payload-auth-plugin-fix/src/providers/oidc/cognito.ts

Authentication plugin for Payload CMS

import type {
  AccountInfo,
  OIDCProviderConfig,
  ProviderConfig,
} from "../../types.js"

interface CognitoAuthConfig extends ProviderConfig {
  domain: string
  region: string
}

function CognitoAuthProvider(config: CognitoAuthConfig): OIDCProviderConfig {
  const { domain, region, ...restConfig } = config
  return {
    ...restConfig,
    id: "cognito",
    scope: "email openid profile",
    issuer: `https://${domain}/${region}`,
    name: "Congnito",
    algorithm: "oidc",
    profile: (profile): AccountInfo => {
      return {
        sub: profile.sub as string,
        name: profile.name as string,
        email: profile.email as string,
        picture: profile.picture as string,
      }
    },
  }
}

export default CognitoAuthProvider