cognito-adapter.py

class CognitoSession:
    def __init__(self, origin: Origin) -> None:
        assert origin
        self.origin = origin

        # Public ids.  Client id is specific to the CLI.
        user_pool_id = os.environ.get("NEXTSTRAIN_COGNITO_USER_POOL_ID") \
                    or client_config(origin)["aws_cognito_user_pool_id"]

        client_id = os.environ.get("NEXTSTRAIN_COGNITO_CLI_CLIENT_ID") \
                 or client_config(origin)["client_id"]

        assert user_pool_id
        assert client_id

        self._session = cognito.Session(user_pool_id, client_id)

    def authenticate_with_password(self, username: str, password: str) -> None:
        self._session.authenticate(username, password)

    def authenticate_with_browser(self) -> None:
        raise NotImplementedError

    def verify_tokens(self, *, id_token: str, access_token: str, refresh_token: str) -> None:
        self._session.verify_tokens(
            id_token = id_token
            access_token = access_token
            refresh_token = refresh_token)

    def renew_tokens(self, *, refresh_token: str) -> None:
        self._session.renew_tokens(refresh_token = refresh_token)

    @property
    def id_token(self) -> Optional[str]:
        return self._session.id_token

    @property
    def id_claims(self) -> Optional[Mapping[str, Any]]:
        return self._session.id_claims

    @property
    def access_token(self) -> Optional[str]:
        return self._session.access_token

    @property
    def refresh_token(self) -> Optional[str]:
        return self._session.refresh_token