quidproquo-actionprocessor-awslambda 0.1.16 → 0.1.18

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAChG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAExI,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,sCAAsC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAgC,KAAK,EAC3F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRefreshTokenActionProcessor,\n  UserDirectoryRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RefreshToken]: getProcessRefreshToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,4BAA4B,EAC5B,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAAqD,EAAE;IACzG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,4BAA4B,CAAC,SAAS,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAExI,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,4BAA4B,CAAC,SAAS,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,4BAA4B,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,sBAAsB,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectoryRefreshToken,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectoryRefreshToken> => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(askUserDirectoryRefreshToken.errorType.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(askUserDirectoryRefreshToken.errorType.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectoryRefreshToken.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor = createActionProcessor(askUserDirectoryRefreshToken, getProcessRefreshToken);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRequestEmailVerificationActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectoryRequestEmailVerificationActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectoryRequestEmailVerificationActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRequestEmailVerificationActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectoryRequestEmailVerificationErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectoryRequestEmailVerification, createActionProcessor, } from 'quidproquo-core';
 import { requestEmailVerificationCode } from '../../../logic/cognito/requestEmailVerificationCode';
 const getProcessRequestEmailVerification = (qpqConfig) => {
     return async ({ userDirectoryName, accessToken }) => {
@@ -10,14 +10,12 @@ const getProcessRequestEmailVerification = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                NotAuthorizedException: () => actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),
-                LimitExceededException: () => actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
-                CodeDeliveryFailureException: () => actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.CodeDeliveryFailed, 'Could not deliver the verification code'),
+                NotAuthorizedException: () => actionResultError(askUserDirectoryRequestEmailVerification.errorType.Unauthorized, 'Access token is invalid or has expired'),
+                LimitExceededException: () => actionResultError(askUserDirectoryRequestEmailVerification.errorType.LimitExceeded, 'Too many attempts, please try again later'),
+                CodeDeliveryFailureException: () => actionResultError(askUserDirectoryRequestEmailVerification.errorType.CodeDeliveryFailed, 'Could not deliver the verification code'),
             });
         }
     };
 };
-export const getUserDirectoryRequestEmailVerificationActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.RequestEmailVerification]: getProcessRequestEmailVerification(qpqConfig),
-});
+export const getUserDirectoryRequestEmailVerificationActionProcessor = createActionProcessor(askUserDirectoryRequestEmailVerification, getProcessRequestEmailVerification);
 //# sourceMappingURL=getUserDirectoryRequestEmailVerificationActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRequestEmailVerificationActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRequestEmailVerificationActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRequestEmailVerificationActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,kDAAkD,GACnD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AAEnG,MAAM,kCAAkC,GAAG,CAAC,SAAoB,EAAwD,EAAE;IACxH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,4BAA4B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAEhF,OAAO,YAAY,CAAC,eAAe,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,kDAAkD,CAAC,YAAY,EAAE,wCAAwC,CAAC;gBAC9H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,kDAAkD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAClI,4BAA4B,EAAE,GAAG,EAAE,CACjC,iBAAiB,CAAC,kDAAkD,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;aACtI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uDAAuD,GAAgC,KAAK,EACvG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,EAAE,kCAAkC,CAAC,SAAS,CAAC;CAClG,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRequestEmailVerificationActionProcessor,\n  UserDirectoryRequestEmailVerificationErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { requestEmailVerificationCode } from '../../../logic/cognito/requestEmailVerificationCode';\n\nconst getProcessRequestEmailVerification = (qpqConfig: QPQConfig): UserDirectoryRequestEmailVerificationActionProcessor => {\n  return async ({ userDirectoryName, accessToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const deliveryDetails = await requestEmailVerificationCode(region, accessToken);\n\n      return actionResult(deliveryDetails);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        CodeDeliveryFailureException: () =>\n          actionResultError(UserDirectoryRequestEmailVerificationErrorTypeEnum.CodeDeliveryFailed, 'Could not deliver the verification code'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRequestEmailVerificationActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RequestEmailVerification]: getProcessRequestEmailVerification(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRequestEmailVerificationActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRequestEmailVerificationActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,wCAAwC,EACxC,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AAEnG,MAAM,kCAAkC,GAAG,CAAC,SAAoB,EAAiE,EAAE;IACjI,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,4BAA4B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAEhF,OAAO,YAAY,CAAC,eAAe,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,wCAAwC,CAAC,SAAS,CAAC,YAAY,EAAE,wCAAwC,CAAC;gBAC9H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,wCAAwC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAClI,4BAA4B,EAAE,GAAG,EAAE,CACjC,iBAAiB,CAAC,wCAAwC,CAAC,SAAS,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;aACtI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uDAAuD,GAAG,qBAAqB,CAC1F,wCAAwC,EACxC,kCAAkC,CACnC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectoryRequestEmailVerification,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { requestEmailVerificationCode } from '../../../logic/cognito/requestEmailVerificationCode';\n\nconst getProcessRequestEmailVerification = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectoryRequestEmailVerification> => {\n  return async ({ userDirectoryName, accessToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const deliveryDetails = await requestEmailVerificationCode(region, accessToken);\n\n      return actionResult(deliveryDetails);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(askUserDirectoryRequestEmailVerification.errorType.Unauthorized, 'Access token is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(askUserDirectoryRequestEmailVerification.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n        CodeDeliveryFailureException: () =>\n          actionResultError(askUserDirectoryRequestEmailVerification.errorType.CodeDeliveryFailed, 'Could not deliver the verification code'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRequestEmailVerificationActionProcessor = createActionProcessor(\n  askUserDirectoryRequestEmailVerification,\n  getProcessRequestEmailVerification,\n);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectoryRespondToAuthChallengeActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, AuthenticateUserChallenge, UserDirectoryActionType, UserDirectoryRespondToAuthChallengeErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectoryRespondToAuthChallenge, AuthenticateUserChallenge, createActionProcessor, } from 'quidproquo-core';
 import { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';
 import { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
@@ -58,18 +58,16 @@ const getProcessRespondToAuthChallenge = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                CodeMismatchException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),
-                EnableSoftwareTokenMFAException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),
-                ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),
-                InvalidPasswordException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),
-                NotAuthorizedException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),
-                LimitExceededException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
-                TooManyRequestsException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+                CodeMismatchException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidCode, 'The supplied code is incorrect'),
+                EnableSoftwareTokenMFAException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidCode, 'The supplied code is incorrect'),
+                ExpiredCodeException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.ExpiredCode, 'The supplied code has expired'),
+                InvalidPasswordException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidNewPassword, 'New password does not meet the password policy'),
+                NotAuthorizedException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.Unauthorized, 'The challenge session is invalid or has expired'),
+                LimitExceededException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.LimitExceeded, 'Too many attempts, please try again later'),
+                TooManyRequestsException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.LimitExceeded, 'Too many attempts, please try again later'),
             });
         }
     };
 };
-export const getUserDirectoryRespondToAuthChallengeActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),
-});
+export const getUserDirectoryRespondToAuthChallengeActionProcessor = createActionProcessor(askUserDirectoryRespondToAuthChallenge, getProcessRespondToAuthChallenge);
 //# sourceMappingURL=getUserDirectoryRespondToAuthChallengeActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,yBAAyB,EAEzB,uBAAuB,EAEvB,gDAAgD,GACjD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO,iBAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,iBAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,iBAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAAsD,EAAE;IACpH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,yBAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qDAAqD,GAAgC,KAAK,EACrG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC;CAC9F,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  AuthenticateUserChallenge,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRespondToAuthChallengeActionProcessor,\n  UserDirectoryRespondToAuthChallengeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallenge } from '../../../logic/cognito/respondToAuthChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): UserDirectoryRespondToAuthChallengeActionProcessor => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,sCAAsC,EACtC,yBAAyB,EACzB,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO,iBAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,iBAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,iBAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAA+D,EAAE;IAC7H,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,yBAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,sCAAsC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qDAAqD,GAAG,qBAAqB,CACxF,sCAAsC,EACtC,gCAAgC,CACjC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  askUserDirectoryRespondToAuthChallenge,\n  AuthenticateUserChallenge,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallenge } from '../../../logic/cognito/respondToAuthChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectoryRespondToAuthChallenge> => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectoryRespondToAuthChallenge.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor = createActionProcessor(\n  askUserDirectoryRespondToAuthChallenge,\n  getProcessRespondToAuthChallenge,\n);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectoryRevokeRefreshTokenActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectoryRevokeRefreshTokenActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectoryRevokeRefreshTokenErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectoryRevokeRefreshToken, createActionProcessor, } from 'quidproquo-core';
 import { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
 import { revokeRefreshToken } from '../../../logic/cognito/revokeRefreshToken';
@@ -14,13 +14,11 @@ const getProcessRevokeRefreshToken = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                NotAuthorizedException: () => actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or already revoked'),
-                TooManyRequestsException: () => actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+                NotAuthorizedException: () => actionResultError(askUserDirectoryRevokeRefreshToken.errorType.Unauthorized, 'Refresh token is invalid or already revoked'),
+                TooManyRequestsException: () => actionResultError(askUserDirectoryRevokeRefreshToken.errorType.LimitExceeded, 'Too many attempts, please try again later'),
             });
         }
     };
 };
-export const getUserDirectoryRevokeRefreshTokenActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.RevokeRefreshToken]: getProcessRevokeRefreshToken(qpqConfig),
-});
+export const getUserDirectoryRevokeRefreshTokenActionProcessor = createActionProcessor(askUserDirectoryRevokeRefreshToken, getProcessRevokeRefreshToken);
 //# sourceMappingURL=getUserDirectoryRevokeRefreshTokenActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRevokeRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,4CAA4C,GAC7C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC5G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAE7E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,4CAA4C,CAAC,YAAY,EAAE,6CAA6C,CAAC;gBAC7H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,4CAA4C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC7H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iDAAiD,GAAgC,KAAK,EACjG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;CACtF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRevokeRefreshTokenActionProcessor,\n  UserDirectoryRevokeRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { revokeRefreshToken } from '../../../logic/cognito/revokeRefreshToken';\n\nconst getProcessRevokeRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRevokeRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      await revokeRefreshToken(userPoolId, userPoolClientId, region, refreshToken);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or already revoked'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRevokeRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RevokeRefreshToken]: getProcessRevokeRefreshToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRevokeRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,kCAAkC,EAClC,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAA2D,EAAE;IACrH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAE7E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,kCAAkC,CAAC,SAAS,CAAC,YAAY,EAAE,6CAA6C,CAAC;gBAC7H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,kCAAkC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC7H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iDAAiD,GAAG,qBAAqB,CACpF,kCAAkC,EAClC,4BAA4B,CAC7B,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectoryRevokeRefreshToken,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { revokeRefreshToken } from '../../../logic/cognito/revokeRefreshToken';\n\nconst getProcessRevokeRefreshToken = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectoryRevokeRefreshToken> => {\n  return async ({ userDirectoryName, refreshToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      await revokeRefreshToken(userPoolId, userPoolClientId, region, refreshToken);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(askUserDirectoryRevokeRefreshToken.errorType.Unauthorized, 'Refresh token is invalid or already revoked'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectoryRevokeRefreshToken.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRevokeRefreshTokenActionProcessor = createActionProcessor(\n  askUserDirectoryRevokeRefreshToken,\n  getProcessRevokeRefreshToken,\n);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetAccessTokenActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectorySetAccessTokenActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectorySetAccessTokenActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetAccessTokenActionProcessor.js

@@ -1,4 +1,4 @@
-import { actionResult, actionResultError, ErrorTypeEnum, UserDirectoryActionType, } from 'quidproquo-core';
+import { actionResult, actionResultError, askUserDirectorySetAccessToken, createActionProcessor, ErrorTypeEnum, } from 'quidproquo-core';
 import { decodeAccessToken } from '../../../logic/cognito';
 const getProcessSetAccessToken = (qpqConfig) => {
     return async ({ accessToken, userDirectoryName }, session, apl, logger, updateSession) => {
@@ -20,7 +20,5 @@ const getProcessSetAccessToken = (qpqConfig) => {
         return actionResult(decodedAccessToken);
     };
 };
-export const getUserDirectorySetAccessTokenActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.SetAccessToken]: getProcessSetAccessToken(qpqConfig),
-});
+export const getUserDirectorySetAccessTokenActionProcessor = createActionProcessor(askUserDirectorySetAccessToken, getProcessSetAccessToken);
 //# sourceMappingURL=getUserDirectorySetAccessTokenActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetAccessTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySetAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetAccessTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EACZ,iBAAiB,EAEjB,aAAa,EAEb,uBAAuB,GAExB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IACpG,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;QACvF,iFAAiF;QACjF,wEAAwE;QACxE,8EAA8E;QAC9E,4CAA4C;QAC5C,IAAI,kBAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,CAAC,aAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;QAED,aAAa,CAAC;YACZ,kBAAkB,EAAE,kBAAkB;YACtC,WAAW;SACZ,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6CAA6C,GAAgC,KAAK,EAC7F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,wBAAwB,CAAC,SAAS,CAAC;CAC9E,CAAC,CAAC","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  DecodedAccessToken,\n  ErrorTypeEnum,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetAccessTokenActionProcessor,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito';\n\nconst getProcessSetAccessToken = (qpqConfig: QPQConfig): UserDirectorySetAccessTokenActionProcessor => {\n  return async ({ accessToken, userDirectoryName }, session, apl, logger, updateSession) => {\n    // decodeAccessToken throws on a missing/unverifiable/expired token; surface that\n    // as a typed Unauthorized result (matching the dev-server processor and\n    // ReadAccessToken) instead of letting the raw error escape as a GenericError.\n    // The session is left untouched on failure.\n    let decodedAccessToken: DecodedAccessToken;\n    try {\n      decodedAccessToken = await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, false);\n    } catch {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    updateSession({\n      decodedAccessToken: decodedAccessToken,\n      accessToken,\n    });\n\n    return actionResult(decodedAccessToken);\n  };\n};\n\nexport const getUserDirectorySetAccessTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetAccessToken]: getProcessSetAccessToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySetAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetAccessTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,8BAA8B,EAC9B,qBAAqB,EAErB,aAAa,GAId,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAAuD,EAAE;IAC7G,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;QACvF,iFAAiF;QACjF,wEAAwE;QACxE,8EAA8E;QAC9E,4CAA4C;QAC5C,IAAI,kBAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,CAAC,aAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;QAED,aAAa,CAAC;YACZ,kBAAkB,EAAE,kBAAkB;YACtC,WAAW;SACZ,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6CAA6C,GAAG,qBAAqB,CAAC,8BAA8B,EAAE,wBAAwB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  actionResultError,\n  askUserDirectorySetAccessToken,\n  createActionProcessor,\n  DecodedAccessToken,\n  ErrorTypeEnum,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito';\n\nconst getProcessSetAccessToken = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectorySetAccessToken> => {\n  return async ({ accessToken, userDirectoryName }, session, apl, logger, updateSession) => {\n    // decodeAccessToken throws on a missing/unverifiable/expired token; surface that\n    // as a typed Unauthorized result (matching the dev-server processor and\n    // ReadAccessToken) instead of letting the raw error escape as a GenericError.\n    // The session is left untouched on failure.\n    let decodedAccessToken: DecodedAccessToken;\n    try {\n      decodedAccessToken = await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, false);\n    } catch {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    updateSession({\n      decodedAccessToken: decodedAccessToken,\n      accessToken,\n    });\n\n    return actionResult(decodedAccessToken);\n  };\n};\n\nexport const getUserDirectorySetAccessTokenActionProcessor = createActionProcessor(askUserDirectorySetAccessToken, getProcessSetAccessToken);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectorySetPasswordActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectorySetPasswordActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectorySetPasswordErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectorySetPassword, createActionProcessor, } from 'quidproquo-core';
 import { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
 import { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';
@@ -15,15 +15,13 @@ const getProcessSetPassword = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                UserNotFoundException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.UserNotFound, 'No account found for this user'),
-                InvalidPasswordException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.InvalidNewPassword, 'Password does not meet the password policy'),
-                LimitExceededException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
-                TooManyRequestsException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+                UserNotFoundException: () => actionResultError(askUserDirectorySetPassword.errorType.UserNotFound, 'No account found for this user'),
+                InvalidPasswordException: () => actionResultError(askUserDirectorySetPassword.errorType.InvalidNewPassword, 'Password does not meet the password policy'),
+                LimitExceededException: () => actionResultError(askUserDirectorySetPassword.errorType.LimitExceeded, 'Too many attempts, please try again later'),
+                TooManyRequestsException: () => actionResultError(askUserDirectorySetPassword.errorType.LimitExceeded, 'Too many attempts, please try again later'),
             });
         }
     };
 };
-export const getUserDirectorySetPasswordActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.SetPassword]: getProcessSetPassword(qpqConfig),
-});
+export const getUserDirectorySetPasswordActionProcessor = createActionProcessor(askUserDirectorySetPassword, getProcessSetPassword);
 //# sourceMappingURL=getUserDirectorySetPasswordActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySetPasswordActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,qCAAqC,GACtC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC9F,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAEzE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;gBAC3H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAgC,KAAK,EAC1F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACxE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetPasswordActionProcessor,\n  UserDirectorySetPasswordErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserPassword } from '../../../logic/cognito/setUserPassword';\n\nconst getProcessSetPassword = (qpqConfig: QPQConfig): UserDirectorySetPasswordActionProcessor => {\n  return async ({ userDirectoryName, newPassword, username }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserPassword(region, userPoolId, resolvedUsername, newPassword);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.InvalidNewPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetPasswordActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetPassword]: getProcessSetPassword(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySetPasswordActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IACvG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAEzE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;gBAC3H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAG,qBAAqB,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectorySetPassword,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserPassword } from '../../../logic/cognito/setUserPassword';\n\nconst getProcessSetPassword = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectorySetPassword> => {\n  return async ({ userDirectoryName, newPassword, username }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserPassword(region, userPoolId, resolvedUsername, newPassword);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(askUserDirectorySetPassword.errorType.UserNotFound, 'No account found for this user'),\n        InvalidPasswordException: () =>\n          actionResultError(askUserDirectorySetPassword.errorType.InvalidNewPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(askUserDirectorySetPassword.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectorySetPassword.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetPasswordActionProcessor = createActionProcessor(askUserDirectorySetPassword, getProcessSetPassword);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectorySetUserAttributesActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectorySetUserAttributesActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectorySetUserAttributesErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectorySetUserAttributes, createActionProcessor, } from 'quidproquo-core';
 import { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
 import { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';
@@ -15,16 +15,14 @@ const getProcessSetUserAttributes = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                UserNotFoundException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.UserNotFound, 'No account found for this user'),
-                InvalidParameterException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.InvalidAttributes, 'One or more attributes are invalid'),
-                AliasExistsException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.AliasExists, 'That email or phone number is already in use'),
-                LimitExceededException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
-                TooManyRequestsException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+                UserNotFoundException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.UserNotFound, 'No account found for this user'),
+                InvalidParameterException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.InvalidAttributes, 'One or more attributes are invalid'),
+                AliasExistsException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.AliasExists, 'That email or phone number is already in use'),
+                LimitExceededException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.LimitExceeded, 'Too many attempts, please try again later'),
+                TooManyRequestsException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.LimitExceeded, 'Too many attempts, please try again later'),
             });
         }
     };
 };
-export const getUserDirectorySetUserAttributesActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.SetUserAttributes]: getProcessSetUserAttributes(qpqConfig),
-});
+export const getUserDirectorySetUserAttributesActionProcessor = createActionProcessor(askUserDirectorySetUserAttributes, getProcessSetUserAttributes);
 //# sourceMappingURL=getUserDirectorySetUserAttributesActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySetUserAttributesActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,2CAA2C,GAC5C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAAiD,EAAE;IAC1G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAE9E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2CAA2C,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC1I,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CAAC,2CAA2C,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;gBACxH,oBAAoB,EAAE,GAAG,EAAE,CACzB,iBAAiB,CAAC,2CAA2C,CAAC,WAAW,EAAE,8CAA8C,CAAC;gBAC5H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAC3H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC5H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gDAAgD,GAAgC,KAAK,EAChG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetUserAttributesActionProcessor,\n  UserDirectorySetUserAttributesErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserAttributes } from '../../../logic/cognito/setUserAttributes';\n\nconst getProcessSetUserAttributes = (qpqConfig: QPQConfig): UserDirectorySetUserAttributesActionProcessor => {\n  return async ({ userDirectoryName, username, userAttributes }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserAttributes(userPoolId, region, resolvedUsername, userAttributes);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidParameterException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.InvalidAttributes, 'One or more attributes are invalid'),\n        AliasExistsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.AliasExists, 'That email or phone number is already in use'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetUserAttributesActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetUserAttributes]: getProcessSetUserAttributes(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySetUserAttributesActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,iCAAiC,EACjC,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAA0D,EAAE;IACnH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAE9E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC1I,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;gBACxH,oBAAoB,EAAE,GAAG,EAAE,CACzB,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,CAAC,WAAW,EAAE,8CAA8C,CAAC;gBAC5H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAC3H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC5H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gDAAgD,GAAG,qBAAqB,CAAC,iCAAiC,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectorySetUserAttributes,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserAttributes } from '../../../logic/cognito/setUserAttributes';\n\nconst getProcessSetUserAttributes = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectorySetUserAttributes> => {\n  return async ({ userDirectoryName, username, userAttributes }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserAttributes(userPoolId, region, resolvedUsername, userAttributes);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(askUserDirectorySetUserAttributes.errorType.UserNotFound, 'No account found for this user'),\n        InvalidParameterException: () =>\n          actionResultError(askUserDirectorySetUserAttributes.errorType.InvalidAttributes, 'One or more attributes are invalid'),\n        AliasExistsException: () =>\n          actionResultError(askUserDirectorySetUserAttributes.errorType.AliasExists, 'That email or phone number is already in use'),\n        LimitExceededException: () =>\n          actionResultError(askUserDirectorySetUserAttributes.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectorySetUserAttributes.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetUserAttributesActionProcessor = createActionProcessor(askUserDirectorySetUserAttributes, getProcessSetUserAttributes);\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getUserDirectorySignOutUserActionProcessor: ActionProcessorListResolver;
+export declare const getUserDirectorySignOutUserActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.js

@@ -1,5 +1,5 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectorySignOutUserErrorTypeEnum, } from 'quidproquo-core';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askUserDirectorySignOutUser, createActionProcessor, } from 'quidproquo-core';
 import { globalSignOut } from '../../../logic/cognito/globalSignOut';
 const getProcessSignOutUser = (qpqConfig) => {
     return async ({ accessToken }) => {
@@ -10,13 +10,11 @@ const getProcessSignOutUser = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                NotAuthorizedException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),
-                TooManyRequestsException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+                NotAuthorizedException: () => actionResultError(askUserDirectorySignOutUser.errorType.Unauthorized, 'Access token is invalid or has expired'),
+                TooManyRequestsException: () => actionResultError(askUserDirectorySignOutUser.errorType.LimitExceeded, 'Too many attempts, please try again later'),
             });
         }
     };
 };
-export const getUserDirectorySignOutUserActionProcessor = async (qpqConfig) => ({
-    [UserDirectoryActionType.SignOutUser]: getProcessSignOutUser(qpqConfig),
-});
+export const getUserDirectorySignOutUserActionProcessor = createActionProcessor(askUserDirectorySignOutUser, getProcessSignOutUser);
 //# sourceMappingURL=getUserDirectorySignOutUserActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySignOutUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,qCAAqC,GACtC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC9F,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAEzC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,YAAY,EAAE,wCAAwC,CAAC;gBAC7I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAgC,KAAK,EAC1F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACxE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySignOutUserActionProcessor,\n  UserDirectorySignOutUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { globalSignOut } from '../../../logic/cognito/globalSignOut';\n\nconst getProcessSignOutUser = (qpqConfig: QPQConfig): UserDirectorySignOutUserActionProcessor => {\n  return async ({ accessToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      await globalSignOut(accessToken, region);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySignOutUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySignOutUserActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SignOutUser]: getProcessSignOutUser(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySignOutUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IACvG,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAEzC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,YAAY,EAAE,wCAAwC,CAAC;gBAC7I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAG,qBAAqB,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askUserDirectorySignOutUser,\n  createActionProcessor,\n  ProcessorFor,\n  QPQConfig,\n  UserDirectoryActionType,\n} from 'quidproquo-core';\n\nimport { globalSignOut } from '../../../logic/cognito/globalSignOut';\n\nconst getProcessSignOutUser = (qpqConfig: QPQConfig): ProcessorFor<typeof askUserDirectorySignOutUser> => {\n  return async ({ accessToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      await globalSignOut(accessToken, region);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () => actionResultError(askUserDirectorySignOutUser.errorType.Unauthorized, 'Access token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(askUserDirectorySignOutUser.errorType.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySignOutUserActionProcessor = createActionProcessor(askUserDirectorySignOutUser, getProcessSignOutUser);\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getEmailSendEmailActionProcessor: ActionProcessorListResolver;
+export declare const getEmailSendEmailActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js

@@ -1,6 +1,6 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, actionResultErrorFromCaughtError, } from 'quidproquo-core';
-import { EmailActionType, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, createActionProcessor } from 'quidproquo-core';
+import { askEmailSendEmail } from 'quidproquo-webserver';
 import { sendEmail } from '../../../logic/sesV2/sendEmail';
 const getProcessSendEmail = (qpqConfig) => {
     return async (payload) => {
@@ -11,18 +11,16 @@ const getProcessSendEmail = (qpqConfig) => {
         }
         catch (error) {
             return actionResultErrorFromCaughtError(error, {
-                MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),
-                MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),
-                AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),
-                SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),
-                TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),
-                LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),
-                BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),
+                MessageRejected: () => actionResultError(askEmailSendEmail.errorType.MessageRejected, 'Message rejected'),
+                MailFromDomainNotVerifiedException: () => actionResultError(askEmailSendEmail.errorType.SenderNotVerified, 'Sender domain not verified'),
+                AccountSuspendedException: () => actionResultError(askEmailSendEmail.errorType.AccountSuspended, 'Email sending account suspended'),
+                SendingPausedException: () => actionResultError(askEmailSendEmail.errorType.SendingPaused, 'Email sending is paused'),
+                TooManyRequestsException: () => actionResultError(askEmailSendEmail.errorType.Throttled, 'Rate exceeded'),
+                LimitExceededException: () => actionResultError(askEmailSendEmail.errorType.LimitExceeded, 'Sending limit exceeded'),
+                BadRequestException: () => actionResultError(askEmailSendEmail.errorType.BadRequest, 'Invalid email request'),
             });
         }
     };
 };
-export const getEmailSendEmailActionProcessor = async (qpqConfig) => ({
-    [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),
-});
+export const getEmailSendEmailActionProcessor = createActionProcessor(askEmailSendEmail, getProcessSendEmail);
 //# sourceMappingURL=getEmailSendEmailActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEmailSendEmailActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,GAEjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAiC,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAiC,EAAE;IAClF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBACzG,kCAAkC,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;gBACxI,yBAAyB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;gBACnI,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,EAAE,eAAe,CAAC;gBACzG,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,wBAAwB,CAAC;gBACpH,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,UAAU,EAAE,uBAAuB,CAAC;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAC1I,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n} from 'quidproquo-core';\nimport { EmailActionType, EmailSendEmailActionProcessor, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';\n\nimport { sendEmail } from '../../../logic/sesV2/sendEmail';\n\nconst getProcessSendEmail = (qpqConfig: QPQConfig): EmailSendEmailActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const messageId = await sendEmail(payload, region);\n\n      return actionResult(messageId);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),\n        MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),\n        AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),\n        SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),\n        TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),\n        LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),\n        BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),\n      });\n    }\n  };\n};\n\nexport const getEmailSendEmailActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),\n});\n"]}
+{"version":3,"file":"getEmailSendEmailActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,qBAAqB,EAA2B,MAAM,iBAAiB,CAAC;AACpJ,OAAO,EAAE,iBAAiB,EAAmB,MAAM,sBAAsB,CAAC;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC3F,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBACzG,kCAAkC,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;gBACxI,yBAAyB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;gBACnI,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC;gBACzG,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,EAAE,wBAAwB,CAAC;gBACpH,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,uBAAuB,CAAC;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,qBAAqB,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { actionResult, actionResultError, actionResultErrorFromCaughtError, createActionProcessor, ProcessorFor, QPQConfig } from 'quidproquo-core';\nimport { askEmailSendEmail, EmailActionType } from 'quidproquo-webserver';\n\nimport { sendEmail } from '../../../logic/sesV2/sendEmail';\n\nconst getProcessSendEmail = (qpqConfig: QPQConfig): ProcessorFor<typeof askEmailSendEmail> => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const messageId = await sendEmail(payload, region);\n\n      return actionResult(messageId);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        MessageRejected: () => actionResultError(askEmailSendEmail.errorType.MessageRejected, 'Message rejected'),\n        MailFromDomainNotVerifiedException: () => actionResultError(askEmailSendEmail.errorType.SenderNotVerified, 'Sender domain not verified'),\n        AccountSuspendedException: () => actionResultError(askEmailSendEmail.errorType.AccountSuspended, 'Email sending account suspended'),\n        SendingPausedException: () => actionResultError(askEmailSendEmail.errorType.SendingPaused, 'Email sending is paused'),\n        TooManyRequestsException: () => actionResultError(askEmailSendEmail.errorType.Throttled, 'Rate exceeded'),\n        LimitExceededException: () => actionResultError(askEmailSendEmail.errorType.LimitExceeded, 'Sending limit exceeded'),\n        BadRequestException: () => actionResultError(askEmailSendEmail.errorType.BadRequest, 'Invalid email request'),\n      });\n    }\n  };\n};\n\nexport const getEmailSendEmailActionProcessor = createActionProcessor(askEmailSendEmail, getProcessSendEmail);\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver;
+export declare const getEmailSetDeliveryStatusActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js

@@ -1,11 +1,9 @@
-import { actionResult } from 'quidproquo-core';
-import { EmailActionType } from 'quidproquo-webserver';
+import { actionResult, createActionProcessor } from 'quidproquo-core';
+import { askEmailSetDeliveryStatus } from 'quidproquo-webserver';
 // Deliberately a no-op: the action's meaning is its log entry, which the admin
 // action search folds into the email's entity via the messageId link key.
 const getProcessSetDeliveryStatus = () => {
     return async () => actionResult(undefined);
 };
-export const getEmailSetDeliveryStatusActionProcessor = async (qpqConfig) => ({
-    [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),
-});
+export const getEmailSetDeliveryStatusActionProcessor = createActionProcessor(askEmailSetDeliveryStatus, getProcessSetDeliveryStatus);
 //# sourceMappingURL=getEmailSetDeliveryStatusActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEmailSetDeliveryStatusActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,YAAY,EAAa,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAyC,MAAM,sBAAsB,CAAC;AAE9F,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,2BAA2B,GAAG,GAA0C,EAAE;IAC9E,OAAO,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAClJ,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE;CACnE,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, actionResult, QPQConfig } from 'quidproquo-core';\nimport { EmailActionType, EmailSetDeliveryStatusActionProcessor } from 'quidproquo-webserver';\n\n// Deliberately a no-op: the action's meaning is its log entry, which the admin\n// action search folds into the email's entity via the messageId link key.\nconst getProcessSetDeliveryStatus = (): EmailSetDeliveryStatusActionProcessor => {\n  return async () => actionResult(undefined);\n};\n\nexport const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),\n});\n"]}
+{"version":3,"file":"getEmailSetDeliveryStatusActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAgB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,2BAA2B,GAAG,GAAmD,EAAE;IACvF,OAAO,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,qBAAqB,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import { actionResult, createActionProcessor, ProcessorFor } from 'quidproquo-core';\nimport { askEmailSetDeliveryStatus } from 'quidproquo-webserver';\n\n// Deliberately a no-op: the action's meaning is its log entry, which the admin\n// action search folds into the email's entity via the messageId link key.\nconst getProcessSetDeliveryStatus = (): ProcessorFor<typeof askEmailSetDeliveryStatus> => {\n  return async () => actionResult(undefined);\n};\n\nexport const getEmailSetDeliveryStatusActionProcessor = createActionProcessor(askEmailSetDeliveryStatus, getProcessSetDeliveryStatus);\n"]}

package/lib/esm/getActionProcessor/webserver/serviceFunction/getServiceFunctionExecuteActionProcessor.d.ts

@@ -1,2 +1 @@
-import { ActionProcessorListResolver } from 'quidproquo-core';
-export declare const getServiceFunctionExecuteActionProcessor: ActionProcessorListResolver;
+export declare const getServiceFunctionExecuteActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/serviceFunction/getServiceFunctionExecuteActionProcessor.js

@@ -1,6 +1,6 @@
 import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
-import { actionResult, actionResultError, qpqCoreUtils, toCrossServiceSession, } from 'quidproquo-core';
-import { ServiceFunctionActionType } from 'quidproquo-webserver';
+import { actionResult, actionResultError, createActionProcessor, qpqCoreUtils, toCrossServiceSession, } from 'quidproquo-core';
+import { askServiceFunctionExecuteBase } from 'quidproquo-webserver';
 import { getConfigRuntimeResourceName } from '../../../awsNamingUtils';
 import { executeLambdaByName } from '../../../logic/lambda/executeLambdaByName';
 const getProcessExecute = (qpqConfig) => {
@@ -25,7 +25,5 @@ const getProcessExecute = (qpqConfig) => {
         return actionResult(result.result);
     };
 };
-export const getServiceFunctionExecuteActionProcessor = async (qpqConfig) => ({
-    [ServiceFunctionActionType.Execute]: getProcessExecute(qpqConfig),
-});
+export const getServiceFunctionExecuteActionProcessor = createActionProcessor(askServiceFunctionExecuteBase, getProcessExecute);
 //# sourceMappingURL=getServiceFunctionExecuteActionProcessor.js.map