aws-sdk-core 3.216.1 → 3.218.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +26 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-core/plugins/sign.rb +1 -1
- data/lib/aws-sdk-sso/client.rb +1 -1
- data/lib/aws-sdk-sso/endpoint_provider.rb +14 -18
- data/lib/aws-sdk-sso.rb +1 -1
- data/lib/aws-sdk-ssooidc/client.rb +25 -19
- data/lib/aws-sdk-ssooidc/endpoint_provider.rb +14 -18
- data/lib/aws-sdk-ssooidc/types.rb +20 -15
- data/lib/aws-sdk-ssooidc.rb +1 -1
- data/lib/aws-sdk-sts/client.rb +1 -1
- data/lib/aws-sdk-sts/endpoint_provider.rb +33 -38
- data/lib/aws-sdk-sts.rb +1 -1
- data/lib/seahorse/client/net_http/connection_pool.rb +2 -0
- metadata +22 -8
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: '08777591a4812ea2ea26e5cd08756af71b49a9cb0cb0ae35c2ca5fef389fd720'
|
4
|
+
data.tar.gz: 2a7c111474114c155d3c6376c3b45f8da7d0ef8da3528c6932a53d533f27805c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b69530b054a046568319c574e761a2b21e272cfa8054db58014fc6beda7376e23057dec08ab0ea8e62ca1d5f59cf62d22b067b0b76064dc34704be23b9fbf514
|
7
|
+
data.tar.gz: 956413cc1def37fbf8193b11ab453f417c0ae332dc9cb09085d8d2fbc48c5480b1dbb7a6ef0fa64d995aea86d50acde3773842c0e1b3d2147d9a60c0828ce0f5
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,32 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
3.218.1 (2025-02-07)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Issue - Add handling of block in ExtendedSession delegation (#3178).
|
8
|
+
|
9
|
+
3.218.0 (2025-02-06)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Updated Aws::STS::Client with the latest API changes.
|
13
|
+
|
14
|
+
* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
|
15
|
+
|
16
|
+
* Feature - Updated Aws::SSO::Client with the latest API changes.
|
17
|
+
|
18
|
+
3.217.1 (2025-01-30)
|
19
|
+
------------------
|
20
|
+
|
21
|
+
* Issue - Add `transfer-encoding` and `connection` to list of unsigned sigv4 headers.
|
22
|
+
|
23
|
+
3.217.0 (2025-01-24)
|
24
|
+
------------------
|
25
|
+
|
26
|
+
* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
|
27
|
+
|
28
|
+
* Feature - Fixed typos in the descriptions.
|
29
|
+
|
4
30
|
3.216.1 (2025-01-22)
|
5
31
|
------------------
|
6
32
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
3.
|
1
|
+
3.218.1
|
@@ -113,7 +113,7 @@ module Aws
|
|
113
113
|
signing_algorithm: scheme_name.to_sym,
|
114
114
|
uri_escape_path: !!!auth_scheme['disableDoubleEncoding'],
|
115
115
|
normalize_path: !!!auth_scheme['disableNormalizePath'],
|
116
|
-
unsigned_headers: %w[content-length user-agent x-amzn-trace-id]
|
116
|
+
unsigned_headers: %w[content-length user-agent x-amzn-trace-id expect transfer-encoding connection]
|
117
117
|
)
|
118
118
|
rescue Aws::Sigv4::Errors::MissingCredentialsError
|
119
119
|
raise Aws::Errors::MissingCredentialsError
|
data/lib/aws-sdk-sso/client.rb
CHANGED
@@ -10,43 +10,39 @@
|
|
10
10
|
module Aws::SSO
|
11
11
|
class EndpointProvider
|
12
12
|
def resolve_endpoint(parameters)
|
13
|
-
|
14
|
-
|
15
|
-
use_fips = parameters.use_fips
|
16
|
-
endpoint = parameters.endpoint
|
17
|
-
if Aws::Endpoints::Matchers.set?(endpoint)
|
18
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
13
|
+
if Aws::Endpoints::Matchers.set?(parameters.endpoint)
|
14
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
19
15
|
raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
|
20
16
|
end
|
21
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
17
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
22
18
|
raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
|
23
19
|
end
|
24
|
-
return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
|
20
|
+
return Aws::Endpoints::Endpoint.new(url: parameters.endpoint, headers: {}, properties: {})
|
25
21
|
end
|
26
|
-
if Aws::Endpoints::Matchers.set?(region)
|
27
|
-
if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
|
28
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
22
|
+
if Aws::Endpoints::Matchers.set?(parameters.region)
|
23
|
+
if (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
|
24
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
29
25
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
30
|
-
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
26
|
+
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso-fips.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
31
27
|
end
|
32
28
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
33
29
|
end
|
34
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
30
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
35
31
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
|
36
32
|
if Aws::Endpoints::Matchers.string_equals?("aws-us-gov", Aws::Endpoints::Matchers.attr(partition_result, "name"))
|
37
|
-
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{region}.amazonaws.com", headers: {}, properties: {})
|
33
|
+
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{parameters.region}.amazonaws.com", headers: {}, properties: {})
|
38
34
|
end
|
39
|
-
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
35
|
+
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso-fips.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
40
36
|
end
|
41
37
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
42
38
|
end
|
43
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
39
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
44
40
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
45
|
-
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
41
|
+
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
46
42
|
end
|
47
43
|
raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
|
48
44
|
end
|
49
|
-
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
45
|
+
return Aws::Endpoints::Endpoint.new(url: "https://portal.sso.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
50
46
|
end
|
51
47
|
end
|
52
48
|
raise ArgumentError, "Invalid Configuration: Missing Region"
|
data/lib/aws-sdk-sso.rb
CHANGED
@@ -472,7 +472,7 @@ module Aws::SSOOIDC
|
|
472
472
|
|
473
473
|
# Creates and returns access and refresh tokens for clients that are
|
474
474
|
# authenticated using client secrets. The access token can be used to
|
475
|
-
# fetch short-
|
475
|
+
# fetch short-lived credentials for the assigned AWS accounts or to
|
476
476
|
# access application APIs using `bearer` authentication.
|
477
477
|
#
|
478
478
|
# @option params [required, String] :client_id
|
@@ -484,30 +484,28 @@ module Aws::SSOOIDC
|
|
484
484
|
# the persisted result of the RegisterClient API.
|
485
485
|
#
|
486
486
|
# @option params [required, String] :grant_type
|
487
|
-
# Supports the following OAuth grant types:
|
488
|
-
# Token. Specify
|
489
|
-
# type that you want:
|
487
|
+
# Supports the following OAuth grant types: Authorization Code, Device
|
488
|
+
# Code, and Refresh Token. Specify one of the following values,
|
489
|
+
# depending on the grant type that you want:
|
490
|
+
#
|
491
|
+
# * Authorization Code - `authorization_code`
|
490
492
|
#
|
491
493
|
# * Device Code - `urn:ietf:params:oauth:grant-type:device_code`
|
492
494
|
#
|
493
495
|
# * Refresh Token - `refresh_token`
|
494
496
|
#
|
495
|
-
# For information about how to obtain the device code, see the
|
496
|
-
# StartDeviceAuthorization topic.
|
497
|
-
#
|
498
497
|
# @option params [String] :device_code
|
499
498
|
# Used only when calling this API for the Device Code grant type. This
|
500
|
-
# short-
|
499
|
+
# short-lived code is used to identify this authorization request. This
|
501
500
|
# comes from the result of the StartDeviceAuthorization API.
|
502
501
|
#
|
503
502
|
# @option params [String] :code
|
504
503
|
# Used only when calling this API for the Authorization Code grant type.
|
505
|
-
# The short-
|
506
|
-
# This grant type is currently unsupported for the CreateToken API.
|
504
|
+
# The short-lived code is used to identify this authorization request.
|
507
505
|
#
|
508
506
|
# @option params [String] :refresh_token
|
509
507
|
# Used only when calling this API for the Refresh Token grant type. This
|
510
|
-
# token is used to refresh short-
|
508
|
+
# token is used to refresh short-lived tokens, such as the access token,
|
511
509
|
# that might expire.
|
512
510
|
#
|
513
511
|
# For more information about the features and limitations of the current
|
@@ -613,7 +611,7 @@ module Aws::SSOOIDC
|
|
613
611
|
|
614
612
|
# Creates and returns access and refresh tokens for clients and
|
615
613
|
# applications that are authenticated using IAM entities. The access
|
616
|
-
# token can be used to fetch short-
|
614
|
+
# token can be used to fetch short-lived credentials for the assigned
|
617
615
|
# Amazon Web Services accounts or to access application APIs using
|
618
616
|
# `bearer` authentication.
|
619
617
|
#
|
@@ -636,14 +634,14 @@ module Aws::SSOOIDC
|
|
636
634
|
#
|
637
635
|
# @option params [String] :code
|
638
636
|
# Used only when calling this API for the Authorization Code grant type.
|
639
|
-
# This short-
|
637
|
+
# This short-lived code is used to identify this authorization request.
|
640
638
|
# The code is obtained through a redirect from IAM Identity Center to a
|
641
639
|
# redirect URI persisted in the Authorization Code GrantOptions for the
|
642
640
|
# application.
|
643
641
|
#
|
644
642
|
# @option params [String] :refresh_token
|
645
643
|
# Used only when calling this API for the Refresh Token grant type. This
|
646
|
-
# token is used to refresh short-
|
644
|
+
# token is used to refresh short-lived tokens, such as the access token,
|
647
645
|
# that might expire.
|
648
646
|
#
|
649
647
|
# For more information about the features and limitations of the current
|
@@ -846,9 +844,10 @@ module Aws::SSOOIDC
|
|
846
844
|
req.send_request(options)
|
847
845
|
end
|
848
846
|
|
849
|
-
# Registers a client with IAM Identity Center. This allows
|
850
|
-
#
|
851
|
-
#
|
847
|
+
# Registers a public client with IAM Identity Center. This allows
|
848
|
+
# clients to perform authorization using the authorization
|
849
|
+
# code grant with Proof Key for Code Exchange (PKCE) or the device
|
850
|
+
# code grant.
|
852
851
|
#
|
853
852
|
# @option params [required, String] :client_name
|
854
853
|
# The friendly name of the client.
|
@@ -870,7 +869,14 @@ module Aws::SSOOIDC
|
|
870
869
|
# @option params [Array<String>] :grant_types
|
871
870
|
# The list of OAuth 2.0 grant types that are defined by the client. This
|
872
871
|
# list is used to restrict the token granting flows available to the
|
873
|
-
# client.
|
872
|
+
# client. Supports the following OAuth 2.0 grant types: Authorization
|
873
|
+
# Code, Device Code, and Refresh Token.
|
874
|
+
#
|
875
|
+
# * Authorization Code - `authorization_code`
|
876
|
+
#
|
877
|
+
# * Device Code - `urn:ietf:params:oauth:grant-type:device_code`
|
878
|
+
#
|
879
|
+
# * Refresh Token - `refresh_token`
|
874
880
|
#
|
875
881
|
# @option params [String] :issuer_url
|
876
882
|
# The IAM Identity Center Issuer URL associated with an instance of IAM
|
@@ -1045,7 +1051,7 @@ module Aws::SSOOIDC
|
|
1045
1051
|
tracer: tracer
|
1046
1052
|
)
|
1047
1053
|
context[:gem_name] = 'aws-sdk-core'
|
1048
|
-
context[:gem_version] = '3.
|
1054
|
+
context[:gem_version] = '3.218.1'
|
1049
1055
|
Seahorse::Client::Request.new(handlers, context)
|
1050
1056
|
end
|
1051
1057
|
|
@@ -10,43 +10,39 @@
|
|
10
10
|
module Aws::SSOOIDC
|
11
11
|
class EndpointProvider
|
12
12
|
def resolve_endpoint(parameters)
|
13
|
-
|
14
|
-
|
15
|
-
use_fips = parameters.use_fips
|
16
|
-
endpoint = parameters.endpoint
|
17
|
-
if Aws::Endpoints::Matchers.set?(endpoint)
|
18
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
13
|
+
if Aws::Endpoints::Matchers.set?(parameters.endpoint)
|
14
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
19
15
|
raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
|
20
16
|
end
|
21
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
17
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
22
18
|
raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
|
23
19
|
end
|
24
|
-
return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
|
20
|
+
return Aws::Endpoints::Endpoint.new(url: parameters.endpoint, headers: {}, properties: {})
|
25
21
|
end
|
26
|
-
if Aws::Endpoints::Matchers.set?(region)
|
27
|
-
if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
|
28
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
22
|
+
if Aws::Endpoints::Matchers.set?(parameters.region)
|
23
|
+
if (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
|
24
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
29
25
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
30
|
-
return Aws::Endpoints::Endpoint.new(url: "https://oidc-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
26
|
+
return Aws::Endpoints::Endpoint.new(url: "https://oidc-fips.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
31
27
|
end
|
32
28
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
33
29
|
end
|
34
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
30
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
35
31
|
if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
|
36
32
|
if Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-us-gov")
|
37
|
-
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{region}.amazonaws.com", headers: {}, properties: {})
|
33
|
+
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{parameters.region}.amazonaws.com", headers: {}, properties: {})
|
38
34
|
end
|
39
|
-
return Aws::Endpoints::Endpoint.new(url: "https://oidc-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
35
|
+
return Aws::Endpoints::Endpoint.new(url: "https://oidc-fips.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
40
36
|
end
|
41
37
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
42
38
|
end
|
43
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
39
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
44
40
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
45
|
-
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
41
|
+
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
46
42
|
end
|
47
43
|
raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
|
48
44
|
end
|
49
|
-
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
45
|
+
return Aws::Endpoints::Endpoint.new(url: "https://oidc.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
50
46
|
end
|
51
47
|
end
|
52
48
|
raise ArgumentError, "Invalid Configuration: Missing Region"
|
@@ -64,34 +64,32 @@ module Aws::SSOOIDC
|
|
64
64
|
# @return [String]
|
65
65
|
#
|
66
66
|
# @!attribute [rw] grant_type
|
67
|
-
# Supports the following OAuth grant types:
|
68
|
-
# Token. Specify
|
69
|
-
# grant type that you want:
|
67
|
+
# Supports the following OAuth grant types: Authorization Code, Device
|
68
|
+
# Code, and Refresh Token. Specify one of the following values,
|
69
|
+
# depending on the grant type that you want:
|
70
|
+
#
|
71
|
+
# * Authorization Code - `authorization_code`
|
70
72
|
#
|
71
73
|
# * Device Code - `urn:ietf:params:oauth:grant-type:device_code`
|
72
74
|
#
|
73
75
|
# * Refresh Token - `refresh_token`
|
74
|
-
#
|
75
|
-
# For information about how to obtain the device code, see the
|
76
|
-
# StartDeviceAuthorization topic.
|
77
76
|
# @return [String]
|
78
77
|
#
|
79
78
|
# @!attribute [rw] device_code
|
80
79
|
# Used only when calling this API for the Device Code grant type. This
|
81
|
-
# short-
|
82
|
-
# comes from the result of the StartDeviceAuthorization API.
|
80
|
+
# short-lived code is used to identify this authorization request.
|
81
|
+
# This comes from the result of the StartDeviceAuthorization API.
|
83
82
|
# @return [String]
|
84
83
|
#
|
85
84
|
# @!attribute [rw] code
|
86
85
|
# Used only when calling this API for the Authorization Code grant
|
87
|
-
# type. The short-
|
88
|
-
# request.
|
89
|
-
# CreateToken API.
|
86
|
+
# type. The short-lived code is used to identify this authorization
|
87
|
+
# request.
|
90
88
|
# @return [String]
|
91
89
|
#
|
92
90
|
# @!attribute [rw] refresh_token
|
93
91
|
# Used only when calling this API for the Refresh Token grant type.
|
94
|
-
# This token is used to refresh short-
|
92
|
+
# This token is used to refresh short-lived tokens, such as the access
|
95
93
|
# token, that might expire.
|
96
94
|
#
|
97
95
|
# For more information about the features and limitations of the
|
@@ -217,7 +215,7 @@ module Aws::SSOOIDC
|
|
217
215
|
#
|
218
216
|
# @!attribute [rw] code
|
219
217
|
# Used only when calling this API for the Authorization Code grant
|
220
|
-
# type. This short-
|
218
|
+
# type. This short-lived code is used to identify this authorization
|
221
219
|
# request. The code is obtained through a redirect from IAM Identity
|
222
220
|
# Center to a redirect URI persisted in the Authorization Code
|
223
221
|
# GrantOptions for the application.
|
@@ -225,7 +223,7 @@ module Aws::SSOOIDC
|
|
225
223
|
#
|
226
224
|
# @!attribute [rw] refresh_token
|
227
225
|
# Used only when calling this API for the Refresh Token grant type.
|
228
|
-
# This token is used to refresh short-
|
226
|
+
# This token is used to refresh short-lived tokens, such as the access
|
229
227
|
# token, that might expire.
|
230
228
|
#
|
231
229
|
# For more information about the features and limitations of the
|
@@ -606,7 +604,14 @@ module Aws::SSOOIDC
|
|
606
604
|
# @!attribute [rw] grant_types
|
607
605
|
# The list of OAuth 2.0 grant types that are defined by the client.
|
608
606
|
# This list is used to restrict the token granting flows available to
|
609
|
-
# the client.
|
607
|
+
# the client. Supports the following OAuth 2.0 grant types:
|
608
|
+
# Authorization Code, Device Code, and Refresh Token.
|
609
|
+
#
|
610
|
+
# * Authorization Code - `authorization_code`
|
611
|
+
#
|
612
|
+
# * Device Code - `urn:ietf:params:oauth:grant-type:device_code`
|
613
|
+
#
|
614
|
+
# * Refresh Token - `refresh_token`
|
610
615
|
# @return [Array<String>]
|
611
616
|
#
|
612
617
|
# @!attribute [rw] issuer_url
|
data/lib/aws-sdk-ssooidc.rb
CHANGED
data/lib/aws-sdk-sts/client.rb
CHANGED
@@ -10,98 +10,93 @@
|
|
10
10
|
module Aws::STS
|
11
11
|
class EndpointProvider
|
12
12
|
def resolve_endpoint(parameters)
|
13
|
-
region = parameters.region
|
14
|
-
|
15
|
-
use_fips = parameters.use_fips
|
16
|
-
endpoint = parameters.endpoint
|
17
|
-
use_global_endpoint = parameters.use_global_endpoint
|
18
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_global_endpoint, true) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(endpoint)) && Aws::Endpoints::Matchers.set?(region) && (partition_result = Aws::Endpoints::Matchers.aws_partition(region)) && Aws::Endpoints::Matchers.boolean_equals?(use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, false)
|
19
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "ap-northeast-1")
|
13
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_global_endpoint, true) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.set?(parameters.region) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false)
|
14
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "ap-northeast-1")
|
20
15
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
21
16
|
end
|
22
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "ap-south-1")
|
17
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "ap-south-1")
|
23
18
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
24
19
|
end
|
25
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "ap-southeast-1")
|
20
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "ap-southeast-1")
|
26
21
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
27
22
|
end
|
28
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "ap-southeast-2")
|
23
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "ap-southeast-2")
|
29
24
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
30
25
|
end
|
31
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "aws-global")
|
26
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "aws-global")
|
32
27
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
33
28
|
end
|
34
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "ca-central-1")
|
29
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "ca-central-1")
|
35
30
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
36
31
|
end
|
37
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "eu-central-1")
|
32
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "eu-central-1")
|
38
33
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
39
34
|
end
|
40
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "eu-north-1")
|
35
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "eu-north-1")
|
41
36
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
42
37
|
end
|
43
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "eu-west-1")
|
38
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "eu-west-1")
|
44
39
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
45
40
|
end
|
46
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "eu-west-2")
|
41
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "eu-west-2")
|
47
42
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
48
43
|
end
|
49
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "eu-west-3")
|
44
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "eu-west-3")
|
50
45
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
51
46
|
end
|
52
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "sa-east-1")
|
47
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "sa-east-1")
|
53
48
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
54
49
|
end
|
55
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "us-east-1")
|
50
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "us-east-1")
|
56
51
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
57
52
|
end
|
58
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "us-east-2")
|
53
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "us-east-2")
|
59
54
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
60
55
|
end
|
61
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "us-west-1")
|
56
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "us-west-1")
|
62
57
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
63
58
|
end
|
64
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "us-west-2")
|
59
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "us-west-2")
|
65
60
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
66
61
|
end
|
67
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"#{region}"}]})
|
62
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"#{parameters.region}"}]})
|
68
63
|
end
|
69
|
-
if Aws::Endpoints::Matchers.set?(endpoint)
|
70
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
64
|
+
if Aws::Endpoints::Matchers.set?(parameters.endpoint)
|
65
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
71
66
|
raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
|
72
67
|
end
|
73
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
68
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
74
69
|
raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
|
75
70
|
end
|
76
|
-
return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
|
71
|
+
return Aws::Endpoints::Endpoint.new(url: parameters.endpoint, headers: {}, properties: {})
|
77
72
|
end
|
78
|
-
if Aws::Endpoints::Matchers.set?(region)
|
79
|
-
if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
|
80
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
73
|
+
if Aws::Endpoints::Matchers.set?(parameters.region)
|
74
|
+
if (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
|
75
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
81
76
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
82
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
77
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts-fips.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
83
78
|
end
|
84
79
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
85
80
|
end
|
86
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
81
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
87
82
|
if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
|
88
83
|
if Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-us-gov")
|
89
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{region}.amazonaws.com", headers: {}, properties: {})
|
84
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{parameters.region}.amazonaws.com", headers: {}, properties: {})
|
90
85
|
end
|
91
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
86
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts-fips.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
92
87
|
end
|
93
88
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
94
89
|
end
|
95
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
90
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
96
91
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
97
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
92
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
98
93
|
end
|
99
94
|
raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
|
100
95
|
end
|
101
|
-
if Aws::Endpoints::Matchers.string_equals?(region, "aws-global")
|
96
|
+
if Aws::Endpoints::Matchers.string_equals?(parameters.region, "aws-global")
|
102
97
|
return Aws::Endpoints::Endpoint.new(url: "https://sts.amazonaws.com", headers: {}, properties: {"authSchemes"=>[{"name"=>"sigv4", "signingName"=>"sts", "signingRegion"=>"us-east-1"}]})
|
103
98
|
end
|
104
|
-
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
99
|
+
return Aws::Endpoints::Endpoint.new(url: "https://sts.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
105
100
|
end
|
106
101
|
end
|
107
102
|
raise ArgumentError, "Invalid Configuration: Missing Region"
|
data/lib/aws-sdk-sts.rb
CHANGED
metadata
CHANGED
@@ -1,17 +1,17 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-core
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.
|
4
|
+
version: 3.218.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2025-
|
11
|
+
date: 2025-02-07 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
|
-
name:
|
14
|
+
name: aws-eventstream
|
15
15
|
requirement: !ruby/object:Gem::Requirement
|
16
16
|
requirements:
|
17
17
|
- - "~>"
|
@@ -19,7 +19,7 @@ dependencies:
|
|
19
19
|
version: '1'
|
20
20
|
- - ">="
|
21
21
|
- !ruby/object:Gem::Version
|
22
|
-
version: 1.
|
22
|
+
version: 1.3.0
|
23
23
|
type: :runtime
|
24
24
|
prerelease: false
|
25
25
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -29,7 +29,7 @@ dependencies:
|
|
29
29
|
version: '1'
|
30
30
|
- - ">="
|
31
31
|
- !ruby/object:Gem::Version
|
32
|
-
version: 1.
|
32
|
+
version: 1.3.0
|
33
33
|
- !ruby/object:Gem::Dependency
|
34
34
|
name: aws-partitions
|
35
35
|
requirement: !ruby/object:Gem::Requirement
|
@@ -65,7 +65,21 @@ dependencies:
|
|
65
65
|
- !ruby/object:Gem::Version
|
66
66
|
version: '1.9'
|
67
67
|
- !ruby/object:Gem::Dependency
|
68
|
-
name:
|
68
|
+
name: base64
|
69
|
+
requirement: !ruby/object:Gem::Requirement
|
70
|
+
requirements:
|
71
|
+
- - ">="
|
72
|
+
- !ruby/object:Gem::Version
|
73
|
+
version: '0'
|
74
|
+
type: :runtime
|
75
|
+
prerelease: false
|
76
|
+
version_requirements: !ruby/object:Gem::Requirement
|
77
|
+
requirements:
|
78
|
+
- - ">="
|
79
|
+
- !ruby/object:Gem::Version
|
80
|
+
version: '0'
|
81
|
+
- !ruby/object:Gem::Dependency
|
82
|
+
name: jmespath
|
69
83
|
requirement: !ruby/object:Gem::Requirement
|
70
84
|
requirements:
|
71
85
|
- - "~>"
|
@@ -73,7 +87,7 @@ dependencies:
|
|
73
87
|
version: '1'
|
74
88
|
- - ">="
|
75
89
|
- !ruby/object:Gem::Version
|
76
|
-
version: 1.
|
90
|
+
version: 1.6.1
|
77
91
|
type: :runtime
|
78
92
|
prerelease: false
|
79
93
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -83,7 +97,7 @@ dependencies:
|
|
83
97
|
version: '1'
|
84
98
|
- - ">="
|
85
99
|
- !ruby/object:Gem::Version
|
86
|
-
version: 1.
|
100
|
+
version: 1.6.1
|
87
101
|
description: Provides API clients for AWS. This gem is part of the official AWS SDK
|
88
102
|
for Ruby.
|
89
103
|
email:
|