3ev/feature/734 cognito ammends

[PaulB12]

Requested Change 1 - Two new config vars: cognito.endpoint & cognito.scheme

This PR wishes to add two new config variables called:
'endpoint' => config('cognito.endpoint'),
'scheme' => config('cognito.scheme')

The reason for this requested change is that we wish to unit test without having to use a live AWS cognito pool, instead we are able to use a local docker container that mocks AWS cognito pool however it'll require changing the endpoint.

This change does not break backwards compatability.

Requested Change 2 - Refactor of refreshToken

It seems that the refreshToken trait relies on fetching the user via a access token being set in the Auth header or session, however an accessToken can be expired but a refreshToken still valid.

Instead this refactor allows the passing in of a $user model to fetch the sub Id, it will default back to the original way if not set.

In addition the refreshToken wasn't being invalidated after being used, the token is now invalidated.

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[amitdhongde]

Hi @PaulB12 , Thank you for the PR. I shall surely review the changes and merge.

For the Refresh Token, Are you suggesting the change in TokenGaurd? Calling a refresh token requires an authenticated endpoint, and without an Access Token, calling the refresh endpoint does not make sense however, the use case you mentioned is valid for Web Sessions only.