check featurePlan

aws · Dec 5, 2024 · 0d5449e · 0d5449e
1 parent 09dba49
commit 0d5449e
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 2 deletions.
diff --git a/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts b/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts
@@ -1362,7 +1362,9 @@ export class UserPool extends UserPoolBase {
       return undefined;
     }
 
-    // TODO: validate whether the feature plan is not Lite
+    if (props.featurePlan === FeaturePlan.LITE) {
+      throw new Error('To enable passwordless sign-in, set `featurePlan` to `FeaturePlan.ESSENTIALS` or `FeaturePlan.PLUS`.');
+    }
 
     const allowedFirstAuthFactors = ['PASSWORD'];
     if (props.allowedFirstAuthFactors.emailOtp) {

diff --git a/packages/aws-cdk-lib/aws-cognito/test/user-pool.test.ts b/packages/aws-cdk-lib/aws-cognito/test/user-pool.test.ts
@@ -2128,7 +2128,18 @@ describe('User Pool', () => {
     });
   });
 
-  // TODO: test('allowFirstAuthFactors throws when the feature plan is Lite')
+  test('allowFirstAuthFactors throws when the feature plan is Lite', () => {
+    // GIVEN
+    const stack = new Stack();
+
+    // WHEN
+    expect(() => {
+      new UserPool(stack, 'Pool', {
+        allowedFirstAuthFactors: { emailOtp: true },
+        featurePlan: FeaturePlan.LITE,
+      });
+    }).toThrow('To enable passwordless sign-in, set `featurePlan` to `FeaturePlan.ESSENTIALS` or `FeaturePlan.PLUS`.');
+  });
 
   test('passkeyRelyingPartyId is configured', () => {
     // GIVEN