Amazon Cognito

import { CognitoIdentityProviderClient, SignUpCommand } from "@aws-sdk/client-cognito-identity-provider"

const client = new CognitoIdentityProviderClient({
  region: process.env.AWS_REGION
})

export async function signUp(email: string, password: string) {
  const command = new SignUpCommand({
    ClientId: process.env.COGNITO_CLIENT_ID,
    Username: email,
    Password: password,
    UserAttributes: [
      { Name: "email", Value: email }
    ]
  })

  const response = await client.send(command)
  return response.UserSub // User ID
}

import { InitiateAuthCommand } from "@aws-sdk/client-cognito-identity-provider"

export async function signIn(email: string, password: string) {
  const command = new InitiateAuthCommand({
    AuthFlow: "USER_PASSWORD_AUTH",
    ClientId: process.env.COGNITO_CLIENT_ID,
    AuthParameters: {
      USERNAME: email,
      PASSWORD: password
    }
  })

  const response = await client.send(command)

  return {
    accessToken: response.AuthenticationResult?.AccessToken,
    idToken: response.AuthenticationResult?.IdToken,
    refreshToken: response.AuthenticationResult?.RefreshToken,
    expiresIn: response.AuthenticationResult?.ExpiresIn
  }
}

import { GetUserCommand } from "@aws-sdk/client-cognito-identity-provider"

export async function verifyToken(accessToken: string) {
  try {
    const command = new GetUserCommand({
      AccessToken: accessToken
    })

    const response = await client.send(command)
    return {
      valid: true,
      userId: response.Username,
      email: response.UserAttributes?.find(a => a.Name === "email")?.Value
    }
  } catch (error) {
    return { valid: false }
  }
}