Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

4.2.4 (2025-06-09)

Bug Fixes

• add missing aws_iam directive on custom types (#3270) (2d08997)
• remove aws_iam directive incorrectly added to interfaces (#3283) (5b7f4c3)

4.2.3 (2025-04-17)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.2.2 (2025-04-09)

Reverts

• Revert "chore: upgrade to node 20 (#3250)" (#3255) (a2815c7), closes #3250 #3255

4.2.1 (2025-03-06)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.2.0 (2025-02-26)

Features

• dynamic resolve partition in arn (#3178) (3aa98cd)

4.1.12 (2025-02-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.11 (2025-01-30)

Bug Fixes

• gen2: transform directives on fields of supported extended types (#3127) (3aca7b8)

4.1.10 (2025-01-16)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.9 (2024-12-23)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.8 (2024-12-17)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.7 (2024-11-14)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.6 (2024-11-08)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.5 (2024-10-28)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.4 (2024-10-17)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.3 (2024-10-10)

Bug Fixes

• add aws_iam to custom operations when enableIamAuthorization is enabled; fix graphql type utils (#2921) (5cb5a2b)

4.1.2 (2024-10-01)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.1 (2024-09-16)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.1.0 (2024-09-06)

Features

• conversation: add conversation transformer (#2827) (cee6aef)

4.0.1 (2024-08-28)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

4.0.0 (2024-08-20)

• feat!: bump version for v2 transformer packages (7dac35c)

BREAKING CHANGES

• distinguish from LTS version

3.6.5 (2024-08-12)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.6.4 (2024-07-25)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.6.3 (2024-07-15)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.6.2 (2024-07-02)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.6.1 (2024-07-01)

Bug Fixes

• auth to use validateUsingSource in place of auth filter to show error message (#2523) (b7d83f9)

3.6.0 (2024-06-25)

Features

• allow subscriptions to inherit primary model auth rules for relational fields behind a feature flag (#2649) (56a853a)

3.5.5 (2024-06-06)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.5.4 (2024-06-04)

Bug Fixes

• redact relational field in mutation & subscription based on model auth rules (#2536) (f72f40e)

3.5.3 (2024-05-15)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.5.2 (2024-05-10)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.5.1 (2024-05-01)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.5.0 (2024-04-26)

Bug Fixes

• api: handle error on generate ts data schema when no tables with primary key (#2483) (30a333b)
• relational bidirectionality validation and improved error messages (#2482) (568fbc3)
• some API updates that were automerged (1a1f120)

Features

• deprecate iam auth provider and rename it to identityPool (#2320) (#2394) (383985b)
• generic iam authorization (#2385) (550ee80)

3.4.4 (2024-04-16)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.4.3 (2024-04-11)

Bug Fixes

• api: dynamic auth fields use correct data type on related models (#2419) (a3688c2)

3.4.2 (2024-03-28)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.4.1 (2024-03-13)

Bug Fixes

• field auth resolver to use "validateUsingSource" auth util method (#2170) (b344d0d)

3.4.0 (2024-02-28)

Features

• add implicit fields to filter input (#2236) (f7ec601)

3.3.6 (2024-02-05)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.3.5 (2024-01-30)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.3.4 (2024-01-22)

Bug Fixes

• support 'read' operation alias for SQL data sources (#2204) (e3264db)

3.3.3 (2023-12-21)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.3.2 (2023-12-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.3.1 (2023-12-14)

Bug Fixes

• Fix support for @auth on fields with no @model (79e4d83)

3.3.0 (2023-12-06)

Features

• combine heterogeneous data sources (#2109) (fd58bb5)

3.2.3 (2023-11-22)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.2.2 (2023-11-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.2.1 (2023-11-16)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.2.0 (2023-11-15)

Bug Fixes

• api: do not allow auth directive on rds model fields (a1f1ae0)
• api: iam rule correct cognito pool id (183e78b)
• api: iam support for admin roles with auth utils (6169cce)
• Change 'rds' to 'sql' in public-facing symbols (#2069) (ff374dd)
• relational auth cases; preserve auth rule schema edits, added multi-auth e2e tests (#1965) (df085b2)
• Update rds transformers to accommodate ConfiguredAuthProviders change (ae2a451)

Features

• api: rds auth model level rules (d2b0217)
• api: refactor auth transformer to use vtl generator factory pattern (e965d24)
• refersTo supports field name mappings on RDS models (#1865) (ee60011)

3.1.10 (2023-11-02)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.9 (2023-10-21)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.8 (2023-10-12)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.7 (2023-10-05)

Bug Fixes

• iam auth values can be passed as cdk tokens (#1919) (9297fa5)

3.1.6 (2023-10-03)

Bug Fixes

• reference api id via context, not hard-coded logical id name (#1911) (538ddc3)

3.1.5 (2023-10-02)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.4 (2023-09-20)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.3 (2023-09-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.2 (2023-08-30)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

3.1.1 (2023-08-28)

Bug Fixes

• cannot read properties of undefined (#1804) (f68b257)

3.1.0 (2023-08-09)

Bug Fixes

• allow update on operations create, read, update (#1762) (7247ae8)
• fix auth test after merge with internal refactor (333f30e)

Features

• bump major version of transformer packages (2458c84)

2.1.13 (2023-07-21)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.12 (2023-07-17)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.11 (2023-07-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.10 (2023-07-07)

Bug Fixes

• trigger republish of dependencies that failed in https://app.circleci.com/pipelines/github/aws-amplify/amplify-category-api/7981/workflows/e7366f04-6f0a-4ee4-9cc2-1772089e8005/jobs/163571 (f2c7151)

2.1.9 (2023-07-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.8 (2023-06-29)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.7 (2023-06-20)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.6 (2023-06-05)

Bug Fixes

• graphql: renamed subscription should generate auth resolver (bbf3998)

2.1.5 (2023-05-23)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.4 (2023-05-17)

Bug Fixes

• auth: ownerfield as pk in relational models (#1389) (20a38bd)
• auth: ownerfield as sort key field of GSI (10b25c4)
• don't filter group auth if user has no groups (42729d5)
• graphql: add option to disable resolver deduping (30b32e9)

2.1.3 (2023-04-25)

Bug Fixes

• auth: ownerfield as pk in relational models (#1389) (9b636f7)
• don't filter group auth if user has no groups (091590f)

2.1.2 (2023-03-30)

Bug Fixes

• graphql: evaluate group claim - string vs array behavior (e988708)

2.1.1 (2023-03-15)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.0 (2023-03-01)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-beta.6 (2023-02-21)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-beta.5 (2023-02-15)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-beta.4 (2023-02-03)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-beta.3 (2022-12-27)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-beta.2 (2022-12-12)

Bug Fixes

• 🐛 VTL issue when field starts with an underscore (941f225), closes #735

2.1.0-beta.1 (2022-11-30)

Bug Fixes

• 🐛 VTL issue when field starts with an underscore (941f225), closes #735

2.1.0-beta.0 (2022-11-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.0-cdkv2.3 (2022-11-15)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

2.1.0-cdkv2.2 (2022-11-03)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

2.1.0-cdkv2.1 (2022-10-24)

Bug Fixes

• lock CDK v2 version (#923) (2afe40c)

2.1.0-cdkv2.0 (2022-10-24)

Features

• migrate auth, maps-to, relational, default value transformer to CDK v2 (#875) (5c714a9)

1.2.8 (2023-02-27)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.7 (2023-02-15)

Bug Fixes

• explicitly set a flag when owner param in subscriptions is authorized (#1251) (8cf7eae)

1.2.6 (2023-02-10)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.5 (2023-01-26)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.4 (2023-01-12)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.3 (2023-01-12)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.2 (2022-12-13)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.2.1 (2022-12-09)

Bug Fixes

• aggregate fields access for iam auth with admin roles (f1262d3)

1.2.0 (2022-12-03)

Bug Fixes

• 🐛 VTL issue when field starts with an underscore (941f225), closes #735

Features

• 🎸 Added descriptive message when using field-level auth (81c550d), closes #971
• 🎸 Added warning when ownerField similar to schema field (5281be2), closes #957

1.1.4 (2022-11-08)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.1.3 (2022-11-04)

Bug Fixes

• graphql: protect relational fields when fields rules are restrictive (4d3ad19)

1.1.2 (2022-10-26)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.1.1 (2022-10-24)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.1.0 (2022-10-04)

Features

• graphql: subscriptions rtf support (#837) (99caa22)

1.0.4 (2022-09-20)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.0.3 (2022-09-14)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

1.0.2 (2022-08-23)

Reverts

• Revert "Undo change to directive merge that broke tests" (#756) (3da2ce6), closes #756

1.0.1 (2022-08-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.7 (2022-08-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.6 (2022-08-18)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.5 (2022-08-16)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.4 (2022-08-04)

Bug Fixes

• graphql: revert subscriptions server-side filtering (20cffc0)

0.12.3 (2022-07-26)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.2 (2022-07-20)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.1 (2022-07-14)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.12.0 (2022-07-01)

Features

• graphql: add runtime filtering support for subscriptions (#551) (0a24bb0)

0.11.1 (2022-06-23)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.11.0 (2022-06-13)

Bug Fixes

• create owner field resolvers for all operations (#532) (298190d)
• handle return value of set of owners to return user for sub::username identity claim (623b24d)
• use concatenated identity claim for primary key queries (eafc412)

Features

• add error when using an owner field as a sort key field (#517) (201032d)
• graphql-auth-transformer: @auth allow more granular access rights for read (#23) (041fb80)

0.10.0 (2022-06-10)

Features

• amplify-category-api: update descriptions to properly publish (f685bbe)

0.9.4 (2022-06-10)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.9.3 (2022-06-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.9.2 (2022-05-31)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.9.1 (2022-05-02)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.9.0 (2022-04-29)

Features

• add handling of colon-delimited identity claims to query (revert) (#10222) (f5d7620), closes #10189 #10213
• matches identity claim for subscription (revert) (#10277) (baf9908), closes #10199 #10264
• support search with colon delimited claim (#10257) (c3dae2d)
• use sub:username identity claim by default when persisting behind a feature flag (#10196) (947aae6)

0.8.1 (2022-04-27)

8.0.3 (2022-04-25)

Reverts

• Revert "refactor: use a prefix matching for the claim in subscriptions (#10199)" (#10264) (eff77da), closes #10199 #10264

0.8.0 (2022-04-18)

Features

• add handling of colon-delimited identity claims to query (#10189) (d7983f4)

Reverts

• Revert "feat: add handling of colon-delimited identity claims to query (#10189)" (#10213) (9f13064), closes #10189 #10213

0.7.12 (2022-04-11)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.7.11 (2022-04-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.7.10 (2022-03-23)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.7.9 (2022-03-17)

Bug Fixes

• amplify-category-auth: expand @auth directive to explicit set of allowed operations (#9859) (e44ed18)

0.7.8 (2022-03-07)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.7.7 (2022-02-25)

7.6.22 (2022-02-24)

Bug Fixes

• graphql-auth-transformer: fix relational map key schema lookup when using LSI (#9722) (1794cda)
• graphql-auth-transformer: update resolver should allow if update operation is set (#9808) (44a9bea)

0.7.6 (2022-02-15)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.7.5 (2022-02-10)

7.6.19 (2022-02-08)

Bug Fixes

• graphql: allow iam private rule to access update mutation when authenticated by cognito (#9682) (acd995f)

0.7.1 (2022-02-03)

Bug Fixes

• separate field level subscription errors and field level resolver generation (#9671) (657c344)

0.7.0 (2022-01-31)

7.6.14 (2022-01-28)

Features

• [@maps](https://github.com/maps)To directive to enable renaming models while retaining data (#9340) (aedf45d)

0.5.12 (2022-01-27)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.5.11 (2022-01-23)

Bug Fixes

• listX operations with no args where authField is used in primaryKey (#9570) (1496724)

0.5.10 (2022-01-20)

7.6.11 (2022-01-20)

Reverts

• Revert "fix(graphql-auth-transformer): fix key condition expression (#9264)" (#9566) (1d15762), closes #9264 #9566

0.5.9 (2022-01-20)

Bug Fixes

• parse dynamic groups custom claim to list (#9466) (80d692b)

0.5.8 (2022-01-13)

Bug Fixes

• clean up missing and unused GraphQL v2 dependencies (#9486) (a6ca44e)
• dynamic group auth VTL error (#9463) (e64124f)
• graphql: modify fields match logic for hasOne directive when using auth directive (#9459) (a924892)
• use optional field access for subscriptions.level (#9213) (8cbd507)

0.5.7 (2022-01-10)

7.6.7 (2022-01-10)

Bug Fixes

• return field value for admin roles on field resolver fixes issue #9242 (#9275) (dbef299)

0.5.5 (2021-12-21)

Bug Fixes

• graphql-auth-transformer: fix key condition expression (#9264) (5794692)

0.5.4 (2021-12-17)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.5.3 (2021-12-03)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.5.2 (2021-12-01)

Bug Fixes

• graphql-auth-transformer: fix datastore fields auth (#9135) (cb9fdd3)

0.5.1 (2021-11-26)

Bug Fixes

• remove extra $ in vtl template (#9077) (3dc4dc4)

0.5.0 (2021-11-23)

Bug Fixes

• update admin role check to make sure the name is not authRole or unauthRole (#9046) (27fb223)
• use not equals for iam role check (#9048) (352763c)

Features

• override support for api category (#9013) (ae7b001), closes #9001 #8954 #8958 #8960 #8967 #8971 #8976 #8975 #8981 #8983 #8992 #9000 #9002 #9005 #9006 #9007 #9008 #9010 #9011 #9012 #9014 #9015 #9017 #9020 #9024 #9027 #9028 #9029 #9032 #9031 #9035 #9038 #9039

0.4.6 (2021-11-21)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.4.5 (2021-11-20)

Bug Fixes

• update field auth check logic and error message to account for subscription level (#8951) (acfefd4)

0.4.4 (2021-11-19)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.4.3 (2021-11-19)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.4.2 (2021-11-17)

Bug Fixes

• append apiKey if global auth is enabled and its not default auth (#8843) (3aadcde)
• update error message for auth on non null fields (#8863) (bffb4d2)

0.4.1 (2021-11-15)

Note: Version bump only for package @aws-amplify/graphql-auth-transformer

0.2.0 (2021-11-11)

Bug Fixes

• @auth fix relational auth, authv2 e2e with utils and fixes (#8450) (aa320cd)
• @function vNext payload, remove unused code, and update common mapping tempalte function (#8462) (24d0de9)
• add @manytomany join table auth (#8460) (424bbda)
• add field auth on aggregation queries (#8508) (c0fa85a)
• add schema directives for sync operation when conflict resolution is enabled (#8521) (e3299e5)
• allow duplicate auth rules when creating the join type (#8680) (1a0636d)
• auth on getting related model name and searchablevNext e2e (#8455) (8536dd3)
• auth vnext validation fixes (#8551) (2cfe6ce)
• fix null check for implied owner check (#8586) (4a0fda8)
• graphql-model-transformer: override resource logical id to fix v1 to v2 transformer migration (#8597) (e3a2afb)
• searchable fix and migration e2e tests (#8666) (d5f9397)
• update auth vnext validation to use private for oidc (#8606) (8e659a1)

Features

• add admin roles which have admin control over a graphql api (#8601) (4d50df0)
• allow optional idp arg into auth to allow provided auth role or authenticated identity (#8609) (bf843b9)