quidproquo-actionprocessor-awslambda 0.0.218 → 0.0.220

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/getRecords.js

@@ -0,0 +1,29 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const quidproquo_core_1 = require("quidproquo-core");
+const cognitoAttributeMap_1 = require("../../../../../logic/cognito/cognitoAttributeMap");
+const getProcessGetRecords = (qpqConfig) => {
+    return ({ eventParams: [event, context] }) => __awaiter(void 0, void 0, void 0, function* () {
+        const internalEventRecord = {
+            challengeAnswer: event.request.challengeAnswer ? JSON.parse(event.request.challengeAnswer) : {},
+            userAttributes: (0, cognitoAttributeMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
+            userNotFound: event.request.userNotFound,
+            privateChallengeParameters: event.request.privateChallengeParameters,
+        };
+        return (0, quidproquo_core_1.actionResult)([internalEventRecord]);
+    });
+};
+exports.default = (qpqConfig) => {
+    return {
+        [quidproquo_core_1.EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),
+    };
+};

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/getStorySession.d.ts

@@ -0,0 +1,6 @@
+import { QPQConfig, EventGetStorySessionActionProcessor } from 'quidproquo-core';
+import { EventInput } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/GetStorySession": EventGetStorySessionActionProcessor<EventInput, import("quidproquo-core").VerifyAuthChallengeEvent>;
+};
+export default _default;

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/getStorySession.js

@@ -0,0 +1,22 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const quidproquo_core_1 = require("quidproquo-core");
+const getProcessGetStorySession = (qpqConfig) => {
+    return ({ qpqEventRecord, eventParams }) => __awaiter(void 0, void 0, void 0, function* () {
+        return (0, quidproquo_core_1.actionResult)(void 0);
+    });
+};
+exports.default = (qpqConfig) => {
+    return {
+        [quidproquo_core_1.EventActionType.GetStorySession]: getProcessGetStorySession(qpqConfig),
+    };
+};

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/index.d.ts

@@ -0,0 +1,8 @@
+import { QPQConfig } from 'quidproquo-core';
+export declare const getCognitoVerifyAuthChallengeEventProcessor: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/TransformResponseResult": import("quidproquo-core").EventTransformResponseResultActionProcessor<import("./types").EventInput, import("quidproquo-core").VerifyAuthChallengeEventResponse, import("aws-lambda").VerifyAuthChallengeResponseTriggerEvent>;
+    "@quidproquo-core/event/AutoRespond": import("quidproquo-core").EventAutoRespondActionProcessor<import("quidproquo-core").VerifyAuthChallengeEvent, import("./types").MatchResult, import("quidproquo-core").VerifyAuthChallengeEventResponse>;
+    "@quidproquo-core/event/MatchStory": import("quidproquo-core").EventMatchStoryActionProcessor<import("quidproquo-core").VerifyAuthChallengeEvent, import("./types").MatchResult>;
+    "@quidproquo-core/Event/GetRecords": import("quidproquo-core").EventGetRecordsActionProcessor<import("./types").EventInput, import("quidproquo-core").VerifyAuthChallengeEvent>;
+    "@quidproquo-core/event/GetStorySession": import("quidproquo-core").EventGetStorySessionActionProcessor<import("./types").EventInput, import("quidproquo-core").VerifyAuthChallengeEvent>;
+};

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/index.js

@@ -0,0 +1,13 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCognitoVerifyAuthChallengeEventProcessor = void 0;
+const autoRespond_1 = __importDefault(require("./autoRespond"));
+const getRecords_1 = __importDefault(require("./getRecords"));
+const matchStory_1 = __importDefault(require("./matchStory"));
+const transformResponseResult_1 = __importDefault(require("./transformResponseResult"));
+const getStorySession_1 = __importDefault(require("./getStorySession"));
+const getCognitoVerifyAuthChallengeEventProcessor = (qpqConfig) => (Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (0, getStorySession_1.default)(qpqConfig)), (0, getRecords_1.default)(qpqConfig)), (0, matchStory_1.default)(qpqConfig)), (0, autoRespond_1.default)(qpqConfig)), (0, transformResponseResult_1.default)(qpqConfig)));
+exports.getCognitoVerifyAuthChallengeEventProcessor = getCognitoVerifyAuthChallengeEventProcessor;

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/matchStory.d.ts

@@ -0,0 +1,6 @@
+import { EventMatchStoryActionProcessor, QPQConfig } from 'quidproquo-core';
+import { MatchResult } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/MatchStory": EventMatchStoryActionProcessor<import("quidproquo-core").VerifyAuthChallengeEvent, MatchResult>;
+};
+export default _default;

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/matchStory.js

@@ -0,0 +1,33 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const quidproquo_core_1 = require("quidproquo-core");
+const quidproquo_core_2 = require("quidproquo-core");
+// TODO: Don't use Globals like this
+const GLOBAL_USER_DIRECTORY_NAME = process.env.userDirectoryName;
+const getProcessMatchStory = (qpqConfig) => {
+    const userDirectoryConfig = quidproquo_core_1.qpqCoreUtils.getUserDirectories(qpqConfig).find((ud) => ud.name === GLOBAL_USER_DIRECTORY_NAME);
+    return ({ qpqEventRecord }) => __awaiter(void 0, void 0, void 0, function* () {
+        var _a, _b;
+        if (!((_b = (_a = userDirectoryConfig === null || userDirectoryConfig === void 0 ? void 0 : userDirectoryConfig.customAuthRuntime) === null || _a === void 0 ? void 0 : _a.verifyAuthChallenge) === null || _b === void 0 ? void 0 : _b.src)) {
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.NotFound, `Missing customAuthRuntime.verifyAuthChallenge.src in [${GLOBAL_USER_DIRECTORY_NAME}]`);
+        }
+        return (0, quidproquo_core_2.actionResult)({
+            src: userDirectoryConfig.customAuthRuntime.verifyAuthChallenge.src,
+            runtime: userDirectoryConfig.customAuthRuntime.verifyAuthChallenge.runtime,
+        });
+    });
+};
+exports.default = (qpqConfig) => {
+    return {
+        [quidproquo_core_1.EventActionType.MatchStory]: getProcessMatchStory(qpqConfig),
+    };
+};

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/transformResponseResult.d.ts

@@ -0,0 +1,6 @@
+import { QPQConfig, EventTransformResponseResultActionProcessor } from 'quidproquo-core';
+import { EventInput } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/TransformResponseResult": EventTransformResponseResultActionProcessor<EventInput, import("quidproquo-core").VerifyAuthChallengeEventResponse, import("aws-lambda").VerifyAuthChallengeResponseTriggerEvent>;
+};
+export default _default;

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/transformResponseResult.js

@@ -0,0 +1,33 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const quidproquo_core_1 = require("quidproquo-core");
+const getResponseFromErrorResult = (error) => {
+    return {
+        answerCorrect: false,
+    };
+};
+const getProcessTransformResponseResult = (qpqConfig) => {
+    // We might need to JSON.stringify the body.
+    return ({ eventParams, qpqEventRecordResponses }) => __awaiter(void 0, void 0, void 0, function* () {
+        const [customMessageTriggerEvent] = eventParams;
+        const [qpqEventRecordResponse] = qpqEventRecordResponses;
+        // If we have an error, we need to transform it to a response, otherwise we can just use the record as is
+        let successRecord = qpqEventRecordResponse.success ? qpqEventRecordResponse.result : getResponseFromErrorResult(qpqEventRecordResponse.error);
+        const eventOutput = Object.assign(Object.assign({}, customMessageTriggerEvent), { response: Object.assign(Object.assign({}, customMessageTriggerEvent.response), { answerCorrect: successRecord.answerCorrect }) });
+        return (0, quidproquo_core_1.actionResult)(eventOutput);
+    });
+};
+exports.default = (qpqConfig) => {
+    return {
+        [quidproquo_core_1.EventActionType.TransformResponseResult]: getProcessTransformResponseResult(qpqConfig),
+    };
+};

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/types.d.ts

@@ -0,0 +1,8 @@
+import { VerifyAuthChallengeEvent, VerifyAuthChallengeEventResponse, MatchStoryResult } from 'quidproquo-core';
+import { VerifyAuthChallengeResponseTriggerEvent, Context } from 'aws-lambda';
+export declare const GLOBAL_USER_DIRECTORY_NAME: string;
+export type EventInput = [VerifyAuthChallengeResponseTriggerEvent, Context];
+export type EventOutput = VerifyAuthChallengeResponseTriggerEvent;
+export type InternalEventRecord = VerifyAuthChallengeEvent;
+export type InternalEventOutput = VerifyAuthChallengeEventResponse;
+export type MatchResult = MatchStoryResult<any, any>;

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/types.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GLOBAL_USER_DIRECTORY_NAME = void 0;
+exports.GLOBAL_USER_DIRECTORY_NAME = process.env.userDirectoryName;

package/lib/commonjs/getActionProcessor/core/event/index.d.ts

@@ -1,7 +1,7 @@
 export * from './apiGatwayEvent';
 export * from './cloudFrontOriginRequest';
 export * from './eventBridgeEvent';
-export * from './cognitoCustomMessage';
+export * from './cognito';
 export * from './s3';
 export * from './lambda';
 export * from './sqs';

package/lib/commonjs/getActionProcessor/core/event/index.js

@@ -17,7 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./apiGatwayEvent"), exports);
 __exportStar(require("./cloudFrontOriginRequest"), exports);
 __exportStar(require("./eventBridgeEvent"), exports);
-__exportStar(require("./cognitoCustomMessage"), exports);
+__exportStar(require("./cognito"), exports);
 __exportStar(require("./s3"), exports);
 __exportStar(require("./lambda"), exports);
 __exportStar(require("./sqs"), exports);

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryAuthenticateUserActionProcessor.js

@@ -19,7 +19,7 @@ const getUserDirectoryAuthenticateUserActionProcessor = (qpqConfig) => {
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(payload.userDirectoryName, qpqConfig), region);
         const userPoolClientId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolClientIdFromConfig)(payload.userDirectoryName, qpqConfig), region);
         try {
-            const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, userPoolClientId, quidproquo_core_1.qpqCoreUtils.getApplicationModuleDeployRegion(qpqConfig), payload.authenticateUserRequest.email, payload.authenticateUserRequest.password);
+            const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, userPoolClientId, quidproquo_core_1.qpqCoreUtils.getApplicationModuleDeployRegion(qpqConfig), payload.authenticateUserRequest.isCustom, payload.authenticateUserRequest.email, payload.authenticateUserRequest.password);
             return (0, quidproquo_core_1.actionResult)(authResponse);
         }
         catch (error) {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.d.ts

@@ -0,0 +1,5 @@
+import { UserDirectoryGetUsersByAttributeActionProcessor, QPQConfig } from 'quidproquo-core';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/UserDirectory/GetUsersByAttribute": UserDirectoryGetUsersByAttributeActionProcessor;
+};
+export default _default;

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.js

@@ -0,0 +1,28 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const quidproquo_core_1 = require("quidproquo-core");
+const awsNamingUtils_1 = require("../../../awsNamingUtils");
+const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
+const listPagedUsersByAttribute_1 = require("../../../logic/cognito/listPagedUsersByAttribute");
+const getUserDirectoryGetUsersByAttributeActionProcessor = (qpqConfig) => {
+    return ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }, _session) => __awaiter(void 0, void 0, void 0, function* () {
+        const region = quidproquo_core_1.qpqCoreUtils.getApplicationModuleDeployRegion(qpqConfig);
+        const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
+        const userAttributes = yield (0, listPagedUsersByAttribute_1.listPagedUsersByAttribute)(userPoolId, region, attribueName, attribueValue, limit, nextPageKey);
+        return (0, quidproquo_core_1.actionResult)(userAttributes);
+    });
+};
+exports.default = (qpqConfig) => {
+    return {
+        [quidproquo_core_1.UserDirectoryActionType.GetUsersByAttribute]: getUserDirectoryGetUsersByAttributeActionProcessor(qpqConfig),
+    };
+};

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js

@@ -13,22 +13,37 @@ const quidproquo_core_1 = require("quidproquo-core");
 const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
 const respondToAuthChallengeChallenge_1 = require("../../../logic/cognito/respondToAuthChallengeChallenge");
+const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
 const anyAuthChallengeToCognitoAttributes = (authChallenge) => {
     switch (authChallenge.challenge) {
         case quidproquo_core_1.AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:
             return {
                 NEW_PASSWORD: authChallenge.newPassword,
             };
+        case quidproquo_core_1.AuthenticateUserChallenge.CUSTOM_CHALLENGE:
+            return {
+                ANSWER: JSON.stringify(authChallenge.challengeAnswer),
+            };
         default:
             return {};
     }
 };
+const anyAuthChallengeToCognitoChallengeName = (authChallenge) => {
+    switch (authChallenge.challenge) {
+        case quidproquo_core_1.AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:
+            return client_cognito_identity_provider_1.ChallengeNameType.NEW_PASSWORD_REQUIRED;
+        case quidproquo_core_1.AuthenticateUserChallenge.CUSTOM_CHALLENGE:
+            return client_cognito_identity_provider_1.ChallengeNameType.CUSTOM_CHALLENGE;
+        default:
+            throw new Error(`Unknown challenge`);
+    }
+};
 const getUserDirectoryRespondToAuthChallengeActionProcessor = (qpqConfig) => {
     return ({ userDirectoryName, authChallenge }) => __awaiter(void 0, void 0, void 0, function* () {
         const region = quidproquo_core_1.qpqCoreUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         const userPoolClientId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolClientIdFromConfig)(userDirectoryName, qpqConfig), region);
-        const response = yield (0, respondToAuthChallengeChallenge_1.respondToAuthChallengeChallenge)(userPoolId, userPoolClientId, region, authChallenge.username, authChallenge.session, anyAuthChallengeToCognitoAttributes(authChallenge));
+        const response = yield (0, respondToAuthChallengeChallenge_1.respondToAuthChallengeChallenge)(userPoolId, userPoolClientId, region, authChallenge.username, authChallenge.session, anyAuthChallengeToCognitoChallengeName(authChallenge), anyAuthChallengeToCognitoAttributes(authChallenge));
         return (0, quidproquo_core_1.actionResult)(response);
     });
 };

package/lib/commonjs/getActionProcessor/core/userDirectory/index.d.ts

@@ -7,6 +7,7 @@ declare const _default: (qpqConfig: QPQConfig) => {
     "@quidproquo-core/UserDirectory/RequestEmailVerification": import("quidproquo-core").UserDirectoryRequestEmailVerificationActionProcessor;
     "@quidproquo-core/UserDirectory/RefreshToken": import("quidproquo-core").UserDirectoryRefreshTokenActionProcessor;
     "@quidproquo-core/UserDirectory/ReadAccessToken": import("quidproquo-core").UserDirectoryReadAccessTokenActionProcessor;
+    "@quidproquo-core/UserDirectory/GetUsersByAttribute": import("quidproquo-core").UserDirectoryGetUsersByAttributeActionProcessor;
     "@quidproquo-core/UserDirectory/GetUsers": import("quidproquo-core").UserDirectoryGetUsersActionProcessor;
     "@quidproquo-core/UserDirectory/GetUserAttributesByUserId": import("quidproquo-core").UserDirectoryGetUserAttributesByUserIdActionProcessor;
     "@quidproquo-core/UserDirectory/GetUserAttributes": import("quidproquo-core").UserDirectoryGetUserAttributesActionProcessor;

package/lib/commonjs/getActionProcessor/core/userDirectory/index.js

@@ -13,6 +13,7 @@ const getUserDirectoryForgetPasswordActionProcessor_1 = __importDefault(require(
 const getUserDirectoryGetUserAttributesActionProcessor_1 = __importDefault(require("./getUserDirectoryGetUserAttributesActionProcessor"));
 const getUserDirectoryGetUserAttributesByUserIdActionProcessor_1 = __importDefault(require("./getUserDirectoryGetUserAttributesByUserIdActionProcessor"));
 const getUserDirectoryGetUsersActionProcessor_1 = __importDefault(require("./getUserDirectoryGetUsersActionProcessor"));
+const getUserDirectoryGetUsersByAttributeActionProcessor_1 = __importDefault(require("./getUserDirectoryGetUsersByAttributeActionProcessor"));
 const getUserDirectoryReadAccessTokenActionProcessor_1 = __importDefault(require("./getUserDirectoryReadAccessTokenActionProcessor"));
 const getUserDirectoryRefreshTokenActionProcessor_1 = __importDefault(require("./getUserDirectoryRefreshTokenActionProcessor"));
 const getUserDirectoryRequestEmailVerificationActionProcessor_1 = __importDefault(require("./getUserDirectoryRequestEmailVerificationActionProcessor"));
@@ -20,4 +21,4 @@ const getUserDirectoryRespondToAuthChallengeActionProcessor_1 = __importDefault(
 const getUserDirectorySetAccessTokenActionProcessor_1 = __importDefault(require("./getUserDirectorySetAccessTokenActionProcessor"));
 const getUserDirectorySetPasswordActionProcessor_1 = __importDefault(require("./getUserDirectorySetPasswordActionProcessor"));
 const getUserDirectorySetUserAttributesActionProcessor_1 = __importDefault(require("./getUserDirectorySetUserAttributesActionProcessor"));
-exports.default = (qpqConfig) => (Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (0, getUserDirectoryAuthenticateUserActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryChangePasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryConfirmEmailVerificationActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryConfirmForgetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryCreateUserActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryDecodeAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryForgetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUserAttributesActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUserAttributesByUserIdActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUsersActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryReadAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRefreshTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRequestEmailVerificationActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRespondToAuthChallengeActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetUserAttributesActionProcessor_1.default)(qpqConfig)));
+exports.default = (qpqConfig) => (Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (0, getUserDirectoryAuthenticateUserActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryChangePasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryConfirmEmailVerificationActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryConfirmForgetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryCreateUserActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryDecodeAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryForgetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUserAttributesActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUserAttributesByUserIdActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUsersActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryGetUsersByAttributeActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryReadAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRefreshTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRequestEmailVerificationActionProcessor_1.default)(qpqConfig)), (0, getUserDirectoryRespondToAuthChallengeActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetAccessTokenActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetPasswordActionProcessor_1.default)(qpqConfig)), (0, getUserDirectorySetUserAttributesActionProcessor_1.default)(qpqConfig)));

package/lib/commonjs/logic/cognito/authenticateUser.d.ts

@@ -1,2 +1,2 @@
 import { AuthenticateUserResponse } from 'quidproquo-core';
-export declare const authenticateUser: (userPoolId: string, clientId: string, region: string, username: string, password: string) => Promise<AuthenticateUserResponse>;
+export declare const authenticateUser: (userPoolId: string, clientId: string, region: string, isCustom: boolean, username: string, password?: string) => Promise<AuthenticateUserResponse>;

package/lib/commonjs/logic/cognito/authenticateUser.js

@@ -16,22 +16,24 @@ const getUserPoolClientSecret_1 = require("./getUserPoolClientSecret");
 const transformCognitoResponse_1 = require("./utils/transformCognitoResponse");
 const createAwsClient_1 = require("../createAwsClient");
 // TODO: retry for TooManyRequestsException
-const authenticateUser = (userPoolId, clientId, region, username, password) => __awaiter(void 0, void 0, void 0, function* () {
+const authenticateUser = (userPoolId, clientId, region, isCustom, username, password) => __awaiter(void 0, void 0, void 0, function* () {
     const cognitoClient = (0, createAwsClient_1.createAwsClient)(client_cognito_identity_provider_1.CognitoIdentityProviderClient, { region });
     const clientSecret = yield (0, getUserPoolClientSecret_1.getUserPoolClientSecret)(userPoolId, clientId, region);
     const secretHash = (0, calculateSecretHash_1.calculateSecretHash)(username, clientId, clientSecret);
     // Time we issued the request
     const issueDateTime = new Date().toISOString();
     const params = {
-        AuthFlow: client_cognito_identity_provider_1.AuthFlowType.ADMIN_USER_PASSWORD_AUTH,
+        AuthFlow: isCustom ? client_cognito_identity_provider_1.AuthFlowType.CUSTOM_AUTH : client_cognito_identity_provider_1.AuthFlowType.ADMIN_USER_PASSWORD_AUTH,
         UserPoolId: userPoolId,
         ClientId: clientId,
         AuthParameters: {
             USERNAME: username,
-            PASSWORD: password,
             SECRET_HASH: secretHash,
         },
     };
+    if (password) {
+        params.AuthParameters.PASSWORD = password;
+    }
     const response = yield cognitoClient.send(new client_cognito_identity_provider_1.AdminInitiateAuthCommand(params));
     return (0, transformCognitoResponse_1.cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo)(response, issueDateTime);
 });

package/lib/commonjs/logic/cognito/cognitoAttributeMap.d.ts

@@ -8,3 +8,4 @@ export declare const getQpqAttributesFromCognitoUserAttributes: (cognitoUserAttr
     Name: string;
     Value: string;
 }[]) => UserAttributes;
+export declare const getQpqAttributesFromCognitoStringMap: (cognitoUserAttributes: Record<string, string>) => UserAttributes;

package/lib/commonjs/logic/cognito/cognitoAttributeMap.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getQpqAttributesFromCognitoUserAttributes = exports.getCognitoUserAttributesFromQpqUserAttributes = exports.cognitoAttributeMap = void 0;
+exports.getQpqAttributesFromCognitoStringMap = exports.getQpqAttributesFromCognitoUserAttributes = exports.getCognitoUserAttributesFromQpqUserAttributes = exports.cognitoAttributeMap = void 0;
 exports.cognitoAttributeMap = {
     email: 'email',
     emailVerified: 'email_verified',
@@ -32,19 +32,27 @@ const getCognitoUserAttributesFromQpqUserAttributes = (userAttributes) => {
         .filter((attribute) => !!attribute.Name && !!attribute.Value);
 };
 exports.getCognitoUserAttributesFromQpqUserAttributes = getCognitoUserAttributesFromQpqUserAttributes;
+const getQpqAttributeObjectFromCognitoKeyValue = (key, value) => {
+    const userAttributeKey = reversedCognitoAttributeMap[key];
+    if (!userAttributeKey) {
+        return {}; // If there's no matching key in your mapping, just return nothing
+    }
+    if (userAttributeKey === 'emailVerified') {
+        // Assume the value of 'email_verified' is a string of 'true' or 'false'
+        return { [userAttributeKey]: value === 'true' };
+    }
+    return { [userAttributeKey]: value };
+};
 const getQpqAttributesFromCognitoUserAttributes = (cognitoUserAttributes) => {
     // Map cognitoUserAttributes to your UserAttributes format
     const userAttributes = cognitoUserAttributes.reduce((acc, { Name, Value }) => {
-        const userAttributeKey = reversedCognitoAttributeMap[Name];
-        if (!userAttributeKey) {
-            return acc; // If there's no matching key in your mapping, just continue with the current accumulation
-        }
-        if (userAttributeKey === 'emailVerified') {
-            // Assume the value of 'email_verified' is a string of 'true' or 'false'
-            return Object.assign(Object.assign({}, acc), { [userAttributeKey]: Value === 'true' });
-        }
-        return Object.assign(Object.assign({}, acc), { [userAttributeKey]: Value });
+        return Object.assign(Object.assign({}, acc), getQpqAttributeObjectFromCognitoKeyValue(Name, Value));
     }, {});
     return userAttributes;
 };
 exports.getQpqAttributesFromCognitoUserAttributes = getQpqAttributesFromCognitoUserAttributes;
+const getQpqAttributesFromCognitoStringMap = (cognitoUserAttributes) => {
+    const userAttributes = Object.keys(cognitoUserAttributes).reduce((acc, key) => (Object.assign(Object.assign({}, acc), getQpqAttributeObjectFromCognitoKeyValue(key, cognitoUserAttributes[key]))), {});
+    return userAttributes;
+};
+exports.getQpqAttributesFromCognitoStringMap = getQpqAttributesFromCognitoStringMap;

package/lib/commonjs/logic/cognito/confirmForgotPassword.js

@@ -28,7 +28,7 @@ const confirmForgotPassword = (userPoolId, clientId, region, code, username, pas
     };
     yield cognitoClient.send(new client_cognito_identity_provider_1.ConfirmForgotPasswordCommand(params));
     // Authenticate the user
-    const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, clientId, region, username, password);
+    const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, clientId, region, false, username, password);
     return authResponse;
 });
 exports.confirmForgotPassword = confirmForgotPassword;

package/lib/commonjs/logic/cognito/createUser.js

@@ -34,7 +34,7 @@ const createUser = (userPoolId, region, clientId, createUserRequest) => __awaite
     // Set the user's password
     yield (0, setUserPassword_1.setUserPassword)(region, userPoolId, username, createUserRequest.password);
     // Authenticate the user
-    const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, clientId, region, username, createUserRequest.password);
+    const authResponse = yield (0, authenticateUser_1.authenticateUser)(userPoolId, clientId, region, false, username, createUserRequest.password);
     return authResponse;
 });
 exports.createUser = createUser;

package/lib/commonjs/logic/cognito/listPagedUsersByAttribute.d.ts

@@ -0,0 +1,2 @@
+import { UserAttributes, QpqPagedData } from 'quidproquo-core';
+export declare const listPagedUsersByAttribute: (userPoolId: string, region: string, attributeName: string, attributeValue: string, limit?: number, pageKey?: string) => Promise<QpqPagedData<UserAttributes>>;

package/lib/commonjs/logic/cognito/listPagedUsersByAttribute.js

@@ -0,0 +1,34 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listPagedUsersByAttribute = void 0;
+const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
+const cognitoAttributeMap_1 = require("./cognitoAttributeMap");
+const utils_1 = require("./utils");
+const createAwsClient_1 = require("../createAwsClient");
+const listPagedUsersByAttribute = (userPoolId, region, attributeName, attributeValue, limit, pageKey) => __awaiter(void 0, void 0, void 0, function* () {
+    const cognitoClient = (0, createAwsClient_1.createAwsClient)(client_cognito_identity_provider_1.CognitoIdentityProviderClient, { region });
+    const response = yield cognitoClient.send(new client_cognito_identity_provider_1.ListUsersCommand({
+        UserPoolId: userPoolId,
+        Limit: limit,
+        Filter: `${attributeName} = "${attributeValue}"`,
+        PaginationToken: (0, utils_1.pageKeyToPaginationToken)(pageKey),
+    }));
+    const users = (response.Users || []).map((user) => {
+        const validAttributes = (user.Attributes || []).filter((attr) => attr.Name && attr.Value);
+        return (0, cognitoAttributeMap_1.getQpqAttributesFromCognitoUserAttributes)(validAttributes);
+    });
+    return {
+        nextPageKey: (0, utils_1.paginationTokenToPageKey)(response.PaginationToken),
+        items: users,
+    };
+});
+exports.listPagedUsersByAttribute = listPagedUsersByAttribute;

package/lib/commonjs/logic/cognito/respondToAuthChallengeChallenge.d.ts

@@ -1,2 +1,3 @@
 import { AuthenticateUserResponse } from 'quidproquo-core';
-export declare const respondToAuthChallengeChallenge: (userPoolId: string, clientId: string, region: string, username: string, session: string, attributes: Record<string, string>) => Promise<AuthenticateUserResponse>;
+import { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';
+export declare const respondToAuthChallengeChallenge: (userPoolId: string, clientId: string, region: string, username: string, session: string, challengeNameType: ChallengeNameType, attributes: Record<string, string>) => Promise<AuthenticateUserResponse>;

package/lib/commonjs/logic/cognito/respondToAuthChallengeChallenge.js

@@ -15,12 +15,12 @@ const calculateSecretHash_1 = require("./utils/calculateSecretHash");
 const getUserPoolClientSecret_1 = require("./getUserPoolClientSecret");
 const transformCognitoResponse_1 = require("./utils/transformCognitoResponse");
 const createAwsClient_1 = require("../createAwsClient");
-const respondToAuthChallengeChallenge = (userPoolId, clientId, region, username, session, attributes) => __awaiter(void 0, void 0, void 0, function* () {
+const respondToAuthChallengeChallenge = (userPoolId, clientId, region, username, session, challengeNameType, attributes) => __awaiter(void 0, void 0, void 0, function* () {
     const cognitoClient = (0, createAwsClient_1.createAwsClient)(client_cognito_identity_provider_1.CognitoIdentityProviderClient, { region });
     const clientSecret = yield (0, getUserPoolClientSecret_1.getUserPoolClientSecret)(userPoolId, clientId, region);
     const secretHash = (0, calculateSecretHash_1.calculateSecretHash)(username, clientId, clientSecret);
     const params = {
-        ChallengeName: client_cognito_identity_provider_1.ChallengeNameType.NEW_PASSWORD_REQUIRED,
+        ChallengeName: challengeNameType,
         ClientId: clientId,
         Session: session,
         ChallengeResponses: Object.assign({ USERNAME: username, SECRET_HASH: secretHash }, attributes),

package/lib/commonjs/logic/cognito/utils/transformCognitoResponse.js

@@ -24,16 +24,19 @@ const cognitoChallengeNameTypeToQpqAuthenticateUserChallenge = (cognitoChallenge
     }
     const map = {
         [client_cognito_identity_provider_1.ChallengeNameType.NEW_PASSWORD_REQUIRED]: quidproquo_core_1.AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED,
+        [client_cognito_identity_provider_1.ChallengeNameType.CUSTOM_CHALLENGE]: quidproquo_core_1.AuthenticateUserChallenge.CUSTOM_CHALLENGE,
     };
     // TODO: handle the NOT-IMP cases
-    const challenge = map[cognitoChallengeName] || `NOT-IMP-${cognitoChallengeName}`;
+    const challenge = map[cognitoChallengeName] || `QPQ-NOT-IMP-${cognitoChallengeName}`;
     return challenge;
 };
 exports.cognitoChallengeNameTypeToQpqAuthenticateUserChallenge = cognitoChallengeNameTypeToQpqAuthenticateUserChallenge;
 const cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo = (authResponse, issueDateTime) => {
+    console.log('authResponse XYZ', authResponse);
     const res = {
         session: authResponse.Session,
         challenge: (0, exports.cognitoChallengeNameTypeToQpqAuthenticateUserChallenge)(authResponse.ChallengeName),
+        challengeParameters: authResponse.ChallengeParameters,
     };
     if (authResponse.AuthenticationResult) {
         res.authenticationInfo = (0, exports.cognitoAuthenticationResultTypeToQpqAuthenticationInfo)(authResponse.AuthenticationResult, issueDateTime);

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/autoRespond.d.ts

@@ -0,0 +1,6 @@
+import { QPQConfig, EventAutoRespondActionProcessor } from 'quidproquo-core';
+import { MatchResult } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/AutoRespond": EventAutoRespondActionProcessor<import("quidproquo-core").CreateAuthChallengeEvent, MatchResult, import("quidproquo-core").CreateAuthChallengeEventResponse>;
+};
+export default _default;

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/autoRespond.js

@@ -0,0 +1,11 @@
+import { EventActionType, actionResult } from 'quidproquo-core';
+const getProcessAutoRespond = (qpqConfig) => {
+    return async ({ qpqEventRecord, matchResult }) => {
+        return actionResult(null);
+    };
+};
+export default (qpqConfig) => {
+    return {
+        [EventActionType.AutoRespond]: getProcessAutoRespond(qpqConfig),
+    };
+};

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/getRecords.d.ts

@@ -0,0 +1,6 @@
+import { QPQConfig, EventGetRecordsActionProcessor } from 'quidproquo-core';
+import { EventInput } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/Event/GetRecords": EventGetRecordsActionProcessor<EventInput, import("quidproquo-core").CreateAuthChallengeEvent>;
+};
+export default _default;

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/getRecords.js

@@ -0,0 +1,18 @@
+import { EventActionType, actionResult } from 'quidproquo-core';
+import { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/cognitoAttributeMap';
+import { getChallengeSessionFromCognitoTriggerEventSession } from '../utils';
+const getProcessGetRecords = (qpqConfig) => {
+    return async ({ eventParams: [event, context] }) => {
+        const internalEventRecord = {
+            userName: event.userName,
+            session: getChallengeSessionFromCognitoTriggerEventSession(event.request.session),
+            userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),
+        };
+        return actionResult([internalEventRecord]);
+    };
+};
+export default (qpqConfig) => {
+    return {
+        [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),
+    };
+};

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/getStorySession.d.ts

@@ -0,0 +1,6 @@
+import { QPQConfig, EventGetStorySessionActionProcessor } from 'quidproquo-core';
+import { EventInput } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/GetStorySession": EventGetStorySessionActionProcessor<EventInput, import("quidproquo-core").CreateAuthChallengeEvent>;
+};
+export default _default;

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/index.d.ts

@@ -0,0 +1,8 @@
+import { QPQConfig } from 'quidproquo-core';
+export declare const getCognitoCreateAuthChallengeEventProcessor: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/TransformResponseResult": import("quidproquo-core").EventTransformResponseResultActionProcessor<import("./types").EventInput, import("quidproquo-core").CreateAuthChallengeEventResponse, import("aws-lambda").CreateAuthChallengeTriggerEvent>;
+    "@quidproquo-core/event/AutoRespond": import("quidproquo-core").EventAutoRespondActionProcessor<import("quidproquo-core").CreateAuthChallengeEvent, import("./types").MatchResult, import("quidproquo-core").CreateAuthChallengeEventResponse>;
+    "@quidproquo-core/event/MatchStory": import("quidproquo-core").EventMatchStoryActionProcessor<import("quidproquo-core").CreateAuthChallengeEvent, import("./types").MatchResult>;
+    "@quidproquo-core/Event/GetRecords": import("quidproquo-core").EventGetRecordsActionProcessor<import("./types").EventInput, import("quidproquo-core").CreateAuthChallengeEvent>;
+    "@quidproquo-core/event/GetStorySession": import("quidproquo-core").EventGetStorySessionActionProcessor<import("./types").EventInput, import("quidproquo-core").CreateAuthChallengeEvent>;
+};

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/index.js

@@ -0,0 +1,12 @@
+import getAutoRespond from './autoRespond';
+import getGetRecords from './getRecords';
+import getMatchStory from './matchStory';
+import getTransformResponseResult from './transformResponseResult';
+import getStorySession from './getStorySession';
+export const getCognitoCreateAuthChallengeEventProcessor = (qpqConfig) => ({
+    ...getStorySession(qpqConfig),
+    ...getGetRecords(qpqConfig),
+    ...getMatchStory(qpqConfig),
+    ...getAutoRespond(qpqConfig),
+    ...getTransformResponseResult(qpqConfig),
+});

package/lib/esm/getActionProcessor/core/event/cognito/createAuthChallenge/matchStory.d.ts

@@ -0,0 +1,6 @@
+import { EventMatchStoryActionProcessor, QPQConfig } from 'quidproquo-core';
+import { MatchResult } from './types';
+declare const _default: (qpqConfig: QPQConfig) => {
+    "@quidproquo-core/event/MatchStory": EventMatchStoryActionProcessor<import("quidproquo-core").CreateAuthChallengeEvent, MatchResult>;
+};
+export default _default;