LAWS-3696: adding new cognito user client to maat api

Signed-off-by: Fani Foteva <[email protected]>
ministryofjustice · Apr 2, 2024 · cea2bf1 · cea2bf1
1 parent 0b4f63f
commit cea2bf1
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 1 deletion.
diff --git a/terraform/environments/maat/api-cognito.tf b/terraform/environments/maat/api-cognito.tf
@@ -223,3 +223,17 @@ resource "aws_cognito_user_pool_client" "maat_api_cognito_pool_client_maatos" {
   explicit_auth_flows                  = ["ALLOW_REFRESH_TOKEN_AUTH"]
 }
 
+resource "aws_cognito_user_pool_client" "maat_api_cognito_pool_client_cccd" {
+  depends_on = [aws_cognito_resource_server.maat_api_cognito_user_pool_server]
+
+  name                                 = "Claim for Crown Court Defence"
+  user_pool_id                         = aws_cognito_user_pool.maat_api_cognito_user_pool.id
+  allowed_oauth_flows_user_pool_client = true
+  generate_secret                      = true
+  supported_identity_providers         = ["COGNITO"]
+  allowed_oauth_flows                  = ["client_credentials"]
+  allowed_oauth_scopes                 = ["${local.application_name}-cd-api/${local.application_data.accounts[local.environment].maat_api_api_scope}"]
+  prevent_user_existence_errors        = "ENABLED"
+  explicit_auth_flows                  = ["ALLOW_REFRESH_TOKEN_AUTH"]
+}
+
diff --git a/terraform/environments/maat/api-gw.tf b/terraform/environments/maat/api-gw.tf
@@ -86,7 +86,8 @@ resource "aws_apigatewayv2_authorizer" "maat_api_authorizer" {
       aws_cognito_user_pool_client.maat_api_cognito_pool_client_ce.id,
       aws_cognito_user_pool_client.maat_api_cognito_pool_client_chs.id,
       aws_cognito_user_pool_client.maat_api_cognito_pool_client_maatos.id,
-      aws_cognito_user_pool_client.maat_api_cognito_pool_client_cvs.id
+      aws_cognito_user_pool_client.maat_api_cognito_pool_client_cvs.id,
+      aws_cognito_user_pool_client.maat_api_cognito_pool_client_cccd.id
     ]
     issuer = "https://${aws_cognito_user_pool.maat_api_cognito_user_pool.endpoint}"
   }