feat(cognito): support for ALLOW_USER_AUTH explicit auth flow

[danielholmes]

Reason for this change

Cognito released some new auth flow features which have made their way into cloudformation. I want to be able to use the new USER_AUTH sign in on a UserPoolClient.

Description of changes

I've added a user option to the AuthFlow struct for UserPoolClient. This naming matches the naming convention for the other settings in AuthFlow so while user is a very generic label, I think it makes sense in the context of this AuthFlow struct. i.e. the current properties are:

adminUserPassword -> ADMIN_USER_PASSWORD_AUTH
custom -> CUSTOM_AUTH
userPassword -> USER_PASSWORD_AUTH
userSrp -> USER_SRP_AUTH

This property then sets the "ALLOW_USER_AUTH" value in the ExplicitAuthFlows of the UserPoolClient.

Description of how you validated changes

I added the setting to both the unit and integration tests which have all auth types enabled.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 0c5f94f
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository