quidproquo-actionprocessor-awslambda 0.1.2 → 0.1.4

package/lib/esm/lambdas/dynamicModuleLoader/dynamicModuleLoader.js

@@ -1,5 +1,13 @@
-// @ts-expect-error - Special webpack file injected
-import { qpqDynamicModuleLoader } from 'quidproquo-dynamic-loader';
+// @ts-expect-error - injected at build time by QpqPlugin (virtual module)
+import { qpqConfig, qpqDynamicModuleLoader } from 'quidproquo-dynamic-loader';
+import { loadFederatedStory } from '../../logic/federatedModuleStore';
 export const dynamicModuleLoader = async (qpqFunctionRuntime) => {
+    // Tier 1: federated. undefined means "nothing published for this runtime" -> fall through.
+    const federatedStory = await loadFederatedStory(qpqConfig, qpqFunctionRuntime);
+    if (federatedStory !== undefined) {
+        return federatedStory;
+    }
+    // Tier 2: the statically bundled story (or a fail-fast throw for a thin shell).
     return qpqDynamicModuleLoader(qpqFunctionRuntime);
 };
+//# sourceMappingURL=dynamicModuleLoader.js.map

package/lib/esm/lambdas/dynamicModuleLoader/dynamicModuleLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamicModuleLoader.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/dynamicModuleLoader.ts"],"names":[],"mappings":"AAsBA,0EAA0E;AAC1E,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAW,kBAAsC,EAAc,EAAE;IACvG,2FAA2F;IAC3F,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAI,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,gFAAgF;IAChF,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC,CAAC","sourcesContent":["// ─────────────────────────────────────────────────────────────────────────────\n// The dynamic module loader — the single seam every lambda entry uses to turn a\n// QpqFunctionRuntime (e.g. \"/src/routes/getOrders::getOrders\") into the actual\n// story function to run. Each lambda entry file (apiGatewayEventHandler, etc.)\n// imports THIS and hands it to the qpq runtime.\n//\n// Two tiers, tried in order:\n//   1. FEDERATED  — loadFederatedStory reads the service's code bucket and returns\n//                   the published version of the story (see ../../logic/\n//                   federatedModuleStore/loadFederatedStory.ts for the whole flow).\n//   2. BUNDLED    — qpqDynamicModuleLoader is a build-time-generated function\n//                   (the 'quidproquo-dynamic-loader' virtual module, produced by the\n//                   deploy-webpack/deploy-rspack QpqPlugin) — an if-chain that\n//                   require()s the story code statically bundled into the lambda zip.\n//\n// loadFederatedStory returns undefined on any miss (no store configured, nothing\n// published, runtime not in the manifest), which is the signal to fall back to the\n// bundled tier. If the service opted into `bundleFallback: false` (a \"thin shell\"),\n// the bundled tier itself throws instead of resolving — so an unpublished thin shell\n// fails loudly rather than silently serving stale code.\n// ─────────────────────────────────────────────────────────────────────────────\nimport { QpqFunctionRuntime } from 'quidproquo-core';\n// @ts-expect-error - injected at build time by QpqPlugin (virtual module)\nimport { qpqConfig, qpqDynamicModuleLoader } from 'quidproquo-dynamic-loader';\n\nimport { loadFederatedStory } from '../../logic/federatedModuleStore';\n\nexport const dynamicModuleLoader = async <T = any>(qpqFunctionRuntime: QpqFunctionRuntime): Promise<T> => {\n  // Tier 1: federated. undefined means \"nothing published for this runtime\" -> fall through.\n  const federatedStory = await loadFederatedStory<T>(qpqConfig, qpqFunctionRuntime);\n  if (federatedStory !== undefined) {\n    return federatedStory;\n  }\n\n  // Tier 2: the statically bundled story (or a fail-fast throw for a thin shell).\n  return qpqDynamicModuleLoader(qpqFunctionRuntime);\n};\n"]}

package/lib/esm/lambdas/dynamicModuleLoader/dynamicModuleLoaderWarmer.js

@@ -1,3 +1,4 @@
 export const dynamicModuleLoaderWarmer = async () => {
     // NOOP
 };
+//# sourceMappingURL=dynamicModuleLoaderWarmer.js.map

package/lib/esm/lambdas/dynamicModuleLoader/dynamicModuleLoaderWarmer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamicModuleLoaderWarmer.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/dynamicModuleLoaderWarmer.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,IAAmB,EAAE;IACjE,OAAO;AACT,CAAC,CAAC","sourcesContent":["export const dynamicModuleLoaderWarmer = async (): Promise<void> => {\n  // NOOP\n};\n"]}

package/lib/esm/lambdas/dynamicModuleLoader/index.js

@@ -1,2 +1,3 @@
 export * from './dynamicModuleLoader';
 export * from './dynamicModuleLoaderWarmer';
+//# sourceMappingURL=index.js.map

package/lib/esm/lambdas/dynamicModuleLoader/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC","sourcesContent":["export * from './dynamicModuleLoader';\nexport * from './dynamicModuleLoaderWarmer';\n"]}

package/lib/esm/lambdas/eventBridgeEvent_recurringSchedule.js

@@ -2,3 +2,4 @@ import { getEventBridgeEvent_recurringSchedule } from '../lambdaHandlers';
 import { dynamicModuleLoader } from './dynamicModuleLoader';
 import { getQpqConfig } from './lambda-utils';
 export const eventBridgeEvent_recurringSchedule = getEventBridgeEvent_recurringSchedule(dynamicModuleLoader, getQpqConfig());
+//# sourceMappingURL=eventBridgeEvent_recurringSchedule.js.map

package/lib/esm/lambdas/eventBridgeEvent_recurringSchedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventBridgeEvent_recurringSchedule.js","sourceRoot":"","sources":["../../../src/lambdas/eventBridgeEvent_recurringSchedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC","sourcesContent":["import { getEventBridgeEvent_recurringSchedule } from '../lambdaHandlers';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\nexport const eventBridgeEvent_recurringSchedule = getEventBridgeEvent_recurringSchedule(dynamicModuleLoader, getQpqConfig());\n"]}

package/lib/esm/lambdas/eventBridgeEvent_stackDeploy.js

@@ -2,3 +2,4 @@ import { getEventBridgeEvent_stackDeploy } from '../lambdaHandlers';
 import { dynamicModuleLoader } from './dynamicModuleLoader';
 import { getQpqConfig } from './lambda-utils';
 export const eventBridgeEvent_stackDeploy = getEventBridgeEvent_stackDeploy(dynamicModuleLoader, getQpqConfig());
+//# sourceMappingURL=eventBridgeEvent_stackDeploy.js.map

package/lib/esm/lambdas/eventBridgeEvent_stackDeploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventBridgeEvent_stackDeploy.js","sourceRoot":"","sources":["../../../src/lambdas/eventBridgeEvent_stackDeploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC","sourcesContent":["import { getEventBridgeEvent_stackDeploy } from '../lambdaHandlers';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\nexport const eventBridgeEvent_stackDeploy = getEventBridgeEvent_stackDeploy(dynamicModuleLoader, getQpqConfig());\n"]}

package/lib/esm/lambdas/index.js

@@ -1 +1,2 @@
 "use strict";
+//# sourceMappingURL=index.js.map

package/lib/esm/lambdas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lambdas/index.ts"],"names":[],"mappings":"","sourcesContent":[""]}

package/lib/esm/lambdas/lambda-utils/QpqWarmLambdaEvent.js

@@ -1 +1,2 @@
 export {};
+//# sourceMappingURL=QpqWarmLambdaEvent.js.map

package/lib/esm/lambdas/lambda-utils/QpqWarmLambdaEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QpqWarmLambdaEvent.js","sourceRoot":"","sources":["../../../../src/lambdas/lambda-utils/QpqWarmLambdaEvent.ts"],"names":[],"mappings":"","sourcesContent":["import { SNSEvent } from 'aws-lambda';\n\nexport type QpqWarmLambdaEvent = { qpqWarm: boolean };\n\nexport type QpqFunctionExecutionEvent<T> = SNSEvent | T;\n"]}

package/lib/esm/lambdas/lambda-utils/getQpqConfig.js

@@ -1,5 +1,6 @@
-// @ts-expect-error - Special webpack file injected
+// @ts-expect-error - Special build-time injected file
 import { qpqConfig } from 'quidproquo-dynamic-loader';
 export const getQpqConfig = () => {
     return qpqConfig;
 };
+//# sourceMappingURL=getQpqConfig.js.map

package/lib/esm/lambdas/lambda-utils/getQpqConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getQpqConfig.js","sourceRoot":"","sources":["../../../../src/lambdas/lambda-utils/getQpqConfig.ts"],"names":[],"mappings":"AACA,sDAAsD;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,GAAc,EAAE;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC","sourcesContent":["import { QPQConfig } from 'quidproquo-core';\n// @ts-expect-error - Special build-time injected file\nimport { qpqConfig } from 'quidproquo-dynamic-loader';\n\nexport const getQpqConfig = (): QPQConfig => {\n  return qpqConfig;\n};\n"]}

package/lib/esm/lambdas/lambda-utils/index.js

@@ -1 +1,2 @@
 export * from './getQpqConfig';
+//# sourceMappingURL=index.js.map

package/lib/esm/lambdas/lambda-utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdas/lambda-utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC","sourcesContent":["export * from './getQpqConfig';\n"]}

package/lib/esm/lambdas/lambdaSQSEvent.js

@@ -10,3 +10,4 @@ export const executeSQSEvent = getQpqLambdaRuntimeForEvent(QpqRuntimeType.QUEUE_
         context: {},
     };
 }, getSqsQueueEventProcessor, dynamicModuleLoader, getQpqConfig());
+//# sourceMappingURL=lambdaSQSEvent.js.map

package/lib/esm/lambdas/lambdaSQSEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambdaSQSEvent.js","sourceRoot":"","sources":["../../../src/lambdas/lambdaSQSEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAIjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,mBAAmB;AACnB,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CACxD,cAAc,CAAC,WAAW,EAC1B,CAAC,KAAK,EAAE,EAAE;IACR,OAAO;QACL,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC,EACD,yBAAyB,EACzB,mBAAmB,EACnB,YAAY,EAAE,CACf,CAAC","sourcesContent":["import { QpqRuntimeType } from 'quidproquo-core';\n\nimport { SQSEvent } from 'aws-lambda';\n\nimport { getSqsQueueEventProcessor } from '../getActionProcessor';\nimport { getQpqLambdaRuntimeForEvent } from '../lambdaHandlers/helpers/getQpqLambdaRuntimeForEvent';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\n// Default executor\nexport const executeSQSEvent = getQpqLambdaRuntimeForEvent<SQSEvent>(\n  QpqRuntimeType.QUEUE_EVENT,\n  (event) => {\n    return {\n      depth: 0,\n      context: {},\n    };\n  },\n  getSqsQueueEventProcessor,\n  dynamicModuleLoader,\n  getQpqConfig(),\n);\n"]}

package/lib/esm/lambdas/s3Event_fileEvent.js

@@ -2,3 +2,4 @@ import { getS3Event_fileEvent } from '../lambdaHandlers';
 import { dynamicModuleLoader } from './dynamicModuleLoader';
 import { getQpqConfig } from './lambda-utils';
 export const s3Event_fileEvent = getS3Event_fileEvent(dynamicModuleLoader, getQpqConfig());
+//# sourceMappingURL=s3Event_fileEvent.js.map

package/lib/esm/lambdas/s3Event_fileEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3Event_fileEvent.js","sourceRoot":"","sources":["../../../src/lambdas/s3Event_fileEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC","sourcesContent":["import { getS3Event_fileEvent } from '../lambdaHandlers';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\nexport const s3Event_fileEvent = getS3Event_fileEvent(dynamicModuleLoader, getQpqConfig());\n"]}

package/lib/esm/lambdas/sqsEvent_queueEvent.js

@@ -2,3 +2,4 @@ import { getSqsEvent_queueEvent } from '../lambdaHandlers';
 import { dynamicModuleLoader } from './dynamicModuleLoader';
 import { getQpqConfig } from './lambda-utils';
 export const sqsEvent_queueEvent = getSqsEvent_queueEvent(dynamicModuleLoader, getQpqConfig());
+//# sourceMappingURL=sqsEvent_queueEvent.js.map

package/lib/esm/lambdas/sqsEvent_queueEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqsEvent_queueEvent.js","sourceRoot":"","sources":["../../../src/lambdas/sqsEvent_queueEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC","sourcesContent":["import { getSqsEvent_queueEvent } from '../lambdaHandlers';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\nexport const sqsEvent_queueEvent = getSqsEvent_queueEvent(dynamicModuleLoader, getQpqConfig());\n"]}

package/lib/esm/logic/acm/findMatchingCertificates.js

@@ -36,3 +36,4 @@ export const findMatchingCertificates = async (domainName, region, retryCount =
 //   const matchingCerts = await findMatchingCertificates('example.com', 'us-east-1');
 //   console.log('Matching certificates:', matchingCerts);
 // })();
+//# sourceMappingURL=findMatchingCertificates.js.map

package/lib/esm/logic/acm/findMatchingCertificates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findMatchingCertificates.js","sourceRoot":"","sources":["../../../../src/logic/acm/findMatchingCertificates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,UAAkB,EAClB,MAAc,EACd,aAAqB,CAAC,EACtB,UAAkB,IAAI,EACH,EAAE;IACrB,MAAM,mBAAmB,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE;QAC3C,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,gBAAgB,GAAG,UAAU,CAAC;IAElC,OAAO,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,eAAe,GAAa,EAAE,CAAC;QACnC,IAAI,SAA6B,CAAC;QAElC,GAAG,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,uBAAuB,CAAC;gBAC9C,SAAS;aACV,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAErD,KAAK,MAAM,WAAW,IAAI,UAAU,CAAC,sBAAsB,IAAI,EAAE,EAAE,CAAC;gBAClE,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,mBAAmB,EAAE,CAAC;oBAChG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACnC,CAAC,QAAQ,SAAS,EAAE;QAEpB,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,gBAAgB,EAAE,CAAC;QAEnB,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,gCAAgC;YAChC,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC,CAAC,0CAA0C;AACvD,CAAC,CAAC;AAEF,iBAAiB;AACjB,sFAAsF;AACtF,0DAA0D;AAC1D,QAAQ","sourcesContent":["import { ACMClient, ListCertificatesCommand } from '@aws-sdk/client-acm';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const findMatchingCertificates = async (\n  domainName: string,\n  region: string,\n  retryCount: number = 3,\n  delayMs: number = 5000,\n): Promise<string[]> => {\n  const lowerCaseDomainName = domainName.toLowerCase();\n  const acmClient = createAwsClient(ACMClient, {\n    region,\n  });\n\n  let remainingRetries = retryCount;\n\n  while (remainingRetries > 0) {\n    let certificateArns: string[] = [];\n    let NextToken: string | undefined;\n\n    do {\n      const listCommand = new ListCertificatesCommand({\n        NextToken,\n      });\n\n      const listResult = await acmClient.send(listCommand);\n\n      for (const certificate of listResult.CertificateSummaryList || []) {\n        if (certificate.CertificateArn && certificate.DomainName?.toLowerCase() === lowerCaseDomainName) {\n          certificateArns.push(certificate.CertificateArn);\n        }\n      }\n\n      NextToken = listResult.NextToken;\n    } while (NextToken);\n\n    if (certificateArns.length > 0) {\n      return certificateArns;\n    }\n\n    remainingRetries--;\n\n    if (remainingRetries != 0) {\n      // Don't wait after the last try\n      await new Promise((res) => setTimeout(res, delayMs));\n    }\n  }\n\n  return []; // Return an empty array after max retries\n};\n\n// (async () => {\n//   const matchingCerts = await findMatchingCertificates('example.com', 'us-east-1');\n//   console.log('Matching certificates:', matchingCerts);\n// })();\n"]}

package/lib/esm/logic/acm/getDomainValidationOptions.js

@@ -24,3 +24,4 @@ export const getDomainValidationOptions = async (certificateArn, region) => {
     }
     return entries;
 };
+//# sourceMappingURL=getDomainValidationOptions.js.map

package/lib/esm/logic/acm/getDomainValidationOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getDomainValidationOptions.js","sourceRoot":"","sources":["../../../../src/logic/acm/getDomainValidationOptions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAAE,cAAsB,EAAE,MAAc,EAAiC,EAAE;IACxH,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE;QAC3C,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;QAC7C,cAAc,EAAE,cAAc;KAC/B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE7E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,uBAAuB,EAAE,CAAC;QACrE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,uBAAuB,EAAE,CAAC;YAChE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBAChE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG;oBACpC,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["import { CloudflareDnsEntries } from 'quidproquo-webserver';\n\nimport { ACMClient, DescribeCertificateCommand } from '@aws-sdk/client-acm';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getDomainValidationOptions = async (certificateArn: string, region: string): Promise<CloudflareDnsEntries> => {\n  const acmClient = createAwsClient(ACMClient, {\n    region,\n  });\n\n  const command = new DescribeCertificateCommand({\n    CertificateArn: certificateArn,\n  });\n\n  const result = await acmClient.send(command);\n\n  const entries: CloudflareDnsEntries = {};\n\n  console.log('DescribeCertificateCommand: ', JSON.stringify(result, null, 2));\n\n  // Extract the DomainValidationOptions and populate the entries\n  if (result.Certificate && result.Certificate.DomainValidationOptions) {\n    for (const option of result.Certificate.DomainValidationOptions) {\n      if (option.ResourceRecord?.Name && option.ResourceRecord?.Value) {\n        entries[option.ResourceRecord.Name] = {\n          proxied: false,\n          type: 'CNAME',\n          value: option.ResourceRecord.Value,\n        };\n      }\n    }\n  }\n\n  return entries;\n};\n"]}

package/lib/esm/logic/apiGateway/getApiKeyValue.d.ts

@@ -0,0 +1 @@
+export declare const getApiKeyValue: (region: string, apiKeyId: string) => Promise<string | undefined>;

package/lib/esm/logic/apiGateway/getApiKeyValue.js

@@ -0,0 +1,13 @@
+import { APIGatewayClient, GetApiKeyCommand } from '@aws-sdk/client-api-gateway';
+import { createAwsClient } from '../createAwsClient';
+// Fetch a single api key's value by id - keys are read individually (not listed) so the
+// IAM grant can be scoped per-key with tag conditions rather than the /apikeys collection.
+export const getApiKeyValue = async (region, apiKeyId) => {
+    const apiGatewayClient = createAwsClient(APIGatewayClient, { region });
+    const res = await apiGatewayClient.send(new GetApiKeyCommand({
+        apiKey: apiKeyId,
+        includeValue: true,
+    }));
+    return res.value;
+};
+//# sourceMappingURL=getApiKeyValue.js.map

package/lib/esm/logic/apiGateway/getApiKeyValue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getApiKeyValue.js","sourceRoot":"","sources":["../../../../src/logic/apiGateway/getApiKeyValue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,wFAAwF;AACxF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAE,QAAgB,EAA+B,EAAE;IACpG,MAAM,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CACrC,IAAI,gBAAgB,CAAC;QACnB,MAAM,EAAE,QAAQ;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CACH,CAAC;IAEF,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC,CAAC","sourcesContent":["import { APIGatewayClient, GetApiKeyCommand } from '@aws-sdk/client-api-gateway';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// Fetch a single api key's value by id - keys are read individually (not listed) so the\n// IAM grant can be scoped per-key with tag conditions rather than the /apikeys collection.\nexport const getApiKeyValue = async (region: string, apiKeyId: string): Promise<string | undefined> => {\n  const apiGatewayClient = createAwsClient(APIGatewayClient, { region });\n\n  const res = await apiGatewayClient.send(\n    new GetApiKeyCommand({\n      apiKey: apiKeyId,\n      includeValue: true,\n    }),\n  );\n\n  return res.value;\n};\n"]}

package/lib/esm/logic/apiGateway/websocketSendMessage.js

@@ -14,3 +14,4 @@ export const sendMessageToWebSocketConnection = async (apiId, connectionId, regi
     });
     await apiGatewayManagementApiClient.send(command);
 };
+//# sourceMappingURL=websocketSendMessage.js.map

package/lib/esm/logic/apiGateway/websocketSendMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocketSendMessage.js","sourceRoot":"","sources":["../../../../src/logic/apiGateway/websocketSendMessage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAEjH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EAAE,KAAa,EAAE,YAAoB,EAAE,MAAc,EAAE,OAAY,EAAiB,EAAE;IACzI,6CAA6C;IAC7C,MAAM,6BAA6B,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnF,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,WAAW,KAAK,gBAAgB,MAAM,qBAAqB;QACrE,MAAM;KACP,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC;QAC1C,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,yCAAyC;KACzE,CAAC,CAAC;IAEH,MAAM,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC,CAAC","sourcesContent":["import { ApiGatewayManagementApiClient, PostToConnectionCommand } from '@aws-sdk/client-apigatewaymanagementapi';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const sendMessageToWebSocketConnection = async (apiId: string, connectionId: string, region: string, payload: any): Promise<void> => {\n  // Create a new ApiGatewayManagementApiClient\n  const apiGatewayManagementApiClient = createAwsClient(ApiGatewayManagementApiClient, {\n    apiVersion: '2018-11-29',\n    endpoint: `https://${apiId}.execute-api.${region}.amazonaws.com/prod`,\n    region,\n  });\n\n  // Create a new PostToConnectionCommand with the connection ID and payload\n  const command = new PostToConnectionCommand({\n    ConnectionId: connectionId,\n    Data: JSON.stringify(payload), // Convert payload to string if necessary\n  });\n\n  await apiGatewayManagementApiClient.send(command);\n};\n"]}

package/lib/esm/logic/cache/memoFunc.js

@@ -26,3 +26,4 @@ export const memoFunc = (func, ttlInSeconds = 3600) => {
         return result;
     });
 };
+//# sourceMappingURL=memoFunc.js.map

package/lib/esm/logic/cache/memoFunc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoFunc.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFunc.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAoC,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IACrG,OAAO,CAAC,CAAC,GAAG,IAAW,EAAE,EAAE;QACzB,wDAAwD;QACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,4DAA4D;YAC5D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAI,QAAQ,CAAC,CAAC;QAE/C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,wDAAwD;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAE7B,kCAAkC;QAClC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAM,CAAC;AACV,CAAC,CAAC","sourcesContent":["import NodeCache from 'node-cache';\n\nconst cache = new WeakMap<object, NodeCache>();\n\n/**\n * Memoizes a function by caching its return values.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFunc = <T extends (...args: any[]) => any>(func: T, ttlInSeconds: number = 3600): T => {\n  return ((...args: any[]) => {\n    // Check if the function has a corresponding cache entry\n    if (!cache.has(func)) {\n      // Create a new NodeCache instance and store it in the cache\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n    const cachedValue = nodeCache.get<T>(cacheKey);\n\n    if (cachedValue) {\n      return cachedValue;\n    }\n\n    // Call the original function if the value is not cached\n    const result = func(...args);\n\n    // Cache the result for future use\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as T;\n};\n"]}

package/lib/esm/logic/cache/memoFuncAsync.js

@@ -23,3 +23,4 @@ export const memoFuncAsync = (func, ttlInSeconds = 3600) => {
         return result;
     });
 };
+//# sourceMappingURL=memoFuncAsync.js.map

package/lib/esm/logic/cache/memoFuncAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoFuncAsync.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFuncAsync.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAoC,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IAC1G,OAAO,CAAC,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAEnC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,GAAG,CAAI,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnC,oBAAoB;QACpB,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAiB,CAAC;AACrB,CAAC,CAAC","sourcesContent":["import NodeCache from 'node-cache';\n\nconst cache = new WeakMap<object, NodeCache>();\n\n/**\n * Memoizes a function by caching its return values.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFuncAsync = <T extends (...args: any[]) => any>(func: T, ttlInSeconds: number = 3600): T => {\n  return (async (...args: any[]) => {\n    if (!cache.has(func)) {\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n\n    if (nodeCache.has(cacheKey)) {\n      return nodeCache.get<T>(cacheKey);\n    }\n\n    // Await the result\n    const result = await func(...args);\n\n    // and then cache it\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as unknown as T;\n};\n"]}

package/lib/esm/logic/cloudFront/invalidateCache.js

@@ -22,3 +22,4 @@ export const invalidateCache = async (distributionId, region, paths) => {
     };
     await cloudFrontClient.send(new CreateInvalidationCommand(input));
 };
+//# sourceMappingURL=invalidateCache.js.map

package/lib/esm/logic/cloudFront/invalidateCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalidateCache.js","sourceRoot":"","sources":["../../../../src/logic/cloudFront/invalidateCache.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAkC,MAAM,4BAA4B,CAAC;AAEzH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,KAAe,EAAU,EAAE;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhC,sBAAsB;IACtB,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5E,iDAAiD;IACjD,OAAO,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,cAAsB,EAAE,MAAc,EAAE,KAAe,EAAiB,EAAE;IAC9G,MAAM,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAmC;QAC5C,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE;YACjB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,KAAK,EAAE,KAAK;aACb;YACD,eAAe,EAAE,8BAA8B,CAAC,KAAK,CAAC;SACvD;KACF,CAAC;IAEF,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC","sourcesContent":["import crypto from 'crypto';\nimport { CloudFrontClient, CreateInvalidationCommand, CreateInvalidationCommandInput } from '@aws-sdk/client-cloudfront';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getInvalidationCallerReference = (paths: string[]): string => {\n  const allPaths = paths.join('');\n\n  // All paths as a hash\n  const allPathHash = crypto.createHash('md5').update(allPaths).digest('hex');\n\n  // Unique key is the now time with all paths hash\n  return allPathHash + new Date().toISOString();\n};\n\nexport const invalidateCache = async (distributionId: string, region: string, paths: string[]): Promise<void> => {\n  const cloudFrontClient = createAwsClient(CloudFrontClient, { region });\n\n  const input: CreateInvalidationCommandInput = {\n    DistributionId: distributionId,\n    InvalidationBatch: {\n      Paths: {\n        Quantity: paths.length,\n        Items: paths,\n      },\n      CallerReference: getInvalidationCallerReference(paths),\n    },\n  };\n\n  await cloudFrontClient.send(new CreateInvalidationCommand(input));\n};\n"]}

package/lib/esm/logic/cloudformation/getExportedValue.js

@@ -15,3 +15,4 @@ export const getExportedValue = memoFuncAsync(async (variableName, region) => {
     } while (listCommandParams.NextToken);
     throw new Error(`CF could not find: [${variableName}]`);
 });
+//# sourceMappingURL=getExportedValue.js.map

package/lib/esm/logic/cloudformation/getExportedValue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getExportedValue.js","sourceRoot":"","sources":["../../../../src/logic/cloudformation/getExportedValue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAA2B,MAAM,gCAAgC,CAAC;AAEnH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,EAAE,YAAoB,EAAE,MAAc,EAAmB,EAAE;IAC5G,MAAM,cAAc,GAAG,eAAe,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzE,MAAM,iBAAiB,GAA4B,EAAE,CAAC;IAEtD,GAAG,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEpF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,KAAK,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,QAAQ,KAAK,GAAG,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACjD,CAAC,QAAQ,iBAAiB,CAAC,SAAS,EAAE;IAEtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,GAAG,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC","sourcesContent":["import { CloudFormationClient, ListExportsCommand, ListExportsCommandInput } from '@aws-sdk/client-cloudformation';\n\nimport { memoFuncAsync } from '../cache/memoFuncAsync';\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getExportedValue = memoFuncAsync(async (variableName: string, region: string): Promise<string> => {\n  const cloudformation = createAwsClient(CloudFormationClient, { region });\n\n  const listCommandParams: ListExportsCommandInput = {};\n\n  do {\n    const result = await cloudformation.send(new ListExportsCommand(listCommandParams));\n\n    const value = (result.Exports || []).find((e) => e.Name === variableName)?.Value;\n    if (value !== undefined) {\n      console.log(`CF Found: [${variableName}] = [${value}]`);\n      return value;\n    }\n\n    listCommandParams.NextToken = result.NextToken;\n  } while (listCommandParams.NextToken);\n\n  throw new Error(`CF could not find: [${variableName}]`);\n});\n"]}

package/lib/esm/logic/cognito/associateSoftwareToken.js

@@ -13,3 +13,4 @@ export const associateSoftwareToken = async (region, session) => {
         session: response.Session || '',
     };
 };
+//# sourceMappingURL=associateSoftwareToken.js.map

package/lib/esm/logic/cognito/associateSoftwareToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"associateSoftwareToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/associateSoftwareToken.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAEzH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,0EAA0E;AAC1E,gFAAgF;AAChF,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAE,OAAe,EAAyC,EAAE;IACrH,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEnG,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { AssociateSoftwareTokenResult } from 'quidproquo-core';\n\nimport { AssociateSoftwareTokenCommand, CognitoIdentityProviderClient } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// Begins TOTP enrollment for the MFA_SETUP challenge. Cognito returns the\n// shared secret to seed the authenticator app and a refreshed session that must\n// be used for the subsequent VerifySoftwareToken / RespondToAuthChallenge calls.\nexport const associateSoftwareToken = async (region: string, session: string): Promise<AssociateSoftwareTokenResult> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const response = await cognitoClient.send(new AssociateSoftwareTokenCommand({ Session: session }));\n\n  return {\n    secretCode: response.SecretCode || '',\n    session: response.Session || '',\n  };\n};\n"]}

package/lib/esm/logic/cognito/authenticateUser.js

@@ -27,3 +27,4 @@ export const authenticateUser = async (userPoolId, clientId, region, isCustom, u
     const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));
     return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);
 };
+//# sourceMappingURL=authenticateUser.js.map

package/lib/esm/logic/cognito/authenticateUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticateUser.js","sourceRoot":"","sources":["../../../../src/logic/cognito/authenticateUser.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EAExB,YAAY,EACZ,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uDAAuD,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,2CAA2C;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAiB,EACjB,QAAgB,EAChB,QAAiB,EACkB,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,wBAAwB;QACrF,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,cAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,OAAO,uDAAuD,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAC","sourcesContent":["import { AuthenticateUserChallenge, AuthenticateUserResponse, UserDirectoryAuthenticateUserActionPayload } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\n// TODO: retry for TooManyRequestsException\n\nexport const authenticateUser = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  isCustom: boolean,\n  username: string,\n  password?: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  // Time we issued the request\n  const issueDateTime = new Date().toISOString();\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: isCustom ? AuthFlowType.CUSTOM_AUTH : AuthFlowType.ADMIN_USER_PASSWORD_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      USERNAME: username,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  if (password) {\n    params.AuthParameters!.PASSWORD = password;\n  }\n\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}

package/lib/esm/logic/cognito/changePassword.js

@@ -11,3 +11,4 @@ export const changePassword = async (accessToken, previousPassword, proposedPass
     };
     await cognitoClient.send(new ChangePasswordCommand(params));
 };
+//# sourceMappingURL=changePassword.js.map

package/lib/esm/logic/cognito/changePassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changePassword.js","sourceRoot":"","sources":["../../../../src/logic/cognito/changePassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAA8B,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAE7I,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,WAAmB,EAAE,gBAAwB,EAAE,gBAAwB,EAAE,MAAc,EAAiB,EAAE;IAC7I,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAA+B;QACzC,WAAW,EAAE,WAAW;QACxB,gBAAgB,EAAE,gBAAgB;QAClC,gBAAgB,EAAE,gBAAgB;KACnC,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC","sourcesContent":["import { ChangePasswordCommand, ChangePasswordCommandInput, CognitoIdentityProviderClient } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const changePassword = async (accessToken: string, previousPassword: string, proposedPassword: string, region: string): Promise<void> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: ChangePasswordCommandInput = {\n    AccessToken: accessToken,\n    PreviousPassword: previousPassword,\n    ProposedPassword: proposedPassword,\n  };\n\n  await cognitoClient.send(new ChangePasswordCommand(params));\n};\n"]}

package/lib/esm/logic/cognito/cognitoAttributeMap.js

@@ -56,3 +56,4 @@ export const getQpqAttributesFromCognitoStringMap = (cognitoUserAttributes) => {
     }), {});
     return userAttributes;
 };
+//# sourceMappingURL=cognitoAttributeMap.js.map

package/lib/esm/logic/cognito/cognitoAttributeMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoAttributeMap.js","sourceRoot":"","sources":["../../../../src/logic/cognito/cognitoAttributeMap.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAyC;IACvE,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,gBAAgB;IAC/B,MAAM,EAAE,KAAK;IAEb,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,aAAa;IACzB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,aAAa;IACzB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,mDAAmD;AACnD,MAAM,2BAA2B,GAAyC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAClH,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EACjD,EAAE,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,cAA8B,EAAE,EAAE;IAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;SAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,IAAI,EAAE,mBAAmB,CAAC,GAA2B,CAAC;QACtD,KAAK,EAAE,GAAG,cAAc,CAAC,GAA2B,CAAC,EAAE;KACxD,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,wCAAwC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAkB,EAAE;IAC9F,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAE1D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,kEAAkE;IAC/E,CAAC;IAED,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;QACzC,wEAAwE;QACxE,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,qBAAwD,EAAkB,EAAE;IACpI,0DAA0D;IAC1D,MAAM,cAAc,GAAmB,qBAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3F,OAAO;YACL,GAAG,GAAG;YACN,GAAG,wCAAwC,CAAC,IAAI,EAAE,KAAK,CAAC;SACzD,CAAC;IACJ,CAAC,EAAE,EAAoB,CAAC,CAAC;IAEzB,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,qBAA6C,EAAkB,EAAE;IACpH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAC9D,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,GAAG,GAAG;QACN,GAAG,wCAAwC,CAAC,GAAG,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC;KAC7E,CAAC,EACF,EAAoB,CACrB,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC","sourcesContent":["import { CreateUserRequest, UserAttributes } from 'quidproquo-core';\n\nexport const cognitoAttributeMap: Record<keyof UserAttributes, string> = {\n  email: 'email',\n  emailVerified: 'email_verified',\n  userId: 'sub',\n\n  address: 'address',\n  birthDate: 'birthdate',\n  familyName: 'family_name',\n  gender: 'gender',\n  givenName: 'given_name',\n  locale: 'locale',\n  middleName: 'middle_name',\n  name: 'name',\n  nickname: 'nickname',\n  phoneNumber: 'phone_number',\n  picture: 'picture',\n  preferredUsername: 'preferred_username',\n  profile: 'profile',\n  website: 'website',\n  zoneInfo: 'zoneinfo',\n};\n\n// Flip the cognitoAttributeMap for reverse mapping\nconst reversedCognitoAttributeMap: Record<string, keyof UserAttributes> = Object.entries(cognitoAttributeMap).reduce(\n  (acc, [key, value]) => ({ ...acc, [value]: key }),\n  {},\n);\n\nexport const getCognitoUserAttributesFromQpqUserAttributes = (userAttributes: UserAttributes) => {\n  return Object.keys(userAttributes)\n    .map((key) => ({\n      Name: cognitoAttributeMap[key as keyof UserAttributes],\n      Value: `${userAttributes[key as keyof UserAttributes]}`,\n    }))\n    .filter((attribute) => !!attribute.Name && !!attribute.Value);\n};\n\nconst getQpqAttributeObjectFromCognitoKeyValue = (key: string, value: string): UserAttributes => {\n  const userAttributeKey = reversedCognitoAttributeMap[key];\n\n  if (!userAttributeKey) {\n    return {}; // If there's no matching key in your mapping, just return nothing\n  }\n\n  if (userAttributeKey === 'emailVerified') {\n    // Assume the value of 'email_verified' is a string of 'true' or 'false'\n    return { [userAttributeKey]: value === 'true' };\n  }\n\n  return { [userAttributeKey]: value };\n};\n\nexport const getQpqAttributesFromCognitoUserAttributes = (cognitoUserAttributes: { Name: string; Value: string }[]): UserAttributes => {\n  // Map cognitoUserAttributes to your UserAttributes format\n  const userAttributes: UserAttributes = cognitoUserAttributes.reduce((acc, { Name, Value }) => {\n    return {\n      ...acc,\n      ...getQpqAttributeObjectFromCognitoKeyValue(Name, Value),\n    };\n  }, {} as UserAttributes);\n\n  return userAttributes;\n};\n\nexport const getQpqAttributesFromCognitoStringMap = (cognitoUserAttributes: Record<string, string>): UserAttributes => {\n  const userAttributes = Object.keys(cognitoUserAttributes).reduce(\n    (acc, key) => ({\n      ...acc,\n      ...getQpqAttributeObjectFromCognitoKeyValue(key, cognitoUserAttributes[key]),\n    }),\n    {} as UserAttributes,\n  );\n\n  return userAttributes;\n};\n"]}

package/lib/esm/logic/cognito/confirmForgotPassword.js

@@ -21,3 +21,4 @@ export const confirmForgotPassword = async (userPoolId, clientId, region, code,
     const authResponse = await authenticateUser(userPoolId, clientId, region, false, username, password);
     return authResponse;
 };
+//# sourceMappingURL=confirmForgotPassword.js.map

package/lib/esm/logic/cognito/confirmForgotPassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmForgotPassword.js","sourceRoot":"","sources":["../../../../src/logic/cognito/confirmForgotPassword.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAE7B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,QAAgB,EACmB,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAsC;QAChD,QAAQ,EAAE,QAAQ;QAElB,gBAAgB,EAAE,IAAI;QACtB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;KACnB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnE,wBAAwB;IACxB,MAAM,YAAY,GAA6B,MAAM,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/H,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  CognitoIdentityProviderClient,\n  ConfirmForgotPasswordCommand,\n  ConfirmForgotPasswordCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { authenticateUser } from './authenticateUser';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const confirmForgotPassword = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  code: string,\n  username: string,\n  password: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: ConfirmForgotPasswordCommandInput = {\n    ClientId: clientId,\n\n    ConfirmationCode: code,\n    SecretHash: secretHash,\n    Password: password,\n    Username: username,\n  };\n\n  await cognitoClient.send(new ConfirmForgotPasswordCommand(params));\n\n  // Authenticate the user\n  const authResponse: AuthenticateUserResponse = await authenticateUser(userPoolId, clientId, region, false, username, password);\n\n  return authResponse;\n};\n"]}

package/lib/esm/logic/cognito/createUser.js

@@ -26,3 +26,4 @@ export const createUser = async (userPoolId, region, clientId, createUserRequest
     const authResponse = await authenticateUser(userPoolId, clientId, region, false, username, createUserRequest.password);
     return authResponse;
 };
+//# sourceMappingURL=createUser.js.map

package/lib/esm/logic/cognito/createUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createUser.js","sourceRoot":"","sources":["../../../../src/logic/cognito/createUser.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sBAAsB,EAEtB,6BAA6B,EAC7B,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,6CAA6C,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,UAAkB,EAClB,MAAc,EACd,QAAgB,EAChB,iBAAoC,EACD,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAgC;QAC1C,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,iBAAiB,CAAC,KAAK;QACjC,aAAa,EAAE,iBAAiB,CAAC,QAAQ,EAAE,yBAAyB;QACpE,sBAAsB,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAClD,cAAc,EAAE,6CAA6C,CAAC,iBAAiB,CAAC;QAChF,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAEF,IAAI,iBAAiB,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,sBAAuB,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9E,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IAE/C,0BAA0B;IAC1B,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAEhF,wBAAwB;IACxB,MAAM,YAAY,GAA6B,MAAM,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAEjJ,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse, CreateUserRequest } from 'quidproquo-core';\n\nimport {\n  AdminCreateUserCommand,\n  AdminCreateUserCommandInput,\n  CognitoIdentityProviderClient,\n  DeliveryMediumType,\n  MessageActionType,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { authenticateUser } from './authenticateUser';\nimport { getCognitoUserAttributesFromQpqUserAttributes } from './cognitoAttributeMap';\nimport { setUserPassword } from './setUserPassword';\n\nexport const createUser = async (\n  userPoolId: string,\n  region: string,\n  clientId: string,\n  createUserRequest: CreateUserRequest,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: AdminCreateUserCommandInput = {\n    UserPoolId: userPoolId,\n    Username: createUserRequest.email,\n    MessageAction: MessageActionType.SUPPRESS, // Don't contact the user\n    DesiredDeliveryMediums: [DeliveryMediumType.EMAIL],\n    UserAttributes: getCognitoUserAttributesFromQpqUserAttributes(createUserRequest),\n    ForceAliasCreation: false,\n  };\n\n  if (createUserRequest.phoneNumber) {\n    params.DesiredDeliveryMediums!.push(DeliveryMediumType.SMS);\n  }\n\n  const response = await cognitoClient.send(new AdminCreateUserCommand(params));\n\n  const username = response.User?.Username || '';\n\n  // Set the user's password\n  await setUserPassword(region, userPoolId, username, createUserRequest.password);\n\n  // Authenticate the user\n  const authResponse: AuthenticateUserResponse = await authenticateUser(userPoolId, clientId, region, false, username, createUserRequest.password);\n\n  return authResponse;\n};\n"]}

package/lib/esm/logic/cognito/decodeAccessToken.js

@@ -17,3 +17,4 @@ export const decodeAccessToken = async (userDirectoryName, qpqConfig, accessToke
     };
     return decodedAccesToken;
 };
+//# sourceMappingURL=decodeAccessToken.js.map

package/lib/esm/logic/cognito/decodeAccessToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decodeAccessToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/decodeAccessToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,iBAAyB,EACzB,SAAoB,EACpB,WAAoB,EACpB,mBAA4B,KAAK,EACJ,EAAE;IAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAErH,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAEjG,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE3F,MAAM,iBAAiB,GAAuB;QAC5C,GAAG,gBAAgB;QAEnB,QAAQ;QACR,aAAa,EAAE,iBAAiB;KACjC,CAAC;IAEF,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { DecodedAccessToken, QPQConfig, qpqCoreUtils } from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../awsNamingUtils';\nimport { getExportedValue } from '../cloudformation/getExportedValue';\nimport { decodeValidJwt } from './decodeValidJwt';\n\nexport const decodeAccessToken = async (\n  userDirectoryName: string,\n  qpqConfig: QPQConfig,\n  accessToken?: string,\n  ignoreExpiration: boolean = false,\n): Promise<DecodedAccessToken> => {\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n  const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n  const decodedAuthToken = await decodeValidJwt(userPoolId, region, ignoreExpiration, accessToken);\n\n  if (!decodedAuthToken || !decodedAuthToken?.username) {\n    throw new Error('Unable to decode access token');\n  }\n\n  const wasValid = !ignoreExpiration || decodedAuthToken.exp > Math.floor(Date.now() / 1000);\n\n  const decodedAccesToken: DecodedAccessToken = {\n    ...decodedAuthToken,\n\n    wasValid,\n    userDirectory: userDirectoryName,\n  };\n\n  return decodedAccesToken;\n};\n"]}

package/lib/esm/logic/cognito/decodeValidJwt.js

@@ -32,3 +32,4 @@ export const decodeValidJwt = async (userPoolId, region, ignoreExpiration, acces
         return null;
     }
 };
+//# sourceMappingURL=decodeValidJwt.js.map

package/lib/esm/logic/cognito/decodeValidJwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decodeValidJwt.js","sourceRoot":"","sources":["../../../../src/logic/cognito/decodeValidJwt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,UAAU,MAAM,UAAU,CAAC;AAkBlC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,UAAkB,EAClB,MAAc,EACd,gBAAyB,EACzB,WAAoB,EACuC,EAAE;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,OAAO,EAAE,uBAAuB,MAAM,kBAAkB,UAAU,wBAAwB;SAC3F,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAEtC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE;YAC9C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,gBAAgB;SACjB,CAAe,CAAC;QAEjB,MAAM,kBAAkB,GAA8C;YACpE,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { DecodedAccessToken } from 'quidproquo-core';\n\nimport { decode, verify } from 'jsonwebtoken';\nimport jwksClient from 'jwks-rsa';\n\n// TODO: Check whey we need this? I think you should be able to get types from the lib?\ntype JwtPayload = {\n  sub: string;\n  iss: string;\n  client_id: string;\n  origin_jti: string;\n  event_id: string;\n  token_use: string;\n  scope: string;\n  auth_time: number;\n  exp: number;\n  iat: number;\n  jti: string;\n  username: string;\n};\n\nexport const decodeValidJwt = async (\n  userPoolId: string,\n  region: string,\n  ignoreExpiration: boolean,\n  accessToken?: string,\n): Promise<Omit<DecodedAccessToken, 'userDirectory'> | null> => {\n  if (!accessToken) {\n    return null;\n  }\n\n  try {\n    const decodedToken = decode(accessToken, { complete: true });\n    if (!decodedToken) {\n      return null;\n    }\n\n    const client = jwksClient({\n      jwksUri: `https://cognito-idp.${region}.amazonaws.com/${userPoolId}/.well-known/jwks.json`,\n    });\n\n    const key = await client.getSigningKey(decodedToken.header.kid);\n    const signingKey = key.getPublicKey();\n\n    const payload = verify(accessToken, signingKey, {\n      algorithms: ['RS256'],\n      ignoreExpiration,\n    }) as JwtPayload;\n\n    const decodedAccessToken: Omit<DecodedAccessToken, 'userDirectory'> = {\n      userId: payload.sub,\n      username: payload.username,\n      exp: payload.exp,\n      wasValid: true,\n    };\n\n    return decodedAccessToken;\n  } catch (e) {\n    const summary = e instanceof Error ? `${e.name}: ${e.message}` : 'unknown error';\n    console.log('Failed to decode jwt token:', summary);\n    return null;\n  }\n};\n"]}

package/lib/esm/logic/cognito/forgotPassword.js

@@ -24,3 +24,4 @@ export const forgotPassword = async (userPoolId, clientId, region, username) =>
     };
     return deliveryInfo;
 };
+//# sourceMappingURL=forgotPassword.js.map

package/lib/esm/logic/cognito/forgotPassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgotPassword.js","sourceRoot":"","sources":["../../../../src/logic/cognito/forgotPassword.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAA8B,MAAM,2CAA2C,CAAC;AAE7I,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EACwB,EAAE;IAC1C,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAA+B;QACzC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,UAAU;QACtB,cAAc,EAAE;YACd,aAAa,EAAE,MAAM;SACtB;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7E,MAAM,YAAY,GAAG;QACnB,aAAa,EAAE,QAAQ,CAAC,mBAAoB,CAAC,aAAa,IAAI,OAAO;QACrE,WAAW,EAAE,QAAQ,CAAC,mBAAoB,CAAC,WAAW,IAAI,mBAAmB;QAC7E,cAAc,EAAE,QAAQ,CAAC,mBAAoB,CAAC,cAAc,IAAI,OAAO;KACvC,CAAC;IAEnC,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { AuthenticationDeliveryDetails } from 'quidproquo-core';\n\nimport { CognitoIdentityProviderClient, ForgotPasswordCommand, ForgotPasswordCommandInput } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const forgotPassword = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  username: string,\n): Promise<AuthenticationDeliveryDetails> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: ForgotPasswordCommandInput = {\n    ClientId: clientId,\n    Username: username,\n    SecretHash: secretHash,\n    ClientMetadata: {\n      userInitiated: 'true',\n    },\n  };\n\n  const response = await cognitoClient.send(new ForgotPasswordCommand(params));\n\n  const deliveryInfo = {\n    attributeName: response.CodeDeliveryDetails!.AttributeName || 'email',\n    destination: response.CodeDeliveryDetails!.Destination || 'unknown@email.com',\n    deliveryMedium: response.CodeDeliveryDetails!.DeliveryMedium || 'EMAIL',\n  } as AuthenticationDeliveryDetails;\n\n  return deliveryInfo;\n};\n"]}

package/lib/esm/logic/cognito/getUser.js

@@ -23,3 +23,4 @@ export const getUser = async (accessToken, region) => {
     };
     return user;
 };
+//# sourceMappingURL=getUser.js.map

package/lib/esm/logic/cognito/getUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUser.js","sourceRoot":"","sources":["../../../../src/logic/cognito/getUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,6BAA6B,EAAE,cAAc,EAAuB,MAAM,2CAA2C,CAAC;AAE9I,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAerD,MAAM,gBAAgB,GAAG,CAAC,aAAqB,EAAE,cAA+B,EAAsB,EAAE;IACtG,MAAM,kBAAkB,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAEvD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,kBAAkB,CAAC,CAAC;IAE3F,OAAO,SAAS,EAAE,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,WAAmB,EAAE,MAAc,EAAiB,EAAE;IAClF,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAwB;QAClC,WAAW,EAAE,WAAW;KACzB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtE,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAK,CAAC,EAAE,EAAE,CAAC,KAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEnG,MAAM,IAAI,GAAS;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAS;QAC5B,EAAE,EAAE,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAE;QAC5C,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAE;QAEjD,cAAc;KACf,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import { AttributeType, CognitoIdentityProviderClient, GetUserCommand, GetUserCommandInput } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport interface UserAttributes {\n  [attribute: string]: string;\n}\n\nexport interface User {\n  id: string;\n  username: string;\n\n  email: string;\n\n  userAttributes: UserAttributes;\n}\n\nconst getUserAttribute = (attributeName: string, userAttributes: AttributeType[]): string | undefined => {\n  const lowerAttributeName = attributeName.toLowerCase();\n\n  const attribute = userAttributes.find((k) => k.Name?.toLowerCase() === lowerAttributeName);\n\n  return attribute?.Value;\n};\n\nexport const getUser = async (accessToken: string, region: string): Promise<User> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: GetUserCommandInput = {\n    AccessToken: accessToken,\n  };\n\n  const response = await cognitoClient.send(new GetUserCommand(params));\n\n  const attributeTypes = (response.UserAttributes || []).filter((ua) => !!ua.Value);\n  const userAttributes = attributeTypes.reduce((acc, ua) => ({ ...acc, [ua.Name!]: ua.Value! }), {});\n\n  const user: User = {\n    username: response.Username!,\n    id: getUserAttribute('sub', attributeTypes)!,\n    email: getUserAttribute('email', attributeTypes)!,\n\n    userAttributes,\n  };\n\n  return user;\n};\n"]}

package/lib/esm/logic/cognito/getUserAttributes.js

@@ -14,3 +14,4 @@ export const getUserAttributes = async (userPoolId, region, username) => {
     const attributes = getQpqAttributesFromCognitoUserAttributes(validAttributes);
     return attributes;
 };
+//# sourceMappingURL=getUserAttributes.js.map

package/lib/esm/logic/cognito/getUserAttributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAttributes.js","sourceRoot":"","sources":["../../../../src/logic/cognito/getUserAttributes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAE/G,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,yCAAyC,EAAE,MAAM,uBAAuB,CAAC;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,QAAgB,EAA2B,EAAE;IACvH,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;KACnB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3E,MAAM,eAAe,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAsC,CAAC;IAEvI,MAAM,UAAU,GAAG,yCAAyC,CAAC,eAAe,CAAC,CAAC;IAE9E,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC","sourcesContent":["import { UserAttributes } from 'quidproquo-core';\n\nimport { AdminGetUserCommand, CognitoIdentityProviderClient } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { getQpqAttributesFromCognitoUserAttributes } from './cognitoAttributeMap';\n\nexport const getUserAttributes = async (userPoolId: string, region: string, username: string): Promise<UserAttributes> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params = {\n    UserPoolId: userPoolId,\n    Username: username,\n  };\n\n  const response = await cognitoClient.send(new AdminGetUserCommand(params));\n\n  const validAttributes = (response.UserAttributes || []).filter((attr) => attr.Name && attr.Value) as { Name: string; Value: string }[];\n\n  const attributes = getQpqAttributesFromCognitoUserAttributes(validAttributes);\n\n  return attributes;\n};\n"]}

package/lib/esm/logic/cognito/getUserAttributesBySub.js

@@ -25,3 +25,4 @@ export const getUserAttributesBySub = async (userPoolId, region, sub) => {
     const validAttributes = (user.Attributes || []).filter((attr) => attr.Name && attr.Value);
     return getQpqAttributesFromCognitoUserAttributes(validAttributes);
 };
+//# sourceMappingURL=getUserAttributesBySub.js.map

package/lib/esm/logic/cognito/getUserAttributesBySub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAttributesBySub.js","sourceRoot":"","sources":["../../../../src/logic/cognito/getUserAttributesBySub.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAE5G,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,yCAAyC,EAAE,MAAM,uBAAuB,CAAC;AAElF,iFAAiF;AACjF,8EAA8E;AAC9E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,gBAAgB,CAAC;IAEjC;QACE,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,GAAW,EAA2B,EAAE;IACvH,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CACvC,IAAI,gBAAgB,CAAC;QACnB,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,UAAU,GAAG,GAAG;KACzB,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAGrF,CAAC;IAEJ,OAAO,yCAAyC,CAAC,eAAe,CAAC,CAAC;AACpE,CAAC,CAAC","sourcesContent":["import { UserAttributes } from 'quidproquo-core';\n\nimport { CognitoIdentityProviderClient, ListUsersCommand } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { getQpqAttributesFromCognitoUserAttributes } from './cognitoAttributeMap';\n\n// ListUsers returns an empty list rather than throwing for no match, so we throw\n// our own error with a discriminable `code` for the processor's catch to map.\nexport class UserNotFoundError extends Error {\n  readonly code = 'USER_NOT_FOUND';\n\n  constructor() {\n    super('User not found');\n    this.name = 'UserNotFoundError';\n  }\n}\n\nexport const getUserAttributesBySub = async (userPoolId: string, region: string, sub: string): Promise<UserAttributes> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const response = await cognitoClient.send(\n    new ListUsersCommand({\n      UserPoolId: userPoolId,\n      Filter: `sub = \"${sub}\"`,\n    }),\n  );\n\n  const [user] = response?.Users || [];\n  if (!user) {\n    throw new UserNotFoundError();\n  }\n\n  const validAttributes = (user.Attributes || []).filter((attr) => attr.Name && attr.Value) as {\n    Name: string;\n    Value: string;\n  }[];\n\n  return getQpqAttributesFromCognitoUserAttributes(validAttributes);\n};\n"]}

package/lib/esm/logic/cognito/getUserPoolClientSecret.js

@@ -14,3 +14,4 @@ export const getUserPoolClientSecret = async (userPoolId, clientId, region) => {
     }
     return response.UserPoolClient?.ClientSecret;
 };
+//# sourceMappingURL=getUserPoolClientSecret.js.map

package/lib/esm/logic/cognito/getUserPoolClientSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserPoolClientSecret.js","sourceRoot":"","sources":["../../../../src/logic/cognito/getUserPoolClientSecret.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,MAAc,EAAmB,EAAE;IACrH,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAuC;QACjD,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,UAAU;KACvB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC;IAErF,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC;AAC/C,CAAC,CAAC","sourcesContent":["import {\n  CognitoIdentityProviderClient,\n  DescribeUserPoolClientCommand,\n  DescribeUserPoolClientCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getUserPoolClientSecret = async (userPoolId: string, clientId: string, region: string): Promise<string> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: DescribeUserPoolClientCommandInput = {\n    ClientId: clientId,\n    UserPoolId: userPoolId,\n  };\n\n  const response = await cognitoClient.send(new DescribeUserPoolClientCommand(params));\n\n  if (!response.UserPoolClient?.ClientSecret) {\n    throw new Error('Can not find client secret for Cognito user pool client');\n  }\n\n  return response.UserPoolClient?.ClientSecret;\n};\n"]}

package/lib/esm/logic/cognito/index.js

@@ -1,2 +1,3 @@
 export * from './decodeAccessToken';
 export * from './decodeValidJwt';
+//# sourceMappingURL=index.js.map

package/lib/esm/logic/cognito/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/cognito/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './decodeAccessToken';\nexport * from './decodeValidJwt';\n"]}

package/lib/esm/logic/cognito/listPagedUsers.js

@@ -19,3 +19,4 @@ export const listPagedUsers = async (userPoolId, region, pageKey) => {
         items: users,
     };
 };
+//# sourceMappingURL=listPagedUsers.js.map

package/lib/esm/logic/cognito/listPagedUsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listPagedUsers.js","sourceRoot":"","sources":["../../../../src/logic/cognito/listPagedUsers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAqB,MAAM,2CAA2C,CAAC;AAE/H,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,yCAAyC,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,OAAgB,EAAyC,EAAE;IAClI,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAsB,MAAM,aAAa,CAAC,IAAI,CAC1D,IAAI,gBAAgB,CAAC;QACnB,UAAU,EAAE,UAAU;QACtB,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC;KACnD,CAAC,CACH,CAAC;IAEF,MAAM,KAAK,GAAqB,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClE,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAGrF,CAAC;QAEJ,OAAO,yCAAyC,CAAC,eAAe,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,wBAAwB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { QpqPagedData, UserAttributes } from 'quidproquo-core';\n\nimport { CognitoIdentityProviderClient, ListUsersCommand, ListUsersResponse } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { getQpqAttributesFromCognitoUserAttributes } from './cognitoAttributeMap';\nimport { pageKeyToPaginationToken, paginationTokenToPageKey } from './utils';\n\nexport const listPagedUsers = async (userPoolId: string, region: string, pageKey?: string): Promise<QpqPagedData<UserAttributes>> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const response: ListUsersResponse = await cognitoClient.send(\n    new ListUsersCommand({\n      UserPoolId: userPoolId,\n      PaginationToken: pageKeyToPaginationToken(pageKey),\n    }),\n  );\n\n  const users: UserAttributes[] = (response.Users || []).map((user) => {\n    const validAttributes = (user.Attributes || []).filter((attr) => attr.Name && attr.Value) as {\n      Name: string;\n      Value: string;\n    }[];\n\n    return getQpqAttributesFromCognitoUserAttributes(validAttributes);\n  });\n\n  return {\n    nextPageKey: paginationTokenToPageKey(response.PaginationToken),\n    items: users,\n  };\n};\n"]}

package/lib/esm/logic/cognito/listPagedUsersByAttribute.js

@@ -21,3 +21,4 @@ export const listPagedUsersByAttribute = async (userPoolId, region, attributeNam
         items: users,
     };
 };
+//# sourceMappingURL=listPagedUsersByAttribute.js.map

package/lib/esm/logic/cognito/listPagedUsersByAttribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listPagedUsersByAttribute.js","sourceRoot":"","sources":["../../../../src/logic/cognito/listPagedUsersByAttribute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAqB,MAAM,2CAA2C,CAAC;AAE/H,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,yCAAyC,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,UAAkB,EAClB,MAAc,EACd,aAAqB,EACrB,cAAsB,EACtB,KAAc,EACd,OAAgB,EACuB,EAAE;IACzC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAsB,MAAM,aAAa,CAAC,IAAI,CAC1D,IAAI,gBAAgB,CAAC;QACnB,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,GAAG,aAAa,OAAO,cAAc,GAAG;QAChD,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC;KACnD,CAAC,CACH,CAAC;IAEF,MAAM,KAAK,GAAqB,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClE,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAGrF,CAAC;QAEJ,OAAO,yCAAyC,CAAC,eAAe,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,wBAAwB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { QpqPagedData, UserAttributes } from 'quidproquo-core';\n\nimport { CognitoIdentityProviderClient, ListUsersCommand, ListUsersResponse } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { getQpqAttributesFromCognitoUserAttributes } from './cognitoAttributeMap';\nimport { pageKeyToPaginationToken, paginationTokenToPageKey } from './utils';\n\nexport const listPagedUsersByAttribute = async (\n  userPoolId: string,\n  region: string,\n  attributeName: string,\n  attributeValue: string,\n  limit?: number,\n  pageKey?: string,\n): Promise<QpqPagedData<UserAttributes>> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const response: ListUsersResponse = await cognitoClient.send(\n    new ListUsersCommand({\n      UserPoolId: userPoolId,\n      Limit: limit,\n      Filter: `${attributeName} = \"${attributeValue}\"`,\n      PaginationToken: pageKeyToPaginationToken(pageKey),\n    }),\n  );\n\n  const users: UserAttributes[] = (response.Users || []).map((user) => {\n    const validAttributes = (user.Attributes || []).filter((attr) => attr.Name && attr.Value) as {\n      Name: string;\n      Value: string;\n    }[];\n\n    return getQpqAttributesFromCognitoUserAttributes(validAttributes);\n  });\n\n  return {\n    nextPageKey: paginationTokenToPageKey(response.PaginationToken),\n    items: users,\n  };\n};\n"]}

package/lib/esm/logic/cognito/refreshToken.js

@@ -23,3 +23,4 @@ export const refreshToken = async (userPoolId, clientId, region, username, refre
     const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));
     return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);
 };
+//# sourceMappingURL=refreshToken.js.map

package/lib/esm/logic/cognito/refreshToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/refreshToken.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EAExB,YAAY,EACZ,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uDAAuD,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,YAAoB,EACe,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,YAAY,CAAC,kBAAkB;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,OAAO,uDAAuD,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const refreshToken = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  username: string,\n  refreshToken: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: AuthFlowType.REFRESH_TOKEN_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      REFRESH_TOKEN: refreshToken,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  // Time we issued the request\n  const issueDateTime = new Date().toISOString();\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}

package/lib/esm/logic/cognito/requestEmailVerificationCode.js

@@ -10,3 +10,4 @@ export const requestEmailVerificationCode = async (region, accessToken) => {
     };
     const requestEmailVerificationCodeResponse = await cognitoClient.send(new GetUserAttributeVerificationCodeCommand(params));
 };
+//# sourceMappingURL=requestEmailVerificationCode.js.map

package/lib/esm/logic/cognito/requestEmailVerificationCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestEmailVerificationCode.js","sourceRoot":"","sources":["../../../../src/logic/cognito/requestEmailVerificationCode.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,uCAAuC,GAExC,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAAE,MAAc,EAAE,WAAmB,EAAE,EAAE;IACxF,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAiD;QAC3D,WAAW,EAAE,WAAW;QACxB,aAAa,EAAE,OAAO,EAAE,+CAA+C;KACxE,CAAC;IAEF,MAAM,oCAAoC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,uCAAuC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7H,CAAC,CAAC","sourcesContent":["import {\n  CognitoIdentityProviderClient,\n  GetUserAttributeVerificationCodeCommand,\n  GetUserAttributeVerificationCodeCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const requestEmailVerificationCode = async (region: string, accessToken: string) => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: GetUserAttributeVerificationCodeCommandInput = {\n    AccessToken: accessToken,\n    AttributeName: 'email', // Request verification for the email attribute\n  };\n\n  const requestEmailVerificationCodeResponse = await cognitoClient.send(new GetUserAttributeVerificationCodeCommand(params));\n};\n"]}

package/lib/esm/logic/cognito/resolveUsernameByPreferredUsername.js

@@ -12,3 +12,4 @@ export const resolveUsernameByPreferredUsername = async (userPoolId, region, pre
     const resolvedUsername = response.Users?.[0]?.Username;
     return resolvedUsername || preferredUsername;
 };
+//# sourceMappingURL=resolveUsernameByPreferredUsername.js.map

package/lib/esm/logic/cognito/resolveUsernameByPreferredUsername.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveUsernameByPreferredUsername.js","sourceRoot":"","sources":["../../../../src/logic/cognito/resolveUsernameByPreferredUsername.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAE5G,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,iBAAyB,EAAmB,EAAE;IACzI,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CACvC,IAAI,gBAAgB,CAAC;QACnB,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,yBAAyB,iBAAiB,GAAG;KACtD,CAAC,CACH,CAAC;IAEF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IAEvD,OAAO,gBAAgB,IAAI,iBAAiB,CAAC;AAC/C,CAAC,CAAC","sourcesContent":["import { CognitoIdentityProviderClient, ListUsersCommand } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const resolveUsernameByPreferredUsername = async (userPoolId: string, region: string, preferredUsername: string): Promise<string> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const response = await cognitoClient.send(\n    new ListUsersCommand({\n      UserPoolId: userPoolId,\n      Limit: 1,\n      Filter: `preferred_username = \"${preferredUsername}\"`,\n    }),\n  );\n\n  const resolvedUsername = response.Users?.[0]?.Username;\n\n  return resolvedUsername || preferredUsername;\n};\n"]}

package/lib/esm/logic/cognito/respondToAuthChallengeChallenge.js

@@ -24,3 +24,4 @@ export const respondToAuthChallengeChallenge = async (userPoolId, clientId, regi
     // transform the response into your custom format, similar to your refreshToken function
     return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);
 };
+//# sourceMappingURL=respondToAuthChallengeChallenge.js.map

package/lib/esm/logic/cognito/respondToAuthChallengeChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respondToAuthChallengeChallenge.js","sourceRoot":"","sources":["../../../../src/logic/cognito/respondToAuthChallengeChallenge.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,6BAA6B,EAC7B,6BAA6B,GAE9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uDAAuD,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EAClD,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,iBAAoC,EACpC,UAAkC,EACC,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAuC;QACjD,aAAa,EAAE,iBAAiB;QAChC,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,OAAO;QAChB,kBAAkB,EAAE;YAClB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;YAEvB,GAAG,UAAU;SACd;KACF,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC;IAErF,wFAAwF;IACxF,OAAO,uDAAuD,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  ChallengeNameType,\n  CognitoIdentityProviderClient,\n  RespondToAuthChallengeCommand,\n  RespondToAuthChallengeCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const respondToAuthChallengeChallenge = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  username: string,\n  session: string,\n  challengeNameType: ChallengeNameType,\n  attributes: Record<string, string>,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: RespondToAuthChallengeCommandInput = {\n    ChallengeName: challengeNameType,\n    ClientId: clientId,\n    Session: session,\n    ChallengeResponses: {\n      USERNAME: username,\n      SECRET_HASH: secretHash,\n\n      ...attributes,\n    },\n  };\n\n  const issueDateTime = new Date().toISOString();\n  const response = await cognitoClient.send(new RespondToAuthChallengeCommand(params));\n\n  // transform the response into your custom format, similar to your refreshToken function\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}

package/lib/esm/logic/cognito/setUserAttributes.js

@@ -13,3 +13,4 @@ export const setUserAttributes = async (userPoolId, region, username, userAttrib
     };
     await cognitoClient.send(new AdminUpdateUserAttributesCommand(params));
 };
+//# sourceMappingURL=setUserAttributes.js.map