Generated by XState Viz: https://xstate.js.org/viz

machine.js

const challengeStates = {
  initial: "noMFA",
  states: {
    noMFA: {
      on: {
        "": [{ target: "#amplifyAuth.signIn.roleCheck" }],
      },
    },
    mfaSetup: {},
    softwareTokenMFA: {},
    smsMFA: {},
    newPasswordRequired: {},
    customChallenge: {},
  },
};

const signInStates = {
  initial: "signInForm",
  states: {
    signInForm: {
      on: {
        ROUTESIGNUP: "#amplifyAuth.signUp",
        ROUTEFORGOTPASSWORD: "#amplifyAuth.forgotPassword",
        SUBMIT: "signInAPI",
      },
    },
    signInAPI: {
      invoke: {
        src: "authSignIn",
        onDone: {
          target: "checkChallenge",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
    checkChallenge: {
      ...challengeStates,
    },
    roleCheck: {
      on: {
        "": [
          { target: "#amplifyAuth.roleRestricted", cond: "userNotAdmin" },
          { target: "#amplifyAuth.authenticated", cond: "userIsAdmin" },
        ],
      },
    },
  },
};

const signUpStates = {
  initial: "signUpForm",
  states: {
    signUpForm: {
      on: {
        ROUTESIGNIN: "#amplifyAuth.signIn",
        ROUTEFORGOTPASSWORD: "#amplifyAuth.forgotPassword",
        SUBMIT: "signUpAPI",
      },
    },
    signUpAPI: {
      invoke: {
        src: "authSignUp",
        onDone: {
          target: "#amplifyAuth.confirmSignUp",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
  },
};

const confirmSignUpStates = {
  initial: "confirmSignUpForm",
  states: {
    confirmSignUpForm: {
      on: {
        SUBMIT: "confirmSignUpAPI",
      },
    },
    confirmSignUpAPI: {
      invoke: {
        src: "authConfirmSignUp",
        onDone: {
          target: "#amplifyAuth.signIn",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
  },
};

const forgotPasswordStates = {
  initial: "forgotPasswordForm",
  states: {
    forgotPasswordForm: {
      on: {
        ROUTESIGNIN: "#amplifyAuth.signIn",
        SUBMIT: "forgotPasswordAPI",
      },
    },
    forgotPasswordAPI: {
      invoke: {
        src: "authForgotPassword",
        onDone: {
          target: "#amplifyAuth.newPassword",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
  },
};

const newPasswordStates = {
  initial: "setNewPasswordForm",
  states: {
    setNewPasswordForm: {
      on: {
        SUBMIT: "setNewPasswordAPI",
      },
    },
    setNewPasswordAPI: {
      invoke: {
        src: "authSetNewPassword",
        onDone: {
          target: "#amplifyAuth.signIn",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
  },
};

const signOutStates = {
  initial: "signOutAPI",
  states: {
    signOutAPI: {
      invoke: {
        src: "authSignOut",
        onDone: {
          target: "#amplifyAuth.signIn",
          actions: ["setStatus"],
        },
        onError: {
          target: "#amplifyAuth.error",
          actions: ["setError"],
        },
      },
    },
  },
};

const authMachine = Machine(
    {
      id: "amplifyAuth",
      initial: "signIn",
      context: {
        authState: "signIn",
        user: {
          data: {
            isAdmin: true
          }
        },
        error: {},
      },
      states: {
        signUp: {
          ...signUpStates,
        },
        confirmSignUp: {
          ...confirmSignUpStates,
        },
        forgotPassword: {
          ...forgotPasswordStates,
        },
        newPassword: {
          ...newPasswordStates,
        },
        signIn: {
          ...signInStates,
        },
        error: {},
        roleRestricted: {
          on: {
            SIGNOUT: "#amplifyAuth.signOut",
          },
        },
        authenticated: {
          on: {
            SIGNOUT: "#amplifyAuth.signOut",
          },
        },
        signOut: {
          ...signOutStates,
        },
      },
    },
    {
      guards: {
        userNotAdmin: (context) => {
          if (!context.user.data.isAdmin) {
            return true;
          }
        },
        userIsAdmin: (context) => {
          if (context.user.data.isAdmin) {
            return true;
          }
        },
      },
    }
  );