@nestjs-cognito/core

npm install @nestjs-cognito/core aws-jwt-verify

interface CognitoJwtVerifier {
  verify(token: string): Promise<CognitoJwtPayload>;
}

@InjectCognitoJwtVerifier()
private readonly jwtVerifier: CognitoJwtVerifier

interface JwtRsaVerifier {
  verify(token: string): Promise<any>;
}

interface CognitoJwtExtractor {
  hasAuthenticationInfo(request: any): boolean;
  getAuthorizationToken(request: any): string | null;
}

@InjectCognitoJwtExtractor()
private readonly jwtExtractor: CognitoJwtExtractor

@InjectCognitoIdentityProvider()
private readonly cognito: CognitoIdentityProvider

interface CognitoModuleOptions {
  jwtVerifier?: CognitoJwtVerifierOptions | CognitoJwtVerifierOptions[];
  jwtRsaVerifier?: JwtRsaVerifierOptions | JwtRsaVerifierOptions[];
  jwtExtractor?: CognitoJwtExtractor;
  identityProvider?: CognitoIdentityProviderOptions;
}

interface CognitoJwtVerifierOptions {
  userPoolId: string;
  clientId: string | null;
  tokenUse: 'access' | 'id' | null;
}

interface JwtRsaVerifierOptions {
  issuer: string;
  jwksUri: string;
}

interface CognitoIdentityProviderOptions {
  region: string;
}

interface CognitoJwtPayload {
  sub: string;
  iss: string;
  aud?: string;
  exp: number;
  iat: number;
  token_use?: 'access' | 'id';
  [key: string]: any;
}

interface CognitoIdTokenPayload extends CognitoJwtPayload {
  email?: string;
  email_verified?: boolean;
  'cognito:username': string;
  'cognito:groups'?: string[];
  [key: string]: any;
}

interface CognitoAccessTokenPayload extends CognitoJwtPayload {
  scope: string;
  client_id: string;
  username?: string;
  [key: string]: any;
}