feat(user-migration): add sub attribute during user migration

src/services/triggers/userMigration.test.ts

@@ -91,6 +91,10 @@ describe("UserMigration trigger", () => {
         Name: "email",
         Value: "[email protected]",
       });
+      expect(user.Attributes).toContainEqual({
+        Name: "sub",
+        Value: expect.stringMatching(UUID),
+      });
       expect(user.UserStatus).toEqual("CONFIRMED");
     });
 
@@ -119,6 +123,10 @@ describe("UserMigration trigger", () => {
       expect(mockLambda.invoke).toBeCalled();
       expect(user).not.toBeNull();
       expect(user.Username).toEqual("thisuser");
+      expect(user.Attributes).toContainEqual({
+        Name: "sub",
+        Value: "thisuser",
+      });
     });
 
     it("sets user to RESET_REQUIRED if finalUserStatus is RESET_REQUIRED in response", async () => {
@@ -138,6 +146,10 @@ describe("UserMigration trigger", () => {
 
       expect(user).not.toBeNull();
       expect(user.UserStatus).toEqual("RESET_REQUIRED");
+      expect(user.Attributes).toContainEqual({
+        Name: "sub",
+        Value: expect.stringMatching(UUID),
+      });
     });
   });
 });

src/services/triggers/userMigration.ts

@@ -86,13 +86,16 @@ export const UserMigration =
     }
 
     const now = clock.get();
+    const userId = result.userAttributes?.username || uuid.v4();
+    const attributes = result.userAttributes || {};
+
     const user: User = {
-      Attributes: attributesFromRecord(result.userAttributes ?? {}),
+      Attributes: attributesFromRecord({ ...attributes, sub: userId }),
       Enabled: true,
       Password: password,
       UserCreateDate: now,
       UserLastModifiedDate: now,
-      Username: result.userAttributes?.username || uuid.v4(),
+      Username: userId,
       UserStatus: result.finalUserStatus ?? "CONFIRMED",
       RefreshTokens: [],
     };