From 48d86e4479014205e2dbc9f869aca5e38a98c187 Mon Sep 17 00:00:00 2001
From: falsycat <me@falsy.cat>
Date: Sat, 21 Jun 2025 07:42:57 +0900
Subject: [PATCH] add cognito

---
 infra/backend.ts | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/infra/backend.ts b/infra/backend.ts
index 4d61045..38e0dc1 100644
--- a/infra/backend.ts
+++ b/infra/backend.ts
@@ -18,7 +18,7 @@ esbuild.buildSync({
 });
 
 
-// ---- Lambda ----
+// ---- backend lambda ----
 const lambdaRole = new aws.iam.Role(`${prefix}-lambda-role`, {
   tags,
   assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({
@@ -106,3 +106,20 @@ new aws.iam.RolePolicy(`${prefix}-api-role-policy`, {
 });
 
 export const endpoint = pulumi.interpolate`${api.apiEndpoint}`;
+
+
+// ---- cognito ----
+const userPool = new aws.cognito.UserPool(`${prefix}-cognito-userpool`, {
+  tags,
+  autoVerifiedAttributes: ["email"],
+  usernameAttributes: ["email"],
+  passwordPolicy: {
+    minimumLength: 8,
+    requireSymbols: true,
+    requireNumbers: true,
+  },
+});
+new aws.cognito.UserPoolClient(`${prefix}-cognito-userpool-cli`, {
+  userPoolId: userPool.id,
+  generateSecret: false,
+});