quidproquo-actionprocessor-awslambda 0.1.9 → 0.1.11

package/lib/commonjs/logic/sesV2/buildRawMimeMessage.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildRawMimeMessage = void 0;
+const CRLF = '\r\n';
+// Header values must never contain CR/LF, or a caller-supplied string could inject extra headers
+const sanitizeHeaderValue = (value) => value.replace(/[\r\n]+/g, ' ').trim();
+// RFC 2047 encoded-word for header text that isn't printable ascii (e.g. subjects with emoji)
+const encodeHeaderText = (value) => {
+    const sanitized = sanitizeHeaderValue(value);
+    if (/^[\x20-\x7e]*$/.test(sanitized)) {
+        return sanitized;
+    }
+    return `=?UTF-8?B?${Buffer.from(sanitized, 'utf8').toString('base64')}?=`;
+};
+// RFC 2045 requires base64 body lines of at most 76 characters
+const wrapBase64 = (base64Data) => {
+    const lines = base64Data.match(/.{1,76}/g) || [];
+    return lines.join(CRLF);
+};
+const buildBodyPart = (contentType, content, boundary) => [
+    `--${boundary}`,
+    `Content-Type: ${contentType}; charset=UTF-8`,
+    'Content-Transfer-Encoding: base64',
+    '',
+    wrapBase64(Buffer.from(content, 'utf8').toString('base64')),
+];
+const buildAttachmentPart = (attachment, boundary) => {
+    const filename = encodeHeaderText(attachment.filename);
+    const contentDisposition = attachment.contentDisposition
+        ? sanitizeHeaderValue(attachment.contentDisposition)
+        : `attachment; filename="${filename}"`;
+    return [
+        `--${boundary}`,
+        `Content-Type: ${sanitizeHeaderValue(attachment.mimetype || 'application/octet-stream')}; name="${filename}"`,
+        'Content-Transfer-Encoding: base64',
+        `Content-Disposition: ${contentDisposition}`,
+        '',
+        wrapBase64(attachment.base64Data),
+    ];
+};
+// Builds an RFC 5322 message: multipart/mixed wrapping a multipart/alternative body plus one
+// part per attachment. Bcc recipients are deliberately never written into the headers; they
+// travel only in the SES Destination so other recipients can't see them. boundarySeed exists
+// so tests get deterministic output.
+const buildRawMimeMessage = (payload, boundarySeed = 'qpq') => {
+    var _a, _b;
+    const mixedBoundary = `----=_${boundarySeed}_mixed`;
+    const alternativeBoundary = `----=_${boundarySeed}_alternative`;
+    const headers = [
+        `From: ${encodeHeaderText(payload.from)}`,
+        `To: ${payload.to.map(encodeHeaderText).join(', ')}`,
+        ...(((_a = payload.cc) === null || _a === void 0 ? void 0 : _a.length) ? [`Cc: ${payload.cc.map(encodeHeaderText).join(', ')}`] : []),
+        ...(((_b = payload.replyTo) === null || _b === void 0 ? void 0 : _b.length) ? [`Reply-To: ${payload.replyTo.map(encodeHeaderText).join(', ')}`] : []),
+        `Subject: ${encodeHeaderText(payload.subject)}`,
+        'MIME-Version: 1.0',
+        `Content-Type: multipart/mixed; boundary="${mixedBoundary}"`,
+    ];
+    const bodyParts = [
+        ...(payload.bodyText ? buildBodyPart('text/plain', payload.bodyText, alternativeBoundary) : []),
+        ...(payload.bodyHtml ? buildBodyPart('text/html', payload.bodyHtml, alternativeBoundary) : []),
+    ];
+    const attachmentParts = (payload.attachments || []).flatMap((attachment) => buildAttachmentPart(attachment, mixedBoundary));
+    const lines = [
+        ...headers,
+        '',
+        `--${mixedBoundary}`,
+        `Content-Type: multipart/alternative; boundary="${alternativeBoundary}"`,
+        '',
+        ...bodyParts,
+        `--${alternativeBoundary}--`,
+        '',
+        ...attachmentParts,
+        `--${mixedBoundary}--`,
+        '',
+    ];
+    return lines.join(CRLF);
+};
+exports.buildRawMimeMessage = buildRawMimeMessage;
+//# sourceMappingURL=buildRawMimeMessage.js.map

package/lib/commonjs/logic/sesV2/buildRawMimeMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildRawMimeMessage.js","sourceRoot":"","sources":["../../../../src/logic/sesV2/buildRawMimeMessage.ts"],"names":[],"mappings":";;;AAGA,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,iGAAiG;AACjG,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAE7F,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAU,EAAE;IACjD,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC5E,CAAC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAU,EAAE;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAEjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,OAAe,EAAE,QAAgB,EAAY,EAAE,CAAC;IAC1F,KAAK,QAAQ,EAAE;IACf,iBAAiB,WAAW,iBAAiB;IAC7C,mCAAmC;IACnC,EAAE;IACF,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;CAC5D,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,UAAyB,EAAE,QAAgB,EAAY,EAAE;IACpF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB;QACtD,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACpD,CAAC,CAAC,yBAAyB,QAAQ,GAAG,CAAC;IAEzC,OAAO;QACL,KAAK,QAAQ,EAAE;QACf,iBAAiB,mBAAmB,CAAC,UAAU,CAAC,QAAQ,IAAI,0BAA0B,CAAC,WAAW,QAAQ,GAAG;QAC7G,mCAAmC;QACnC,wBAAwB,kBAAkB,EAAE;QAC5C,EAAE;QACF,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC,CAAC;AAEF,6FAA6F;AAC7F,4FAA4F;AAC5F,6FAA6F;AAC7F,qCAAqC;AAC9B,MAAM,mBAAmB,GAAG,CAAC,OAAoC,EAAE,eAAuB,KAAK,EAAU,EAAE;;IAChH,MAAM,aAAa,GAAG,SAAS,YAAY,QAAQ,CAAC;IACpD,MAAM,mBAAmB,GAAG,SAAS,YAAY,cAAc,CAAC;IAEhE,MAAM,OAAO,GAAG;QACd,SAAS,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACzC,OAAO,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,GAAG,CAAC,CAAA,MAAA,OAAO,CAAC,EAAE,0CAAE,MAAM,EAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,CAAA,MAAA,OAAO,CAAC,OAAO,0CAAE,MAAM,EAAC,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,YAAY,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QAC/C,mBAAmB;QACnB,4CAA4C,aAAa,GAAG;KAC7D,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IAE5H,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,EAAE;QACF,KAAK,aAAa,EAAE;QACpB,kDAAkD,mBAAmB,GAAG;QACxE,EAAE;QACF,GAAG,SAAS;QACZ,KAAK,mBAAmB,IAAI;QAC5B,EAAE;QACF,GAAG,eAAe;QAClB,KAAK,aAAa,IAAI;QACtB,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AApCW,QAAA,mBAAmB,uBAoC9B","sourcesContent":["import { QPQBinaryData } from 'quidproquo-core';\nimport { EmailSendEmailActionPayload } from 'quidproquo-webserver';\n\nconst CRLF = '\\r\\n';\n\n// Header values must never contain CR/LF, or a caller-supplied string could inject extra headers\nconst sanitizeHeaderValue = (value: string): string => value.replace(/[\\r\\n]+/g, ' ').trim();\n\n// RFC 2047 encoded-word for header text that isn't printable ascii (e.g. subjects with emoji)\nconst encodeHeaderText = (value: string): string => {\n  const sanitized = sanitizeHeaderValue(value);\n\n  if (/^[\\x20-\\x7e]*$/.test(sanitized)) {\n    return sanitized;\n  }\n\n  return `=?UTF-8?B?${Buffer.from(sanitized, 'utf8').toString('base64')}?=`;\n};\n\n// RFC 2045 requires base64 body lines of at most 76 characters\nconst wrapBase64 = (base64Data: string): string => {\n  const lines = base64Data.match(/.{1,76}/g) || [];\n\n  return lines.join(CRLF);\n};\n\nconst buildBodyPart = (contentType: string, content: string, boundary: string): string[] => [\n  `--${boundary}`,\n  `Content-Type: ${contentType}; charset=UTF-8`,\n  'Content-Transfer-Encoding: base64',\n  '',\n  wrapBase64(Buffer.from(content, 'utf8').toString('base64')),\n];\n\nconst buildAttachmentPart = (attachment: QPQBinaryData, boundary: string): string[] => {\n  const filename = encodeHeaderText(attachment.filename);\n  const contentDisposition = attachment.contentDisposition\n    ? sanitizeHeaderValue(attachment.contentDisposition)\n    : `attachment; filename=\"${filename}\"`;\n\n  return [\n    `--${boundary}`,\n    `Content-Type: ${sanitizeHeaderValue(attachment.mimetype || 'application/octet-stream')}; name=\"${filename}\"`,\n    'Content-Transfer-Encoding: base64',\n    `Content-Disposition: ${contentDisposition}`,\n    '',\n    wrapBase64(attachment.base64Data),\n  ];\n};\n\n// Builds an RFC 5322 message: multipart/mixed wrapping a multipart/alternative body plus one\n// part per attachment. Bcc recipients are deliberately never written into the headers; they\n// travel only in the SES Destination so other recipients can't see them. boundarySeed exists\n// so tests get deterministic output.\nexport const buildRawMimeMessage = (payload: EmailSendEmailActionPayload, boundarySeed: string = 'qpq'): string => {\n  const mixedBoundary = `----=_${boundarySeed}_mixed`;\n  const alternativeBoundary = `----=_${boundarySeed}_alternative`;\n\n  const headers = [\n    `From: ${encodeHeaderText(payload.from)}`,\n    `To: ${payload.to.map(encodeHeaderText).join(', ')}`,\n    ...(payload.cc?.length ? [`Cc: ${payload.cc.map(encodeHeaderText).join(', ')}`] : []),\n    ...(payload.replyTo?.length ? [`Reply-To: ${payload.replyTo.map(encodeHeaderText).join(', ')}`] : []),\n    `Subject: ${encodeHeaderText(payload.subject)}`,\n    'MIME-Version: 1.0',\n    `Content-Type: multipart/mixed; boundary=\"${mixedBoundary}\"`,\n  ];\n\n  const bodyParts = [\n    ...(payload.bodyText ? buildBodyPart('text/plain', payload.bodyText, alternativeBoundary) : []),\n    ...(payload.bodyHtml ? buildBodyPart('text/html', payload.bodyHtml, alternativeBoundary) : []),\n  ];\n\n  const attachmentParts = (payload.attachments || []).flatMap((attachment) => buildAttachmentPart(attachment, mixedBoundary));\n\n  const lines = [\n    ...headers,\n    '',\n    `--${mixedBoundary}`,\n    `Content-Type: multipart/alternative; boundary=\"${alternativeBoundary}\"`,\n    '',\n    ...bodyParts,\n    `--${alternativeBoundary}--`,\n    '',\n    ...attachmentParts,\n    `--${mixedBoundary}--`,\n    '',\n  ];\n\n  return lines.join(CRLF);\n};\n"]}

package/lib/commonjs/logic/sesV2/sendEmail.d.ts

@@ -0,0 +1,2 @@
+import { EmailSendEmailActionPayload } from 'quidproquo-webserver';
+export declare const sendEmail: (payload: EmailSendEmailActionPayload, region: string) => Promise<string>;

package/lib/commonjs/logic/sesV2/sendEmail.js

@@ -0,0 +1,48 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendEmail = void 0;
+const client_sesv2_1 = require("@aws-sdk/client-sesv2");
+const createAwsClient_1 = require("../createAwsClient");
+const buildRawMimeMessage_1 = require("./buildRawMimeMessage");
+// SES Simple content can't carry attachments, so those emails go through the raw MIME path.
+// Either way the recipients come from Destination below, which is what keeps bcc addresses
+// out of the message the recipients see.
+const getEmailContent = (payload) => {
+    var _a;
+    if ((_a = payload.attachments) === null || _a === void 0 ? void 0 : _a.length) {
+        return {
+            Raw: { Data: new TextEncoder().encode((0, buildRawMimeMessage_1.buildRawMimeMessage)(payload)) },
+        };
+    }
+    return {
+        Simple: {
+            Subject: { Data: payload.subject, Charset: 'UTF-8' },
+            Body: Object.assign(Object.assign({}, (payload.bodyText ? { Text: { Data: payload.bodyText, Charset: 'UTF-8' } } : {})), (payload.bodyHtml ? { Html: { Data: payload.bodyHtml, Charset: 'UTF-8' } } : {})),
+        },
+    };
+};
+const sendEmail = (payload, region) => __awaiter(void 0, void 0, void 0, function* () {
+    const sesClient = (0, createAwsClient_1.createAwsClient)(client_sesv2_1.SESv2Client, { region });
+    const response = yield sesClient.send(new client_sesv2_1.SendEmailCommand({
+        FromEmailAddress: payload.from,
+        Destination: {
+            ToAddresses: payload.to,
+            CcAddresses: payload.cc,
+            BccAddresses: payload.bcc,
+        },
+        ReplyToAddresses: payload.replyTo,
+        Content: getEmailContent(payload),
+    }));
+    return response.MessageId || '';
+});
+exports.sendEmail = sendEmail;
+//# sourceMappingURL=sendEmail.js.map

package/lib/commonjs/logic/sesV2/sendEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendEmail.js","sourceRoot":"","sources":["../../../../src/logic/sesV2/sendEmail.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,wDAAoF;AAEpF,wDAAqD;AACrD,+DAA4D;AAE5D,4FAA4F;AAC5F,2FAA2F;AAC3F,yCAAyC;AACzC,MAAM,eAAe,GAAG,CAAC,OAAoC,EAAgB,EAAE;;IAC7E,IAAI,MAAA,OAAO,CAAC,WAAW,0CAAE,MAAM,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,yCAAmB,EAAC,OAAO,CAAC,CAAC,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpD,IAAI,kCACC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAChF,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpF;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,SAAS,GAAG,CAAO,OAAoC,EAAE,MAAc,EAAmB,EAAE;IACvG,MAAM,SAAS,GAAG,IAAA,iCAAe,EAAC,0BAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,+BAAgB,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC,IAAI;QAC9B,WAAW,EAAE;YACX,WAAW,EAAE,OAAO,CAAC,EAAE;YACvB,WAAW,EAAE,OAAO,CAAC,EAAE;YACvB,YAAY,EAAE,OAAO,CAAC,GAAG;SAC1B;QACD,gBAAgB,EAAE,OAAO,CAAC,OAAO;QACjC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;KAClC,CAAC,CACH,CAAC;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;AAClC,CAAC,CAAA,CAAC;AAjBW,QAAA,SAAS,aAiBpB","sourcesContent":["import { EmailSendEmailActionPayload } from 'quidproquo-webserver';\n\nimport { EmailContent, SendEmailCommand, SESv2Client } from '@aws-sdk/client-sesv2';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { buildRawMimeMessage } from './buildRawMimeMessage';\n\n// SES Simple content can't carry attachments, so those emails go through the raw MIME path.\n// Either way the recipients come from Destination below, which is what keeps bcc addresses\n// out of the message the recipients see.\nconst getEmailContent = (payload: EmailSendEmailActionPayload): EmailContent => {\n  if (payload.attachments?.length) {\n    return {\n      Raw: { Data: new TextEncoder().encode(buildRawMimeMessage(payload)) },\n    };\n  }\n\n  return {\n    Simple: {\n      Subject: { Data: payload.subject, Charset: 'UTF-8' },\n      Body: {\n        ...(payload.bodyText ? { Text: { Data: payload.bodyText, Charset: 'UTF-8' } } : {}),\n        ...(payload.bodyHtml ? { Html: { Data: payload.bodyHtml, Charset: 'UTF-8' } } : {}),\n      },\n    },\n  };\n};\n\nexport const sendEmail = async (payload: EmailSendEmailActionPayload, region: string): Promise<string> => {\n  const sesClient = createAwsClient(SESv2Client, { region });\n\n  const response = await sesClient.send(\n    new SendEmailCommand({\n      FromEmailAddress: payload.from,\n      Destination: {\n        ToAddresses: payload.to,\n        CcAddresses: payload.cc,\n        BccAddresses: payload.bcc,\n      },\n      ReplyToAddresses: payload.replyTo,\n      Content: getEmailContent(payload),\n    }),\n  );\n\n  return response.MessageId || '';\n};\n"]}

package/lib/esm/getActionProcessor/core/file/getFileGenerateTemporaryUploadSecureUrlActionProcessor.js

@@ -6,13 +6,13 @@ import { resolveStorageDriveBucketName } from './utils';
 // SigV4 presigned URLs cannot expire more than 7 days in the future
 const maxExpirationMs = 7 * 24 * 60 * 60 * 1000;
 const getProcessFileGenerateTemporaryUploadSecureUrl = (qpqConfig) => {
-    return async ({ drive, filepath, expirationMs, contentType, scope }, session) => {
+    return async ({ drive, filepath, expirationMs, contentType, contentDisposition, scope }, session) => {
         if (expirationMs > maxExpirationMs) {
             return actionResultError(FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.ExpirationTooLong, 'Expiration exceeds the 7 day maximum for presigned URLs');
         }
         try {
             const s3BucketName = resolveStorageDriveBucketName(drive, qpqConfig);
-            const url = await generatePresignedUploadUrl(s3BucketName, composeScopedFilePath(scope, filepath), qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), expirationMs, session.correlation, contentType);
+            const url = await generatePresignedUploadUrl(s3BucketName, composeScopedFilePath(scope, filepath), qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), expirationMs, session.correlation, contentType, contentDisposition);
             return actionResult(url);
         }
         catch (error) {

package/lib/esm/getActionProcessor/core/file/getFileGenerateTemporaryUploadSecureUrlActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getFileGenerateTemporaryUploadSecureUrlActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/file/getFileGenerateTemporaryUploadSecureUrlActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAoD,iBAAiB,EAAE,gCAAgC,EAAa,MAAM,iBAAiB,CAAC;AACnJ,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,cAAc,EAEd,iDAAiD,GAClD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAExD,oEAAoE;AACpE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,8CAA8C,GAAG,CAAC,SAAoB,EAAuD,EAAE;IACnI,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE;QAC9E,IAAI,YAAY,GAAG,eAAe,EAAE,CAAC;YACnC,OAAO,iBAAiB,CACtB,iDAAiD,CAAC,iBAAiB,EACnE,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAC1C,YAAY,EACZ,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,EACtC,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAC7D,YAAY,EACZ,OAAO,CAAC,WAAW,EACnB,WAAW,CACZ,CAAC;YAEF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,iDAAiD,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;aAC/H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sDAAsD,GAAgC,KAAK,EACtG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,cAAc,CAAC,gCAAgC,CAAC,EAAE,8CAA8C,CAAC,SAAS,CAAC;CAC7G,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResultError, actionResultErrorFromCaughtError, QPQConfig } from 'quidproquo-core';\nimport {\n  actionResult,\n  composeScopedFilePath,\n  FileActionType,\n  FileGenerateTemporaryUploadSecureUrlActionProcessor,\n  FileGenerateTemporaryUploadSecureUrlErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { generatePresignedUploadUrl } from '../../../logic/s3/generatePresignedUploadUrl';\nimport { resolveStorageDriveBucketName } from './utils';\n\n// SigV4 presigned URLs cannot expire more than 7 days in the future\nconst maxExpirationMs = 7 * 24 * 60 * 60 * 1000;\n\nconst getProcessFileGenerateTemporaryUploadSecureUrl = (qpqConfig: QPQConfig): FileGenerateTemporaryUploadSecureUrlActionProcessor => {\n  return async ({ drive, filepath, expirationMs, contentType, scope }, session) => {\n    if (expirationMs > maxExpirationMs) {\n      return actionResultError(\n        FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.ExpirationTooLong,\n        'Expiration exceeds the 7 day maximum for presigned URLs',\n      );\n    }\n\n    try {\n      const s3BucketName = resolveStorageDriveBucketName(drive, qpqConfig);\n      const url = await generatePresignedUploadUrl(\n        s3BucketName,\n        composeScopedFilePath(scope, filepath),\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n        expirationMs,\n        session.correlation,\n        contentType,\n      );\n\n      return actionResult(url);\n    } catch (error: unknown) {\n      // Name-keyed, not instanceof: under npm link / module federation the\n      // error can come from another copy of quidproquo-core.\n      return actionResultErrorFromCaughtError(error, {\n        InvalidScopeError: (error) => actionResultError(FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.InvalidScope, error.message),\n      });\n    }\n  };\n};\n\nexport const getFileGenerateTemporaryUploadSecureUrlActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [FileActionType.GenerateTemporaryUploadSecureUrl]: getProcessFileGenerateTemporaryUploadSecureUrl(qpqConfig),\n});\n"]}
+{"version":3,"file":"getFileGenerateTemporaryUploadSecureUrlActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/file/getFileGenerateTemporaryUploadSecureUrlActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAoD,iBAAiB,EAAE,gCAAgC,EAAa,MAAM,iBAAiB,CAAC;AACnJ,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,cAAc,EAEd,iDAAiD,GAClD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAExD,oEAAoE;AACpE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,8CAA8C,GAAG,CAAC,SAAoB,EAAuD,EAAE;IACnI,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE;QAClG,IAAI,YAAY,GAAG,eAAe,EAAE,CAAC;YACnC,OAAO,iBAAiB,CACtB,iDAAiD,CAAC,iBAAiB,EACnE,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAC1C,YAAY,EACZ,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,EACtC,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAC7D,YAAY,EACZ,OAAO,CAAC,WAAW,EACnB,WAAW,EACX,kBAAkB,CACnB,CAAC;YAEF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,iDAAiD,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;aAC/H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sDAAsD,GAAgC,KAAK,EACtG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,cAAc,CAAC,gCAAgC,CAAC,EAAE,8CAA8C,CAAC,SAAS,CAAC;CAC7G,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResultError, actionResultErrorFromCaughtError, QPQConfig } from 'quidproquo-core';\nimport {\n  actionResult,\n  composeScopedFilePath,\n  FileActionType,\n  FileGenerateTemporaryUploadSecureUrlActionProcessor,\n  FileGenerateTemporaryUploadSecureUrlErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { generatePresignedUploadUrl } from '../../../logic/s3/generatePresignedUploadUrl';\nimport { resolveStorageDriveBucketName } from './utils';\n\n// SigV4 presigned URLs cannot expire more than 7 days in the future\nconst maxExpirationMs = 7 * 24 * 60 * 60 * 1000;\n\nconst getProcessFileGenerateTemporaryUploadSecureUrl = (qpqConfig: QPQConfig): FileGenerateTemporaryUploadSecureUrlActionProcessor => {\n  return async ({ drive, filepath, expirationMs, contentType, contentDisposition, scope }, session) => {\n    if (expirationMs > maxExpirationMs) {\n      return actionResultError(\n        FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.ExpirationTooLong,\n        'Expiration exceeds the 7 day maximum for presigned URLs',\n      );\n    }\n\n    try {\n      const s3BucketName = resolveStorageDriveBucketName(drive, qpqConfig);\n      const url = await generatePresignedUploadUrl(\n        s3BucketName,\n        composeScopedFilePath(scope, filepath),\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n        expirationMs,\n        session.correlation,\n        contentType,\n        contentDisposition,\n      );\n\n      return actionResult(url);\n    } catch (error: unknown) {\n      // Name-keyed, not instanceof: under npm link / module federation the\n      // error can come from another copy of quidproquo-core.\n      return actionResultErrorFromCaughtError(error, {\n        InvalidScopeError: (error) => actionResultError(FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.InvalidScope, error.message),\n      });\n    }\n  };\n};\n\nexport const getFileGenerateTemporaryUploadSecureUrlActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [FileActionType.GenerateTemporaryUploadSecureUrl]: getProcessFileGenerateTemporaryUploadSecureUrl(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getUserDirectoryRevokeRefreshTokenActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.js

@@ -0,0 +1,26 @@
+import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectoryRevokeRefreshTokenErrorTypeEnum, } from 'quidproquo-core';
+import { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
+import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
+import { revokeRefreshToken } from '../../../logic/cognito/revokeRefreshToken';
+const getProcessRevokeRefreshToken = (qpqConfig) => {
+    return async ({ userDirectoryName, refreshToken }) => {
+        const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);
+        const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);
+        try {
+            await revokeRefreshToken(userPoolId, userPoolClientId, region, refreshToken);
+            return actionResult(void 0);
+        }
+        catch (error) {
+            return actionResultErrorFromCaughtError(error, {
+                NotAuthorizedException: () => actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or already revoked'),
+                TooManyRequestsException: () => actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
+    };
+};
+export const getUserDirectoryRevokeRefreshTokenActionProcessor = async (qpqConfig) => ({
+    [UserDirectoryActionType.RevokeRefreshToken]: getProcessRevokeRefreshToken(qpqConfig),
+});
+//# sourceMappingURL=getUserDirectoryRevokeRefreshTokenActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserDirectoryRevokeRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRevokeRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,4CAA4C,GAC7C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC5G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAE7E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,4CAA4C,CAAC,YAAY,EAAE,6CAA6C,CAAC;gBAC7H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,4CAA4C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC7H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iDAAiD,GAAgC,KAAK,EACjG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;CACtF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRevokeRefreshTokenActionProcessor,\n  UserDirectoryRevokeRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { revokeRefreshToken } from '../../../logic/cognito/revokeRefreshToken';\n\nconst getProcessRevokeRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRevokeRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      await revokeRefreshToken(userPoolId, userPoolClientId, region, refreshToken);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or already revoked'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRevokeRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRevokeRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RevokeRefreshToken]: getProcessRevokeRefreshToken(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getUserDirectorySignOutUserActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.js

@@ -0,0 +1,22 @@
+import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, UserDirectoryActionType, UserDirectorySignOutUserErrorTypeEnum, } from 'quidproquo-core';
+import { globalSignOut } from '../../../logic/cognito/globalSignOut';
+const getProcessSignOutUser = (qpqConfig) => {
+    return async ({ accessToken }) => {
+        const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            await globalSignOut(accessToken, region);
+            return actionResult(void 0);
+        }
+        catch (error) {
+            return actionResultErrorFromCaughtError(error, {
+                NotAuthorizedException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),
+                TooManyRequestsException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
+    };
+};
+export const getUserDirectorySignOutUserActionProcessor = async (qpqConfig) => ({
+    [UserDirectoryActionType.SignOutUser]: getProcessSignOutUser(qpqConfig),
+});
+//# sourceMappingURL=getUserDirectorySignOutUserActionProcessor.js.map

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserDirectorySignOutUserActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySignOutUserActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,qCAAqC,GACtC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC9F,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAEzC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,YAAY,EAAE,wCAAwC,CAAC;gBAC7I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAgC,KAAK,EAC1F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACxE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySignOutUserActionProcessor,\n  UserDirectorySignOutUserErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { globalSignOut } from '../../../logic/cognito/globalSignOut';\n\nconst getProcessSignOutUser = (qpqConfig: QPQConfig): UserDirectorySignOutUserActionProcessor => {\n  return async ({ accessToken }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      await globalSignOut(accessToken, region);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () => actionResultError(UserDirectorySignOutUserErrorTypeEnum.Unauthorized, 'Access token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySignOutUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySignOutUserActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SignOutUser]: getProcessSignOutUser(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/index.js

@@ -14,9 +14,11 @@ import { getUserDirectoryReadAccessTokenActionProcessor } from './getUserDirecto
 import { getUserDirectoryRefreshTokenActionProcessor } from './getUserDirectoryRefreshTokenActionProcessor';
 import { getUserDirectoryRequestEmailVerificationActionProcessor } from './getUserDirectoryRequestEmailVerificationActionProcessor';
 import { getUserDirectoryRespondToAuthChallengeActionProcessor } from './getUserDirectoryRespondToAuthChallengeActionProcessor';
+import { getUserDirectoryRevokeRefreshTokenActionProcessor } from './getUserDirectoryRevokeRefreshTokenActionProcessor';
 import { getUserDirectorySetAccessTokenActionProcessor } from './getUserDirectorySetAccessTokenActionProcessor';
 import { getUserDirectorySetPasswordActionProcessor } from './getUserDirectorySetPasswordActionProcessor';
 import { getUserDirectorySetUserAttributesActionProcessor } from './getUserDirectorySetUserAttributesActionProcessor';
+import { getUserDirectorySignOutUserActionProcessor } from './getUserDirectorySignOutUserActionProcessor';
 export const getUserDirectoryActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
     ...(await getUserDirectoryAssociateSoftwareTokenActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectoryAuthenticateUserActionProcessor(qpqConfig, dynamicModuleLoader)),
@@ -32,10 +34,12 @@ export const getUserDirectoryActionProcessor = async (qpqConfig, dynamicModuleLo
     ...(await getUserDirectoryGetUsersByAttributeActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectoryReadAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectoryRefreshTokenActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getUserDirectoryRevokeRefreshTokenActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectoryRequestEmailVerificationActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectoryRespondToAuthChallengeActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectorySetAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectorySetPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getUserDirectorySetUserAttributesActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getUserDirectorySignOutUserActionProcessor(qpqConfig, dynamicModuleLoader)),
 });
 //# sourceMappingURL=index.js.map

package/lib/esm/getActionProcessor/core/userDirectory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qDAAqD,EAAE,MAAM,yDAAyD,CAAC;AAChI,OAAO,EAAE,+CAA+C,EAAE,MAAM,mDAAmD,CAAC;AACpH,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AACpI,OAAO,EAAE,oDAAoD,EAAE,MAAM,wDAAwD,CAAC;AAC9H,OAAO,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AACxG,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,wDAAwD,EAAE,MAAM,4DAA4D,CAAC;AACtI,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,EAAE,kDAAkD,EAAE,MAAM,sDAAsD,CAAC;AAC1H,OAAO,EAAE,8CAA8C,EAAE,MAAM,kDAAkD,CAAC;AAClH,OAAO,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AAC5G,OAAO,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AACpI,OAAO,EAAE,qDAAqD,EAAE,MAAM,yDAAyD,CAAC;AAChI,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AAEtH,MAAM,CAAC,MAAM,+BAA+B,GAAgC,KAAK,EAC/E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,qDAAqD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,+CAA+C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1F,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,uDAAuD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClG,GAAG,CAAC,MAAM,oDAAoD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/F,GAAG,CAAC,MAAM,yCAAyC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,wDAAwD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnG,GAAG,CAAC,MAAM,uCAAuC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,MAAM,kDAAkD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC7F,GAAG,CAAC,MAAM,8CAA8C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzF,GAAG,CAAC,MAAM,2CAA2C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtF,GAAG,CAAC,MAAM,uDAAuD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClG,GAAG,CAAC,MAAM,qDAAqD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,0CAA0C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CAC5F,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getUserDirectoryAssociateSoftwareTokenActionProcessor } from './getUserDirectoryAssociateSoftwareTokenActionProcessor';\nimport { getUserDirectoryAuthenticateUserActionProcessor } from './getUserDirectoryAuthenticateUserActionProcessor';\nimport { getUserDirectoryChangePasswordActionProcessor } from './getUserDirectoryChangePasswordActionProcessor';\nimport { getUserDirectoryConfirmEmailVerificationActionProcessor } from './getUserDirectoryConfirmEmailVerificationActionProcessor';\nimport { getUserDirectoryConfirmForgotPasswordActionProcessor } from './getUserDirectoryConfirmForgotPasswordActionProcessor';\nimport { getUserDirectoryCreateUserActionProcessor } from './getUserDirectoryCreateUserActionProcessor';\nimport { getUserDirectoryDecodeAccessTokenActionProcessor } from './getUserDirectoryDecodeAccessTokenActionProcessor';\nimport { getUserDirectoryForgotPasswordActionProcessor } from './getUserDirectoryForgotPasswordActionProcessor';\nimport { getUserDirectoryGetUserAttributesActionProcessor } from './getUserDirectoryGetUserAttributesActionProcessor';\nimport { getUserDirectoryGetUserAttributesByUserIdActionProcessor } from './getUserDirectoryGetUserAttributesByUserIdActionProcessor';\nimport { getUserDirectoryGetUsersActionProcessor } from './getUserDirectoryGetUsersActionProcessor';\nimport { getUserDirectoryGetUsersByAttributeActionProcessor } from './getUserDirectoryGetUsersByAttributeActionProcessor';\nimport { getUserDirectoryReadAccessTokenActionProcessor } from './getUserDirectoryReadAccessTokenActionProcessor';\nimport { getUserDirectoryRefreshTokenActionProcessor } from './getUserDirectoryRefreshTokenActionProcessor';\nimport { getUserDirectoryRequestEmailVerificationActionProcessor } from './getUserDirectoryRequestEmailVerificationActionProcessor';\nimport { getUserDirectoryRespondToAuthChallengeActionProcessor } from './getUserDirectoryRespondToAuthChallengeActionProcessor';\nimport { getUserDirectorySetAccessTokenActionProcessor } from './getUserDirectorySetAccessTokenActionProcessor';\nimport { getUserDirectorySetPasswordActionProcessor } from './getUserDirectorySetPasswordActionProcessor';\nimport { getUserDirectorySetUserAttributesActionProcessor } from './getUserDirectorySetUserAttributesActionProcessor';\n\nexport const getUserDirectoryActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getUserDirectoryAssociateSoftwareTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryAuthenticateUserActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryChangePasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryConfirmEmailVerificationActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryConfirmForgotPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryCreateUserActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryDecodeAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryForgotPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUserAttributesActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUserAttributesByUserIdActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUsersActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUsersByAttributeActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryReadAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRefreshTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRequestEmailVerificationActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRespondToAuthChallengeActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetUserAttributesActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qDAAqD,EAAE,MAAM,yDAAyD,CAAC;AAChI,OAAO,EAAE,+CAA+C,EAAE,MAAM,mDAAmD,CAAC;AACpH,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AACpI,OAAO,EAAE,oDAAoD,EAAE,MAAM,wDAAwD,CAAC;AAC9H,OAAO,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AACxG,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,wDAAwD,EAAE,MAAM,4DAA4D,CAAC;AACtI,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,EAAE,kDAAkD,EAAE,MAAM,sDAAsD,CAAC;AAC1H,OAAO,EAAE,8CAA8C,EAAE,MAAM,kDAAkD,CAAC;AAClH,OAAO,EAAE,2CAA2C,EAAE,MAAM,+CAA+C,CAAC;AAC5G,OAAO,EAAE,uDAAuD,EAAE,MAAM,2DAA2D,CAAC;AACpI,OAAO,EAAE,qDAAqD,EAAE,MAAM,yDAAyD,CAAC;AAChI,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AACxH,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,MAAM,CAAC,MAAM,+BAA+B,GAAgC,KAAK,EAC/E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,qDAAqD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,+CAA+C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1F,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,uDAAuD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClG,GAAG,CAAC,MAAM,oDAAoD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/F,GAAG,CAAC,MAAM,yCAAyC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,wDAAwD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnG,GAAG,CAAC,MAAM,uCAAuC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,MAAM,kDAAkD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC7F,GAAG,CAAC,MAAM,8CAA8C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzF,GAAG,CAAC,MAAM,2CAA2C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtF,GAAG,CAAC,MAAM,iDAAiD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5F,GAAG,CAAC,MAAM,uDAAuD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClG,GAAG,CAAC,MAAM,qDAAqD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,6CAA6C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,0CAA0C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,0CAA0C,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACtF,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getUserDirectoryAssociateSoftwareTokenActionProcessor } from './getUserDirectoryAssociateSoftwareTokenActionProcessor';\nimport { getUserDirectoryAuthenticateUserActionProcessor } from './getUserDirectoryAuthenticateUserActionProcessor';\nimport { getUserDirectoryChangePasswordActionProcessor } from './getUserDirectoryChangePasswordActionProcessor';\nimport { getUserDirectoryConfirmEmailVerificationActionProcessor } from './getUserDirectoryConfirmEmailVerificationActionProcessor';\nimport { getUserDirectoryConfirmForgotPasswordActionProcessor } from './getUserDirectoryConfirmForgotPasswordActionProcessor';\nimport { getUserDirectoryCreateUserActionProcessor } from './getUserDirectoryCreateUserActionProcessor';\nimport { getUserDirectoryDecodeAccessTokenActionProcessor } from './getUserDirectoryDecodeAccessTokenActionProcessor';\nimport { getUserDirectoryForgotPasswordActionProcessor } from './getUserDirectoryForgotPasswordActionProcessor';\nimport { getUserDirectoryGetUserAttributesActionProcessor } from './getUserDirectoryGetUserAttributesActionProcessor';\nimport { getUserDirectoryGetUserAttributesByUserIdActionProcessor } from './getUserDirectoryGetUserAttributesByUserIdActionProcessor';\nimport { getUserDirectoryGetUsersActionProcessor } from './getUserDirectoryGetUsersActionProcessor';\nimport { getUserDirectoryGetUsersByAttributeActionProcessor } from './getUserDirectoryGetUsersByAttributeActionProcessor';\nimport { getUserDirectoryReadAccessTokenActionProcessor } from './getUserDirectoryReadAccessTokenActionProcessor';\nimport { getUserDirectoryRefreshTokenActionProcessor } from './getUserDirectoryRefreshTokenActionProcessor';\nimport { getUserDirectoryRequestEmailVerificationActionProcessor } from './getUserDirectoryRequestEmailVerificationActionProcessor';\nimport { getUserDirectoryRespondToAuthChallengeActionProcessor } from './getUserDirectoryRespondToAuthChallengeActionProcessor';\nimport { getUserDirectoryRevokeRefreshTokenActionProcessor } from './getUserDirectoryRevokeRefreshTokenActionProcessor';\nimport { getUserDirectorySetAccessTokenActionProcessor } from './getUserDirectorySetAccessTokenActionProcessor';\nimport { getUserDirectorySetPasswordActionProcessor } from './getUserDirectorySetPasswordActionProcessor';\nimport { getUserDirectorySetUserAttributesActionProcessor } from './getUserDirectorySetUserAttributesActionProcessor';\nimport { getUserDirectorySignOutUserActionProcessor } from './getUserDirectorySignOutUserActionProcessor';\n\nexport const getUserDirectoryActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getUserDirectoryAssociateSoftwareTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryAuthenticateUserActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryChangePasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryConfirmEmailVerificationActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryConfirmForgotPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryCreateUserActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryDecodeAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryForgotPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUserAttributesActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUserAttributesByUserIdActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUsersActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryGetUsersByAttributeActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryReadAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRefreshTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRevokeRefreshTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRequestEmailVerificationActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectoryRespondToAuthChallengeActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetAccessTokenActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetPasswordActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySetUserAttributesActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getUserDirectorySignOutUserActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailSendEmailActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js

@@ -0,0 +1,28 @@
+import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, } from 'quidproquo-core';
+import { EmailActionType, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';
+import { sendEmail } from '../../../logic/sesV2/sendEmail';
+const getProcessSendEmail = (qpqConfig) => {
+    return async (payload) => {
+        const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            const messageId = await sendEmail(payload, region);
+            return actionResult(messageId);
+        }
+        catch (error) {
+            return actionResultErrorFromCaughtError(error, {
+                MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),
+                MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),
+                AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),
+                SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),
+                TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),
+                LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),
+                BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),
+            });
+        }
+    };
+};
+export const getEmailSendEmailActionProcessor = async (qpqConfig) => ({
+    [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),
+});
+//# sourceMappingURL=getEmailSendEmailActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEmailSendEmailActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,GAEjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAiC,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAiC,EAAE;IAClF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBACzG,kCAAkC,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;gBACxI,yBAAyB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;gBACnI,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,EAAE,eAAe,CAAC;gBACzG,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,wBAAwB,CAAC;gBACpH,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,UAAU,EAAE,uBAAuB,CAAC;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAC1I,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n} from 'quidproquo-core';\nimport { EmailActionType, EmailSendEmailActionProcessor, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';\n\nimport { sendEmail } from '../../../logic/sesV2/sendEmail';\n\nconst getProcessSendEmail = (qpqConfig: QPQConfig): EmailSendEmailActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const messageId = await sendEmail(payload, region);\n\n      return actionResult(messageId);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),\n        MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),\n        AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),\n        SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),\n        TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),\n        LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),\n        BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),\n      });\n    }\n  };\n};\n\nexport const getEmailSendEmailActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js

@@ -0,0 +1,11 @@
+import { actionResult } from 'quidproquo-core';
+import { EmailActionType } from 'quidproquo-webserver';
+// Deliberately a no-op: the action's meaning is its log entry, which the admin
+// action search folds into the email's entity via the messageId link key.
+const getProcessSetDeliveryStatus = () => {
+    return async () => actionResult(undefined);
+};
+export const getEmailSetDeliveryStatusActionProcessor = async (qpqConfig) => ({
+    [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),
+});
+//# sourceMappingURL=getEmailSetDeliveryStatusActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEmailSetDeliveryStatusActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,YAAY,EAAa,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAyC,MAAM,sBAAsB,CAAC;AAE9F,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,2BAA2B,GAAG,GAA0C,EAAE;IAC9E,OAAO,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAClJ,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE;CACnE,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, actionResult, QPQConfig } from 'quidproquo-core';\nimport { EmailActionType, EmailSetDeliveryStatusActionProcessor } from 'quidproquo-webserver';\n\n// Deliberately a no-op: the action's meaning is its log entry, which the admin\n// action search folds into the email's entity via the messageId link key.\nconst getProcessSetDeliveryStatus = (): EmailSetDeliveryStatusActionProcessor => {\n  return async () => actionResult(undefined);\n};\n\nexport const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/email/index.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/index.js

@@ -0,0 +1,7 @@
+import { getEmailSendEmailActionProcessor } from './getEmailSendEmailActionProcessor';
+import { getEmailSetDeliveryStatusActionProcessor } from './getEmailSetDeliveryStatusActionProcessor';
+export const getEmailActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
+    ...(await getEmailSendEmailActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getEmailSetDeliveryStatusActionProcessor(qpqConfig, dynamicModuleLoader)),
+});
+//# sourceMappingURL=index.js.map

package/lib/esm/getActionProcessor/webserver/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAEtG,MAAM,CAAC,MAAM,uBAAuB,GAAgC,KAAK,EACvE,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,gCAAgC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3E,GAAG,CAAC,MAAM,wCAAwC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getEmailSendEmailActionProcessor } from './getEmailSendEmailActionProcessor';\nimport { getEmailSetDeliveryStatusActionProcessor } from './getEmailSetDeliveryStatusActionProcessor';\n\nexport const getEmailActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getEmailSendEmailActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getEmailSetDeliveryStatusActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/index.d.ts

@@ -1,3 +1,4 @@
+export * from './email';
 export * from './serviceFunction';
 export * from './webEntry';
 export * from './websocket';

package/lib/esm/getActionProcessor/webserver/index.js

@@ -1,10 +1,13 @@
+import { getEmailActionProcessor } from './email';
 import { getServiceFunctionActionProcessor } from './serviceFunction';
 import { getWebEntryActionProcessor } from './webEntry';
 import { getWebsocketActionProcessor } from './websocket';
+export * from './email';
 export * from './serviceFunction';
 export * from './webEntry';
 export * from './websocket';
 export const getWebserverActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
+    ...(await getEmailActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),

package/lib/esm/getActionProcessor/webserver/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/getActionProcessor/webserver/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAI5B,MAAM,CAAC,MAAM,2BAA2B,GAAgC,KAAK,EAC3E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,iCAAiC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5E,GAAG,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACvE,CAAC,CAAC","sourcesContent":["import { getServiceFunctionActionProcessor } from './serviceFunction';\nimport { getWebEntryActionProcessor } from './webEntry';\nimport { getWebsocketActionProcessor } from './websocket';\n\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n\nimport { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nexport const getWebserverActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/getActionProcessor/webserver/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAI5B,MAAM,CAAC,MAAM,2BAA2B,GAAgC,KAAK,EAC3E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClE,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,iCAAiC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5E,GAAG,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACvE,CAAC,CAAC","sourcesContent":["import { getEmailActionProcessor } from './email';\nimport { getServiceFunctionActionProcessor } from './serviceFunction';\nimport { getWebEntryActionProcessor } from './webEntry';\nimport { getWebsocketActionProcessor } from './websocket';\n\nexport * from './email';\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n\nimport { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nexport const getWebserverActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getEmailActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/logic/cognito/globalSignOut.d.ts

@@ -0,0 +1 @@
+export declare const globalSignOut: (accessToken: string, region: string) => Promise<void>;

package/lib/esm/logic/cognito/globalSignOut.js

@@ -0,0 +1,15 @@
+import { CognitoIdentityProviderClient, GlobalSignOutCommand } from '@aws-sdk/client-cognito-identity-provider';
+import { createAwsClient } from '../createAwsClient';
+// Revokes EVERY refresh token issued to the user who owns this access token. Authorized by
+// the access token itself (no IAM needed, like ChangePassword). Access tokens already minted
+// stay valid until they expire (stateless JWTs), so keep the access-token validity short.
+export const globalSignOut = async (accessToken, region) => {
+    const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {
+        region,
+    });
+    const params = {
+        AccessToken: accessToken,
+    };
+    await cognitoClient.send(new GlobalSignOutCommand(params));
+};
+//# sourceMappingURL=globalSignOut.js.map

package/lib/esm/logic/cognito/globalSignOut.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"globalSignOut.js","sourceRoot":"","sources":["../../../../src/logic/cognito/globalSignOut.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAA6B,MAAM,2CAA2C,CAAC;AAE3I,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,WAAmB,EAAE,MAAc,EAAiB,EAAE;IACxF,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAA8B;QACxC,WAAW,EAAE,WAAW;KACzB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC","sourcesContent":["import { CognitoIdentityProviderClient, GlobalSignOutCommand, GlobalSignOutCommandInput } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// Revokes EVERY refresh token issued to the user who owns this access token. Authorized by\n// the access token itself (no IAM needed, like ChangePassword). Access tokens already minted\n// stay valid until they expire (stateless JWTs), so keep the access-token validity short.\nexport const globalSignOut = async (accessToken: string, region: string): Promise<void> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: GlobalSignOutCommandInput = {\n    AccessToken: accessToken,\n  };\n\n  await cognitoClient.send(new GlobalSignOutCommand(params));\n};\n"]}

package/lib/esm/logic/cognito/index.d.ts

@@ -1,2 +1,4 @@
 export * from './decodeAccessToken';
 export * from './decodeValidJwt';
+export * from './globalSignOut';
+export * from './revokeRefreshToken';

package/lib/esm/logic/cognito/index.js

@@ -1,3 +1,5 @@
 export * from './decodeAccessToken';
 export * from './decodeValidJwt';
+export * from './globalSignOut';
+export * from './revokeRefreshToken';
 //# sourceMappingURL=index.js.map

package/lib/esm/logic/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/cognito/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './decodeAccessToken';\nexport * from './decodeValidJwt';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/cognito/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC","sourcesContent":["export * from './decodeAccessToken';\nexport * from './decodeValidJwt';\nexport * from './globalSignOut';\nexport * from './revokeRefreshToken';\n"]}

package/lib/esm/logic/cognito/refreshToken.js

@@ -21,6 +21,15 @@ export const refreshToken = async (userPoolId, clientId, region, username, refre
     // Time we issued the request
     const issueDateTime = new Date().toISOString();
     const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));
-    return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);
+    const authResponse = cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);
+    // Cognito's REFRESH_TOKEN_AUTH flow does NOT return a refresh token — the existing one stays
+    // valid and is reused — so AuthenticationResult.RefreshToken is undefined here. Carry the
+    // caller's refresh token forward so the client keeps a usable session; without this it's
+    // dropped after the first refresh and the session can never refresh again. (If refresh-token
+    // rotation is ever enabled, Cognito DOES return a new one — then we keep that instead.)
+    if (authResponse.authenticationInfo && !authResponse.authenticationInfo.refreshToken) {
+        authResponse.authenticationInfo.refreshToken = refreshToken;
+    }
+    return authResponse;
 };
 //# sourceMappingURL=refreshToken.js.map

package/lib/esm/logic/cognito/refreshToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"refreshToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/refreshToken.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EAExB,YAAY,EACZ,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uDAAuD,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,YAAoB,EACe,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,YAAY,CAAC,kBAAkB;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,OAAO,uDAAuD,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const refreshToken = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  username: string,\n  refreshToken: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: AuthFlowType.REFRESH_TOKEN_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      REFRESH_TOKEN: refreshToken,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  // Time we issued the request\n  const issueDateTime = new Date().toISOString();\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}
+{"version":3,"file":"refreshToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/refreshToken.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EAExB,YAAY,EACZ,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uDAAuD,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,YAAoB,EACe,EAAE;IACrC,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,YAAY,CAAC,kBAAkB;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,MAAM,YAAY,GAAG,uDAAuD,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEtG,6FAA6F;IAC7F,0FAA0F;IAC1F,yFAAyF;IACzF,6FAA6F;IAC7F,wFAAwF;IACxF,IAAI,YAAY,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC;QACrF,YAAY,CAAC,kBAAkB,CAAC,YAAY,GAAG,YAAY,CAAC;IAC9D,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\nexport const refreshToken = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  username: string,\n  refreshToken: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: AuthFlowType.REFRESH_TOKEN_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      REFRESH_TOKEN: refreshToken,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  // Time we issued the request\n  const issueDateTime = new Date().toISOString();\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  const authResponse = cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n\n  // Cognito's REFRESH_TOKEN_AUTH flow does NOT return a refresh token — the existing one stays\n  // valid and is reused — so AuthenticationResult.RefreshToken is undefined here. Carry the\n  // caller's refresh token forward so the client keeps a usable session; without this it's\n  // dropped after the first refresh and the session can never refresh again. (If refresh-token\n  // rotation is ever enabled, Cognito DOES return a new one — then we keep that instead.)\n  if (authResponse.authenticationInfo && !authResponse.authenticationInfo.refreshToken) {\n    authResponse.authenticationInfo.refreshToken = refreshToken;\n  }\n\n  return authResponse;\n};\n"]}

package/lib/esm/logic/cognito/revokeRefreshToken.d.ts

@@ -0,0 +1 @@
+export declare const revokeRefreshToken: (userPoolId: string, clientId: string, region: string, refreshToken: string) => Promise<void>;

package/lib/esm/logic/cognito/revokeRefreshToken.js

@@ -0,0 +1,20 @@
+import { CognitoIdentityProviderClient, RevokeTokenCommand } from '@aws-sdk/client-cognito-identity-provider';
+import { createAwsClient } from '../createAwsClient';
+import { getUserPoolClientSecret } from './getUserPoolClientSecret';
+// Revokes a single refresh token (and its access-token lineage) via Cognito RevokeToken.
+// The app client has a secret (same one the refresh flow uses), so it must be supplied.
+// Requires token revocation to be enabled on the app client (the CDK default) — a disabled
+// client surfaces as UnsupportedOperationException/UnsupportedTokenTypeException.
+export const revokeRefreshToken = async (userPoolId, clientId, region, refreshToken) => {
+    const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {
+        region,
+    });
+    const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);
+    const params = {
+        Token: refreshToken,
+        ClientId: clientId,
+        ClientSecret: clientSecret,
+    };
+    await cognitoClient.send(new RevokeTokenCommand(params));
+};
+//# sourceMappingURL=revokeRefreshToken.js.map

package/lib/esm/logic/cognito/revokeRefreshToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revokeRefreshToken.js","sourceRoot":"","sources":["../../../../src/logic/cognito/revokeRefreshToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,kBAAkB,EAA2B,MAAM,2CAA2C,CAAC;AAEvI,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,yFAAyF;AACzF,wFAAwF;AACxF,2FAA2F;AAC3F,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,MAAc,EAAE,YAAoB,EAAiB,EAAE;IACpI,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjF,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,QAAQ;QAClB,YAAY,EAAE,YAAY;KAC3B,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC","sourcesContent":["import { CognitoIdentityProviderClient, RevokeTokenCommand, RevokeTokenCommandInput } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\n// Revokes a single refresh token (and its access-token lineage) via Cognito RevokeToken.\n// The app client has a secret (same one the refresh flow uses), so it must be supplied.\n// Requires token revocation to be enabled on the app client (the CDK default) — a disabled\n// client surfaces as UnsupportedOperationException/UnsupportedTokenTypeException.\nexport const revokeRefreshToken = async (userPoolId: string, clientId: string, region: string, refreshToken: string): Promise<void> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n\n  const params: RevokeTokenCommandInput = {\n    Token: refreshToken,\n    ClientId: clientId,\n    ClientSecret: clientSecret,\n  };\n\n  await cognitoClient.send(new RevokeTokenCommand(params));\n};\n"]}

package/lib/esm/logic/s3/generatePresignedUploadUrl.d.ts

@@ -1 +1 @@
-export declare const generatePresignedUploadUrl: (bucketName: string, objectKey: string, region: string, expirationMs: number, correlationId?: string, contentType?: string) => Promise<string>;
+export declare const generatePresignedUploadUrl: (bucketName: string, objectKey: string, region: string, expirationMs: number, correlationId?: string, contentType?: string, contentDisposition?: string) => Promise<string>;