@aws-amplify/amplify-category-auth/resources/lambda-function.js

amplify-cli authentication plugin

const response = require('cfn-response');
const {
  CognitoIdentityProviderClient,
  DescribeUserPoolCommand,
  UpdateUserPoolCommand,
} = require('@aws-sdk/client-cognito-identity-provider');

exports.handler = (event, context) => {
  // Don't return promise, response.send() marks context as done internally
  void tryHandleEvent(event, context);
};

async function tryHandleEvent(event, context) {
  const physicalResourceId =
    event.RequestType === 'Update' ? event.PhysicalResourceId : `${event.LogicalResourceId}-${event.ResourceProperties.userpoolId}`;
  try {
    await handleEvent(event);
    response.send(event, context, response.SUCCESS, {}, physicalResourceId);
  } catch (err) {
    console.log(err.stack);
    response.send(event, context, response.FAILED, { err }, physicalResourceId);
  }
}

async function handleEvent(event) {
  const userPoolId = event.ResourceProperties.userpoolId;
  const { lambdaConfig } = event.ResourceProperties;
  const config = {};
  const cognitoClient = new CognitoIdentityProviderClient({});
  const userPoolConfig = await cognitoClient.send(new DescribeUserPoolCommand({ UserPoolId: userPoolId }));
  const userPoolParams = userPoolConfig.UserPool;
  // update userPool params

  const updateUserPoolConfig = {
    UserPoolId: userPoolParams.Id,
    Policies: userPoolParams.Policies,
    SmsVerificationMessage: userPoolParams.SmsVerificationMessage,
    AccountRecoverySetting: userPoolParams.AccountRecoverySetting,
    AdminCreateUserConfig: userPoolParams.AdminCreateUserConfig,
    AutoVerifiedAttributes: userPoolParams.AutoVerifiedAttributes,
    EmailConfiguration: userPoolParams.EmailConfiguration,
    EmailVerificationMessage: userPoolParams.EmailVerificationMessage,
    EmailVerificationSubject: userPoolParams.EmailVerificationSubject,
    VerificationMessageTemplate: userPoolParams.VerificationMessageTemplate,
    SmsAuthenticationMessage: userPoolParams.SmsAuthenticationMessage,
    MfaConfiguration: userPoolParams.MfaConfiguration,
    DeviceConfiguration: userPoolParams.DeviceConfiguration,
    SmsConfiguration: userPoolParams.SmsConfiguration,
    UserPoolTags: userPoolParams.UserPoolTags,
    UserPoolAddOns: userPoolParams.UserPoolAddOns,
  };

  // removing undefined keys
  Object.keys(updateUserPoolConfig).forEach((key) => updateUserPoolConfig[key] === undefined && delete updateUserPoolConfig[key]);

  /* removing UnusedAccountValidityDays as deprecated
    InvalidParameterException: Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDays
    */
  if (updateUserPoolConfig.AdminCreateUserConfig && updateUserPoolConfig.AdminCreateUserConfig.UnusedAccountValidityDays) {
    delete updateUserPoolConfig.AdminCreateUserConfig.UnusedAccountValidityDays;
  }
  lambdaConfig.forEach((lambda) => (config[`${lambda.triggerType}`] = lambda.lambdaFunctionArn));
  if (event.RequestType === 'Delete') {
    updateUserPoolConfig.LambdaConfig = {};
    console.log(`${event.RequestType}:`, JSON.stringify(updateUserPoolConfig));
    const result = await cognitoClient.send(new UpdateUserPoolCommand(updateUserPoolConfig));
    console.log(`delete response data ${JSON.stringify(result)}`);
  } else if (event.RequestType === 'Update' || event.RequestType === 'Create') {
    updateUserPoolConfig.LambdaConfig = config;
    const result = await cognitoClient.send(new UpdateUserPoolCommand(updateUserPoolConfig));
    console.log(`createOrUpdate response data ${JSON.stringify(result)}`);
  }
}