@webiny/cognito 6.4.4-beta.2 → 6.4.4-beta.4

package/api/features/CognitoIdp/CognitoIdentityProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"api/features/CognitoIdp/CognitoIdentityProvider.js","sources":["../../../../src/api/features/CognitoIdp/CognitoIdentityProvider.ts"],"sourcesContent":["import { OidcIdentityProvider } from \"@webiny/api-core/idp\";\nimport { CognitoIdpConfig } from \"./abstractions.js\";\n\nclass CognitoIdentityProviderImpl implements OidcIdentityProvider.Interface {\n    public clientId: string;\n    public issuer: string;\n\n    constructor(private config: CognitoIdpConfig.Interface | undefined) {\n        const region = String(process.env.COGNITO_REGION);\n        const userPoolId = String(process.env.COGNITO_USER_POOL_ID);\n        this.clientId = String(process.env.COGNITO_CLIENT_ID);\n        this.issuer = `https://cognito-idp.${region}.amazonaws.com/${userPoolId}`;\n    }\n\n    isApplicable(token: OidcIdentityProvider.JwtPayload) {\n        const issuer = token.iss as string;\n        if (!issuer) {\n            return false;\n        }\n\n        return issuer === this.issuer;\n    }\n\n    async getIdentity(\n        token: OidcIdentityProvider.JwtPayload\n    ): Promise<OidcIdentityProvider.IdentityData> {\n        const customIdentity = this.config ? await this.config.getIdentity(token) : null;\n\n        if (customIdentity) {\n            return {\n                ...customIdentity,\n                type: \"admin\",\n                profile: {\n                    ...customIdentity,\n                    external: false\n                }\n            };\n        }\n\n        // Default identity\n        const customId = token[\"custom:id\"] as string | undefined;\n        const givenName = token[\"given_name\"] as string | undefined;\n        const familyName = token[\"family_name\"] as string | undefined;\n        const email = token[\"email\"] as string | undefined;\n\n        return {\n            id: customId || token.sub || \"\",\n            displayName: `${givenName || \"\"} ${familyName || \"\"}`.trim() || email || \"Unknown User\",\n            type: \"admin\",\n            profile: {\n                email: email || \"\",\n                firstName: givenName || \"\",\n                lastName: familyName || \"\",\n                external: false\n            }\n        };\n    }\n\n    async verifyTokenClaims(token: OidcIdentityProvider.JwtPayload): Promise<void> {\n        if (this.config?.verifyTokenClaims) {\n            await this.config.verifyTokenClaims(token);\n        }\n    }\n}\n\nexport const CognitoIdentityProvider = OidcIdentityProvider.createImplementation({\n    implementation: CognitoIdentityProviderImpl,\n    dependencies: [[CognitoIdpConfig, { optional: true }]]\n});\n"],"names":["CognitoIdentityProviderImpl","config","region","String","process","userPoolId","token","issuer","customIdentity","customId","givenName","familyName","email","CognitoIdentityProvider","OidcIdentityProvider","CognitoIdpConfig"],"mappings":";;AAGA,MAAMA;IAIF,YAAoBC,MAA8C,CAAE;aAAhDA,MAAM,GAANA;QAChB,MAAMC,SAASC,OAAOC,QAAQ,GAAG,CAAC,cAAc;QAChD,MAAMC,aAAaF,OAAOC,QAAQ,GAAG,CAAC,oBAAoB;QAC1D,IAAI,CAAC,QAAQ,GAAGD,OAAOC,QAAQ,GAAG,CAAC,iBAAiB;QACpD,IAAI,CAAC,MAAM,GAAG,CAAC,oBAAoB,EAAEF,OAAO,eAAe,EAAEG,YAAY;IAC7E;IAEA,aAAaC,KAAsC,EAAE;QACjD,MAAMC,SAASD,MAAM,GAAG;QACxB,IAAI,CAACC,QACD,OAAO;QAGX,OAAOA,WAAW,IAAI,CAAC,MAAM;IACjC;IAEA,MAAM,YACFD,KAAsC,EACI;QAC1C,MAAME,iBAAiB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAACF,SAAS;QAE5E,IAAIE,gBACA,OAAO;YACH,GAAGA,cAAc;YACjB,MAAM;YACN,SAAS;gBACL,GAAGA,cAAc;gBACjB,UAAU;YACd;QACJ;QAIJ,MAAMC,WAAWH,KAAK,CAAC,YAAY;QACnC,MAAMI,YAAYJ,KAAK,CAAC,aAAa;QACrC,MAAMK,aAAaL,KAAK,CAAC,cAAc;QACvC,MAAMM,QAAQN,KAAK,CAAC,QAAQ;QAE5B,OAAO;YACH,IAAIG,YAAYH,MAAM,GAAG,IAAI;YAC7B,aAAa,GAAGI,aAAa,GAAG,CAAC,EAAEC,cAAc,IAAI,CAAC,IAAI,MAAMC,SAAS;YACzE,MAAM;YACN,SAAS;gBACL,OAAOA,SAAS;gBAChB,WAAWF,aAAa;gBACxB,UAAUC,cAAc;gBACxB,UAAU;YACd;QACJ;IACJ;IAEA,MAAM,kBAAkBL,KAAsC,EAAiB;QAC3E,IAAI,IAAI,CAAC,MAAM,EAAE,mBACb,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAACA;IAE5C;AACJ;AAEO,MAAMO,0BAA0BC,qBAAqB,oBAAoB,CAAC;IAC7E,gBAAgBd;IAChB,cAAc;QAAC;YAACe;YAAkB;gBAAE,UAAU;YAAK;SAAE;KAAC;AAC1D"}
+{"version":3,"file":"api/features/CognitoIdp/CognitoIdentityProvider.js","sources":["../../../../src/api/features/CognitoIdp/CognitoIdentityProvider.ts"],"sourcesContent":["import { OidcIdentityProvider } from \"@webiny/api-core/idp\";\nimport { CognitoIdpConfig } from \"./abstractions.js\";\n\nclass CognitoIdentityProviderImpl implements OidcIdentityProvider.Interface {\n    public clientId: string;\n    public issuer: string;\n\n    constructor(private config: CognitoIdpConfig.Interface | undefined) {\n        const region = String(process.env.COGNITO_REGION);\n        const userPoolId = String(process.env.COGNITO_USER_POOL_ID);\n        this.clientId = String(process.env.COGNITO_CLIENT_ID);\n        this.issuer = `https://cognito-idp.${region}.amazonaws.com/${userPoolId}`;\n    }\n\n    isApplicable(token: OidcIdentityProvider.JwtPayload) {\n        const issuer = token.iss as string;\n        if (!issuer) {\n            return false;\n        }\n\n        return issuer === this.issuer;\n    }\n\n    async getIdentity(\n        token: OidcIdentityProvider.JwtPayload\n    ): Promise<OidcIdentityProvider.IdentityData> {\n        const isFederated = Array.isArray(token.identities) && token.identities.length > 0;\n\n        const customId = token[\"custom:id\"] as string | undefined;\n        const givenName = token[\"given_name\"] as string | undefined;\n        const familyName = token[\"family_name\"] as string | undefined;\n        const email = token[\"email\"] as string | undefined;\n\n        const defaultIdentity: OidcIdentityProvider.IdentityData = {\n            id: customId || token.sub || \"\",\n            displayName: `${givenName || \"\"} ${familyName || \"\"}`.trim() || email || \"Unknown User\",\n            type: \"admin\",\n            profile: {\n                email: email || \"\",\n                firstName: givenName || \"\",\n                lastName: familyName || \"\",\n                external: isFederated\n            }\n        };\n\n        const customIdentity = this.config ? await this.config.getIdentity(token) : null;\n\n        if (!customIdentity) {\n            return defaultIdentity;\n        }\n\n        return {\n            ...defaultIdentity,\n            ...customIdentity,\n            type: \"admin\",\n            profile: {\n                ...defaultIdentity.profile,\n                ...customIdentity.profile,\n                external: isFederated\n            }\n        };\n    }\n\n    async verifyTokenClaims(token: OidcIdentityProvider.JwtPayload): Promise<void> {\n        if (this.config?.verifyTokenClaims) {\n            await this.config.verifyTokenClaims(token);\n        }\n    }\n}\n\nexport const CognitoIdentityProvider = OidcIdentityProvider.createImplementation({\n    implementation: CognitoIdentityProviderImpl,\n    dependencies: [[CognitoIdpConfig, { optional: true }]]\n});\n"],"names":["CognitoIdentityProviderImpl","config","region","String","process","userPoolId","token","issuer","isFederated","Array","customId","givenName","familyName","email","defaultIdentity","customIdentity","CognitoIdentityProvider","OidcIdentityProvider","CognitoIdpConfig"],"mappings":";;AAGA,MAAMA;IAIF,YAAoBC,MAA8C,CAAE;aAAhDA,MAAM,GAANA;QAChB,MAAMC,SAASC,OAAOC,QAAQ,GAAG,CAAC,cAAc;QAChD,MAAMC,aAAaF,OAAOC,QAAQ,GAAG,CAAC,oBAAoB;QAC1D,IAAI,CAAC,QAAQ,GAAGD,OAAOC,QAAQ,GAAG,CAAC,iBAAiB;QACpD,IAAI,CAAC,MAAM,GAAG,CAAC,oBAAoB,EAAEF,OAAO,eAAe,EAAEG,YAAY;IAC7E;IAEA,aAAaC,KAAsC,EAAE;QACjD,MAAMC,SAASD,MAAM,GAAG;QACxB,IAAI,CAACC,QACD,OAAO;QAGX,OAAOA,WAAW,IAAI,CAAC,MAAM;IACjC;IAEA,MAAM,YACFD,KAAsC,EACI;QAC1C,MAAME,cAAcC,MAAM,OAAO,CAACH,MAAM,UAAU,KAAKA,MAAM,UAAU,CAAC,MAAM,GAAG;QAEjF,MAAMI,WAAWJ,KAAK,CAAC,YAAY;QACnC,MAAMK,YAAYL,KAAK,CAAC,aAAa;QACrC,MAAMM,aAAaN,KAAK,CAAC,cAAc;QACvC,MAAMO,QAAQP,KAAK,CAAC,QAAQ;QAE5B,MAAMQ,kBAAqD;YACvD,IAAIJ,YAAYJ,MAAM,GAAG,IAAI;YAC7B,aAAa,GAAGK,aAAa,GAAG,CAAC,EAAEC,cAAc,IAAI,CAAC,IAAI,MAAMC,SAAS;YACzE,MAAM;YACN,SAAS;gBACL,OAAOA,SAAS;gBAChB,WAAWF,aAAa;gBACxB,UAAUC,cAAc;gBACxB,UAAUJ;YACd;QACJ;QAEA,MAAMO,iBAAiB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAACT,SAAS;QAE5E,IAAI,CAACS,gBACD,OAAOD;QAGX,OAAO;YACH,GAAGA,eAAe;YAClB,GAAGC,cAAc;YACjB,MAAM;YACN,SAAS;gBACL,GAAGD,gBAAgB,OAAO;gBAC1B,GAAGC,eAAe,OAAO;gBACzB,UAAUP;YACd;QACJ;IACJ;IAEA,MAAM,kBAAkBF,KAAsC,EAAiB;QAC3E,IAAI,IAAI,CAAC,MAAM,EAAE,mBACb,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAACA;IAE5C;AACJ;AAEO,MAAMU,0BAA0BC,qBAAqB,oBAAoB,CAAC;IAC7E,gBAAgBjB;IAChB,cAAc;QAAC;YAACkB;YAAkB;gBAAE,UAAU;YAAK;SAAE;KAAC;AAC1D"}

package/api/features/CognitoIdp/abstractions.d.ts

@@ -1,7 +1,7 @@
 import type jwt from "jsonwebtoken";
 import type { IdentityData } from "@webiny/api-core/idp";
 export type CognitoIdentity = Omit<IdentityData, "type"> & {
-    profile: Omit<IdentityData["profile"], "external">;
+    profile?: Omit<IdentityData["profile"], "external">;
 };
 export interface ICognitoIdpConfig {
     getIdentity(token: jwt.JwtPayload): Promise<CognitoIdentity> | CognitoIdentity;

package/api/features/CognitoIdp/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"file":"api/features/CognitoIdp/abstractions.js","sources":["../../../../src/api/features/CognitoIdp/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type jwt from \"jsonwebtoken\";\nimport type { IdentityData } from \"@webiny/api-core/idp\";\n\nexport type CognitoIdentity = Omit<IdentityData, \"type\"> & {\n    profile: Omit<IdentityData[\"profile\"], \"external\">;\n};\n\nexport interface ICognitoIdpConfig {\n    getIdentity(token: jwt.JwtPayload): Promise<CognitoIdentity> | CognitoIdentity;\n    verifyTokenClaims?(token: jwt.JwtPayload): Promise<void> | void;\n}\n\nexport const CognitoIdpConfig = createAbstraction<ICognitoIdpConfig>(\"CognitoIdpConfig\");\n\nexport namespace CognitoIdpConfig {\n    export type Interface = ICognitoIdpConfig;\n    export type IdentityData = CognitoIdentity;\n    export type JwtPayload = jwt.JwtPayload;\n}\n"],"names":["CognitoIdpConfig","createAbstraction"],"mappings":";AAaO,MAAMA,mBAAmBC,kBAAqC"}
+{"version":3,"file":"api/features/CognitoIdp/abstractions.js","sources":["../../../../src/api/features/CognitoIdp/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type jwt from \"jsonwebtoken\";\nimport type { IdentityData } from \"@webiny/api-core/idp\";\n\nexport type CognitoIdentity = Omit<IdentityData, \"type\"> & {\n    profile?: Omit<IdentityData[\"profile\"], \"external\">;\n};\n\nexport interface ICognitoIdpConfig {\n    getIdentity(token: jwt.JwtPayload): Promise<CognitoIdentity> | CognitoIdentity;\n    verifyTokenClaims?(token: jwt.JwtPayload): Promise<void> | void;\n}\n\nexport const CognitoIdpConfig = createAbstraction<ICognitoIdpConfig>(\"CognitoIdpConfig\");\n\nexport namespace CognitoIdpConfig {\n    export type Interface = ICognitoIdpConfig;\n    export type IdentityData = CognitoIdentity;\n    export type JwtPayload = jwt.JwtPayload;\n}\n"],"names":["CognitoIdpConfig","createAbstraction"],"mappings":";AAaO,MAAMA,mBAAmBC,kBAAqC"}

package/api/index.d.ts

@@ -0,0 +1 @@
+export { CognitoIdpConfig } from "./features/CognitoIdp/index.js";

package/api/index.js

@@ -0,0 +1 @@
+export { CognitoIdpConfig } from "./features/CognitoIdp/index.js";

package/index.d.ts

@@ -1,2 +1 @@
 export { Cognito } from "./Cognito.js";
-export { CognitoIdpConfig } from "./api/features/CognitoIdp/index.js";

package/index.js

@@ -1,2 +1 @@
 export { Cognito } from "./Cognito.js";
-export { CognitoIdpConfig } from "./api/features/CognitoIdp/index.js";

package/infra/CognitoFederationPulumi.d.ts

@@ -0,0 +1,8 @@
+import { CorePulumi } from "@webiny/project-aws/exports/infra/core.js";
+declare class CognitoFederationPulumiImpl implements CorePulumi.Interface {
+    execute(app: CorePulumi.Params): void;
+}
+declare const _default: typeof CognitoFederationPulumiImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/project-aws/abstractions").ICorePulumi>;
+};
+export default _default;

package/infra/CognitoFederationPulumi.js

@@ -0,0 +1,17 @@
+import { CorePulumi } from "@webiny/project-aws/exports/infra/core.js";
+import { configureAdminCognitoFederation } from "@webiny/project-aws/pulumi/apps/core/cognitoIdentityProviders/configure.js";
+class CognitoFederationPulumiImpl {
+    execute(app) {
+        const raw = process.env.COGNITO_FEDERATION_INFRA_CONFIG;
+        if (!raw) return;
+        const config = JSON.parse(raw);
+        configureAdminCognitoFederation(app, config);
+    }
+}
+const CognitoFederationPulumi = CorePulumi.createImplementation({
+    implementation: CognitoFederationPulumiImpl,
+    dependencies: []
+});
+export default CognitoFederationPulumi;
+
+//# sourceMappingURL=CognitoFederationPulumi.js.map

package/infra/CognitoFederationPulumi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra/CognitoFederationPulumi.js","sources":["../../src/infra/CognitoFederationPulumi.ts"],"sourcesContent":["import { CorePulumi } from \"@webiny/project-aws/exports/infra/core.js\";\nimport {\n    configureAdminCognitoFederation,\n    type CognitoIdentityProvidersConfig\n} from \"@webiny/project-aws/pulumi/apps/core/cognitoIdentityProviders/configure.js\";\n\nclass CognitoFederationPulumiImpl implements CorePulumi.Interface {\n    execute(app: CorePulumi.Params): void {\n        const raw = process.env.COGNITO_FEDERATION_INFRA_CONFIG;\n        if (!raw) {\n            return;\n        }\n\n        const config: CognitoIdentityProvidersConfig = JSON.parse(raw);\n        configureAdminCognitoFederation(app, config);\n    }\n}\n\nexport default CorePulumi.createImplementation({\n    implementation: CognitoFederationPulumiImpl,\n    dependencies: []\n});\n"],"names":["CognitoFederationPulumiImpl","app","raw","process","config","JSON","configureAdminCognitoFederation","CorePulumi"],"mappings":";;AAMA,MAAMA;IACF,QAAQC,GAAsB,EAAQ;QAClC,MAAMC,MAAMC,QAAQ,GAAG,CAAC,+BAA+B;QACvD,IAAI,CAACD,KACD;QAGJ,MAAME,SAAyCC,KAAK,KAAK,CAACH;QAC1DI,gCAAgCL,KAAKG;IACzC;AACJ;AAEA,gCAAeG,WAAW,oBAAoB,CAAC;IAC3C,gBAAgBP;IAChB,cAAc,EAAE;AACpB"}

package/package.json

@@ -1,30 +1,32 @@
 {
 	"name": "@webiny/cognito",
-	"version": "6.4.4-beta.2",
+	"version": "6.4.4-beta.4",
 	"type": "module",
 	"license": "MIT",
 	"sideEffects": false,
 	"exports": {
 		".": "./index.js",
-		"./*": "./*"
+		"./api": "./api/index.js",
+		"./admin": "./admin/index.js"
 	},
 	"description": "Security plugins for Cognito",
 	"author": "Webiny Ltd.",
 	"dependencies": {
 		"@apollo/react-hooks": "3.1.5",
-		"@webiny/admin-ui": "6.4.4-beta.2",
-		"@webiny/api-core": "6.4.4-beta.2",
-		"@webiny/app": "6.4.4-beta.2",
-		"@webiny/app-admin": "6.4.4-beta.2",
-		"@webiny/aws-sdk": "6.4.4-beta.2",
+		"@webiny/admin-ui": "6.4.4-beta.4",
+		"@webiny/api-core": "6.4.4-beta.4",
+		"@webiny/app": "6.4.4-beta.4",
+		"@webiny/app-admin": "6.4.4-beta.4",
+		"@webiny/aws-sdk": "6.4.4-beta.4",
 		"@webiny/di": "1.0.1",
-		"@webiny/feature": "6.4.4-beta.2",
-		"@webiny/form": "6.4.4-beta.2",
-		"@webiny/handler-graphql": "6.4.4-beta.2",
-		"@webiny/icons": "6.4.4-beta.2",
-		"@webiny/project": "6.4.4-beta.2",
-		"@webiny/project-aws": "6.4.4-beta.2",
-		"@webiny/validation": "6.4.4-beta.2",
+		"@webiny/feature": "6.4.4-beta.4",
+		"@webiny/form": "6.4.4-beta.4",
+		"@webiny/handler-graphql": "6.4.4-beta.4",
+		"@webiny/icons": "6.4.4-beta.4",
+		"@webiny/project": "6.4.4-beta.4",
+		"@webiny/project-aws": "6.4.4-beta.4",
+		"@webiny/react-properties": "6.4.4-beta.4",
+		"@webiny/validation": "6.4.4-beta.4",
 		"aws-amplify": "6.18.0",
 		"graphql": "16.14.2",
 		"graphql-tag": "2.12.6",
@@ -37,9 +39,9 @@
 	},
 	"devDependencies": {
 		"@types/react": "18.3.29",
-		"@webiny/build-tools": "6.4.4-beta.2",
-		"@webiny/project-utils": "6.4.4-beta.2",
-		"@webiny/wcp": "6.4.4-beta.2",
+		"@webiny/build-tools": "6.4.4-beta.4",
+		"@webiny/project-utils": "6.4.4-beta.4",
+		"@webiny/wcp": "6.4.4-beta.4",
 		"vitest": "4.1.8"
 	},
 	"publishConfig": {