Skip to content

Instantly share code, notes, and snippets.

@skant09

skant09/resetPassword.js

Last active October 11, 2025 19:49
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save skant09/d0dd30da57c0bc66ea76c9863eecdcea to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save skant09/d0dd30da57c0bc66ea76c9863eecdcea to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. skant09 renamed this gist Oct 10, 2025. 1 changed file with 0 additions and 0 deletions.
    0 gistfile1.txt → resetPassword.js
    View file
    File renamed without changes.
  2. skant09 created this gist Oct 9, 2025.
    70 changes: 70 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,70 @@
    import { CognitoIdentityProviderClient, AdminSetUserPasswordCommand } from "@aws-sdk/client-cognito-identity-provider";

    const REGION = "us-east-1";
    const USER_POOL_ID = "us-east-1_xxxxxx";
    const TEMP_PASSWORD = function(){
    // generate a random password with 8 characters, including at least one uppercase letter, one lowercase letter, one number, and one special character
    const length = 12;
    const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+~`|}{[]:;?><,./-=";
    let password = "";
    for (let i = 0, n = charset.length; i < length - 4; ++i) {
    password += charset.charAt(Math.floor(Math.random() * n));
    }
    password += "ABCDEFGHIJKLMNOPQRSTUVWXYZ".charAt(Math.floor(Math.random() * 26)); // at least one uppercase
    password += "abcdefghijklmnopqrstuvwxyz".charAt(Math.floor(Math.random() * 26)); // at least one lowercase
    password += "0123456789".charAt(Math.floor(Math.random() * 10)); // at least one number
    password += "!@#$%^&*()_+~`|}{[]:;?><,./-=".charAt(Math.floor(Math.random() * 20)); // at least one special character
    return password;
    };
    const CONCURRENCY = 3; // same as xargs -P 5
    const MAX_RETRIES = 3;

    const client = new CognitoIdentityProviderClient({ region: REGION });

    // Read all usernames from file
    const usernames = [
    '[email protected]'
    ]

    // Function to set temporary password for one user
    async function setTempPassword(username, attempt = 1) {
    let password = TEMP_PASSWORD();
    const cmd = new AdminSetUserPasswordCommand({
    UserPoolId: USER_POOL_ID,
    Username: username,
    Password: password,
    Permanent: false, // equivalent to --no-permanent
    });

    try {
    await client.send(cmd);
    console.log(`✅ [${attempt}] Set temporary password ${password} for ${username}`);
    } catch (err) {
    console.error(`❌ [${attempt}] Error for ${username}: ${err.message}`);

    if (attempt < MAX_RETRIES) {
    const delay = 1000 * attempt; // exponential backoff
    console.log(`🔁 Retrying ${username} in ${delay / 1000}s...`);
    await new Promise(res => setTimeout(res, delay));
    return setTempPassword(username, attempt + 1);
    } else {
    console.error(`🚨 Failed after ${MAX_RETRIES} attempts: ${username}`);
    }
    }
    }

    // Run tasks with concurrency limit
    async function run() {
    const queue = [...usernames];
    const workers = Array(CONCURRENCY).fill(null).map(async () => {
    while (queue.length) {
    const username = queue.shift();
    await setTempPassword(username);
    }
    });

    await Promise.all(workers);
    console.log("✅ All done");
    }

    run();