quidproquo-actionprocessor-awslambda 0.1.11 → 0.1.13

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreScanActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getKeyValueStoreScanActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/keyValueStore/getKeyValueStoreScanActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAAmJ;AACnJ,qDAMyB;AAEzB,4DAA0E;AAC1E,qDAAkD;AAElD,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAAyC,EAAE;IAClG,OAAO,KAAqE,EAAE,4CAAhE,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE;QACxE,MAAM,eAAe,GAAG,IAAA,gDAA+B,EAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,qEAAqE;YACrE,sEAAsE;YACtE,2DAA2D;YAC3D,MAAM,MAAM,GAAG,IAAA,+CAA6B,EAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC,CAAC;YAE3F,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAM,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;YAExG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAEjE,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;gBAC1H,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;gBAC7H,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;gBAC3G,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,mCAAmC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC7I,CAAC,yCAAuB,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC;KACvE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,mCAAmC,uCAE7C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResultError, actionResultErrorFromCaughtError, QPQConfig } from 'quidproquo-core';\nimport {\n  actionResult,\n  getScopedKvsTranslatorOrThrow,\n  KeyValueStoreActionType,\n  KeyValueStoreScanActionProcessor,\n  KeyValueStoreScanErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getKvsDynamoTableNameFromConfig } from '../../../awsNamingUtils';\nimport { scan } from '../../../logic/dynamo/scan';\n\nconst getProcessKeyValueStoreScan = (qpqConfig: QPQConfig): KeyValueStoreScanActionProcessor<any> => {\n  return async ({ keyValueStoreName, filterCondition, nextPageKey, options }) => {\n    const dynamoTableName = getKvsDynamoTableNameFromConfig(keyValueStoreName, qpqConfig, 'kvs');\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      // A scan has no key condition, so scope is enforced as a begins_with\n      // prefix predicate ANDed onto the caller's filter. Still a full-table\n      // scan on the Dynamo side - only the results are isolated.\n      const scoped = getScopedKvsTranslatorOrThrow(qpqConfig, keyValueStoreName, options?.scope);\n\n      const items = await scan<any>(dynamoTableName, region, scoped.scanFilter(filterCondition), nextPageKey);\n\n      items.items = items.items.map((item: any) => scoped.strip(item));\n\n      return actionResult(items);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InternalServerError: () => actionResultError(KeyValueStoreScanErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),\n        ResourceNotFoundException: () => actionResultError(KeyValueStoreScanErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),\n        InvalidScopeError: (error) => actionResultError(KeyValueStoreScanErrorTypeEnum.InvalidScope, error.message),\n        KvsStoreNotFoundError: (error) => actionResultError(KeyValueStoreScanErrorTypeEnum.StoreNotFound, error.message),\n      });\n    }\n  };\n};\n\nexport const getKeyValueStoreScanActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [KeyValueStoreActionType.Scan]: getProcessKeyValueStoreScan(qpqConfig),\n});\n"]}
+{"version":3,"file":"getKeyValueStoreScanActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/keyValueStore/getKeyValueStoreScanActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAAmJ;AACnJ,qDAMyB;AAEzB,4DAA0E;AAC1E,kDAA6C;AAE7C,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAAyC,EAAE;IAClG,OAAO,KAAqE,EAAE,4CAAhE,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE;QACxE,MAAM,eAAe,GAAG,IAAA,gDAA+B,EAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,qEAAqE;YACrE,sEAAsE;YACtE,2DAA2D;YAC3D,MAAM,MAAM,GAAG,IAAA,+CAA6B,EAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC,CAAC;YAE3F,MAAM,KAAK,GAAG,MAAM,IAAA,aAAI,EAAM,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;YAExG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAEjE,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;gBAC1H,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;gBAC7H,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;gBAC3G,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,mCAAmC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC7I,CAAC,yCAAuB,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC;KACvE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,mCAAmC,uCAE7C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResultError, actionResultErrorFromCaughtError, QPQConfig } from 'quidproquo-core';\nimport {\n  actionResult,\n  getScopedKvsTranslatorOrThrow,\n  KeyValueStoreActionType,\n  KeyValueStoreScanActionProcessor,\n  KeyValueStoreScanErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getKvsDynamoTableNameFromConfig } from '../../../awsNamingUtils';\nimport { scan } from '../../../logic/dynamo';\n\nconst getProcessKeyValueStoreScan = (qpqConfig: QPQConfig): KeyValueStoreScanActionProcessor<any> => {\n  return async ({ keyValueStoreName, filterCondition, nextPageKey, options }) => {\n    const dynamoTableName = getKvsDynamoTableNameFromConfig(keyValueStoreName, qpqConfig, 'kvs');\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      // A scan has no key condition, so scope is enforced as a begins_with\n      // prefix predicate ANDed onto the caller's filter. Still a full-table\n      // scan on the Dynamo side - only the results are isolated.\n      const scoped = getScopedKvsTranslatorOrThrow(qpqConfig, keyValueStoreName, options?.scope);\n\n      const items = await scan<any>(dynamoTableName, region, scoped.scanFilter(filterCondition), nextPageKey);\n\n      items.items = items.items.map((item: any) => scoped.strip(item));\n\n      return actionResult(items);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InternalServerError: () => actionResultError(KeyValueStoreScanErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),\n        ResourceNotFoundException: () => actionResultError(KeyValueStoreScanErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),\n        InvalidScopeError: (error) => actionResultError(KeyValueStoreScanErrorTypeEnum.InvalidScope, error.message),\n        KvsStoreNotFoundError: (error) => actionResultError(KeyValueStoreScanErrorTypeEnum.StoreNotFound, error.message),\n      });\n    }\n  };\n};\n\nexport const getKeyValueStoreScanActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [KeyValueStoreActionType.Scan]: getProcessKeyValueStoreScan(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreScanAllScopesActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getKeyValueStoreScanAllScopesActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreScanAllScopesActionProcessor.js

@@ -0,0 +1,58 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getKeyValueStoreScanAllScopesActionProcessor = void 0;
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquo_core_1 = require("quidproquo-core");
+const awsNamingUtils_1 = require("../../../awsNamingUtils");
+const dynamo_1 = require("../../../logic/dynamo");
+// Every row in the table, scope and all. No scoped translator is involved: that is the whole
+// point, and it is why this action is migration-only (see askKeyValueStoreScanAllScopes).
+//
+// The scope is composed into the partition key value, so each row is split back into the
+// scope it belongs to plus its raw key, exactly as the stream processor does. The caller gets
+// items indistinguishable from a scoped read, plus the scope beside them.
+const getProcessKeyValueStoreScanAllScopes = (qpqConfig) => {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyValueStoreName, filterCondition, nextPageKey }) {
+        const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
+        const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            const storeConfig = (0, quidproquo_core_1.resolveKvsStoreConfigOrThrow)(qpqConfig, keyValueStoreName);
+            const partitionKey = storeConfig.partitionKey.key;
+            const page = yield (0, dynamo_1.scan)(dynamoTableName, region, filterCondition, nextPageKey);
+            const items = page.items.map((item) => {
+                var _a;
+                // Only a string partition key can carry a composed scope; anything else is unscoped
+                // by construction.
+                if (storeConfig.partitionKey.type !== 'string') {
+                    return { item };
+                }
+                const { scope, rawValue } = (0, quidproquo_core_1.decomposeScopedKvsValue)(String((_a = item[partitionKey]) !== null && _a !== void 0 ? _a : ''));
+                return { scope, item: Object.assign(Object.assign({}, item), { [partitionKey]: rawValue }) };
+            });
+            return (0, quidproquo_core_1.actionResult)({ items, nextPageKey: page.nextPageKey });
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreScanAllScopesErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreScanAllScopesErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+                KvsStoreNotFoundError: (error) => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreScanAllScopesErrorTypeEnum.StoreNotFound, error.message),
+            });
+        }
+    });
+};
+const getKeyValueStoreScanAllScopesActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {
+    return ({
+        [quidproquo_core_1.KeyValueStoreActionType.ScanAllScopes]: getProcessKeyValueStoreScanAllScopes(qpqConfig),
+    });
+});
+exports.getKeyValueStoreScanAllScopesActionProcessor = getKeyValueStoreScanAllScopesActionProcessor;
+//# sourceMappingURL=getKeyValueStoreScanAllScopesActionProcessor.js.map

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreScanAllScopesActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKeyValueStoreScanAllScopesActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/keyValueStore/getKeyValueStoreScanAllScopesActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAayB;AAEzB,4DAA0E;AAC1E,kDAA6C;AAE7C,6FAA6F;AAC7F,0FAA0F;AAC1F,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,0EAA0E;AAC1E,MAAM,oCAAoC,GAAG,CAAC,SAAoB,EAAkD,EAAE;IACpH,OAAO,KAA4D,EAAE,4CAAvD,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE;QAC/D,MAAM,eAAe,GAAG,IAAA,gDAA+B,EAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAA,8CAA4B,EAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC;YAElD,MAAM,IAAI,GAAG,MAAM,IAAA,aAAI,EAAM,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;YAEpF,MAAM,KAAK,GAAyB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;;gBAC/D,oFAAoF;gBACpF,mBAAmB;gBACnB,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/C,OAAO,EAAE,IAAI,EAAE,CAAC;gBAClB,CAAC;gBAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAA,yCAAuB,EAAC,MAAM,CAAC,MAAA,IAAI,CAAC,YAAY,CAAC,mCAAI,EAAE,CAAC,CAAC,CAAC;gBAEtF,OAAO,EAAE,KAAK,EAAE,IAAI,kCAAO,IAAI,KAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,GAAE,EAAE,CAAC;YAChE,CAAC,CAAC,CAAC;YAEH,OAAO,IAAA,8BAAY,EAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,yDAAuC,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;gBACnI,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,yDAAuC,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;gBACtI,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,yDAAuC,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;aAC1H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,4CAA4C,GAAgC,CACvF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,aAAa,CAAC,EAAE,oCAAoC,CAAC,SAAS,CAAC;KACzF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,4CAA4C,gDAItD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  decomposeScopedKvsValue,\n  KeyValueStoreActionType,\n  KeyValueStoreScanAllScopesActionProcessor,\n  KeyValueStoreScanAllScopesErrorTypeEnum,\n  KvsScopedItem,\n  QPQConfig,\n  resolveKvsStoreConfigOrThrow,\n} from 'quidproquo-core';\n\nimport { getKvsDynamoTableNameFromConfig } from '../../../awsNamingUtils';\nimport { scan } from '../../../logic/dynamo';\n\n// Every row in the table, scope and all. No scoped translator is involved: that is the whole\n// point, and it is why this action is migration-only (see askKeyValueStoreScanAllScopes).\n//\n// The scope is composed into the partition key value, so each row is split back into the\n// scope it belongs to plus its raw key, exactly as the stream processor does. The caller gets\n// items indistinguishable from a scoped read, plus the scope beside them.\nconst getProcessKeyValueStoreScanAllScopes = (qpqConfig: QPQConfig): KeyValueStoreScanAllScopesActionProcessor<any> => {\n  return async ({ keyValueStoreName, filterCondition, nextPageKey }) => {\n    const dynamoTableName = getKvsDynamoTableNameFromConfig(keyValueStoreName, qpqConfig, 'kvs');\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const storeConfig = resolveKvsStoreConfigOrThrow(qpqConfig, keyValueStoreName);\n      const partitionKey = storeConfig.partitionKey.key;\n\n      const page = await scan<any>(dynamoTableName, region, filterCondition, nextPageKey);\n\n      const items: KvsScopedItem<any>[] = page.items.map((item: any) => {\n        // Only a string partition key can carry a composed scope; anything else is unscoped\n        // by construction.\n        if (storeConfig.partitionKey.type !== 'string') {\n          return { item };\n        }\n\n        const { scope, rawValue } = decomposeScopedKvsValue(String(item[partitionKey] ?? ''));\n\n        return { scope, item: { ...item, [partitionKey]: rawValue } };\n      });\n\n      return actionResult({ items, nextPageKey: page.nextPageKey });\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InternalServerError: () => actionResultError(KeyValueStoreScanAllScopesErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),\n        ResourceNotFoundException: () => actionResultError(KeyValueStoreScanAllScopesErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),\n        KvsStoreNotFoundError: (error) => actionResultError(KeyValueStoreScanAllScopesErrorTypeEnum.StoreNotFound, error.message),\n      });\n    }\n  };\n};\n\nexport const getKeyValueStoreScanAllScopesActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [KeyValueStoreActionType.ScanAllScopes]: getProcessKeyValueStoreScanAllScopes(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/keyValueStore/index.js

@@ -15,10 +15,11 @@ const getKeyValueStoreGetActionProcessor_1 = require("./getKeyValueStoreGetActio
 const getKeyValueStoreGetAllActionProcessor_1 = require("./getKeyValueStoreGetAllActionProcessor");
 const getKeyValueStoreQueryActionProcessor_1 = require("./getKeyValueStoreQueryActionProcessor");
 const getKeyValueStoreScanActionProcessor_1 = require("./getKeyValueStoreScanActionProcessor");
+const getKeyValueStoreScanAllScopesActionProcessor_1 = require("./getKeyValueStoreScanAllScopesActionProcessor");
 const getKeyValueStoreUpdateActionProcessor_1 = require("./getKeyValueStoreUpdateActionProcessor");
 const getKeyValueStoreUpsertActionProcessor_1 = require("./getKeyValueStoreUpsertActionProcessor");
 const getKeyValueStoreActionProcessor = (qpqConfig, dynamicModuleLoader) => __awaiter(void 0, void 0, void 0, function* () {
-    return (Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (yield (0, getKeyValueStoreDeleteActionProcessor_1.getKeyValueStoreDeleteActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreGetActionProcessor_1.getKeyValueStoreGetActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreGetAllActionProcessor_1.getKeyValueStoreGetAllActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreUpsertActionProcessor_1.getKeyValueStoreUpsertActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreUpdateActionProcessor_1.getKeyValueStoreUpdateActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreQueryActionProcessor_1.getKeyValueStoreQueryActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreScanActionProcessor_1.getKeyValueStoreScanActionProcessor)(qpqConfig, dynamicModuleLoader))));
+    return (Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (yield (0, getKeyValueStoreDeleteActionProcessor_1.getKeyValueStoreDeleteActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreGetActionProcessor_1.getKeyValueStoreGetActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreGetAllActionProcessor_1.getKeyValueStoreGetAllActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreUpsertActionProcessor_1.getKeyValueStoreUpsertActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreUpdateActionProcessor_1.getKeyValueStoreUpdateActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreQueryActionProcessor_1.getKeyValueStoreQueryActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreScanActionProcessor_1.getKeyValueStoreScanActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getKeyValueStoreScanAllScopesActionProcessor_1.getKeyValueStoreScanAllScopesActionProcessor)(qpqConfig, dynamicModuleLoader))));
 });
 exports.getKeyValueStoreActionProcessor = getKeyValueStoreActionProcessor;
 //# sourceMappingURL=index.js.map

package/lib/commonjs/getActionProcessor/core/keyValueStore/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/keyValueStore/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mGAAgG;AAChG,6FAA0F;AAC1F,mGAAgG;AAChG,iGAA8F;AAC9F,+FAA4F;AAC5F,mGAAgG;AAChG,mGAAgG;AAEzF,MAAM,+BAA+B,GAAgC,CAC1E,SAAoB,EACpB,mBAAwC,EACV,EAAE;IAAC,OAAA,uGAC9B,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,uEAAkC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC1E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,2EAAoC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC5E,CAAC,MAAM,IAAA,yEAAmC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,EAC9E,CAAA;EAAA,CAAC;AAXU,QAAA,+BAA+B,mCAWzC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getKeyValueStoreDeleteActionProcessor } from './getKeyValueStoreDeleteActionProcessor';\nimport { getKeyValueStoreGetActionProcessor } from './getKeyValueStoreGetActionProcessor';\nimport { getKeyValueStoreGetAllActionProcessor } from './getKeyValueStoreGetAllActionProcessor';\nimport { getKeyValueStoreQueryActionProcessor } from './getKeyValueStoreQueryActionProcessor';\nimport { getKeyValueStoreScanActionProcessor } from './getKeyValueStoreScanActionProcessor';\nimport { getKeyValueStoreUpdateActionProcessor } from './getKeyValueStoreUpdateActionProcessor';\nimport { getKeyValueStoreUpsertActionProcessor } from './getKeyValueStoreUpsertActionProcessor';\n\nexport const getKeyValueStoreActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getKeyValueStoreDeleteActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreGetActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreGetAllActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreUpsertActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreUpdateActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreQueryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreScanActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/keyValueStore/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mGAAgG;AAChG,6FAA0F;AAC1F,mGAAgG;AAChG,iGAA8F;AAC9F,+FAA4F;AAC5F,iHAA8G;AAC9G,mGAAgG;AAChG,mGAAgG;AAEzF,MAAM,+BAA+B,GAAgC,CAC1E,SAAoB,EACpB,mBAAwC,EACV,EAAE;IAAC,OAAA,qHAC9B,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,uEAAkC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC1E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,6EAAqC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC7E,CAAC,MAAM,IAAA,2EAAoC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC5E,CAAC,MAAM,IAAA,yEAAmC,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GAC3E,CAAC,MAAM,IAAA,2FAA4C,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,EACvF,CAAA;EAAA,CAAC;AAZU,QAAA,+BAA+B,mCAYzC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getKeyValueStoreDeleteActionProcessor } from './getKeyValueStoreDeleteActionProcessor';\nimport { getKeyValueStoreGetActionProcessor } from './getKeyValueStoreGetActionProcessor';\nimport { getKeyValueStoreGetAllActionProcessor } from './getKeyValueStoreGetAllActionProcessor';\nimport { getKeyValueStoreQueryActionProcessor } from './getKeyValueStoreQueryActionProcessor';\nimport { getKeyValueStoreScanActionProcessor } from './getKeyValueStoreScanActionProcessor';\nimport { getKeyValueStoreScanAllScopesActionProcessor } from './getKeyValueStoreScanAllScopesActionProcessor';\nimport { getKeyValueStoreUpdateActionProcessor } from './getKeyValueStoreUpdateActionProcessor';\nimport { getKeyValueStoreUpsertActionProcessor } from './getKeyValueStoreUpsertActionProcessor';\n\nexport const getKeyValueStoreActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getKeyValueStoreDeleteActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreGetActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreGetAllActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreUpsertActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreUpdateActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreQueryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreScanActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getKeyValueStoreScanAllScopesActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/queue/getQueueSendMessageActionProcessor.js

@@ -18,21 +18,22 @@ const sendMessages_1 = require("../../../logic/sqs/sendMessages");
 const getProcessQueueSendMessage = (qpqConfig) => {
     return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ queueName, queueMessages }, session) {
         var _b;
-        // While we have some uuids
         const sqsQueueName = (0, awsNamingUtils_1.getQueueRuntimeResourceNameFromConfig)(queueName, qpqConfig);
         const isFifo = ((_b = quidproquo_core_1.qpqCoreUtils.getQueueByName(qpqConfig, queueName)) === null || _b === void 0 ? void 0 : _b.isFifo) || false;
+        // Each entry carries the caller's session so the consuming service resumes
+        // with the same correlation/context.
+        const toSqsEntry = (message) => {
+            var _a, _b;
+            const queueMessageWithSession = Object.assign(Object.assign({}, message), { storySession: (0, quidproquo_core_2.toCrossServiceSession)(session) });
+            return Object.assign({ body: JSON.stringify(queueMessageWithSession) }, (isFifo
+                ? {
+                    groupId: (_a = message.groupId) !== null && _a !== void 0 ? _a : queueName,
+                    deduplicationId: (_b = message.deduplicationId) !== null && _b !== void 0 ? _b : (0, quidproquo_core_2.generateUuid)(),
+                }
+                : {}));
+        };
         try {
-            yield (0, sendMessages_1.sendMessages)(sqsQueueName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), queueMessages.map((message) => {
-                var _a, _b;
-                // Add the session info to the message
-                const queueMessageWithSession = Object.assign(Object.assign({}, message), { storySession: (0, quidproquo_core_2.toCrossServiceSession)(session) });
-                return Object.assign({ body: JSON.stringify(queueMessageWithSession) }, (isFifo
-                    ? {
-                        groupId: (_a = message.groupId) !== null && _a !== void 0 ? _a : queueName,
-                        deduplicationId: (_b = message.deduplicationId) !== null && _b !== void 0 ? _b : (0, quidproquo_core_2.generateUuid)(),
-                    }
-                    : {}));
-            }));
+            yield (0, sendMessages_1.sendMessages)(sqsQueueName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), queueMessages.map(toSqsEntry));
             return (0, quidproquo_core_2.actionResult)(void 0);
         }
         catch (error) {

package/lib/commonjs/getActionProcessor/core/queue/getQueueSendMessageActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getQueueSendMessageActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/queue/getQueueSendMessageActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAAwI;AACxI,qDASyB;AAEzB,4DAAgF;AAChF,kEAAqF;AAOrF,MAAM,0BAA0B,GAAG,CAAC,SAAoB,EAAwC,EAAE;IAChG,OAAO,gBAA8C,EAAE,uDAAzC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,OAAO;;QACjD,2BAA2B;QAC3B,MAAM,YAAY,GAAG,IAAA,sDAAqC,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,CAAA,MAAA,8BAAY,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,0CAAE,MAAM,KAAI,KAAK,CAAC;QAElF,IAAI,CAAC;YACH,MAAM,IAAA,2BAAY,EAChB,YAAY,EACZ,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAC7D,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAwB,EAAE;;gBAClD,sCAAsC;gBACtC,MAAM,uBAAuB,mCACxB,OAAO,KACV,YAAY,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC,GAC7C,CAAC;gBAEF,uBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAI1C,CAAC,MAAM;oBACR,CAAC,CAAC;wBACE,OAAO,EAAE,MAAA,OAAO,CAAC,OAAO,mCAAI,SAAS;wBACrC,eAAe,EAAE,MAAA,OAAO,CAAC,eAAe,mCAAI,IAAA,8BAAY,GAAE;qBAC3D;oBACH,CAAC,CAAC,EAAE,CAAC,EACP;YACJ,CAAC,CAAC,CACH,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,YAAY,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpH,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC7H,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,aAAa,EAAE,oBAAoB,SAAS,EAAE,CAAC;gBACzH,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;aAChH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,mCAAmC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC7I,CAAC,iCAAe,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,SAAS,CAAC;KACtE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,mCAAmC,uCAE7C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, QPQConfig, qpqCoreUtils, QueueMessage, StorySession } from 'quidproquo-core';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  generateUuid,\n  QueueActionType,\n  QueueSendMessageActionProcessor,\n  QueueSendMessagesErrorTypeEnum,\n  toCrossServiceSession,\n} from 'quidproquo-core';\n\nimport { getQueueRuntimeResourceNameFromConfig } from '../../../awsNamingUtils';\nimport { sendMessages, SqsQueueMessageEntry } from '../../../logic/sqs/sendMessages';\n\n// TODO: Unify this once the lambda code moves from CDK to awslambda\ntype AnyQueueMessageWithSession = QueueMessage<any> & {\n  storySession: StorySession;\n};\n\nconst getProcessQueueSendMessage = (qpqConfig: QPQConfig): QueueSendMessageActionProcessor<any> => {\n  return async ({ queueName, queueMessages }, session) => {\n    // While we have some uuids\n    const sqsQueueName = getQueueRuntimeResourceNameFromConfig(queueName, qpqConfig);\n    const isFifo = qpqCoreUtils.getQueueByName(qpqConfig, queueName)?.isFifo || false;\n\n    try {\n      await sendMessages(\n        sqsQueueName,\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n        queueMessages.map((message): SqsQueueMessageEntry => {\n          // Add the session info to the message\n          const queueMessageWithSession: AnyQueueMessageWithSession = {\n            ...message,\n            storySession: toCrossServiceSession(session),\n          };\n\n          return {\n            body: JSON.stringify(queueMessageWithSession),\n\n            // FIFO: default to one group per queue (global ordering) and a unique\n            // dedup id (no dedup) - callers opt in to per-entity groups / real dedup\n            ...(isFifo\n              ? {\n                  groupId: message.groupId ?? queueName,\n                  deduplicationId: message.deduplicationId ?? generateUuid(),\n                }\n              : {}),\n          };\n        }),\n      );\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        AccessDenied: () => actionResultError(QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),\n        AccessDeniedException: () => actionResultError(QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),\n        QueueDoesNotExist: () => actionResultError(QueueSendMessagesErrorTypeEnum.QueueNotFound, `Queue not found: ${queueName}`),\n        RequestThrottled: () => actionResultError(QueueSendMessagesErrorTypeEnum.ServiceUnavailable, 'Queue throttled'),\n      });\n    }\n  };\n};\n\nexport const getQueueSendMessagesActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [QueueActionType.SendMessages]: getProcessQueueSendMessage(qpqConfig),\n});\n"]}
+{"version":3,"file":"getQueueSendMessageActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/queue/getQueueSendMessageActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAAwI;AACxI,qDASyB;AAEzB,4DAAgF;AAChF,kEAAqF;AAOrF,MAAM,0BAA0B,GAAG,CAAC,SAAoB,EAAwC,EAAE;IAChG,OAAO,gBAA8C,EAAE,uDAAzC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,OAAO;;QACjD,MAAM,YAAY,GAAG,IAAA,sDAAqC,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,CAAA,MAAA,8BAAY,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,0CAAE,MAAM,KAAI,KAAK,CAAC;QAElF,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,UAAU,GAAG,CAAC,OAA0B,EAAwB,EAAE;;YACtE,MAAM,uBAAuB,mCACxB,OAAO,KACV,YAAY,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC,GAC7C,CAAC;YAEF,uBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAI1C,CAAC,MAAM;gBACR,CAAC,CAAC;oBACE,OAAO,EAAE,MAAA,OAAO,CAAC,OAAO,mCAAI,SAAS;oBACrC,eAAe,EAAE,MAAA,OAAO,CAAC,eAAe,mCAAI,IAAA,8BAAY,GAAE;iBAC3D;gBACH,CAAC,CAAC,EAAE,CAAC,EACP;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAA,2BAAY,EAAC,YAAY,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YAE/H,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,YAAY,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpH,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC7H,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,aAAa,EAAE,oBAAoB,SAAS,EAAE,CAAC;gBACzH,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,gDAA8B,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;aAChH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,mCAAmC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC7I,CAAC,iCAAe,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,SAAS,CAAC;KACtE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,mCAAmC,uCAE7C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, QPQConfig, qpqCoreUtils, QueueMessage, StorySession } from 'quidproquo-core';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  generateUuid,\n  QueueActionType,\n  QueueSendMessageActionProcessor,\n  QueueSendMessagesErrorTypeEnum,\n  toCrossServiceSession,\n} from 'quidproquo-core';\n\nimport { getQueueRuntimeResourceNameFromConfig } from '../../../awsNamingUtils';\nimport { sendMessages, SqsQueueMessageEntry } from '../../../logic/sqs/sendMessages';\n\n// TODO: Unify this once the lambda code moves from CDK to awslambda\ntype AnyQueueMessageWithSession = QueueMessage<any> & {\n  storySession: StorySession;\n};\n\nconst getProcessQueueSendMessage = (qpqConfig: QPQConfig): QueueSendMessageActionProcessor<any> => {\n  return async ({ queueName, queueMessages }, session) => {\n    const sqsQueueName = getQueueRuntimeResourceNameFromConfig(queueName, qpqConfig);\n    const isFifo = qpqCoreUtils.getQueueByName(qpqConfig, queueName)?.isFifo || false;\n\n    // Each entry carries the caller's session so the consuming service resumes\n    // with the same correlation/context.\n    const toSqsEntry = (message: QueueMessage<any>): SqsQueueMessageEntry => {\n      const queueMessageWithSession: AnyQueueMessageWithSession = {\n        ...message,\n        storySession: toCrossServiceSession(session),\n      };\n\n      return {\n        body: JSON.stringify(queueMessageWithSession),\n\n        // FIFO: default to one group per queue (global ordering) and a unique\n        // dedup id (no dedup) - callers opt in to per-entity groups / real dedup\n        ...(isFifo\n          ? {\n              groupId: message.groupId ?? queueName,\n              deduplicationId: message.deduplicationId ?? generateUuid(),\n            }\n          : {}),\n      };\n    };\n\n    try {\n      await sendMessages(sqsQueueName, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), queueMessages.map(toSqsEntry));\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        AccessDenied: () => actionResultError(QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),\n        AccessDeniedException: () => actionResultError(QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),\n        QueueDoesNotExist: () => actionResultError(QueueSendMessagesErrorTypeEnum.QueueNotFound, `Queue not found: ${queueName}`),\n        RequestThrottled: () => actionResultError(QueueSendMessagesErrorTypeEnum.ServiceUnavailable, 'Queue throttled'),\n      });\n    }\n  };\n};\n\nexport const getQueueSendMessagesActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [QueueActionType.SendMessages]: getProcessQueueSendMessage(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/system/getDateNow.d.ts

@@ -0,0 +1 @@
+export declare const getDateNow: () => string;

package/lib/commonjs/getActionProcessor/core/system/getDateNow.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDateNow = void 0;
+// The wall-clock date provider handed to createRuntime for nested story
+// executions (stories themselves stay deterministic by asking for it).
+const getDateNow = () => new Date().toISOString();
+exports.getDateNow = getDateNow;
+//# sourceMappingURL=getDateNow.js.map

package/lib/commonjs/getActionProcessor/core/system/getDateNow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getDateNow.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/system/getDateNow.ts"],"names":[],"mappings":";;;AAAA,wEAAwE;AACxE,uEAAuE;AAChE,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAApD,QAAA,UAAU,cAA0C","sourcesContent":["// The wall-clock date provider handed to createRuntime for nested story\n// executions (stories themselves stay deterministic by asking for it).\nexport const getDateNow = (): string => new Date().toISOString();\n"]}

package/lib/commonjs/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.d.ts

@@ -1,3 +1,2 @@
 import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getDateNow: () => string;
 export declare const getSystemExecuteStoryActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.js

@@ -9,16 +9,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getSystemExecuteStoryActionProcessor = exports.getDateNow = void 0;
+exports.getSystemExecuteStoryActionProcessor = void 0;
 const quidproquo_core_1 = require("quidproquo-core");
 const awsLambdaUtils_1 = require("../../../awsLambdaUtils");
-const getDateNow = () => new Date().toISOString();
-exports.getDateNow = getDateNow;
+const getDateNow_1 = require("./getDateNow");
 const getProcessExecuteStory = (qpqConfig) => {
     const moduleName = quidproquo_core_1.qpqCoreUtils.getApplicationModuleName(qpqConfig);
     return (payload, session, actionProcessors, logger, updateSession, dynamicModuleLoader) => __awaiter(void 0, void 0, void 0, function* () {
         var _a, _b, _c, _d, _e;
-        let story = yield dynamicModuleLoader(payload.runtime);
+        const story = yield dynamicModuleLoader(payload.runtime);
         if (!story) {
             return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.NotFound, `Unable to dynamically load: [${payload.runtime}]`);
         }
@@ -29,7 +28,7 @@ const getProcessExecuteStory = (qpqConfig) => {
             depth: (((_c = payload.storySession) === null || _c === void 0 ? void 0 : _c.depth) || session.depth || 0) + 1,
             decodedAccessToken: ((_d = payload.storySession) === null || _d === void 0 ? void 0 : _d.decodedAccessToken) || session.decodedAccessToken,
             correlation: ((_e = payload.storySession) === null || _e === void 0 ? void 0 : _e.correlation) || session.correlation,
-        }, () => __awaiter(void 0, void 0, void 0, function* () { return actionProcessors; }), exports.getDateNow, logger, 
+        }, () => __awaiter(void 0, void 0, void 0, function* () { return actionProcessors; }), getDateNow_1.getDateNow, logger, 
         // TODO: Share this logic.
         `${moduleName}::${(0, awsLambdaUtils_1.randomGuid)()}`, quidproquo_core_1.QpqRuntimeType.EXECUTE_STORY, dynamicModuleLoader, payload.runtime, []);
         const storyResult = yield resolveStory(story, payload.params);

package/lib/commonjs/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSystemExecuteStoryActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAkByB;AAEzB,4DAAqD;AAE9C,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAA5C,QAAA,UAAU,cAAkC;AAEzD,MAAM,sBAAsB,GAAG,CAA0B,SAAoB,EAA2C,EAAE;IACxH,MAAM,UAAU,GAAG,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO,CACL,OAA2C,EAC3C,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,aAAkC,EAClC,mBAAwC,EAC1B,EAAE;;QAChB,IAAI,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,QAAQ,EAAE,gCAAgC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,oDAAkC,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExE,MAAM,YAAY,GAAG,IAAA,+BAAa,EAChC,SAAS,EACT;YACE,OAAO,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,OAAO,KAAI,OAAO,CAAC,OAAO;YACzD,YAAY,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,YAAY,KAAI,OAAO,CAAC,YAAY;YACxE,KAAK,EAAE,CAAC,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,KAAK,KAAI,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YAC9D,kBAAkB,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,kBAAkB,KAAI,OAAO,CAAC,kBAAkB;YAC1F,WAAW,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,WAAW,KAAI,OAAO,CAAC,WAAW;SACtE,EACD,GAAS,EAAE,kDAAC,OAAA,gBAAgB,CAAA,GAAA,EAC5B,kBAAU,EACV,MAAM;QACN,0BAA0B;QAC1B,GAAG,UAAU,KAAK,IAAA,2BAAU,GAAE,EAAE,EAChC,gCAAc,CAAC,aAAa,EAC5B,mBAAmB,EACnB,OAAO,CAAC,OAAO,EACf,EAAE,CACH,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE9D,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAA,mCAAiB,EACtB,WAAW,CAAC,KAAK,CAAC,SAAS,EAC3B,WAAW,CAAC,KAAK,CAAC,SAAS,EAC3B,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,WAAW,QAAQ,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,WAAW,CACnG,CAAC;QACJ,CAAC;QAED,OAAO,IAAA,8BAAY,EAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;KACnE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  createRuntime,\n  DynamicModuleLoader,\n  ErrorTypeEnum,\n  getUniqueKeyFromQpqFunctionRuntime,\n  QPQConfig,\n  qpqCoreUtils,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StorySessionUpdater,\n  SystemActionType,\n  SystemExecuteStoryActionPayload,\n  SystemExecuteStoryActionProcessor,\n} from 'quidproquo-core';\n\nimport { randomGuid } from '../../../awsLambdaUtils';\n\nexport const getDateNow = () => new Date().toISOString();\n\nconst getProcessExecuteStory = <T extends Array<any>, R>(qpqConfig: QPQConfig): SystemExecuteStoryActionProcessor<T, R> => {\n  const moduleName = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  return async (\n    payload: SystemExecuteStoryActionPayload<T>,\n    session: StorySession,\n    actionProcessors: ActionProcessorList,\n    logger: QpqLogger,\n    updateSession: StorySessionUpdater,\n    dynamicModuleLoader: DynamicModuleLoader,\n  ): Promise<any> => {\n    let story = await dynamicModuleLoader(payload.runtime);\n\n    if (!story) {\n      return actionResultError(ErrorTypeEnum.NotFound, `Unable to dynamically load: [${payload.runtime}]`);\n    }\n\n    const functionKey = getUniqueKeyFromQpqFunctionRuntime(payload.runtime);\n\n    const resolveStory = createRuntime(\n      qpqConfig,\n      {\n        context: payload.storySession?.context || session.context,\n        localContext: payload.storySession?.localContext || session.localContext,\n        depth: (payload.storySession?.depth || session.depth || 0) + 1,\n        decodedAccessToken: payload.storySession?.decodedAccessToken || session.decodedAccessToken,\n        correlation: payload.storySession?.correlation || session.correlation,\n      },\n      async () => actionProcessors,\n      getDateNow,\n      logger,\n      // TODO: Share this logic.\n      `${moduleName}::${randomGuid()}`,\n      QpqRuntimeType.EXECUTE_STORY,\n      dynamicModuleLoader,\n      payload.runtime,\n      [],\n    );\n    const storyResult = await resolveStory(story, payload.params);\n\n    if (storyResult.error) {\n      return actionResultError(\n        storyResult.error.errorType,\n        storyResult.error.errorText,\n        storyResult.error.errorStack ? `${functionKey} -> [${storyResult.error.errorStack}]` : functionKey,\n      );\n    }\n\n    return actionResult<R>(storyResult.result);\n  };\n};\n\nexport const getSystemExecuteStoryActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [SystemActionType.ExecuteStory]: getProcessExecuteStory(qpqConfig),\n});\n"]}
+{"version":3,"file":"getSystemExecuteStoryActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAkByB;AAEzB,4DAAqD;AACrD,6CAA0C;AAE1C,MAAM,sBAAsB,GAAG,CAA0B,SAAoB,EAA2C,EAAE;IACxH,MAAM,UAAU,GAAG,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO,CACL,OAA2C,EAC3C,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,aAAkC,EAClC,mBAAwC,EAC1B,EAAE;;QAChB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEzD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,QAAQ,EAAE,gCAAgC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,oDAAkC,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExE,MAAM,YAAY,GAAG,IAAA,+BAAa,EAChC,SAAS,EACT;YACE,OAAO,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,OAAO,KAAI,OAAO,CAAC,OAAO;YACzD,YAAY,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,YAAY,KAAI,OAAO,CAAC,YAAY;YACxE,KAAK,EAAE,CAAC,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,KAAK,KAAI,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YAC9D,kBAAkB,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,kBAAkB,KAAI,OAAO,CAAC,kBAAkB;YAC1F,WAAW,EAAE,CAAA,MAAA,OAAO,CAAC,YAAY,0CAAE,WAAW,KAAI,OAAO,CAAC,WAAW;SACtE,EACD,GAAS,EAAE,kDAAC,OAAA,gBAAgB,CAAA,GAAA,EAC5B,uBAAU,EACV,MAAM;QACN,0BAA0B;QAC1B,GAAG,UAAU,KAAK,IAAA,2BAAU,GAAE,EAAE,EAChC,gCAAc,CAAC,aAAa,EAC5B,mBAAmB,EACnB,OAAO,CAAC,OAAO,EACf,EAAE,CACH,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE9D,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAA,mCAAiB,EACtB,WAAW,CAAC,KAAK,CAAC,SAAS,EAC3B,WAAW,CAAC,KAAK,CAAC,SAAS,EAC3B,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,WAAW,QAAQ,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,WAAW,CACnG,CAAC;QACJ,CAAC;QAED,OAAO,IAAA,8BAAY,EAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;KACnE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  createRuntime,\n  DynamicModuleLoader,\n  ErrorTypeEnum,\n  getUniqueKeyFromQpqFunctionRuntime,\n  QPQConfig,\n  qpqCoreUtils,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StorySessionUpdater,\n  SystemActionType,\n  SystemExecuteStoryActionPayload,\n  SystemExecuteStoryActionProcessor,\n} from 'quidproquo-core';\n\nimport { randomGuid } from '../../../awsLambdaUtils';\nimport { getDateNow } from './getDateNow';\n\nconst getProcessExecuteStory = <T extends Array<any>, R>(qpqConfig: QPQConfig): SystemExecuteStoryActionProcessor<T, R> => {\n  const moduleName = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  return async (\n    payload: SystemExecuteStoryActionPayload<T>,\n    session: StorySession,\n    actionProcessors: ActionProcessorList,\n    logger: QpqLogger,\n    updateSession: StorySessionUpdater,\n    dynamicModuleLoader: DynamicModuleLoader,\n  ): Promise<any> => {\n    const story = await dynamicModuleLoader(payload.runtime);\n\n    if (!story) {\n      return actionResultError(ErrorTypeEnum.NotFound, `Unable to dynamically load: [${payload.runtime}]`);\n    }\n\n    const functionKey = getUniqueKeyFromQpqFunctionRuntime(payload.runtime);\n\n    const resolveStory = createRuntime(\n      qpqConfig,\n      {\n        context: payload.storySession?.context || session.context,\n        localContext: payload.storySession?.localContext || session.localContext,\n        depth: (payload.storySession?.depth || session.depth || 0) + 1,\n        decodedAccessToken: payload.storySession?.decodedAccessToken || session.decodedAccessToken,\n        correlation: payload.storySession?.correlation || session.correlation,\n      },\n      async () => actionProcessors,\n      getDateNow,\n      logger,\n      // TODO: Share this logic.\n      `${moduleName}::${randomGuid()}`,\n      QpqRuntimeType.EXECUTE_STORY,\n      dynamicModuleLoader,\n      payload.runtime,\n      [],\n    );\n    const storyResult = await resolveStory(story, payload.params);\n\n    if (storyResult.error) {\n      return actionResultError(\n        storyResult.error.errorType,\n        storyResult.error.errorText,\n        storyResult.error.errorStack ? `${functionKey} -> [${storyResult.error.errorStack}]` : functionKey,\n      );\n    }\n\n    return actionResult<R>(storyResult.result);\n  };\n};\n\nexport const getSystemExecuteStoryActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [SystemActionType.ExecuteStory]: getProcessExecuteStory(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryAuthenticateUserActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryAuthenticateUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryAuthenticateUserActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAWyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,8EAA2E;AAC3E,kHAA+G;AAE/G,MAAM,0BAA0B,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACxG,OAAO,CAAO,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEzI,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,IAAA,uEAAkC,EAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAE7H,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAgB,EACzC,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EACxC,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CACzC,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4DAA0C,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACzI,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4DAA0C,CAAC,YAAY,EAAE,gCAAgC,CAAC;aAC3I,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,+CAA+C,GAAgC,CAC1F,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,SAAS,CAAC;KAClF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,+CAA+C,mDAIzD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  qpqCoreUtils,\n  UserDirectoryActionType,\n  UserDirectoryAuthenticateUserActionProcessor,\n  UserDirectoryAuthenticateUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { authenticateUser } from '../../../logic/cognito/authenticateUser';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\n\nconst getProcessAuthenticateUser = (qpqConfig: QPQConfig): UserDirectoryAuthenticateUserActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    try {\n      const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, payload.authenticateUserRequest.email);\n\n      const authResponse = await authenticateUser(\n        userPoolId,\n        userPoolClientId,\n        region,\n        payload.authenticateUserRequest.isCustom,\n        resolvedUsername,\n        payload.authenticateUserRequest.password,\n      );\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectoryAuthenticateUserErrorTypeEnum.UserNotFound, 'Incorrect username or password'),\n        NotAuthorizedException: () => actionResultError(UserDirectoryAuthenticateUserErrorTypeEnum.UserNotFound, 'Incorrect username or password'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryAuthenticateUserActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.AuthenticateUser]: getProcessAuthenticateUser(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryAuthenticateUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryAuthenticateUserActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,8EAA2E;AAC3E,kHAA+G;AAE/G,MAAM,0BAA0B,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACxG,OAAO,CAAO,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEzI,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,IAAA,uEAAkC,EAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAE7H,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAgB,EACzC,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EACxC,gBAAgB,EAChB,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CACzC,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4DAA0C,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACzI,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4DAA0C,CAAC,YAAY,EAAE,gCAAgC,CAAC;aAC3I,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,+CAA+C,GAAgC,CAC1F,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,SAAS,CAAC;KAClF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,+CAA+C,mDAIzD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryAuthenticateUserActionProcessor,\n  UserDirectoryAuthenticateUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { authenticateUser } from '../../../logic/cognito/authenticateUser';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\n\nconst getProcessAuthenticateUser = (qpqConfig: QPQConfig): UserDirectoryAuthenticateUserActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    try {\n      const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, payload.authenticateUserRequest.email);\n\n      const authResponse = await authenticateUser(\n        userPoolId,\n        userPoolClientId,\n        region,\n        payload.authenticateUserRequest.isCustom,\n        resolvedUsername,\n        payload.authenticateUserRequest.password,\n      );\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectoryAuthenticateUserErrorTypeEnum.UserNotFound, 'Incorrect username or password'),\n        NotAuthorizedException: () => actionResultError(UserDirectoryAuthenticateUserErrorTypeEnum.UserNotFound, 'Incorrect username or password'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryAuthenticateUserActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.AuthenticateUser]: getProcessAuthenticateUser(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryCreateUserActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryCreateUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryCreateUserActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAYyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,kEAA+D;AAC/D,kHAA+G;AAE/G,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC5F,OAAO,CAAO,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAE7H,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEzI,MAAM,gBAAgB,GAAG,MAAM,IAAA,uEAAkC,EAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvH,IAAI,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;YACzD,OAAO,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QACvH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAA6B,MAAM,IAAA,uBAAU,EAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAEjI,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,uBAAuB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,QAAQ,EAAE,2CAA2C,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,eAAe,EAAE,4CAA4C,CAAC;gBACvH,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACrH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,yCAAyC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACnJ,CAAC,yCAAuB,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KACtE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,yCAAyC,6CAEnD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AuthenticateUserResponse,\n  QPQConfig,\n  qpqCoreUtils,\n  UserDirectoryActionType,\n  UserDirectoryCreateUserActionProcessor,\n  UserDirectoryCreateUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { createUser } from '../../../logic/cognito/createUser';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\n\nconst getProcessCreateUser = (qpqConfig: QPQConfig): UserDirectoryCreateUserActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, payload.createUserRequest.email);\n    if (resolvedUsername !== payload.createUserRequest.email) {\n      return actionResultError(UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists');\n    }\n\n    try {\n      const authResponse: AuthenticateUserResponse = await createUser(userPoolId, region, userPoolClientId, payload.createUserRequest);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UsernameExistsException: () => actionResultError(UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryCreateUserErrorTypeEnum.InvalidPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryCreateUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryCreateUserActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.CreateUser]: getProcessCreateUser(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryCreateUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryCreateUserActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAWyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,kEAA+D;AAC/D,kHAA+G;AAE/G,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC5F,OAAO,CAAO,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAE7H,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEzI,MAAM,gBAAgB,GAAG,MAAM,IAAA,uEAAkC,EAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvH,IAAI,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;YACzD,OAAO,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QACvH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAA6B,MAAM,IAAA,uBAAU,EAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAEjI,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,uBAAuB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,QAAQ,EAAE,2CAA2C,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,eAAe,EAAE,4CAA4C,CAAC;gBACvH,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,sDAAoC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACrH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,yCAAyC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACnJ,CAAC,yCAAuB,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KACtE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,yCAAyC,6CAEnD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AuthenticateUserResponse,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryCreateUserActionProcessor,\n  UserDirectoryCreateUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { createUser } from '../../../logic/cognito/createUser';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\n\nconst getProcessCreateUser = (qpqConfig: QPQConfig): UserDirectoryCreateUserActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(payload.userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, payload.createUserRequest.email);\n    if (resolvedUsername !== payload.createUserRequest.email) {\n      return actionResultError(UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists');\n    }\n\n    try {\n      const authResponse: AuthenticateUserResponse = await createUser(userPoolId, region, userPoolClientId, payload.createUserRequest);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UsernameExistsException: () => actionResultError(UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryCreateUserErrorTypeEnum.InvalidPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryCreateUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryCreateUserActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.CreateUser]: getProcessCreateUser(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUserAttributesByUserIdActionProcessor.js

@@ -16,7 +16,7 @@ const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
 const getUserAttributesBySub_1 = require("../../../logic/cognito/getUserAttributesBySub");
 const getProcessGetUserAttributesByUserId = (qpqConfig) => {
-    return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ userDirectoryName, userId }, session) {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ userDirectoryName, userId }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         try {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUserAttributesByUserIdActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryGetUserAttributesByUserIdActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUserAttributesByUserIdActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,0FAAuF;AAEvF,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAyD,EAAE;IAC1H,OAAO,gBAA+C,EAAE,uDAA1C,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,OAAO;QAClD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,+CAAsB,EAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAEhF,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,qEAAmD,CAAC,YAAY,EAAE,+BAA+B,CAAC;aAC3I,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,wDAAwD,GAAgC,CACnG,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,yBAAyB,CAAC,EAAE,mCAAmC,CAAC,SAAS,CAAC;KACpG,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,wDAAwD,4DAIlE","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUserAttributesByUserIdActionProcessor,\n  UserDirectoryGetUserAttributesByUserIdErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { getUserAttributesBySub } from '../../../logic/cognito/getUserAttributesBySub';\n\nconst getProcessGetUserAttributesByUserId = (qpqConfig: QPQConfig): UserDirectoryGetUserAttributesByUserIdActionProcessor => {\n  return async ({ userDirectoryName, userId }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await getUserAttributesBySub(userPoolId, region, userId);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        USER_NOT_FOUND: () => actionResultError(UserDirectoryGetUserAttributesByUserIdErrorTypeEnum.UserNotFound, 'No user found for this userId'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUserAttributesByUserIdActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUserAttributesByUserId]: getProcessGetUserAttributesByUserId(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryGetUserAttributesByUserIdActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUserAttributesByUserIdActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,0FAAuF;AAEvF,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAyD,EAAE;IAC1H,OAAO,KAAsC,EAAE,4CAAjC,EAAE,iBAAiB,EAAE,MAAM,EAAE;QACzC,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,+CAAsB,EAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAEhF,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,qEAAmD,CAAC,YAAY,EAAE,+BAA+B,CAAC;aAC3I,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,wDAAwD,GAAgC,CACnG,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,yBAAyB,CAAC,EAAE,mCAAmC,CAAC,SAAS,CAAC;KACpG,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,wDAAwD,4DAIlE","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUserAttributesByUserIdActionProcessor,\n  UserDirectoryGetUserAttributesByUserIdErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { getUserAttributesBySub } from '../../../logic/cognito/getUserAttributesBySub';\n\nconst getProcessGetUserAttributesByUserId = (qpqConfig: QPQConfig): UserDirectoryGetUserAttributesByUserIdActionProcessor => {\n  return async ({ userDirectoryName, userId }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await getUserAttributesBySub(userPoolId, region, userId);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        USER_NOT_FOUND: () => actionResultError(UserDirectoryGetUserAttributesByUserIdErrorTypeEnum.UserNotFound, 'No user found for this userId'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUserAttributesByUserIdActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUserAttributesByUserId]: getProcessGetUserAttributesByUserId(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersActionProcessor.js

@@ -16,7 +16,7 @@ const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
 const listPagedUsers_1 = require("../../../logic/cognito/listPagedUsers");
 const getProcessGetUsers = (qpqConfig) => {
-    return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ userDirectoryName, nextPageKey }, session) {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ userDirectoryName, nextPageKey }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         try {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryGetUsersActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,0EAAuE;AAEvE,MAAM,kBAAkB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACxF,OAAO,gBAAoD,EAAE,uDAA/C,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,OAAO;QACvD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,+BAAc,EAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YAE7E,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,oDAAkC,CAAC,cAAc,EAAE,kCAAkC,CAAC;gBACzI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,oDAAkC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACnH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,uCAAuC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACjJ,CAAC,yCAAuB,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC;KAClE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,uCAAuC,2CAEjD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersActionProcessor,\n  UserDirectoryGetUsersErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsers } from '../../../logic/cognito/listPagedUsers';\n\nconst getProcessGetUsers = (qpqConfig: QPQConfig): UserDirectoryGetUsersActionProcessor => {\n  return async ({ userDirectoryName, nextPageKey }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsers(userPoolId, region, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () => actionResultError(UserDirectoryGetUsersErrorTypeEnum.InvalidPageKey, 'The supplied page key is invalid'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsers]: getProcessGetUsers(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryGetUsersActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,0EAAuE;AAEvE,MAAM,kBAAkB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACxF,OAAO,KAA2C,EAAE,4CAAtC,EAAE,iBAAiB,EAAE,WAAW,EAAE;QAC9C,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,+BAAc,EAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YAE7E,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,oDAAkC,CAAC,cAAc,EAAE,kCAAkC,CAAC;gBACzI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,oDAAkC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACnH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,uCAAuC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACjJ,CAAC,yCAAuB,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC;KAClE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,uCAAuC,2CAEjD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersActionProcessor,\n  UserDirectoryGetUsersErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsers } from '../../../logic/cognito/listPagedUsers';\n\nconst getProcessGetUsers = (qpqConfig: QPQConfig): UserDirectoryGetUsersActionProcessor => {\n  return async ({ userDirectoryName, nextPageKey }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsers(userPoolId, region, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () => actionResultError(UserDirectoryGetUsersErrorTypeEnum.InvalidPageKey, 'The supplied page key is invalid'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsers]: getProcessGetUsers(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.js

@@ -16,7 +16,7 @@ const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
 const listPagedUsersByAttribute_1 = require("../../../logic/cognito/listPagedUsersByAttribute");
 const getProcessGetUsersByAttribute = (qpqConfig) => {
-    return (_a, _session_1) => __awaiter(void 0, [_a, _session_1], void 0, function* ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }, _session) {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         try {
@@ -26,6 +26,9 @@ const getProcessGetUsersByAttribute = (qpqConfig) => {
         catch (error) {
             return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
                 InvalidParameterException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters, 'The search attribute, value, limit, or page key is invalid'),
+                // Thrown by buildCognitoUserFilter before the Cognito call, for input
+                // that cannot be embedded safely in a ListUsers filter string.
+                INVALID_COGNITO_FILTER: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters, 'The search attribute, value, limit, or page key is invalid'),
                 TooManyRequestsException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUsersByAttributeErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),
             });
         }

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryGetUsersByAttributeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,gGAA6F;AAE7F,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAC9G,OAAO,iBAAyF,EAAE,wDAApF,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ;QAC5F,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,qDAAyB,EAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAE5H,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAC9B,IAAA,mCAAiB,EACf,+DAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,+DAA6C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,kDAAkD,GAAgC,CAC7F,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;KACxF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,kDAAkD,sDAI5D","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersByAttributeActionProcessor,\n  UserDirectoryGetUsersByAttributeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsersByAttribute } from '../../../logic/cognito/listPagedUsersByAttribute';\n\nconst getProcessGetUsersByAttribute = (qpqConfig: QPQConfig): UserDirectoryGetUsersByAttributeActionProcessor => {\n  return async ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }, _session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsersByAttribute(userPoolId, region, attribueName, attribueValue, limit, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersByAttributeErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersByAttributeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsersByAttribute]: getProcessGetUsersByAttribute(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryGetUsersByAttributeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAA8E;AAC9E,qFAAkF;AAClF,gGAA6F;AAE7F,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAC9G,OAAO,KAA+E,EAAE,4CAA1E,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE;QAClF,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,qDAAyB,EAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAE5H,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAC9B,IAAA,mCAAiB,EACf,+DAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,sEAAsE;gBACtE,+DAA+D;gBAC/D,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EACf,+DAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,+DAA6C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,kDAAkD,GAAgC,CAC7F,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;KACxF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,kDAAkD,sDAI5D","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersByAttributeActionProcessor,\n  UserDirectoryGetUsersByAttributeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsersByAttribute } from '../../../logic/cognito/listPagedUsersByAttribute';\n\nconst getProcessGetUsersByAttribute = (qpqConfig: QPQConfig): UserDirectoryGetUsersByAttributeActionProcessor => {\n  return async ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsersByAttribute(userPoolId, region, attribueName, attribueValue, limit, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        // Thrown by buildCognitoUserFilter before the Cognito call, for input\n        // that cannot be embedded safely in a ListUsers filter string.\n        INVALID_COGNITO_FILTER: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersByAttributeErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersByAttributeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsersByAttribute]: getProcessGetUsersByAttribute(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.js

@@ -20,11 +20,15 @@ const getProcessReadAccessToken = (qpqConfig) => {
             }
             return (0, quidproquo_core_1.actionResult)(decodedAccessToken);
         }
-        const decodedAuthToken = yield (0, decodeAccessToken_1.decodeAccessToken)(userDirectoryName, qpqConfig, accessToken, ignoreExpiration);
-        if (!decodedAuthToken || !decodedAuthToken.username) {
+        // decodeAccessToken throws on a missing/unverifiable token; surface that as
+        // a typed Unauthorized result (matching the SetAccessToken processor)
+        // instead of letting the raw error escape as a GenericError.
+        try {
+            return (0, quidproquo_core_1.actionResult)(yield (0, decodeAccessToken_1.decodeAccessToken)(userDirectoryName, qpqConfig, accessToken, ignoreExpiration));
+        }
+        catch (_c) {
             return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.Unauthorized, 'Invalid accessToken');
         }
-        return (0, quidproquo_core_1.actionResult)(decodedAuthToken);
     });
 };
 const getUserDirectoryReadAccessTokenActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryReadAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDASyB;AAEzB,gFAA6E;AAE7E,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAA+C,EAAE;IACtG,OAAO,SAAqF,EAAE,gDAAhF,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;QACxF,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,IAAA,8BAAY,EAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAA,qCAAiB,EAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAE9G,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACpD,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,8CAA8C,GAAgC,CACzF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC;KAChF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,8CAA8C,kDAIxD","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  ErrorTypeEnum,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryReadAccessTokenActionProcessor,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito/decodeAccessToken';\n\nconst getProcessReadAccessToken = (qpqConfig: QPQConfig): UserDirectoryReadAccessTokenActionProcessor => {\n  return async ({ userDirectoryName, ignoreExpiration }, { decodedAccessToken, accessToken }) => {\n    if (decodedAccessToken) {\n      if (!ignoreExpiration && decodedAccessToken.exp < Math.floor(Date.now() / 1000)) {\n        return actionResultError(ErrorTypeEnum.Invalid, 'Access has expired');\n      }\n\n      return actionResult(decodedAccessToken);\n    }\n\n    const decodedAuthToken = await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration);\n\n    if (!decodedAuthToken || !decodedAuthToken.username) {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    return actionResult(decodedAuthToken);\n  };\n};\n\nexport const getUserDirectoryReadAccessTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.ReadAccessToken]: getProcessReadAccessToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryReadAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDASyB;AAEzB,gFAA6E;AAE7E,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAA+C,EAAE;IACtG,OAAO,SAAqF,EAAE,gDAAhF,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;QACxF,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,IAAA,8BAAY,EAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QAED,4EAA4E;QAC5E,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,CAAC;YACH,OAAO,IAAA,8BAAY,EAAC,MAAM,IAAA,qCAAiB,EAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5G,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAA,mCAAiB,EAAC,+BAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,8CAA8C,GAAgC,CACzF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC;KAChF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,8CAA8C,kDAIxD","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  ErrorTypeEnum,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryReadAccessTokenActionProcessor,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito/decodeAccessToken';\n\nconst getProcessReadAccessToken = (qpqConfig: QPQConfig): UserDirectoryReadAccessTokenActionProcessor => {\n  return async ({ userDirectoryName, ignoreExpiration }, { decodedAccessToken, accessToken }) => {\n    if (decodedAccessToken) {\n      if (!ignoreExpiration && decodedAccessToken.exp < Math.floor(Date.now() / 1000)) {\n        return actionResultError(ErrorTypeEnum.Invalid, 'Access has expired');\n      }\n\n      return actionResult(decodedAccessToken);\n    }\n\n    // decodeAccessToken throws on a missing/unverifiable token; surface that as\n    // a typed Unauthorized result (matching the SetAccessToken processor)\n    // instead of letting the raw error escape as a GenericError.\n    try {\n      return actionResult(await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration));\n    } catch {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n  };\n};\n\nexport const getUserDirectoryReadAccessTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.ReadAccessToken]: getProcessReadAccessToken(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.js

@@ -30,7 +30,7 @@ const getProcessRefreshToken = (qpqConfig) => {
         // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,
         // so a forged/unverified username cannot mint tokens for another user.
         try {
-            const authResponse = yield (0, refreshToken_1.refreshToken)(userPoolId, userPoolClientId, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), session.decodedAccessToken.username, refreshToken);
+            const authResponse = yield (0, refreshToken_1.refreshToken)(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);
             return (0, quidproquo_core_1.actionResult)(authResponse);
         }
         catch (error) {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,sEAA0F;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAChG,OAAO,gBAAqD,EAAE,uDAAhD,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO;QACxD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAA,2BAAmB,EAC5C,UAAU,EACV,gBAAgB,EAChB,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAC7D,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EACnC,YAAY,CACb,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,2CAA2C,GAAgC,CACtF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;KAC1E,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,2CAA2C,+CAIrD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRefreshTokenActionProcessor,\n  UserDirectoryRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(\n        userPoolId,\n        userPoolClientId,\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n        session.decodedAccessToken.username,\n        refreshToken,\n      );\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RefreshToken]: getProcessRefreshToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,4DAAyH;AACzH,qFAAkF;AAClF,sEAA0F;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAChG,OAAO,gBAAqD,EAAE,uDAAhD,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO;QACxD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAA,2BAAmB,EAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAExI,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,wDAAsC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,2CAA2C,GAAgC,CACtF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;KAC1E,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,2CAA2C,+CAIrD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRefreshTokenActionProcessor,\n  UserDirectoryRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RefreshToken]: getProcessRefreshToken(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js

@@ -15,7 +15,7 @@ const quidproquo_core_1 = require("quidproquo-core");
 const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
 const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
-const respondToAuthChallengeChallenge_1 = require("../../../logic/cognito/respondToAuthChallengeChallenge");
+const respondToAuthChallenge_1 = require("../../../logic/cognito/respondToAuthChallenge");
 const verifySoftwareToken_1 = require("../../../logic/cognito/verifySoftwareToken");
 const anyAuthChallengeToCognitoAttributes = (authChallenge) => {
     switch (authChallenge.challenge) {
@@ -65,7 +65,7 @@ const getProcessRespondToAuthChallenge = (qpqConfig) => {
             if (authChallenge.challenge === quidproquo_core_1.AuthenticateUserChallenge.MFA_SETUP) {
                 session = yield (0, verifySoftwareToken_1.verifySoftwareToken)(region, session, authChallenge.mfaCode);
             }
-            const response = yield (0, respondToAuthChallengeChallenge_1.respondToAuthChallengeChallenge)(userPoolId, userPoolClientId, region, authChallenge.username, session, anyAuthChallengeToCognitoChallengeName(authChallenge), anyAuthChallengeToCognitoAttributes(authChallenge));
+            const response = yield (0, respondToAuthChallenge_1.respondToAuthChallenge)(userPoolId, userPoolClientId, region, authChallenge.username, session, anyAuthChallengeToCognitoChallengeName(authChallenge), anyAuthChallengeToCognitoAttributes(authChallenge));
             return (0, quidproquo_core_1.actionResult)(response);
         }
         catch (error) {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAYyB;AAEzB,gGAA8E;AAE9E,4DAAyH;AACzH,qFAAkF;AAClF,4GAAyG;AACzG,oFAAiF;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,2CAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,2CAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,2CAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,2CAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,2CAAyB,CAAC,qBAAqB;YAClD,OAAO,oDAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,2CAAyB,CAAC,gBAAgB;YAC7C,OAAO,oDAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,2CAAyB,CAAC,kBAAkB;YAC/C,OAAO,oDAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,2CAAyB,CAAC,SAAS;YACtC,OAAO,oDAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAAsD,EAAE;IACpH,OAAO,KAA6C,EAAE,4CAAxC,EAAE,iBAAiB,EAAE,aAAa,EAAE;QAChD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,2CAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,IAAA,yCAAmB,EAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,iEAA+B,EACpD,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,qDAAqD,GAAgC,CAChG,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC;KAC9F,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,qDAAqD,yDAI/D","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  AuthenticateUserChallenge,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRespondToAuthChallengeActionProcessor,\n  UserDirectoryRespondToAuthChallengeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallengeChallenge } from '../../../logic/cognito/respondToAuthChallengeChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): UserDirectoryRespondToAuthChallengeActionProcessor => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallengeChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAYyB;AAEzB,gGAA8E;AAE9E,4DAAyH;AACzH,qFAAkF;AAClF,0FAAuF;AACvF,oFAAiF;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,2CAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,2CAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,2CAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,2CAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,2CAAyB,CAAC,qBAAqB;YAClD,OAAO,oDAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,2CAAyB,CAAC,gBAAgB;YAC7C,OAAO,oDAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,2CAAyB,CAAC,kBAAkB;YAC/C,OAAO,oDAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,2CAAyB,CAAC,SAAS;YACtC,OAAO,oDAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAAsD,EAAE;IACpH,OAAO,KAA6C,EAAE,4CAAxC,EAAE,iBAAiB,EAAE,aAAa,EAAE;QAChD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,oDAAmC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAgB,EAAC,IAAA,0DAAyC,EAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,2CAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,IAAA,yCAAmB,EAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+CAAsB,EAC3C,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,IAAA,8BAAY,EAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,kEAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,qDAAqD,GAAgC,CAChG,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,yCAAuB,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC;KAC9F,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,qDAAqD,yDAI/D","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  AuthenticateUserChallenge,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRespondToAuthChallengeActionProcessor,\n  UserDirectoryRespondToAuthChallengeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallenge } from '../../../logic/cognito/respondToAuthChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): UserDirectoryRespondToAuthChallengeActionProcessor => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.js

@@ -17,7 +17,7 @@ const getExportedValue_1 = require("../../../logic/cloudformation/getExportedVal
 const resolveUsernameByPreferredUsername_1 = require("../../../logic/cognito/resolveUsernameByPreferredUsername");
 const setUserPassword_1 = require("../../../logic/cognito/setUserPassword");
 const getProcessSetPassword = (qpqConfig) => {
-    return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ userDirectoryName, newPassword, username }, session) {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ userDirectoryName, newPassword, username }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         const resolvedUsername = yield (0, resolveUsernameByPreferredUsername_1.resolveUsernameByPreferredUsername)(userPoolId, region, username);