amazon-cognito-identity-js

import { CognitoUserPool, CognitoUser, AuthenticationDetails } from 'amazon-cognito-identity-js'; const poolData = { UserPoolId: process.env.COGNITO_USER_POOL_ID ?? 'us-east-1_xxxxxxxx', ClientId: process.env.COGNITO_CLIENT_ID ?? 'xxxxxxxxxxxxxxx', }; const userPool = new CognitoUserPool(poolData); async function signUpAndSignIn(username, password, email) { return new Promise((resolve, reject) => { userPool.signUp(username, password, [{ Name: 'email', Value: email }], null, (err, result) => { if (err) { if (err.code === 'UsernameExistsException') { console.log('User already exists, proceeding to sign-in...'); // If user exists, try to sign in (or confirm if not yet confirmed) signIn(username, password).then(resolve).catch(reject); } else { console.error('Signup error:', err.message); reject(err); } return; } const cognitoUser = result.user; console.log('User signed up:', cognitoUser.getUsername()); // Auto-confirm if not using verification codes for this example (in a real app, you'd confirm first) // For this example, we assume auto-confirmation or manual confirmation out-of-band. // A real app would typically require an explicit confirmation step. signIn(username, password).then(resolve).catch(reject); }); }); } async function signIn(username, password) { return new Promise((resolve, reject) => { const authenticationDetails = new AuthenticationDetails({ Username: username, Password: password, }); const cognitoUser = new CognitoUser({ Username: username, Pool: userPool }); cognitoUser.authenticateUser(authenticationDetails, { onSuccess: function (session) { console.log('Authentication successful. Session:', session.getIdToken().getJwtToken()); resolve(session); }, onFailure: function (err) { console.error('Authentication failed:', err.message); reject(err); }, newPasswordRequired: function (userAttributes, requiredAttributes) { // User needs to set a new password, e.g., on first login with temporary password console.log('New password required. User attributes:', userAttributes, 'Required attributes:', requiredAttributes); // In a real application, you would prompt the user for a new password here // and call cognitoUser.completeNewPasswordChallenge(newPassword, userAttributes); reject(new Error('New password required. Implement `newPasswordRequired` handler.')); }, mfaRequired: function () { console.warn('MFA required. Implement `mfaRequired` handler.'); reject(new Error('MFA required. Implement `mfaRequired` handler.')); } }); }); } // Example Usage (ensure environment variables are set or replace placeholders) signUpAndSignIn('testuser' + Date.now(), 'MyStrongPassword1!', 'test' + Date.now() + '@example.com') .then(session => console.log('Final session obtained:', session.isValid())) .catch(error => console.error('Overall flow failed:', error.message));