feat(cognito): support for ALLOW_USER_AUTH explicit auth flow

[danielholmes]

Reason for this change

Cognito released some new auth flow features which have made their way into cloudformation. I want to be able to use the new USER_AUTH sign in on a UserPoolClient.

Description of changes

I've added a user option to the AuthFlow struct for UserPoolClient. This naming matches the naming convention for the other settings in AuthFlow so while user is a very generic label, I think it makes sense in the context of this AuthFlow struct. i.e. the current properties are:

adminUserPassword -> ADMIN_USER_PASSWORD_AUTH
custom -> CUSTOM_AUTH
userPassword -> USER_PASSWORD_AUTH
userSrp -> USER_SRP_AUTH

This property then sets the "ALLOW_USER_AUTH" value in the ExplicitAuthFlows of the UserPoolClient.

Description of how you validated changes

I added the setting to both the unit and integration tests which have all auth types enabled.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[GavinZZ]

LGTM, thank you!

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 78.48%. Comparing base (bf77e51) to head (e5b1d18).

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #32273      +/-   ##
==========================================
- Coverage   78.50%   78.48%   -0.02%     
==========================================
  Files         106      106              
  Lines        7201     7201              
  Branches     1321     1321              
==========================================
- Hits         5653     5652       -1     
- Misses       1361     1362       +1     
  Partials      187      187              

Flag	Coverage Δ
suite.unit	78.48% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
packages/aws-cdk	78.48% <ø> (-0.02%)	⬇️

Pull request has been modified.

Pull request has been modified.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: e5b1d18
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.