\nimport { GetUserUseCase } from \"@webiny/api-core/features/GetUser\";\nimport {\n    NotAuthorizedError,\n    UserValidationError\n} from \"@webiny/api-core/features/users/shared/errors.js\";\nimport type { AdminUser } from \"@webiny/api-core/types/users.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { UpdateUserUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { Username } from \"~/api/domain/Username.js\";\nimport { CognitoUpdateUserError } from \"~/api/domain/errors.js\";\nimport { updateAdminUserValidation } from \"./schema.js\";\nimport type { UpdateAdminUserInput } from \"./abstractions.js\";\nimport { CognitoService } from \"~/api/features/CognitoService/index.js\";\n\ntype MappedAttrType = (user: AdminUser) => string | keyof AdminUser;\n\nconst defaultUpdateAttributes = {\n    family_name: \"lastName\",\n    given_name: \"firstName\",\n    preferred_username: \"email\"\n};\n\nclass UpdateUserUseCaseImpl implements UseCaseAbstraction.Interface {\n    private updateAttributes: Record<string, string | MappedAttrType>;\n\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private cognitoService: CognitoService.Interface,\n        private updateUserUseCase: CoreUpdateUser.Interface,\n        private getUserUseCase: GetUserUseCase.Interface\n    ) {\n        this.updateAttributes = defaultUpdateAttributes;\n    }\n\n    async execute(\n        id: string,\n        input: UpdateAdminUserInput\n    ): Promise<Result<AdminUser, UseCaseAbstraction.Error>> {\n        const permission = await this.identityContext.getPermission(\"adminUsers.user\");\n        if (!permission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        // Validate input (including password)\n        const validation = updateAdminUserValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new UserValidationError(validation.error.errors[0].message));\n        }\n\n        const data = validation.data;\n        const { password, ...userDataWithoutPassword } = data;\n\n        // Get original user to know the email before update\n        const getUserResult = await this.getUserUseCase.execute({ id });\n        if (getUserResult.isFail()) {\n            return Result.fail(getUserResult.error);\n        }\n\n        const originalUser = getUserResult.value;\n\n        // Update user in api-core\n        const updateUserResult = await this.updateUserUseCase.execute(id, userDataWithoutPassword);\n        if (updateUserResult.isFail()) {\n            return Result.fail(updateUserResult.error);\n        }\n\n        const updatedUser = updateUserResult.value;\n\n        // Update user in Cognito\n        try {\n            // Build new attributes\n            const attributes: Record<string, string> = {};\n\n            Object.keys(this.updateAttributes).forEach(attr => {\n                const mappedAttr = this.updateAttributes[\n                    attr as keyof typeof this.updateAttributes\n                ] as MappedAttrType;\n                const attrValue =\n                    typeof mappedAttr === \"function\"\n                        ? mappedAttr(updatedUser)\n                        : updatedUser[mappedAttr];\n                attributes[attr] = attrValue;\n            });\n\n            // If email changed, set email_verified to true\n            if (originalUser.email !== updatedUser.email) {\n                attributes[\"email_verified\"] = \"true\";\n            }\n\n            await this.cognitoService.updateUserAttributes(\n                Username.fromUser(originalUser),\n                attributes\n            );\n\n            // Update password if provided\n            if (password) {\n                await this.cognitoService.setPermanentPassword(\n                    Username.fromUser(updatedUser),\n                    password\n                );\n            }\n\n            return Result.ok(updatedUser);\n        } catch (cognitoError) {\n            return Result.fail(new CognitoUpdateUserError(cognitoError as Error));\n        }\n    }\n}\n\nexport const UpdateUserUseCase = UseCaseAbstraction.createImplementation({\n    implementation: UpdateUserUseCaseImpl,\n    dependencies: [IdentityContext, CognitoService, CoreUpdateUser, GetUserUseCase]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,iBAAiB,IAAIC,cAAc,QAAQ,sCAAsC;AAC1F,SAASC,cAAc,QAAQ,mCAAmC;AAClE,SACIC,kBAAkB,EAClBC,mBAAmB,QAChB,kDAAkD;AAEzD,SAASC,eAAe,QAAQ,6DAA6D;AAC7F,SAASL,iBAAiB,IAAIM,kBAAkB;AAChD,SAASC,QAAQ;AACjB,SAASC,sBAAsB;AAC/B,SAASC,yBAAyB;AAElC,SAASC,cAAc;AAIvB,MAAMC,uBAAuB,GAAG;EAC5BC,WAAW,EAAE,UAAU;EACvBC,UAAU,EAAE,WAAW;EACvBC,kBAAkB,EAAE;AACxB,CAAC;AAED,MAAMC,qBAAqB,CAAyC;EAGhEC,WAAWA,CACCC,eAA0C,EAC1CC,cAAwC,EACxCC,iBAA2C,EAC3CC,cAAwC,EAClD;IAAA,KAJUH,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,cAAwC,GAAxCA,cAAwC;IAAA,KACxCC,iBAA2C,GAA3CA,iBAA2C;IAAA,KAC3CC,cAAwC,GAAxCA,cAAwC;IAEhD,IAAI,CAACC,gBAAgB,GAAGV,uBAAuB;EACnD;EAEA,MAAMW,OAAOA,CACTC,EAAU,EACVC,KAA2B,EACyB;IACpD,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACR,eAAe,CAACS,aAAa,CAAC,iBAAiB,CAAC;IAC9E,IAAI,CAACD,UAAU,EAAE;MACb,OAAO1B,MAAM,CAAC4B,IAAI,CAAC,IAAIxB,kBAAkB,CAAC,CAAC,CAAC;IAChD;;IAEA;IACA,MAAMyB,UAAU,GAAGnB,yBAAyB,CAACoB,SAAS,CAACL,KAAK,CAAC;IAC7D,IAAI,CAACI,UAAU,CAACE,OAAO,EAAE;MACrB,OAAO/B,MAAM,CAAC4B,IAAI,CAAC,IAAIvB,mBAAmB,CAACwB,UAAU,CAACG,KAAK,CAACC,MAAM,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC;IACnF;IAEA,MAAMC,IAAI,GAAGN,UAAU,CAACM,IAAI;IAC5B,MAAM;MAAEC,QAAQ;MAAE,GAAGC;IAAwB,CAAC,GAAGF,IAAI;;IAErD;IACA,MAAMG,aAAa,GAAG,MAAM,IAAI,CAACjB,cAAc,CAACE,OAAO,CAAC;MAAEC;IAAG,CAAC,CAAC;IAC/D,IAAIc,aAAa,CAACC,MAAM,CAAC,CAAC,EAAE;MACxB,OAAOvC,MAAM,CAAC4B,IAAI,CAACU,aAAa,CAACN,KAAK,CAAC;IAC3C;IAEA,MAAMQ,YAAY,GAAGF,aAAa,CAACG,KAAK;;IAExC;IACA,MAAMC,gBAAgB,GAAG,MAAM,IAAI,CAACtB,iBAAiB,CAACG,OAAO,CAACC,EAAE,EAAEa,uBAAuB,CAAC;IAC1F,IAAIK,gBAAgB,CAACH,MAAM,CAAC,CAAC,EAAE;MAC3B,OAAOvC,MAAM,CAAC4B,IAAI,CAACc,gBAAgB,CAACV,KAAK,CAAC;IAC9C;IAEA,MAAMW,WAAW,GAAGD,gBAAgB,CAACD,KAAK;;IAE1C;IACA,IAAI;MACA;MACA,MAAMG,UAAkC,GAAG,CAAC,CAAC;MAE7CC,MAAM,CAACC,IAAI,CAAC,IAAI,CAACxB,gBAAgB,CAAC,CAACyB,OAAO,CAACC,IAAI,IAAI;QAC/C,MAAMC,UAAU,GAAG,IAAI,CAAC3B,gBAAgB,CACpC0B,IAAI,CACW;QACnB,MAAME,SAAS,GACX,OAAOD,UAAU,KAAK,UAAU,GAC1BA,UAAU,CAACN,WAAW,CAAC,GACvBA,WAAW,CAACM,UAAU,CAAC;QACjCL,UAAU,CAACI,IAAI,CAAC,GAAGE,SAAS;MAChC,CAAC,CAAC;;MAEF;MACA,IAAIV,YAAY,CAACW,KAAK,KAAKR,WAAW,CAACQ,KAAK,EAAE;QAC1CP,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM;MACzC;MAEA,MAAM,IAAI,CAACzB,cAAc,CAACiC,oBAAoB,CAC1C5C,QAAQ,CAAC6C,QAAQ,CAACb,YAAY,CAAC,EAC/BI,UACJ,CAAC;;MAED;MACA,IAAIR,QAAQ,EAAE;QACV,MAAM,IAAI,CAACjB,cAAc,CAACmC,oBAAoB,CAC1C9C,QAAQ,CAAC6C,QAAQ,CAACV,WAAW,CAAC,EAC9BP,QACJ,CAAC;MACL;MAEA,OAAOpC,MAAM,CAACuD,EAAE,CAACZ,WAAW,CAAC;IACjC,CAAC,CAAC,OAAOa,YAAY,EAAE;MACnB,OAAOxD,MAAM,CAAC4B,IAAI,CAAC,IAAInB,sBAAsB,CAAC+C,YAAqB,CAAC,CAAC;IACzE;EACJ;AACJ;AAEA,OAAO,MAAMvD,iBAAiB,GAAGM,kBAAkB,CAACkD,oBAAoB,CAAC;EACrEC,cAAc,EAAE1C,qBAAqB;EACrC2C,YAAY,EAAE,CAACrD,eAAe,EAAEK,cAAc,EAAET,cAAc,EAAEC,cAAc;AAClF,CAAC,CAAC","ignoreList":[]}

package/api/features/UpdateUser/abstractions.d.ts

@@ -0,0 +1,33 @@
+import type { Result } from "@webiny/feature/api";
+import type { AdminUser } from "@webiny/api-core/types/users.js";
+import type { NotAuthorizedError, EmailTakenError, UserValidationError } from "@webiny/api-core/features/users/shared/errors.js";
+import { UpdateUserUseCase as CoreUpdateUserUseCase } from "@webiny/api-core/features/users/UpdateUser/index.js";
+import type { CognitoUpdateUserError } from "../../../api/domain/errors.js";
+export interface UpdateAdminUserInput {
+    displayName?: string;
+    email?: string;
+    firstName?: string;
+    lastName?: string;
+    password?: string;
+    avatar?: Record<string, any> | null;
+    roles?: string[];
+    teams?: string[];
+}
+export interface IUpdateUserUseCaseErrors {
+    authorization: NotAuthorizedError;
+    validation: UserValidationError;
+    emailTaken: EmailTakenError;
+    updateAdminUser: CoreUpdateUserUseCase.Error;
+    cognitoUpdateUser: CognitoUpdateUserError;
+}
+type IUpdateAdminUserError = IUpdateUserUseCaseErrors[keyof IUpdateUserUseCaseErrors];
+export interface IUpdateUserUseCase {
+    execute(id: string, input: UpdateAdminUserInput): Promise<Result<AdminUser, IUpdateAdminUserError>>;
+}
+export declare const UpdateUserUseCase: import("@webiny/di").Abstraction<IUpdateUserUseCase>;
+export declare namespace UpdateUserUseCase {
+    type Interface = IUpdateUserUseCase;
+    type Input = UpdateAdminUserInput;
+    type Error = IUpdateAdminUserError;
+}
+export {};

package/api/features/UpdateUser/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const UpdateUserUseCase = createAbstraction("UpdateUserUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/api/features/UpdateUser/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","UpdateUserUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { AdminUser } from \"@webiny/api-core/types/users.js\";\nimport type {\n    NotAuthorizedError,\n    EmailTakenError,\n    UserValidationError\n} from \"@webiny/api-core/features/users/shared/errors.js\";\nimport { UpdateUserUseCase as CoreUpdateUserUseCase } from \"@webiny/api-core/features/users/UpdateUser/index.js\";\nimport type { CognitoUpdateUserError } from \"~/api/domain/errors.js\";\n\nexport interface UpdateAdminUserInput {\n    displayName?: string;\n    email?: string;\n    firstName?: string;\n    lastName?: string;\n    password?: string;\n    avatar?: Record<string, any> | null;\n    roles?: string[];\n    teams?: string[];\n}\n\nexport interface IUpdateUserUseCaseErrors {\n    authorization: NotAuthorizedError;\n    validation: UserValidationError;\n    emailTaken: EmailTakenError;\n    updateAdminUser: CoreUpdateUserUseCase.Error;\n    cognitoUpdateUser: CognitoUpdateUserError;\n}\n\ntype IUpdateAdminUserError = IUpdateUserUseCaseErrors[keyof IUpdateUserUseCaseErrors];\n\nexport interface IUpdateUserUseCase {\n    execute(\n        id: string,\n        input: UpdateAdminUserInput\n    ): Promise<Result<AdminUser, IUpdateAdminUserError>>;\n}\n\nexport const UpdateUserUseCase = createAbstraction<IUpdateUserUseCase>(\"UpdateUserUseCase\");\n\nexport namespace UpdateUserUseCase {\n    export type Interface = IUpdateUserUseCase;\n    export type Input = UpdateAdminUserInput;\n    export type Error = IUpdateAdminUserError;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAuCvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAqB,mBAAmB,CAAC","ignoreList":[]}

package/api/features/UpdateUser/feature.d.ts

@@ -0,0 +1 @@
+export declare const UpdateUserFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/api/features/UpdateUser/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { UpdateUserUseCase } from "./UpdateUserUseCase.js";
+export const UpdateUserFeature = createFeature({
+  name: "UpdateUserFeature",
+  register(container) {
+    container.register(UpdateUserUseCase);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/api/features/UpdateUser/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","UpdateUserUseCase","UpdateUserFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UpdateUserUseCase } from \"./UpdateUserUseCase.js\";\n\nexport const UpdateUserFeature = createFeature({\n    name: \"UpdateUserFeature\",\n    register(container) {\n        container.register(UpdateUserUseCase);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,iBAAiB,GAAGF,aAAa,CAAC;EAC3CG,IAAI,EAAE,mBAAmB;EACzBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,iBAAiB,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/api/features/UpdateUser/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./feature.js";

package/api/features/UpdateUser/index.js

@@ -0,0 +1,4 @@
+export * from "./abstractions.js";
+export * from "./feature.js";
+
+//# sourceMappingURL=index.js.map

package/api/features/UpdateUser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\nexport * from \"./feature.js\";\n"],"mappings":"AAAA;AACA","ignoreList":[]}

package/api/features/UpdateUser/schema.d.ts

@@ -0,0 +1,44 @@
+import { z } from "zod";
+export declare const updateAdminUserValidation: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    firstName: z.ZodOptional<z.ZodString>;
+    lastName: z.ZodOptional<z.ZodString>;
+    password: z.ZodOptional<z.ZodString>;
+    avatar: z.ZodNullable<z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        src: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        src: string;
+        id: string;
+    }, {
+        src: string;
+        id: string;
+    }>>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    teams: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    displayName?: string | undefined;
+    roles?: string[] | undefined;
+    teams?: string[] | undefined;
+    firstName?: string | undefined;
+    lastName?: string | undefined;
+    email?: string | undefined;
+    avatar?: {
+        src: string;
+        id: string;
+    } | null | undefined;
+    password?: string | undefined;
+}, {
+    displayName?: string | undefined;
+    roles?: string[] | undefined;
+    teams?: string[] | undefined;
+    firstName?: string | undefined;
+    lastName?: string | undefined;
+    email?: string | undefined;
+    avatar?: {
+        src: string;
+        id: string;
+    } | null | undefined;
+    password?: string | undefined;
+}>;

package/api/features/UpdateUser/schema.js

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export const updateAdminUserValidation = z.object({
+  displayName: z.string().min(1).optional(),
+  email: z.string().email().optional(),
+  firstName: z.string().optional(),
+  lastName: z.string().optional(),
+  password: z.string().min(8).optional(),
+  avatar: z.object({
+    id: z.string().min(1),
+    src: z.string().url()
+  }).optional().nullable(),
+  roles: z.array(z.string()).optional(),
+  teams: z.array(z.string()).optional()
+});
+
+//# sourceMappingURL=schema.js.map

package/api/features/UpdateUser/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","updateAdminUserValidation","object","displayName","string","min","optional","email","firstName","lastName","password","avatar","id","src","url","nullable","roles","array","teams"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateAdminUserValidation = z.object({\n    displayName: z.string().min(1).optional(),\n    email: z.string().email().optional(),\n    firstName: z.string().optional(),\n    lastName: z.string().optional(),\n    password: z.string().min(8).optional(),\n    avatar: z\n        .object({\n            id: z.string().min(1),\n            src: z.string().url()\n        })\n        .optional()\n        .nullable(),\n    roles: z.array(z.string()).optional(),\n    teams: z.array(z.string()).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,yBAAyB,GAAGD,CAAC,CAACE,MAAM,CAAC;EAC9CC,WAAW,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACzCC,KAAK,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACG,KAAK,CAAC,CAAC,CAACD,QAAQ,CAAC,CAAC;EACpCE,SAAS,EAAER,CAAC,CAACI,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC;EAChCG,QAAQ,EAAET,CAAC,CAACI,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC;EAC/BI,QAAQ,EAAEV,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACtCK,MAAM,EAAEX,CAAC,CACJE,MAAM,CAAC;IACJU,EAAE,EAAEZ,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;IACrBQ,GAAG,EAAEb,CAAC,CAACI,MAAM,CAAC,CAAC,CAACU,GAAG,CAAC;EACxB,CAAC,CAAC,CACDR,QAAQ,CAAC,CAAC,CACVS,QAAQ,CAAC,CAAC;EACfC,KAAK,EAAEhB,CAAC,CAACiB,KAAK,CAACjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC;EACrCY,KAAK,EAAElB,CAAC,CAACiB,KAAK,CAACjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAAC,CAACE,QAAQ,CAAC;AACxC,CAAC,CAAC","ignoreList":[]}

package/api/features/UserInstaller/UserInstaller.d.ts

@@ -0,0 +1,27 @@
+import type { Tenant } from "@webiny/api-core/types/tenancy.js";
+import { AppInstaller } from "@webiny/api-core/features/InstallTenant";
+import { GetRoleUseCase } from "@webiny/api-core/features/GetRole";
+import { DeleteUserUseCase } from "../../../api/features/DeleteUser/index.js";
+import { CreateUserUseCase } from "../../../api/features/CreateUser/index.js";
+interface UserInstallationData {
+    firstName: string;
+    lastName: string;
+    email: string;
+    password: string;
+}
+declare class UsersInstallerImpl implements AppInstaller.Interface<UserInstallationData> {
+    private getRole;
+    private createUserUseCase;
+    private deleteUserUseCase;
+    readonly alwaysRun = false;
+    readonly appName = "Cognito";
+    readonly dependsOn: string[];
+    private createdUser;
+    constructor(getRole: GetRoleUseCase.Interface, createUserUseCase: CreateUserUseCase.Interface, deleteUserUseCase: DeleteUserUseCase.Interface);
+    install(_: Tenant, data: UserInstallationData): Promise<void>;
+    uninstall(): Promise<void>;
+}
+export declare const UserInstaller: typeof UsersInstallerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/tenancy/InstallTenant/abstractions").IAppInstaller<Record<string, any>>>;
+};
+export {};

package/api/features/UserInstaller/UserInstaller.js

@@ -0,0 +1,48 @@
+import { AppInstaller } from "@webiny/api-core/features/InstallTenant";
+import { GetRoleUseCase } from "@webiny/api-core/features/GetRole";
+import { DeleteUserUseCase } from "../DeleteUser/index.js";
+import { CreateUserUseCase } from "../CreateUser/index.js";
+class UsersInstallerImpl {
+  alwaysRun = false;
+  appName = "Cognito";
+  dependsOn = ["Security"];
+  constructor(getRole, createUserUseCase, deleteUserUseCase) {
+    this.getRole = getRole;
+    this.createUserUseCase = createUserUseCase;
+    this.deleteUserUseCase = deleteUserUseCase;
+  }
+  async install(_, data) {
+    // Load `full-access` role and assign it to the new user
+    const roleResult = await this.getRole.execute({
+      slug: "full-access"
+    });
+    if (roleResult.isFail()) {
+      throw new Error(`Failed to get full-access role: ${roleResult.error.message}`);
+    }
+    const role = roleResult.value;
+
+    // Create user with displayName and full-access role
+    const userWithDisplayName = {
+      ...data,
+      displayName: `${data.firstName} ${data.lastName}`,
+      roles: [role.id],
+      teams: []
+    };
+    const createResult = await this.createUserUseCase.execute(userWithDisplayName);
+    if (createResult.isFail()) {
+      throw new Error(`Failed to create admin user: ${createResult.error.message}`);
+    }
+    this.createdUser = createResult.value;
+  }
+  async uninstall() {
+    if (this.createdUser) {
+      await this.deleteUserUseCase.execute(this.createdUser.id);
+    }
+  }
+}
+export const UserInstaller = AppInstaller.createImplementation({
+  implementation: UsersInstallerImpl,
+  dependencies: [GetRoleUseCase, CreateUserUseCase, DeleteUserUseCase]
+});
+
+//# sourceMappingURL=UserInstaller.js.map

package/api/features/UserInstaller/UserInstaller.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["AppInstaller","GetRoleUseCase","DeleteUserUseCase","CreateUserUseCase","UsersInstallerImpl","alwaysRun","appName","dependsOn","constructor","getRole","createUserUseCase","deleteUserUseCase","install","_","data","roleResult","execute","slug","isFail","Error","error","message","role","value","userWithDisplayName","displayName","firstName","lastName","roles","id","teams","createResult","createdUser","uninstall","UserInstaller","createImplementation","implementation","dependencies"],"sources":["UserInstaller.ts"],"sourcesContent":["import type { Tenant } from \"@webiny/api-core/types/tenancy.js\";\nimport type { AdminUser } from \"@webiny/api-core/types/users.js\";\nimport { AppInstaller } from \"@webiny/api-core/features/InstallTenant\";\nimport { GetRoleUseCase } from \"@webiny/api-core/features/GetRole\";\nimport { DeleteUserUseCase } from \"~/api/features/DeleteUser/index.js\";\nimport { CreateUserUseCase } from \"~/api/features/CreateUser/index.js\";\n\ninterface UserInstallationData {\n    firstName: string;\n    lastName: string;\n    email: string;\n    password: string;\n}\n\nclass UsersInstallerImpl implements AppInstaller.Interface<UserInstallationData> {\n    readonly alwaysRun = false;\n    readonly appName = \"Cognito\";\n    readonly dependsOn = [\"Security\"];\n    private createdUser: AdminUser | undefined;\n\n    constructor(\n        private getRole: GetRoleUseCase.Interface,\n        private createUserUseCase: CreateUserUseCase.Interface,\n        private deleteUserUseCase: DeleteUserUseCase.Interface\n    ) {}\n\n    async install(_: Tenant, data: UserInstallationData): Promise<void> {\n        // Load `full-access` role and assign it to the new user\n        const roleResult = await this.getRole.execute({ slug: \"full-access\" });\n        if (roleResult.isFail()) {\n            throw new Error(`Failed to get full-access role: ${roleResult.error.message}`);\n        }\n\n        const role = roleResult.value;\n\n        // Create user with displayName and full-access role\n        const userWithDisplayName: CreateUserUseCase.Input = {\n            ...data,\n            displayName: `${data.firstName} ${data.lastName}`,\n            roles: [role.id],\n            teams: []\n        };\n\n        const createResult = await this.createUserUseCase.execute(userWithDisplayName);\n        if (createResult.isFail()) {\n            throw new Error(`Failed to create admin user: ${createResult.error.message}`);\n        }\n\n        this.createdUser = createResult.value;\n    }\n\n    async uninstall(): Promise<void> {\n        if (this.createdUser) {\n            await this.deleteUserUseCase.execute(this.createdUser.id);\n        }\n    }\n}\n\nexport const UserInstaller = AppInstaller.createImplementation({\n    implementation: UsersInstallerImpl,\n    dependencies: [GetRoleUseCase, CreateUserUseCase, DeleteUserUseCase]\n});\n"],"mappings":"AAEA,SAASA,YAAY,QAAQ,yCAAyC;AACtE,SAASC,cAAc,QAAQ,mCAAmC;AAClE,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAS1B,MAAMC,kBAAkB,CAAyD;EACpEC,SAAS,GAAG,KAAK;EACjBC,OAAO,GAAG,SAAS;EACnBC,SAAS,GAAG,CAAC,UAAU,CAAC;EAGjCC,WAAWA,CACCC,OAAiC,EACjCC,iBAA8C,EAC9CC,iBAA8C,EACxD;IAAA,KAHUF,OAAiC,GAAjCA,OAAiC;IAAA,KACjCC,iBAA8C,GAA9CA,iBAA8C;IAAA,KAC9CC,iBAA8C,GAA9CA,iBAA8C;EACvD;EAEH,MAAMC,OAAOA,CAACC,CAAS,EAAEC,IAA0B,EAAiB;IAChE;IACA,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACN,OAAO,CAACO,OAAO,CAAC;MAAEC,IAAI,EAAE;IAAc,CAAC,CAAC;IACtE,IAAIF,UAAU,CAACG,MAAM,CAAC,CAAC,EAAE;MACrB,MAAM,IAAIC,KAAK,CAAC,mCAAmCJ,UAAU,CAACK,KAAK,CAACC,OAAO,EAAE,CAAC;IAClF;IAEA,MAAMC,IAAI,GAAGP,UAAU,CAACQ,KAAK;;IAE7B;IACA,MAAMC,mBAA4C,GAAG;MACjD,GAAGV,IAAI;MACPW,WAAW,EAAE,GAAGX,IAAI,CAACY,SAAS,IAAIZ,IAAI,CAACa,QAAQ,EAAE;MACjDC,KAAK,EAAE,CAACN,IAAI,CAACO,EAAE,CAAC;MAChBC,KAAK,EAAE;IACX,CAAC;IAED,MAAMC,YAAY,GAAG,MAAM,IAAI,CAACrB,iBAAiB,CAACM,OAAO,CAACQ,mBAAmB,CAAC;IAC9E,IAAIO,YAAY,CAACb,MAAM,CAAC,CAAC,EAAE;MACvB,MAAM,IAAIC,KAAK,CAAC,gCAAgCY,YAAY,CAACX,KAAK,CAACC,OAAO,EAAE,CAAC;IACjF;IAEA,IAAI,CAACW,WAAW,GAAGD,YAAY,CAACR,KAAK;EACzC;EAEA,MAAMU,SAASA,CAAA,EAAkB;IAC7B,IAAI,IAAI,CAACD,WAAW,EAAE;MAClB,MAAM,IAAI,CAACrB,iBAAiB,CAACK,OAAO,CAAC,IAAI,CAACgB,WAAW,CAACH,EAAE,CAAC;IAC7D;EACJ;AACJ;AAEA,OAAO,MAAMK,aAAa,GAAGlC,YAAY,CAACmC,oBAAoB,CAAC;EAC3DC,cAAc,EAAEhC,kBAAkB;EAClCiC,YAAY,EAAE,CAACpC,cAAc,EAAEE,iBAAiB,EAAED,iBAAiB;AACvE,CAAC,CAAC","ignoreList":[]}

package/api/features/UserInstaller/feature.d.ts

@@ -0,0 +1 @@
+export declare const UserInstallerFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/api/features/UserInstaller/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { UserInstaller } from "./UserInstaller.js";
+export const UserInstallerFeature = createFeature({
+  name: "UserInstallerFeature",
+  register(container) {
+    container.register(UserInstaller);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/api/features/UserInstaller/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","UserInstaller","UserInstallerFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UserInstaller } from \"./UserInstaller.js\";\n\nexport const UserInstallerFeature = createFeature({\n    name: \"UserInstallerFeature\",\n    register(container) {\n        container.register(UserInstaller);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,aAAa;AAEtB,OAAO,MAAMC,oBAAoB,GAAGF,aAAa,CAAC;EAC9CG,IAAI,EAAE,sBAAsB;EAC5BC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,aAAa,CAAC;EACrC;AACJ,CAAC,CAAC","ignoreList":[]}

package/api/graphql/user.gql.d.ts

@@ -0,0 +1,8 @@
+import { CoreGraphQLSchemaFactory } from "@webiny/handler-graphql/graphql/abstractions.js";
+declare class AdminUserSchemaImpl implements CoreGraphQLSchemaFactory.Interface {
+    execute(builder: CoreGraphQLSchemaFactory.SchemaBuilder): CoreGraphQLSchemaFactory.Return;
+}
+export declare const AdminUsersSchema: typeof AdminUserSchemaImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/handler-graphql/graphql/abstractions.public").IGraphQLSchemaFactory>;
+};
+export {};

package/api/graphql/user.gql.js

@@ -0,0 +1,167 @@
+import { ErrorResponse, NotFoundResponse, Response } from "@webiny/handler-graphql/responses.js";
+import { CoreGraphQLSchemaFactory } from "@webiny/handler-graphql/graphql/abstractions.js";
+import { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import { GetUserUseCase } from "@webiny/api-core/features/GetUser";
+import NotAuthorizedResponse from "@webiny/api-core/graphql/security/NotAuthorizedResponse.js";
+import { CreateUserUseCase } from "../features/CreateUser/index.js";
+import { UpdateUserUseCase } from "../features/UpdateUser/index.js";
+import { DeleteUserUseCase } from "../features/DeleteUser/index.js";
+class AdminUserSchemaImpl {
+  async execute(builder) {
+    builder.addTypeDefs(/* GraphQL */`
+            """
+            This input type is used by administrators to create other user's accounts within the same tenant.
+            """
+            input AdminUsersCreateInput {
+                email: String!
+                firstName: String!
+                lastName: String!
+                password: String!
+                avatar: JSON
+                roles: [RefInput!]
+                teams: [RefInput!]
+            }
+
+            """
+            This input type is used by administrators to update other user's accounts within the same tenant.
+            """
+            input AdminUsersUpdateInput {
+                email: String
+                firstName: String
+                lastName: String
+                password: String
+                avatar: JSON
+                roles: [RefInput!]
+                teams: [RefInput!]
+            }
+
+            """
+            This input type is used by the user who is updating his own account
+            """
+            input AdminUsersCurrentUserInput {
+                email: String
+                firstName: String
+                lastName: String
+                password: String
+                avatar: JSON
+            }
+
+            extend type AdminUsersMutation {
+                updateCurrentUser(data: AdminUsersCurrentUserInput!): AdminUsersResponse
+
+                createUser(data: AdminUsersCreateInput!): AdminUsersResponse
+
+                updateUser(id: ID!, data: AdminUsersUpdateInput!): AdminUsersResponse
+
+                deleteUser(id: ID!): AdminUsersBooleanResponse
+            }
+        `);
+    builder.addResolver({
+      path: "AdminUsersMutation.updateCurrentUser",
+      dependencies: [IdentityContext, GetUserUseCase, UpdateUserUseCase],
+      resolver: (identityContext, getUserUseCase, updateUserUseCase) => {
+        return async ({
+          args
+        }) => {
+          const identity = identityContext.getIdentity();
+          if (!identity.isAdmin()) {
+            return new NotAuthorizedResponse();
+          }
+
+          // Current user might not have permissions for `adminUsers`.
+          return await identityContext.withoutAuthorization(async () => {
+            const getUserResult = await getUserUseCase.execute({
+              id: identity.id
+            });
+            if (getUserResult.isFail()) {
+              // TODO: check if current identity belongs to a different tenant.
+              // TODO: If so, switch to that other tenant, and update his profile there.
+              return new NotFoundResponse("User not found!");
+            }
+            const user = getUserResult.value;
+
+            // TODO: UpdateCurrentUser should be a dedicated use case
+            const updateResult = await updateUserUseCase.execute(user.id, args.data);
+            if (updateResult.isFail()) {
+              return new ErrorResponse({
+                message: updateResult.error.message,
+                code: updateResult.error.code,
+                data: updateResult.error.data
+              });
+            }
+            return new Response(updateResult.value);
+          });
+        };
+      }
+    });
+    builder.addResolver({
+      path: "AdminUsersMutation.createUser",
+      dependencies: [CreateUserUseCase],
+      resolver: createUserUseCase => {
+        return async ({
+          args
+        }) => {
+          const result = await createUserUseCase.execute(args.data);
+          if (result.isFail()) {
+            return new ErrorResponse({
+              message: result.error.message,
+              code: result.error.code,
+              data: result.error.data
+            });
+          }
+          return new Response(result.value);
+        };
+      }
+    });
+    builder.addResolver({
+      path: "AdminUsersMutation.updateUser",
+      dependencies: [UpdateUserUseCase, IdentityContext],
+      resolver: (updateUserUseCase, identityContext) => {
+        return async ({
+          args
+        }) => {
+          if (args.id === identityContext.getIdentity().id) {
+            return new ErrorResponse({
+              message: "You're not allowed to update your own account using this API.",
+              code: "AdminUser/GraphQL/UpdateSelf"
+            });
+          }
+          const result = await updateUserUseCase.execute(args.id, args.data);
+          if (result.isFail()) {
+            return new ErrorResponse({
+              message: result.error.message,
+              code: result.error.code
+            });
+          }
+          return new Response(result.value);
+        };
+      }
+    });
+    builder.addResolver({
+      path: "AdminUsersMutation.deleteUser",
+      dependencies: [DeleteUserUseCase],
+      resolver: deleteUserUseCase => {
+        return async ({
+          args
+        }) => {
+          const result = await deleteUserUseCase.execute(args.id);
+          if (result.isFail()) {
+            return new ErrorResponse({
+              message: result.error.message,
+              code: result.error.code,
+              data: result.error.data
+            });
+          }
+          return new Response(true);
+        };
+      }
+    });
+    return builder;
+  }
+}
+export const AdminUsersSchema = CoreGraphQLSchemaFactory.createImplementation({
+  implementation: AdminUserSchemaImpl,
+  dependencies: []
+});
+
+//# sourceMappingURL=user.gql.js.map

package/api/graphql/user.gql.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ErrorResponse","NotFoundResponse","Response","CoreGraphQLSchemaFactory","IdentityContext","GetUserUseCase","NotAuthorizedResponse","CreateUserUseCase","UpdateUserUseCase","DeleteUserUseCase","AdminUserSchemaImpl","execute","builder","addTypeDefs","addResolver","path","dependencies","resolver","identityContext","getUserUseCase","updateUserUseCase","args","identity","getIdentity","isAdmin","withoutAuthorization","getUserResult","id","isFail","user","value","updateResult","data","message","error","code","createUserUseCase","result","deleteUserUseCase","AdminUsersSchema","createImplementation","implementation"],"sources":["user.gql.ts"],"sourcesContent":["import { ErrorResponse, NotFoundResponse, Response } from \"@webiny/handler-graphql/responses.js\";\nimport { CoreGraphQLSchemaFactory } from \"@webiny/handler-graphql/graphql/abstractions.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport { GetUserUseCase } from \"@webiny/api-core/features/GetUser\";\nimport NotAuthorizedResponse from \"@webiny/api-core/graphql/security/NotAuthorizedResponse.js\";\nimport { CreateUserUseCase } from \"~/api/features/CreateUser/index.js\";\nimport { UpdateUserUseCase } from \"~/api/features/UpdateUser/index.js\";\nimport { DeleteUserUseCase } from \"~/api/features/DeleteUser/index.js\";\n\nclass AdminUserSchemaImpl implements CoreGraphQLSchemaFactory.Interface {\n    async execute(\n        builder: CoreGraphQLSchemaFactory.SchemaBuilder\n    ): CoreGraphQLSchemaFactory.Return {\n        builder.addTypeDefs(/* GraphQL */ `\n            \"\"\"\n            This input type is used by administrators to create other user's accounts within the same tenant.\n            \"\"\"\n            input AdminUsersCreateInput {\n                email: String!\n                firstName: String!\n                lastName: String!\n                password: String!\n                avatar: JSON\n                roles: [RefInput!]\n                teams: [RefInput!]\n            }\n\n            \"\"\"\n            This input type is used by administrators to update other user's accounts within the same tenant.\n            \"\"\"\n            input AdminUsersUpdateInput {\n                email: String\n                firstName: String\n                lastName: String\n                password: String\n                avatar: JSON\n                roles: [RefInput!]\n                teams: [RefInput!]\n            }\n\n            \"\"\"\n            This input type is used by the user who is updating his own account\n            \"\"\"\n            input AdminUsersCurrentUserInput {\n                email: String\n                firstName: String\n                lastName: String\n                password: String\n                avatar: JSON\n            }\n\n            extend type AdminUsersMutation {\n                updateCurrentUser(data: AdminUsersCurrentUserInput!): AdminUsersResponse\n\n                createUser(data: AdminUsersCreateInput!): AdminUsersResponse\n\n                updateUser(id: ID!, data: AdminUsersUpdateInput!): AdminUsersResponse\n\n                deleteUser(id: ID!): AdminUsersBooleanResponse\n            }\n        `);\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.updateCurrentUser\",\n            dependencies: [IdentityContext, GetUserUseCase, UpdateUserUseCase],\n            resolver: (\n                identityContext: IdentityContext.Interface,\n                getUserUseCase: GetUserUseCase.Interface,\n                updateUserUseCase: UpdateUserUseCase.Interface\n            ) => {\n                return async ({ args }) => {\n                    const identity = identityContext.getIdentity();\n                    if (!identity.isAdmin()) {\n                        return new NotAuthorizedResponse();\n                    }\n\n                    // Current user might not have permissions for `adminUsers`.\n                    return await identityContext.withoutAuthorization(async () => {\n                        const getUserResult = await getUserUseCase.execute({ id: identity.id });\n                        if (getUserResult.isFail()) {\n                            // TODO: check if current identity belongs to a different tenant.\n                            // TODO: If so, switch to that other tenant, and update his profile there.\n                            return new NotFoundResponse(\"User not found!\");\n                        }\n\n                        const user = getUserResult.value;\n\n                        // TODO: UpdateCurrentUser should be a dedicated use case\n                        const updateResult = await updateUserUseCase.execute(user.id, args.data);\n                        if (updateResult.isFail()) {\n                            return new ErrorResponse({\n                                message: updateResult.error.message,\n                                code: updateResult.error.code,\n                                data: updateResult.error.data\n                            });\n                        }\n\n                        return new Response(updateResult.value);\n                    });\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.createUser\",\n            dependencies: [CreateUserUseCase],\n            resolver: (createUserUseCase: CreateUserUseCase.Interface) => {\n                return async ({ args }) => {\n                    const result = await createUserUseCase.execute(args.data);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code,\n                            data: result.error.data\n                        });\n                    }\n\n                    return new Response(result.value);\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.updateUser\",\n            dependencies: [UpdateUserUseCase, IdentityContext],\n            resolver: (\n                updateUserUseCase: UpdateUserUseCase.Interface,\n                identityContext: IdentityContext.Interface\n            ) => {\n                return async ({ args }) => {\n                    if (args.id === identityContext.getIdentity().id) {\n                        return new ErrorResponse({\n                            message:\n                                \"You're not allowed to update your own account using this API.\",\n                            code: \"AdminUser/GraphQL/UpdateSelf\"\n                        });\n                    }\n\n                    const result = await updateUserUseCase.execute(args.id, args.data);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code\n                        });\n                    }\n\n                    return new Response(result.value);\n                };\n            }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersMutation.deleteUser\",\n            dependencies: [DeleteUserUseCase],\n            resolver: (deleteUserUseCase: DeleteUserUseCase.Interface) => {\n                return async ({ args }) => {\n                    const result = await deleteUserUseCase.execute(args.id);\n                    if (result.isFail()) {\n                        return new ErrorResponse({\n                            message: result.error.message,\n                            code: result.error.code,\n                            data: result.error.data\n                        });\n                    }\n\n                    return new Response(true);\n                };\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const AdminUsersSchema = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: AdminUserSchemaImpl,\n    dependencies: []\n});\n"],"mappings":"AAAA,SAASA,aAAa,EAAEC,gBAAgB,EAAEC,QAAQ,QAAQ,sCAAsC;AAChG,SAASC,wBAAwB,QAAQ,iDAAiD;AAC1F,SAASC,eAAe,QAAQ,2CAA2C;AAC3E,SAASC,cAAc,QAAQ,mCAAmC;AAClE,OAAOC,qBAAqB,MAAM,4DAA4D;AAC9F,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAE1B,MAAMC,mBAAmB,CAA+C;EACpE,MAAMC,OAAOA,CACTC,OAA+C,EAChB;IAC/BA,OAAO,CAACC,WAAW,CAAC,aAAc;AAC1C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,CAAC;IAEFD,OAAO,CAACE,WAAW,CAAC;MAChBC,IAAI,EAAE,sCAAsC;MAC5CC,YAAY,EAAE,CAACZ,eAAe,EAAEC,cAAc,EAAEG,iBAAiB,CAAC;MAClES,QAAQ,EAAEA,CACNC,eAA0C,EAC1CC,cAAwC,EACxCC,iBAA8C,KAC7C;QACD,OAAO,OAAO;UAAEC;QAAK,CAAC,KAAK;UACvB,MAAMC,QAAQ,GAAGJ,eAAe,CAACK,WAAW,CAAC,CAAC;UAC9C,IAAI,CAACD,QAAQ,CAACE,OAAO,CAAC,CAAC,EAAE;YACrB,OAAO,IAAIlB,qBAAqB,CAAC,CAAC;UACtC;;UAEA;UACA,OAAO,MAAMY,eAAe,CAACO,oBAAoB,CAAC,YAAY;YAC1D,MAAMC,aAAa,GAAG,MAAMP,cAAc,CAACR,OAAO,CAAC;cAAEgB,EAAE,EAAEL,QAAQ,CAACK;YAAG,CAAC,CAAC;YACvE,IAAID,aAAa,CAACE,MAAM,CAAC,CAAC,EAAE;cACxB;cACA;cACA,OAAO,IAAI3B,gBAAgB,CAAC,iBAAiB,CAAC;YAClD;YAEA,MAAM4B,IAAI,GAAGH,aAAa,CAACI,KAAK;;YAEhC;YACA,MAAMC,YAAY,GAAG,MAAMX,iBAAiB,CAACT,OAAO,CAACkB,IAAI,CAACF,EAAE,EAAEN,IAAI,CAACW,IAAI,CAAC;YACxE,IAAID,YAAY,CAACH,MAAM,CAAC,CAAC,EAAE;cACvB,OAAO,IAAI5B,aAAa,CAAC;gBACrBiC,OAAO,EAAEF,YAAY,CAACG,KAAK,CAACD,OAAO;gBACnCE,IAAI,EAAEJ,YAAY,CAACG,KAAK,CAACC,IAAI;gBAC7BH,IAAI,EAAED,YAAY,CAACG,KAAK,CAACF;cAC7B,CAAC,CAAC;YACN;YAEA,OAAO,IAAI9B,QAAQ,CAAC6B,YAAY,CAACD,KAAK,CAAC;UAC3C,CAAC,CAAC;QACN,CAAC;MACL;IACJ,CAAC,CAAC;IAEFlB,OAAO,CAACE,WAAW,CAAC;MAChBC,IAAI,EAAE,+BAA+B;MACrCC,YAAY,EAAE,CAACT,iBAAiB,CAAC;MACjCU,QAAQ,EAAGmB,iBAA8C,IAAK;QAC1D,OAAO,OAAO;UAAEf;QAAK,CAAC,KAAK;UACvB,MAAMgB,MAAM,GAAG,MAAMD,iBAAiB,CAACzB,OAAO,CAACU,IAAI,CAACW,IAAI,CAAC;UACzD,IAAIK,MAAM,CAACT,MAAM,CAAC,CAAC,EAAE;YACjB,OAAO,IAAI5B,aAAa,CAAC;cACrBiC,OAAO,EAAEI,MAAM,CAACH,KAAK,CAACD,OAAO;cAC7BE,IAAI,EAAEE,MAAM,CAACH,KAAK,CAACC,IAAI;cACvBH,IAAI,EAAEK,MAAM,CAACH,KAAK,CAACF;YACvB,CAAC,CAAC;UACN;UAEA,OAAO,IAAI9B,QAAQ,CAACmC,MAAM,CAACP,KAAK,CAAC;QACrC,CAAC;MACL;IACJ,CAAC,CAAC;IAEFlB,OAAO,CAACE,WAAW,CAAC;MAChBC,IAAI,EAAE,+BAA+B;MACrCC,YAAY,EAAE,CAACR,iBAAiB,EAAEJ,eAAe,CAAC;MAClDa,QAAQ,EAAEA,CACNG,iBAA8C,EAC9CF,eAA0C,KACzC;QACD,OAAO,OAAO;UAAEG;QAAK,CAAC,KAAK;UACvB,IAAIA,IAAI,CAACM,EAAE,KAAKT,eAAe,CAACK,WAAW,CAAC,CAAC,CAACI,EAAE,EAAE;YAC9C,OAAO,IAAI3B,aAAa,CAAC;cACrBiC,OAAO,EACH,+DAA+D;cACnEE,IAAI,EAAE;YACV,CAAC,CAAC;UACN;UAEA,MAAME,MAAM,GAAG,MAAMjB,iBAAiB,CAACT,OAAO,CAACU,IAAI,CAACM,EAAE,EAAEN,IAAI,CAACW,IAAI,CAAC;UAClE,IAAIK,MAAM,CAACT,MAAM,CAAC,CAAC,EAAE;YACjB,OAAO,IAAI5B,aAAa,CAAC;cACrBiC,OAAO,EAAEI,MAAM,CAACH,KAAK,CAACD,OAAO;cAC7BE,IAAI,EAAEE,MAAM,CAACH,KAAK,CAACC;YACvB,CAAC,CAAC;UACN;UAEA,OAAO,IAAIjC,QAAQ,CAACmC,MAAM,CAACP,KAAK,CAAC;QACrC,CAAC;MACL;IACJ,CAAC,CAAC;IAEFlB,OAAO,CAACE,WAAW,CAAC;MAChBC,IAAI,EAAE,+BAA+B;MACrCC,YAAY,EAAE,CAACP,iBAAiB,CAAC;MACjCQ,QAAQ,EAAGqB,iBAA8C,IAAK;QAC1D,OAAO,OAAO;UAAEjB;QAAK,CAAC,KAAK;UACvB,MAAMgB,MAAM,GAAG,MAAMC,iBAAiB,CAAC3B,OAAO,CAACU,IAAI,CAACM,EAAE,CAAC;UACvD,IAAIU,MAAM,CAACT,MAAM,CAAC,CAAC,EAAE;YACjB,OAAO,IAAI5B,aAAa,CAAC;cACrBiC,OAAO,EAAEI,MAAM,CAACH,KAAK,CAACD,OAAO;cAC7BE,IAAI,EAAEE,MAAM,CAACH,KAAK,CAACC,IAAI;cACvBH,IAAI,EAAEK,MAAM,CAACH,KAAK,CAACF;YACvB,CAAC,CAAC;UACN;UAEA,OAAO,IAAI9B,QAAQ,CAAC,IAAI,CAAC;QAC7B,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,OAAOU,OAAO;EAClB;AACJ;AAEA,OAAO,MAAM2B,gBAAgB,GAAGpC,wBAAwB,CAACqC,oBAAoB,CAAC;EAC1EC,cAAc,EAAE/B,mBAAmB;EACnCM,YAAY,EAAE;AAClB,CAAC,CAAC","ignoreList":[]}

package/index.d.ts

@@ -0,0 +1,2 @@
+export { Cognito } from "./Cognito.js";
+export { CognitoIdpConfig } from "./api/features/CognitoIdp/index.js";

package/index.js

@@ -0,0 +1,4 @@
+export { Cognito } from "./Cognito.js";
+export { CognitoIdpConfig } from "./api/features/CognitoIdp/index.js";
+
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Cognito","CognitoIdpConfig"],"sources":["index.ts"],"sourcesContent":["export { Cognito } from \"./Cognito.js\";\nexport { CognitoIdpConfig } from \"./api/features/CognitoIdp/index.js\";\n"],"mappings":"AAAA,SAASA,OAAO;AAChB,SAASC,gBAAgB","ignoreList":[]}

package/package.json

@@ -0,0 +1,48 @@
+{
+	"name": "@webiny/cognito",
+	"version": "0.0.0-unstable.3c5210ad37",
+	"type": "module",
+	"license": "MIT",
+	"sideEffects": false,
+	"main": "index.js",
+	"description": "Security plugins for Cognito",
+	"author": "Webiny Ltd.",
+	"dependencies": {
+		"@apollo/react-hooks": "3.1.5",
+		"@aws-amplify/auth": "5.6.18",
+		"@webiny/admin-ui": "0.0.0-unstable.3c5210ad37",
+		"@webiny/api-core": "0.0.0-unstable.3c5210ad37",
+		"@webiny/app": "0.0.0-unstable.3c5210ad37",
+		"@webiny/app-admin": "0.0.0-unstable.3c5210ad37",
+		"@webiny/aws-sdk": "0.0.0-unstable.3c5210ad37",
+		"@webiny/di": "*",
+		"@webiny/feature": "0.0.0-unstable.3c5210ad37",
+		"@webiny/form": "0.0.0-unstable.3c5210ad37",
+		"@webiny/handler-graphql": "0.0.0-unstable.3c5210ad37",
+		"@webiny/icons": "0.0.0-unstable.3c5210ad37",
+		"@webiny/project": "0.0.0-unstable.3c5210ad37",
+		"@webiny/project-aws": "0.0.0-unstable.3c5210ad37",
+		"@webiny/ui": "0.0.0-unstable.3c5210ad37",
+		"@webiny/validation": "0.0.0-unstable.3c5210ad37",
+		"graphql": "16.13.0",
+		"graphql-tag": "2.12.6",
+		"jsonwebtoken": "9.0.3",
+		"lodash": "4.17.23",
+		"mobx": "6.15.0",
+		"mobx-react-lite": "3.4.3",
+		"react": "18.2.0",
+		"zod": "3.25.76"
+	},
+	"devDependencies": {
+		"@types/react": "18.2.79",
+		"@webiny/build-tools": "0.0.0-unstable.3c5210ad37",
+		"@webiny/project-utils": "0.0.0-unstable.3c5210ad37",
+		"@webiny/wcp": "0.0.0-unstable.3c5210ad37",
+		"vitest": "4.0.18"
+	},
+	"publishConfig": {
+		"access": "public",
+		"directory": "dist"
+	},
+	"gitHead": "3c5210ad37c29bfabfeb8a91d3220115352b2ea9"
+}