fix: auth_time resolution in generated tokens

Merge remote-tracking branch 'antego/master'
michaelruocco · Jul 24, 2021 · f300df4 · f300df4
2 parents 5f9b915 + 604bc94
commit f300df4
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/src/services/tokens.ts b/src/services/tokens.ts
@@ -21,7 +21,7 @@ export function generateTokens(
   userPoolId: string
 ) {
   const eventId = uuid.v4();
-  const authTime = new Date().getTime();
+  const authTime = Math.floor(new Date().getTime() / 1000);
 
   return {
     AccessToken: jwt.sign(

diff --git a/src/targets/initiateAuth.test.ts b/src/targets/initiateAuth.test.ts
@@ -379,7 +379,7 @@ describe("InitiateAuth target", () => {
               username: "0000-0000",
               event_id: expect.stringMatching(UUID),
               scope: "aws.cognito.signin.user.admin", // TODO: scopes
-              auth_time: now.getTime(),
+              auth_time: Math.floor(now.getTime() / 1000),
               jti: expect.stringMatching(UUID),
             });
             expect(
@@ -405,7 +405,7 @@ describe("InitiateAuth target", () => {
               "cognito:username": "0000-0000",
               email_verified: true,
               event_id: expect.stringMatching(UUID),
-              auth_time: now.getTime(),
+              auth_time: Math.floor(now.getTime() / 1000),
               email: "[email protected]",
             });
             expect(
@@ -461,7 +461,7 @@ describe("InitiateAuth target", () => {
             username: "0000-0000",
             event_id: expect.stringMatching(UUID),
             scope: "aws.cognito.signin.user.admin", // TODO: scopes
-            auth_time: now.getTime(),
+            auth_time: Math.floor(now.getTime() / 1000),
             jti: expect.stringMatching(UUID),
           });
           expect(
@@ -483,7 +483,7 @@ describe("InitiateAuth target", () => {
             "cognito:username": "0000-0000",
             email_verified: true,
             event_id: expect.stringMatching(UUID),
-            auth_time: now.getTime(),
+            auth_time: Math.floor(now.getTime() / 1000),
             email: "[email protected]",
           });
           expect(

diff --git a/src/targets/respondToAuthChallenge.test.ts b/src/targets/respondToAuthChallenge.test.ts
@@ -98,7 +98,7 @@ describe("RespondToAuthChallenge target", () => {
         username: "0000-0000",
         event_id: expect.stringMatching(UUID),
         scope: "aws.cognito.signin.user.admin", // TODO: scopes
-        auth_time: now.getTime(),
+        auth_time: Math.floor(now.getTime() / 1000),
         jti: expect.stringMatching(UUID),
       });
       expect(
@@ -118,7 +118,7 @@ describe("RespondToAuthChallenge target", () => {
         "cognito:username": "0000-0000",
         email_verified: true,
         event_id: expect.stringMatching(UUID),
-        auth_time: now.getTime(),
+        auth_time: Math.floor(now.getTime() / 1000),
         email: "[email protected]",
       });
       expect(