bpt-pack-two/dist/cdk/custom-auth/create-auth-challenge.js

Study Passwordless authentication on aws project

import * as fido2 from "./fido2.js";
import * as smsOtpStepUp from "./sms-otp-stepup.js";
import * as magicLink from "./magic-link.js";
import { logger, UserFacingError } from "./common.js";
export const handler = async (event) => {
    logger.debug(JSON.stringify(event, null, 2));
    try {
        if (!event.request.session || !event.request.session.length) {
            // This is the first time Create Auth Challenge is called
            // Create a dummy challenge, allowing the user to send a challenge response
            // with client metadata, that can be used to to provide auth parameters:
            // - Redirect URL for magic link
            // - [OPTIONAL] Skip creation of new secret sign-in code (if client already has one)
            // - Sign-in method
            logger.info("Client has no session yet, starting one ...");
            await provideAuthParameters(event);
            // If enabled, fido2 challenge is attached to the event always, even if the client might want to use another signInMethod.
            // This is so that client can immediately respond with a FIDO2 signature
            await fido2.addChallengeToEvent(event);
        }
        else {
            const { signInMethod } = event.request.clientMetadata ?? {};
            logger.info(`Client has requested signInMethod: ${signInMethod}`);
            if (signInMethod === "MAGIC_LINK") {
                await magicLink.addChallengeToEvent(event);
            }
            else if (signInMethod === "SMS_OTP_STEPUP") {
                await smsOtpStepUp.addChallengeToEvent(event);
            }
            else {
                throw new Error(`Unrecognized signInMethod: ${signInMethod}`);
            }
        }
        logger.debug(JSON.stringify(event, null, 2));
        return event;
    }
    catch (err) {
        logger.error(err);
        if (err instanceof UserFacingError)
            throw err;
        throw new Error("Internal Server Error");
    }
};
async function provideAuthParameters(event) {
    logger.info("Creating challenge: PROVIDE_AUTH_PARAMETERS");
    event.response.challengeMetadata = "PROVIDE_AUTH_PARAMETERS";
    const parameters = {
        challenge: "PROVIDE_AUTH_PARAMETERS",
    };
    event.response.privateChallengeParameters = parameters;
    event.response.publicChallengeParameters = parameters;
}