fix(api): adminCreateUser defaults status to FORCE_CHANGE_PASSWORD

jagregory · Nov 25, 2021 · 4996aa4 · 4996aa4
1 parent f2f069f
commit 4996aa4
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 7 deletions.
diff --git a/integration-tests/aws-sdk/adminCreateUser.test.ts b/integration-tests/aws-sdk/adminCreateUser.test.ts
@@ -36,7 +36,7 @@ describe(
             Enabled: true,
             UserCreateDate: roundedDate,
             UserLastModifiedDate: roundedDate,
-            UserStatus: "CONFIRMED",
+            UserStatus: "FORCE_CHANGE_PASSWORD",
             Username: "abc",
           },
         });

diff --git a/integration-tests/aws-sdk/listUsers.test.ts b/integration-tests/aws-sdk/listUsers.test.ts
@@ -27,7 +27,7 @@ describe(
             Enabled: true,
             UserCreateDate: createUserResult.User?.UserCreateDate,
             UserLastModifiedDate: createUserResult.User?.UserLastModifiedDate,
-            UserStatus: "CONFIRMED",
+            UserStatus: "FORCE_CHANGE_PASSWORD",
             Username: "abc",
           },
         ],

diff --git a/src/services/userPoolClient.ts b/src/services/userPoolClient.ts
@@ -45,7 +45,11 @@ export interface User {
   UserCreateDate: number;
   UserLastModifiedDate: number;
   Enabled: boolean;
-  UserStatus: "CONFIRMED" | "UNCONFIRMED" | "RESET_REQUIRED";
+  UserStatus:
+    | "CONFIRMED"
+    | "FORCE_CHANGE_PASSWORD"
+    | "RESET_REQUIRED"
+    | "UNCONFIRMED";
   Attributes: AttributeListType;
   MFAOptions?: MFAOptionListType;
 

diff --git a/src/targets/adminCreateUser.test.ts b/src/targets/adminCreateUser.test.ts
@@ -44,7 +44,7 @@ describe("AdminCreateUser target", () => {
       Password: "pwd",
       UserCreateDate: now.getTime(),
       UserLastModifiedDate: now.getTime(),
-      UserStatus: "CONFIRMED", // TODO: this is wrong
+      UserStatus: "FORCE_CHANGE_PASSWORD",
       Username: "user-supplied",
     });
   });

diff --git a/src/targets/adminCreateUser.ts b/src/targets/adminCreateUser.ts
@@ -34,7 +34,7 @@ export const AdminCreateUser = ({
     Password: req.TemporaryPassword,
     Attributes: attributes,
     Enabled: true,
-    UserStatus: "CONFIRMED",
+    UserStatus: "FORCE_CHANGE_PASSWORD",
     ConfirmationCode: undefined,
     UserCreateDate: now.getTime(),
     UserLastModifiedDate: now.getTime(),
@@ -44,7 +44,6 @@ export const AdminCreateUser = ({
   // TODO: should handle existing users
   // TODO: should send a message unless MessageAction=="SUPPRESS"
   // TODO: support MessageAction=="RESEND"
-  // TODO: UserStatus should default to FORCE_CHANGE_PASSWORD
   // TODO: should generate a TemporaryPassword if one isn't set
   // TODO: support ForceAliasCreation
   // TODO: support PreSignIn lambda and ValidationData
@@ -54,7 +53,7 @@ export const AdminCreateUser = ({
       Username: req.Username,
       Attributes: attributes,
       Enabled: true,
-      UserStatus: "CONFIRMED",
+      UserStatus: "FORCE_CHANGE_PASSWORD",
       UserCreateDate: now,
       UserLastModifiedDate: now,
       MFAOptions: undefined,