aws-sdk-core 3.193.0 → 3.195.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +22 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-core/lru_cache.rb +75 -0
- data/lib/aws-sdk-core/query/ec2_param_builder.rb +5 -7
- data/lib/aws-sdk-core.rb +1 -0
- data/lib/aws-sdk-sso/client.rb +1 -1
- data/lib/aws-sdk-sso.rb +1 -1
- data/lib/aws-sdk-ssooidc/client.rb +51 -3
- data/lib/aws-sdk-ssooidc/client_api.rb +22 -0
- data/lib/aws-sdk-ssooidc/errors.rb +21 -0
- data/lib/aws-sdk-ssooidc/types.rb +77 -9
- data/lib/aws-sdk-ssooidc.rb +1 -1
- data/lib/aws-sdk-sts/client.rb +1 -1
- data/lib/aws-sdk-sts.rb +1 -1
- data/lib/seahorse/client/net_http/connection_pool.rb +1 -5
- metadata +3 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 07ca704aa5e596fda347d9dbb417feffe910acc20f185a6d8ada67b9f3befe07
|
4
|
+
data.tar.gz: 52ddd836d9c20f50ad240339748acdb74e9e2c1fd89ac24206ede3a7c411928c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: de5d0578d67375d1dd0e42fab0d99e1e17278274c00bb8c745c76e30e5dbf85f44a98f82be5209075735b9889180fbdbc970e46aea42a8b8efe95a5c539a6dd7
|
7
|
+
data.tar.gz: 3f34aff014b7de1e8fe7127e102beec7eecfdc2f69f41fc11ba02e0cff1ebd34a9f8220c4a45d2ed96dc5e29122b8c6e75237528ed3a132da37730a05436211d
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,28 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
3.195.0 (2024-05-10)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
|
8
|
+
|
9
|
+
* Feature - Updated request parameters for PKCE support.
|
10
|
+
|
11
|
+
3.194.2 (2024-05-07)
|
12
|
+
------------------
|
13
|
+
|
14
|
+
* Issue - Fix issue where `ConnectionPool` size iteration would prevent a new key from being added to the pool.
|
15
|
+
|
16
|
+
3.194.1 (2024-05-03)
|
17
|
+
------------------
|
18
|
+
|
19
|
+
* Issue - Update EC2 protocol to not serialize empty lists.
|
20
|
+
|
21
|
+
3.194.0 (2024-04-30)
|
22
|
+
------------------
|
23
|
+
|
24
|
+
* Feature - Add an API private cache for S3 Express and Access Grants.
|
25
|
+
|
4
26
|
3.193.0 (2024-04-25)
|
5
27
|
------------------
|
6
28
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
3.
|
1
|
+
3.195.0
|
@@ -0,0 +1,75 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
module Aws
|
4
|
+
# @api private
|
5
|
+
# A simple thread safe LRU cache
|
6
|
+
class LRUCache
|
7
|
+
# @param [Hash] options
|
8
|
+
# @option options [Integer] :max_entries (100) Maximum number of entries
|
9
|
+
# @option options [Integer] :expiration (nil) Expiration time in seconds
|
10
|
+
def initialize(options = {})
|
11
|
+
@max_entries = options[:max_entries] || 100
|
12
|
+
@expiration = options[:expiration]
|
13
|
+
@entries = {}
|
14
|
+
@mutex = Mutex.new
|
15
|
+
end
|
16
|
+
|
17
|
+
# @param [String] key
|
18
|
+
# @return [Object]
|
19
|
+
def [](key)
|
20
|
+
@mutex.synchronize do
|
21
|
+
value = @entries[key]
|
22
|
+
if value
|
23
|
+
@entries.delete(key)
|
24
|
+
@entries[key] = value unless value.expired?
|
25
|
+
end
|
26
|
+
@entries[key]&.value
|
27
|
+
end
|
28
|
+
end
|
29
|
+
|
30
|
+
# @param [String] key
|
31
|
+
# @param [Object] value
|
32
|
+
def []=(key, value)
|
33
|
+
@mutex.synchronize do
|
34
|
+
@entries.shift unless @entries.size < @max_entries
|
35
|
+
# delete old value if exists
|
36
|
+
@entries.delete(key)
|
37
|
+
@entries[key] = Entry.new(value: value, expiration: @expiration)
|
38
|
+
@entries[key].value
|
39
|
+
end
|
40
|
+
end
|
41
|
+
|
42
|
+
# @param [String] key
|
43
|
+
# @return [Boolean]
|
44
|
+
def key?(key)
|
45
|
+
@mutex.synchronize do
|
46
|
+
@entries.delete(key) if @entries.key?(key) && @entries[key].expired?
|
47
|
+
@entries.key?(key)
|
48
|
+
end
|
49
|
+
end
|
50
|
+
|
51
|
+
def clear
|
52
|
+
@mutex.synchronize do
|
53
|
+
@entries.clear
|
54
|
+
end
|
55
|
+
end
|
56
|
+
|
57
|
+
# @api private
|
58
|
+
class Entry
|
59
|
+
def initialize(options = {})
|
60
|
+
@value = options[:value]
|
61
|
+
@expiration = options[:expiration]
|
62
|
+
@created_time = Time.now
|
63
|
+
end
|
64
|
+
|
65
|
+
# @return [Object]
|
66
|
+
attr_reader :value
|
67
|
+
|
68
|
+
def expired?
|
69
|
+
return false unless @expiration
|
70
|
+
|
71
|
+
Time.now - @created_time > @expiration
|
72
|
+
end
|
73
|
+
end
|
74
|
+
end
|
75
|
+
end
|
@@ -31,13 +31,11 @@ module Aws
|
|
31
31
|
end
|
32
32
|
|
33
33
|
def list(ref, values, prefix)
|
34
|
-
if values.empty?
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
format(member_ref, value, "#{prefix}.#{n+1}")
|
40
|
-
end
|
34
|
+
return if values.empty?
|
35
|
+
|
36
|
+
member_ref = ref.shape.member
|
37
|
+
values.each.with_index do |value, n|
|
38
|
+
format(member_ref, value, "#{prefix}.#{n + 1}")
|
41
39
|
end
|
42
40
|
end
|
43
41
|
|
data/lib/aws-sdk-core.rb
CHANGED
@@ -96,6 +96,7 @@ require_relative 'aws-sdk-core/client_side_monitoring/publisher'
|
|
96
96
|
require_relative 'aws-sdk-core/arn'
|
97
97
|
require_relative 'aws-sdk-core/arn_parser'
|
98
98
|
require_relative 'aws-sdk-core/ec2_metadata'
|
99
|
+
require_relative 'aws-sdk-core/lru_cache'
|
99
100
|
|
100
101
|
# dynamic endpoints
|
101
102
|
require_relative 'aws-sdk-core/endpoints'
|
data/lib/aws-sdk-sso/client.rb
CHANGED
data/lib/aws-sdk-sso.rb
CHANGED
@@ -471,6 +471,11 @@ module Aws::SSOOIDC
|
|
471
471
|
# This value specifies the location of the client or application that
|
472
472
|
# has registered to receive the authorization code.
|
473
473
|
#
|
474
|
+
# @option params [String] :code_verifier
|
475
|
+
# Used only when calling this API for the Authorization Code grant type.
|
476
|
+
# This value is generated by the client and presented to validate the
|
477
|
+
# original code challenge value the client passed at authorization time.
|
478
|
+
#
|
474
479
|
# @return [Types::CreateTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
475
480
|
#
|
476
481
|
# * {Types::CreateTokenResponse#access_token #access_token} => String
|
@@ -528,6 +533,7 @@ module Aws::SSOOIDC
|
|
528
533
|
# refresh_token: "RefreshToken",
|
529
534
|
# scope: ["Scope"],
|
530
535
|
# redirect_uri: "URI",
|
536
|
+
# code_verifier: "CodeVerifier",
|
531
537
|
# })
|
532
538
|
#
|
533
539
|
# @example Response structure
|
@@ -549,8 +555,9 @@ module Aws::SSOOIDC
|
|
549
555
|
|
550
556
|
# Creates and returns access and refresh tokens for clients and
|
551
557
|
# applications that are authenticated using IAM entities. The access
|
552
|
-
# token can be used to fetch short-term credentials for the assigned
|
553
|
-
# accounts or to access application APIs using
|
558
|
+
# token can be used to fetch short-term credentials for the assigned
|
559
|
+
# Amazon Web Services accounts or to access application APIs using
|
560
|
+
# `bearer` authentication.
|
554
561
|
#
|
555
562
|
# @option params [required, String] :client_id
|
556
563
|
# The unique identifier string for the client or application. This value
|
@@ -631,6 +638,11 @@ module Aws::SSOOIDC
|
|
631
638
|
#
|
632
639
|
# * Refresh Token - `urn:ietf:params:oauth:token-type:refresh_token`
|
633
640
|
#
|
641
|
+
# @option params [String] :code_verifier
|
642
|
+
# Used only when calling this API for the Authorization Code grant type.
|
643
|
+
# This value is generated by the client and presented to validate the
|
644
|
+
# original code challenge value the client passed at authorization time.
|
645
|
+
#
|
634
646
|
# @return [Types::CreateTokenWithIAMResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
635
647
|
#
|
636
648
|
# * {Types::CreateTokenWithIAMResponse#access_token #access_token} => String
|
@@ -753,6 +765,7 @@ module Aws::SSOOIDC
|
|
753
765
|
# subject_token: "SubjectToken",
|
754
766
|
# subject_token_type: "TokenTypeURI",
|
755
767
|
# requested_token_type: "TokenTypeURI",
|
768
|
+
# code_verifier: "CodeVerifier",
|
756
769
|
# })
|
757
770
|
#
|
758
771
|
# @example Response structure
|
@@ -791,6 +804,28 @@ module Aws::SSOOIDC
|
|
791
804
|
# this list is used to restrict permissions when granting an access
|
792
805
|
# token.
|
793
806
|
#
|
807
|
+
# @option params [Array<String>] :redirect_uris
|
808
|
+
# The list of redirect URI that are defined by the client. At completion
|
809
|
+
# of authorization, this list is used to restrict what locations the
|
810
|
+
# user agent can be redirected back to.
|
811
|
+
#
|
812
|
+
# @option params [Array<String>] :grant_types
|
813
|
+
# The list of OAuth 2.0 grant types that are defined by the client. This
|
814
|
+
# list is used to restrict the token granting flows available to the
|
815
|
+
# client.
|
816
|
+
#
|
817
|
+
# @option params [String] :issuer_url
|
818
|
+
# The IAM Identity Center Issuer URL associated with an instance of IAM
|
819
|
+
# Identity Center. This value is needed for user access to resources
|
820
|
+
# through the client.
|
821
|
+
#
|
822
|
+
# @option params [String] :entitled_application_arn
|
823
|
+
# This IAM Identity Center application ARN is used to define
|
824
|
+
# administrator-managed configuration for public client access to
|
825
|
+
# resources. At authorization, the scopes, grants, and redirect URI
|
826
|
+
# available to this client will be restricted by this application
|
827
|
+
# resource.
|
828
|
+
#
|
794
829
|
# @return [Types::RegisterClientResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
795
830
|
#
|
796
831
|
# * {Types::RegisterClientResponse#client_id #client_id} => String
|
@@ -806,6 +841,15 @@ module Aws::SSOOIDC
|
|
806
841
|
# resp = client.register_client({
|
807
842
|
# client_name: "My IDE Plugin",
|
808
843
|
# client_type: "public",
|
844
|
+
# entitled_application_arn: "arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111",
|
845
|
+
# grant_types: [
|
846
|
+
# "authorization_code",
|
847
|
+
# "refresh_token",
|
848
|
+
# ],
|
849
|
+
# issuer_url: "https://identitycenter.amazonaws.com/ssoins-1111111111111111",
|
850
|
+
# redirect_uris: [
|
851
|
+
# "127.0.0.1:PORT/oauth/callback",
|
852
|
+
# ],
|
809
853
|
# scopes: [
|
810
854
|
# "sso:account:access",
|
811
855
|
# "codewhisperer:completions",
|
@@ -826,6 +870,10 @@ module Aws::SSOOIDC
|
|
826
870
|
# client_name: "ClientName", # required
|
827
871
|
# client_type: "ClientType", # required
|
828
872
|
# scopes: ["Scope"],
|
873
|
+
# redirect_uris: ["URI"],
|
874
|
+
# grant_types: ["GrantType"],
|
875
|
+
# issuer_url: "URI",
|
876
|
+
# entitled_application_arn: "ArnType",
|
829
877
|
# })
|
830
878
|
#
|
831
879
|
# @example Response structure
|
@@ -934,7 +982,7 @@ module Aws::SSOOIDC
|
|
934
982
|
params: params,
|
935
983
|
config: config)
|
936
984
|
context[:gem_name] = 'aws-sdk-core'
|
937
|
-
context[:gem_version] = '3.
|
985
|
+
context[:gem_version] = '3.195.0'
|
938
986
|
Seahorse::Client::Request.new(handlers, context)
|
939
987
|
end
|
940
988
|
|
@@ -15,6 +15,7 @@ module Aws::SSOOIDC
|
|
15
15
|
|
16
16
|
AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
|
17
17
|
AccessToken = Shapes::StringShape.new(name: 'AccessToken')
|
18
|
+
ArnType = Shapes::StringShape.new(name: 'ArnType')
|
18
19
|
Assertion = Shapes::StringShape.new(name: 'Assertion')
|
19
20
|
AuthCode = Shapes::StringShape.new(name: 'AuthCode')
|
20
21
|
AuthorizationPendingException = Shapes::StructureShape.new(name: 'AuthorizationPendingException')
|
@@ -22,6 +23,7 @@ module Aws::SSOOIDC
|
|
22
23
|
ClientName = Shapes::StringShape.new(name: 'ClientName')
|
23
24
|
ClientSecret = Shapes::StringShape.new(name: 'ClientSecret')
|
24
25
|
ClientType = Shapes::StringShape.new(name: 'ClientType')
|
26
|
+
CodeVerifier = Shapes::StringShape.new(name: 'CodeVerifier')
|
25
27
|
CreateTokenRequest = Shapes::StructureShape.new(name: 'CreateTokenRequest')
|
26
28
|
CreateTokenResponse = Shapes::StructureShape.new(name: 'CreateTokenResponse')
|
27
29
|
CreateTokenWithIAMRequest = Shapes::StructureShape.new(name: 'CreateTokenWithIAMRequest')
|
@@ -32,17 +34,20 @@ module Aws::SSOOIDC
|
|
32
34
|
ExpirationInSeconds = Shapes::IntegerShape.new(name: 'ExpirationInSeconds')
|
33
35
|
ExpiredTokenException = Shapes::StructureShape.new(name: 'ExpiredTokenException')
|
34
36
|
GrantType = Shapes::StringShape.new(name: 'GrantType')
|
37
|
+
GrantTypes = Shapes::ListShape.new(name: 'GrantTypes')
|
35
38
|
IdToken = Shapes::StringShape.new(name: 'IdToken')
|
36
39
|
InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
|
37
40
|
IntervalInSeconds = Shapes::IntegerShape.new(name: 'IntervalInSeconds')
|
38
41
|
InvalidClientException = Shapes::StructureShape.new(name: 'InvalidClientException')
|
39
42
|
InvalidClientMetadataException = Shapes::StructureShape.new(name: 'InvalidClientMetadataException')
|
40
43
|
InvalidGrantException = Shapes::StructureShape.new(name: 'InvalidGrantException')
|
44
|
+
InvalidRedirectUriException = Shapes::StructureShape.new(name: 'InvalidRedirectUriException')
|
41
45
|
InvalidRequestException = Shapes::StructureShape.new(name: 'InvalidRequestException')
|
42
46
|
InvalidRequestRegionException = Shapes::StructureShape.new(name: 'InvalidRequestRegionException')
|
43
47
|
InvalidScopeException = Shapes::StructureShape.new(name: 'InvalidScopeException')
|
44
48
|
Location = Shapes::StringShape.new(name: 'Location')
|
45
49
|
LongTimeStampType = Shapes::IntegerShape.new(name: 'LongTimeStampType')
|
50
|
+
RedirectUris = Shapes::ListShape.new(name: 'RedirectUris')
|
46
51
|
RefreshToken = Shapes::StringShape.new(name: 'RefreshToken')
|
47
52
|
Region = Shapes::StringShape.new(name: 'Region')
|
48
53
|
RegisterClientRequest = Shapes::StructureShape.new(name: 'RegisterClientRequest')
|
@@ -76,6 +81,7 @@ module Aws::SSOOIDC
|
|
76
81
|
CreateTokenRequest.add_member(:refresh_token, Shapes::ShapeRef.new(shape: RefreshToken, location_name: "refreshToken"))
|
77
82
|
CreateTokenRequest.add_member(:scope, Shapes::ShapeRef.new(shape: Scopes, location_name: "scope"))
|
78
83
|
CreateTokenRequest.add_member(:redirect_uri, Shapes::ShapeRef.new(shape: URI, location_name: "redirectUri"))
|
84
|
+
CreateTokenRequest.add_member(:code_verifier, Shapes::ShapeRef.new(shape: CodeVerifier, location_name: "codeVerifier"))
|
79
85
|
CreateTokenRequest.struct_class = Types::CreateTokenRequest
|
80
86
|
|
81
87
|
CreateTokenResponse.add_member(:access_token, Shapes::ShapeRef.new(shape: AccessToken, location_name: "accessToken"))
|
@@ -95,6 +101,7 @@ module Aws::SSOOIDC
|
|
95
101
|
CreateTokenWithIAMRequest.add_member(:subject_token, Shapes::ShapeRef.new(shape: SubjectToken, location_name: "subjectToken"))
|
96
102
|
CreateTokenWithIAMRequest.add_member(:subject_token_type, Shapes::ShapeRef.new(shape: TokenTypeURI, location_name: "subjectTokenType"))
|
97
103
|
CreateTokenWithIAMRequest.add_member(:requested_token_type, Shapes::ShapeRef.new(shape: TokenTypeURI, location_name: "requestedTokenType"))
|
104
|
+
CreateTokenWithIAMRequest.add_member(:code_verifier, Shapes::ShapeRef.new(shape: CodeVerifier, location_name: "codeVerifier"))
|
98
105
|
CreateTokenWithIAMRequest.struct_class = Types::CreateTokenWithIAMRequest
|
99
106
|
|
100
107
|
CreateTokenWithIAMResponse.add_member(:access_token, Shapes::ShapeRef.new(shape: AccessToken, location_name: "accessToken"))
|
@@ -110,6 +117,8 @@ module Aws::SSOOIDC
|
|
110
117
|
ExpiredTokenException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
111
118
|
ExpiredTokenException.struct_class = Types::ExpiredTokenException
|
112
119
|
|
120
|
+
GrantTypes.member = Shapes::ShapeRef.new(shape: GrantType)
|
121
|
+
|
113
122
|
InternalServerException.add_member(:error, Shapes::ShapeRef.new(shape: Error, location_name: "error"))
|
114
123
|
InternalServerException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
115
124
|
InternalServerException.struct_class = Types::InternalServerException
|
@@ -126,6 +135,10 @@ module Aws::SSOOIDC
|
|
126
135
|
InvalidGrantException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
127
136
|
InvalidGrantException.struct_class = Types::InvalidGrantException
|
128
137
|
|
138
|
+
InvalidRedirectUriException.add_member(:error, Shapes::ShapeRef.new(shape: Error, location_name: "error"))
|
139
|
+
InvalidRedirectUriException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
140
|
+
InvalidRedirectUriException.struct_class = Types::InvalidRedirectUriException
|
141
|
+
|
129
142
|
InvalidRequestException.add_member(:error, Shapes::ShapeRef.new(shape: Error, location_name: "error"))
|
130
143
|
InvalidRequestException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
131
144
|
InvalidRequestException.struct_class = Types::InvalidRequestException
|
@@ -140,9 +153,15 @@ module Aws::SSOOIDC
|
|
140
153
|
InvalidScopeException.add_member(:error_description, Shapes::ShapeRef.new(shape: ErrorDescription, location_name: "error_description"))
|
141
154
|
InvalidScopeException.struct_class = Types::InvalidScopeException
|
142
155
|
|
156
|
+
RedirectUris.member = Shapes::ShapeRef.new(shape: URI)
|
157
|
+
|
143
158
|
RegisterClientRequest.add_member(:client_name, Shapes::ShapeRef.new(shape: ClientName, required: true, location_name: "clientName"))
|
144
159
|
RegisterClientRequest.add_member(:client_type, Shapes::ShapeRef.new(shape: ClientType, required: true, location_name: "clientType"))
|
145
160
|
RegisterClientRequest.add_member(:scopes, Shapes::ShapeRef.new(shape: Scopes, location_name: "scopes"))
|
161
|
+
RegisterClientRequest.add_member(:redirect_uris, Shapes::ShapeRef.new(shape: RedirectUris, location_name: "redirectUris"))
|
162
|
+
RegisterClientRequest.add_member(:grant_types, Shapes::ShapeRef.new(shape: GrantTypes, location_name: "grantTypes"))
|
163
|
+
RegisterClientRequest.add_member(:issuer_url, Shapes::ShapeRef.new(shape: URI, location_name: "issuerUrl"))
|
164
|
+
RegisterClientRequest.add_member(:entitled_application_arn, Shapes::ShapeRef.new(shape: ArnType, location_name: "entitledApplicationArn"))
|
146
165
|
RegisterClientRequest.struct_class = Types::RegisterClientRequest
|
147
166
|
|
148
167
|
RegisterClientResponse.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientId, location_name: "clientId"))
|
@@ -191,6 +210,7 @@ module Aws::SSOOIDC
|
|
191
210
|
"endpointPrefix" => "oidc",
|
192
211
|
"jsonVersion" => "1.1",
|
193
212
|
"protocol" => "rest-json",
|
213
|
+
"protocols" => ["rest-json"],
|
194
214
|
"serviceAbbreviation" => "SSO OIDC",
|
195
215
|
"serviceFullName" => "AWS SSO OIDC",
|
196
216
|
"serviceId" => "SSO OIDC",
|
@@ -250,6 +270,8 @@ module Aws::SSOOIDC
|
|
250
270
|
o.errors << Shapes::ShapeRef.new(shape: InvalidScopeException)
|
251
271
|
o.errors << Shapes::ShapeRef.new(shape: InvalidClientMetadataException)
|
252
272
|
o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
|
273
|
+
o.errors << Shapes::ShapeRef.new(shape: InvalidRedirectUriException)
|
274
|
+
o.errors << Shapes::ShapeRef.new(shape: UnsupportedGrantTypeException)
|
253
275
|
end)
|
254
276
|
|
255
277
|
api.add_operation(:start_device_authorization, Seahorse::Model::Operation.new.tap do |o|
|
@@ -34,6 +34,7 @@ module Aws::SSOOIDC
|
|
34
34
|
# * {InvalidClientException}
|
35
35
|
# * {InvalidClientMetadataException}
|
36
36
|
# * {InvalidGrantException}
|
37
|
+
# * {InvalidRedirectUriException}
|
37
38
|
# * {InvalidRequestException}
|
38
39
|
# * {InvalidRequestRegionException}
|
39
40
|
# * {InvalidScopeException}
|
@@ -187,6 +188,26 @@ module Aws::SSOOIDC
|
|
187
188
|
end
|
188
189
|
end
|
189
190
|
|
191
|
+
class InvalidRedirectUriException < ServiceError
|
192
|
+
|
193
|
+
# @param [Seahorse::Client::RequestContext] context
|
194
|
+
# @param [String] message
|
195
|
+
# @param [Aws::SSOOIDC::Types::InvalidRedirectUriException] data
|
196
|
+
def initialize(context, message, data = Aws::EmptyStructure.new)
|
197
|
+
super(context, message, data)
|
198
|
+
end
|
199
|
+
|
200
|
+
# @return [String]
|
201
|
+
def error
|
202
|
+
@data[:error]
|
203
|
+
end
|
204
|
+
|
205
|
+
# @return [String]
|
206
|
+
def error_description
|
207
|
+
@data[:error_description]
|
208
|
+
end
|
209
|
+
end
|
210
|
+
|
190
211
|
class InvalidRequestException < ServiceError
|
191
212
|
|
192
213
|
# @param [Seahorse::Client::RequestContext] context
|
@@ -118,6 +118,13 @@ module Aws::SSOOIDC
|
|
118
118
|
# that has registered to receive the authorization code.
|
119
119
|
# @return [String]
|
120
120
|
#
|
121
|
+
# @!attribute [rw] code_verifier
|
122
|
+
# Used only when calling this API for the Authorization Code grant
|
123
|
+
# type. This value is generated by the client and presented to
|
124
|
+
# validate the original code challenge value the client passed at
|
125
|
+
# authorization time.
|
126
|
+
# @return [String]
|
127
|
+
#
|
121
128
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-oidc-2019-06-10/CreateTokenRequest AWS API Documentation
|
122
129
|
#
|
123
130
|
class CreateTokenRequest < Struct.new(
|
@@ -128,14 +135,15 @@ module Aws::SSOOIDC
|
|
128
135
|
:code,
|
129
136
|
:refresh_token,
|
130
137
|
:scope,
|
131
|
-
:redirect_uri
|
132
|
-
|
138
|
+
:redirect_uri,
|
139
|
+
:code_verifier)
|
140
|
+
SENSITIVE = [:client_secret, :refresh_token, :code_verifier]
|
133
141
|
include Aws::Structure
|
134
142
|
end
|
135
143
|
|
136
144
|
# @!attribute [rw] access_token
|
137
|
-
# A bearer token to access
|
138
|
-
# user.
|
145
|
+
# A bearer token to access Amazon Web Services accounts and
|
146
|
+
# applications assigned to a user.
|
139
147
|
# @return [String]
|
140
148
|
#
|
141
149
|
# @!attribute [rw] token_type
|
@@ -278,6 +286,13 @@ module Aws::SSOOIDC
|
|
278
286
|
# * Refresh Token - `urn:ietf:params:oauth:token-type:refresh_token`
|
279
287
|
# @return [String]
|
280
288
|
#
|
289
|
+
# @!attribute [rw] code_verifier
|
290
|
+
# Used only when calling this API for the Authorization Code grant
|
291
|
+
# type. This value is generated by the client and presented to
|
292
|
+
# validate the original code challenge value the client passed at
|
293
|
+
# authorization time.
|
294
|
+
# @return [String]
|
295
|
+
#
|
281
296
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-oidc-2019-06-10/CreateTokenWithIAMRequest AWS API Documentation
|
282
297
|
#
|
283
298
|
class CreateTokenWithIAMRequest < Struct.new(
|
@@ -290,14 +305,15 @@ module Aws::SSOOIDC
|
|
290
305
|
:redirect_uri,
|
291
306
|
:subject_token,
|
292
307
|
:subject_token_type,
|
293
|
-
:requested_token_type
|
294
|
-
|
308
|
+
:requested_token_type,
|
309
|
+
:code_verifier)
|
310
|
+
SENSITIVE = [:refresh_token, :assertion, :subject_token, :code_verifier]
|
295
311
|
include Aws::Structure
|
296
312
|
end
|
297
313
|
|
298
314
|
# @!attribute [rw] access_token
|
299
|
-
# A bearer token to access
|
300
|
-
# user.
|
315
|
+
# A bearer token to access Amazon Web Services accounts and
|
316
|
+
# applications assigned to a user.
|
301
317
|
# @return [String]
|
302
318
|
#
|
303
319
|
# @!attribute [rw] token_type
|
@@ -467,6 +483,28 @@ module Aws::SSOOIDC
|
|
467
483
|
include Aws::Structure
|
468
484
|
end
|
469
485
|
|
486
|
+
# Indicates that one or more redirect URI in the request is not
|
487
|
+
# supported for this operation.
|
488
|
+
#
|
489
|
+
# @!attribute [rw] error
|
490
|
+
# Single error code. For this exception the value will be
|
491
|
+
# `invalid_redirect_uri`.
|
492
|
+
# @return [String]
|
493
|
+
#
|
494
|
+
# @!attribute [rw] error_description
|
495
|
+
# Human-readable text providing additional information, used to assist
|
496
|
+
# the client developer in understanding the error that occurred.
|
497
|
+
# @return [String]
|
498
|
+
#
|
499
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-oidc-2019-06-10/InvalidRedirectUriException AWS API Documentation
|
500
|
+
#
|
501
|
+
class InvalidRedirectUriException < Struct.new(
|
502
|
+
:error,
|
503
|
+
:error_description)
|
504
|
+
SENSITIVE = []
|
505
|
+
include Aws::Structure
|
506
|
+
end
|
507
|
+
|
470
508
|
# Indicates that something is wrong with the input to the request. For
|
471
509
|
# example, a required parameter might be missing or out of range.
|
472
510
|
#
|
@@ -559,12 +597,42 @@ module Aws::SSOOIDC
|
|
559
597
|
# granting an access token.
|
560
598
|
# @return [Array<String>]
|
561
599
|
#
|
600
|
+
# @!attribute [rw] redirect_uris
|
601
|
+
# The list of redirect URI that are defined by the client. At
|
602
|
+
# completion of authorization, this list is used to restrict what
|
603
|
+
# locations the user agent can be redirected back to.
|
604
|
+
# @return [Array<String>]
|
605
|
+
#
|
606
|
+
# @!attribute [rw] grant_types
|
607
|
+
# The list of OAuth 2.0 grant types that are defined by the client.
|
608
|
+
# This list is used to restrict the token granting flows available to
|
609
|
+
# the client.
|
610
|
+
# @return [Array<String>]
|
611
|
+
#
|
612
|
+
# @!attribute [rw] issuer_url
|
613
|
+
# The IAM Identity Center Issuer URL associated with an instance of
|
614
|
+
# IAM Identity Center. This value is needed for user access to
|
615
|
+
# resources through the client.
|
616
|
+
# @return [String]
|
617
|
+
#
|
618
|
+
# @!attribute [rw] entitled_application_arn
|
619
|
+
# This IAM Identity Center application ARN is used to define
|
620
|
+
# administrator-managed configuration for public client access to
|
621
|
+
# resources. At authorization, the scopes, grants, and redirect URI
|
622
|
+
# available to this client will be restricted by this application
|
623
|
+
# resource.
|
624
|
+
# @return [String]
|
625
|
+
#
|
562
626
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-oidc-2019-06-10/RegisterClientRequest AWS API Documentation
|
563
627
|
#
|
564
628
|
class RegisterClientRequest < Struct.new(
|
565
629
|
:client_name,
|
566
630
|
:client_type,
|
567
|
-
:scopes
|
631
|
+
:scopes,
|
632
|
+
:redirect_uris,
|
633
|
+
:grant_types,
|
634
|
+
:issuer_url,
|
635
|
+
:entitled_application_arn)
|
568
636
|
SENSITIVE = []
|
569
637
|
include Aws::Structure
|
570
638
|
end
|
data/lib/aws-sdk-ssooidc.rb
CHANGED
data/lib/aws-sdk-sts/client.rb
CHANGED
@@ -2376,7 +2376,7 @@ module Aws::STS
|
|
2376
2376
|
params: params,
|
2377
2377
|
config: config)
|
2378
2378
|
context[:gem_name] = 'aws-sdk-core'
|
2379
|
-
context[:gem_version] = '3.
|
2379
|
+
context[:gem_version] = '3.195.0'
|
2380
2380
|
Seahorse::Client::Request.new(handlers, context)
|
2381
2381
|
end
|
2382
2382
|
|
data/lib/aws-sdk-sts.rb
CHANGED
@@ -119,11 +119,7 @@ module Seahorse
|
|
119
119
|
# pool, not counting those currently in use.
|
120
120
|
def size
|
121
121
|
@pool_mutex.synchronize do
|
122
|
-
size
|
123
|
-
@pool.each_pair do |endpoint,sessions|
|
124
|
-
size += sessions.size
|
125
|
-
end
|
126
|
-
size
|
122
|
+
@pool.values.flatten.size
|
127
123
|
end
|
128
124
|
end
|
129
125
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-core
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.
|
4
|
+
version: 3.195.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-
|
11
|
+
date: 2024-05-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: jmespath
|
@@ -151,6 +151,7 @@ files:
|
|
151
151
|
- lib/aws-sdk-core/log/handler.rb
|
152
152
|
- lib/aws-sdk-core/log/param_filter.rb
|
153
153
|
- lib/aws-sdk-core/log/param_formatter.rb
|
154
|
+
- lib/aws-sdk-core/lru_cache.rb
|
154
155
|
- lib/aws-sdk-core/pageable_response.rb
|
155
156
|
- lib/aws-sdk-core/pager.rb
|
156
157
|
- lib/aws-sdk-core/param_converter.rb
|