aws-cognito-srp-client

import Srp from 'aws-cognito-srp-client'; import { CognitoIdentityServiceProvider } from '@aws-sdk/client-cognito-identity-service-provider'; const userPoolId = 'us-east-1_XXXXX'; // Replace with your Cognito User Pool ID const clientId = 'YYYYYYYYYYYYYYYYYYYYYYYYY'; // Replace with your Cognito App Client ID const username = 'testuser'; // The user's username const password = 'StrongPassword123!'; // The user's password const cognitoClient = new CognitoIdentityServiceProvider({ region: 'us-east-1' // Replace with your AWS Region }); async function authenticateUser() { const srp = new Srp(userPoolId); const srpA = srp.getA(); console.log('Step 1: Generated SRP_A'); // Step 2: Initiate Auth with Cognito const initiateAuthResponse = await cognitoClient.initiateAuth({ AuthFlow: 'USER_SRP_AUTH', AuthParameters: { USERNAME: username, SRP_A: srpA }, ClientId: clientId }); console.log('Step 2: Initiate Auth response received'); const challengeParameters = initiateAuthResponse.ChallengeParameters; if (!challengeParameters) { throw new Error('No challenge parameters received.'); } const srpB = challengeParameters.SRP_B; const salt = challengeParameters.SALT; const secretBlock = challengeParameters.SECRET_BLOCK; // Step 3: Calculate signature and timestamp const { signature, timestamp } = srp.getSignature( username, srpB, salt, secretBlock, password ); console.log('Step 3: Calculated signature and timestamp'); // Step 4: Respond to Auth Challenge const respondToChallengeResponse = await cognitoClient.respondToAuthChallenge({ ChallengeName: 'PASSWORD_VERIFIER', ChallengeResponses: { USERNAME: username, PASSWORD_CLAIM_SECRET_BLOCK: secretBlock, PASSWORD_CLAIM_SIGNATURE: signature, TIMESTAMP: timestamp }, ClientId: clientId, Session: initiateAuthResponse.Session // Pass the session token }); console.log('Authentication successful! Token:', respondToChallengeResponse.AuthenticationResult?.AccessToken); return respondToChallengeResponse.AuthenticationResult; } authenticateUser().catch(console.error);