Revert "Bump pan-domain-node to 1.2.0"

cdk/lib/__snapshots__/gudocs.test.ts.snap

@@ -1375,11 +1375,6 @@ exports[`The GuDocs stack matches the snapshot 1`] = `
               "Effect": "Allow",
               "Resource": "arn:aws:s3:::permissions-cache/TEST/*",
             },
-            {
-              "Action": "s3:GetObject",
-              "Effect": "Allow",
-              "Resource": "arn:aws:s3:::pan-domain-auth-settings/*",
-            },
             {
               "Action": [
                 "dynamodb:BatchGetItem",

cdk/lib/gudocs.ts

@@ -85,11 +85,6 @@ export class GuDocs extends GuStack {
 				`arn:aws:s3:::permissions-cache/${this.stage}/*`,
 			],
 		})
-
-		const pandaS3BucketPolcy = new PolicyStatement({
-			actions: ['s3:GetObject'],
-			resources: [`arn:aws:s3:::pan-domain-auth-settings/*`],
-		})
 
 		const sharedParametersPolicy = new PolicyStatement({
 			actions: [
@@ -111,7 +106,6 @@ export class GuDocs extends GuStack {
 		serverlessExpressLambda.addToRolePolicy(s3BucketPolicy)
 		serverlessExpressLambda.addToRolePolicy(sharedParametersPolicy)
 		serverlessExpressLambda.addToRolePolicy(permissionsBucketPolicy)
-		serverlessExpressLambda.addToRolePolicy(pandaS3BucketPolcy)
 
 		const gateway = new GuApiGatewayWithLambdaByPath(this, {
 			app: "testing",

package.json

@@ -31,7 +31,7 @@
 		"@aws-sdk/credential-providers": "^3.621.0",
 		"@aws-sdk/lib-dynamodb": "^3.621.0",
 		"@codegenie/serverless-express": "^4.14.1",
-		"@guardian/pan-domain-node": "^1.2.0",
+		"@guardian/pan-domain-node": "^0.4.2",
 		"archieml": "^0.5.0",
 		"express": "^4.20.0",
 		"googleapis": "^131.0.0",

src/panDomainAuth.ts

@@ -1,27 +1,26 @@
 import {
+    AuthenticationStatus,
     guardianValidation,
     PanDomainAuthentication,
   } from "@guardian/pan-domain-node";
-import { standardAwsConfig } from "./awsIntegration";
-import { AWS_REGION, pandaPublicConfigFilename, pandaSettingsBucketName } from "./constants";
+  import { AWS_REGION, pandaPublicConfigFilename, pandaSettingsBucketName } from "./constants";
 
   const panda = new PanDomainAuthentication(
     "gutoolsAuth-assym", // cookie name
     AWS_REGION, // AWS region
     pandaSettingsBucketName, // Settings bucket
     pandaPublicConfigFilename, // Settings files
-    guardianValidation,
-    standardAwsConfig.credentials,
+    guardianValidation
   );
 
   export const getVerifiedUserEmail = async (
     cookieHeader: string | undefined
   ): Promise<void | string> => {
     if (typeof cookieHeader === "string") {
-      const result = await panda.verify(cookieHeader);
+      const { status, user } = await panda.verify(cookieHeader);
 
-      if (result.success) {
-        return result.user.email;
+      if (status === AuthenticationStatus.AUTHORISED && user !== undefined) {
+        return user.email;
       }
     }
   };