fl0wo

import {Client} from "stytch/types/lib/client";
const stytch = require("stytch");
const creds = require('../../_secrets/stytch_credentials_TEST.json');

let client:Client;

export const loadStytch = ():Client => {
    if(!client) {
        client = new stytch.Client({
            project_id: creds.id,

fl0wo

export const handler = async (event:any) => {
    // Ge the token from Stytch
    const token = event.queryStringParameters.token;
    const client = loadStytch();
    // Grant JWT
    const response:AuthenticateResponse = await client.oauth.authenticate(token,{
        session_duration_minutes: 60
    });
    const userId = response.user_id;
    const sessionId = getSafeOrThrow(response.session?.session_id,'Session id cannot be null');

fl0wo

export const handler: any = async (event:any) => {
    try {
        const code = event.queryStringParameters!.code;

        const jwtKey = await getParameterValue(
            wrapCodeWithPrefix(code)
        );
        const expiresIn = whenJwtExpiresLocal(jwtKey);

        if (Number.isInteger(expiresIn)) {

fl0wo

import {SSM} from "aws-sdk";

export async function getParameterValue(parameterName: string) {
    const param = await new SSM()
        .getParameter({Name: parameterName,WithDecryption: true})
        .promise();
    const value = param.Parameter?.Value as string;
    if (!value) throw new Error(`Can not find SSM parameter with name ${parameterName}`);
    return value;
}

fl0wo

export const handler = async (event:any) => {
    // Get token from Stytch
    const token = event.queryStringParameters.token;
    // Get instance of client
    const client = loadStytch();

    // Grant jwt
    const response:AuthenticateResponse = await client.oauth.authenticate(token,{
        session_duration_minutes: 60

fl0wo

import {authenticateJwtLocal} from "../loadStytch";

export const handler = async (event:any) => {
    const token = event.authorizationToken;
    const isAuthenticated = await authenticateJwtLocal(token);
    return canContinue(isAuthenticated?'Allow':'Deny');
};

function canContinue(effect: string) {
    return {

fl0wo

    
export const addUserApiGateway = (scope: Construct, options: InfrastructureOptions) => {

    const api = new RestApi(scope, "ApiGatewayTutorial", {
        deployOptions: {
            cacheTtl: Duration.seconds(0),
            throttlingBurstLimit: 1, // can ask JWT max 1 time!
            throttlingRateLimit: 1,
        },
        defaultCorsPreflightOptions: {

fl0wo

    const config:StytchLoginConfig = {
      products: [
        Products.oauth
      ],
      oauthOptions:{
        providers:[
          {
            type: OAuthProviders.Google,
            one_tap:true,
            position:OneTapPositions.embedded

fl0wo

import {AfterViewInit, Component, OnInit, ViewChild} from '@angular/core';
import {environment} from "../../environments/environment";
import {stytchUIClient} from "../../environments/stytchClient";
import {OAuthProviders, Products, StytchUIClient} from "@stytch/vanilla-js";
import {OneTapPositions, StyleConfig, StytchLoginConfig} from "@stytch/core/public";

@Component({
  selector: 'app-stytch-join',
  templateUrl: './stytch-join.component.html',
  styleUrls: ['./stytch-join.component.scss']

fl0wo

import {stytchUIClient} from "../../environments/stytchClient";

@ViewChild('magic_stytch_login')
divLogin:any;

// ...

stytchUIClient.mountLogin({
  elementId: '#' + this.divLogin.nativeElement.id,
  config: config,