@aws-sdk/client-cognito-identity-provider 3.100.0 → 3.109.0

package/CHANGELOG.md

@@ -3,6 +3,36 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.109.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.108.1...v3.109.0) (2022-06-13)
+
+**Note:** Version bump only for package @aws-sdk/client-cognito-identity-provider
+
+
+
+
+
+# [3.105.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.104.0...v3.105.0) (2022-06-06)
+
+
+### Features
+
+* **clients:** support recursion detection in Lambda ([#3654](https://github.com/aws/aws-sdk-js-v3/issues/3654)) ([ecfe46e](https://github.com/aws/aws-sdk-js-v3/commit/ecfe46ea1fd8b6e3812b75b3dc6c03554fb4b3fa))
+
+
+
+
+
+# [3.102.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.101.0...v3.102.0) (2022-05-31)
+
+
+### Features
+
+* **client-cognito-identity-provider:** Amazon Cognito now supports IP Address propagation for all unauthenticated APIs (e.g. SignUp, ForgotPassword). ([d285512](https://github.com/aws/aws-sdk-js-v3/commit/d28551296728adfae6dfbf6d0ea8d6c903f4a059))
+
+
+
+
+
 # [3.100.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.99.0...v3.100.0) (2022-05-26)
 
 **Note:** Version bump only for package @aws-sdk/client-cognito-identity-provider

package/dist-cjs/CognitoIdentityProviderClient.js

@@ -5,6 +5,7 @@ const config_resolver_1 = require("@aws-sdk/config-resolver");
 const middleware_content_length_1 = require("@aws-sdk/middleware-content-length");
 const middleware_host_header_1 = require("@aws-sdk/middleware-host-header");
 const middleware_logger_1 = require("@aws-sdk/middleware-logger");
+const middleware_recursion_detection_1 = require("@aws-sdk/middleware-recursion-detection");
 const middleware_retry_1 = require("@aws-sdk/middleware-retry");
 const middleware_signing_1 = require("@aws-sdk/middleware-signing");
 const middleware_user_agent_1 = require("@aws-sdk/middleware-user-agent");
@@ -25,6 +26,7 @@ class CognitoIdentityProviderClient extends smithy_client_1.Client {
         this.middlewareStack.use((0, middleware_content_length_1.getContentLengthPlugin)(this.config));
         this.middlewareStack.use((0, middleware_host_header_1.getHostHeaderPlugin)(this.config));
         this.middlewareStack.use((0, middleware_logger_1.getLoggerPlugin)(this.config));
+        this.middlewareStack.use((0, middleware_recursion_detection_1.getRecursionDetectionPlugin)(this.config));
         this.middlewareStack.use((0, middleware_user_agent_1.getUserAgentPlugin)(this.config));
     }
     destroy() {

package/dist-cjs/protocols/Aws_json1_1.js

@@ -7641,6 +7641,10 @@ const serializeAws_json1_1CreateUserPoolClientRequest = (input, context) => {
         ...(input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName }),
         ...(input.DefaultRedirectURI !== undefined &&
             input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI }),
+        ...(input.EnablePropagateAdditionalUserContextData !== undefined &&
+            input.EnablePropagateAdditionalUserContextData !== null && {
+            EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+        }),
         ...(input.EnableTokenRevocation !== undefined &&
             input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation }),
         ...(input.ExplicitAuthFlows !== undefined &&
@@ -8706,6 +8710,10 @@ const serializeAws_json1_1UpdateUserPoolClientRequest = (input, context) => {
         ...(input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName }),
         ...(input.DefaultRedirectURI !== undefined &&
             input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI }),
+        ...(input.EnablePropagateAdditionalUserContextData !== undefined &&
+            input.EnablePropagateAdditionalUserContextData !== null && {
+            EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+        }),
         ...(input.EnableTokenRevocation !== undefined &&
             input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation }),
         ...(input.ExplicitAuthFlows !== undefined &&
@@ -8821,6 +8829,7 @@ const serializeAws_json1_1UserAttributeUpdateSettingsType = (input, context) =>
 const serializeAws_json1_1UserContextDataType = (input, context) => {
     return {
         ...(input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData }),
+        ...(input.IpAddress !== undefined && input.IpAddress !== null && { IpAddress: input.IpAddress }),
     };
 };
 const serializeAws_json1_1UsernameAttributesListType = (input, context) => {
@@ -10551,6 +10560,7 @@ const deserializeAws_json1_1UserPoolClientType = (output, context) => {
             ? (0, smithy_client_1.expectNonNull)((0, smithy_client_1.parseEpochTimestamp)((0, smithy_client_1.expectNumber)(output.CreationDate)))
             : undefined,
         DefaultRedirectURI: (0, smithy_client_1.expectString)(output.DefaultRedirectURI),
+        EnablePropagateAdditionalUserContextData: (0, smithy_client_1.expectBoolean)(output.EnablePropagateAdditionalUserContextData),
         EnableTokenRevocation: (0, smithy_client_1.expectBoolean)(output.EnableTokenRevocation),
         ExplicitAuthFlows: output.ExplicitAuthFlows !== undefined && output.ExplicitAuthFlows !== null
             ? deserializeAws_json1_1ExplicitAuthFlowsListType(output.ExplicitAuthFlows, context)

package/dist-es/CognitoIdentityProviderClient.js

@@ -3,6 +3,7 @@ import { resolveEndpointsConfig, resolveRegionConfig, } from "@aws-sdk/config-re
 import { getContentLengthPlugin } from "@aws-sdk/middleware-content-length";
 import { getHostHeaderPlugin, resolveHostHeaderConfig, } from "@aws-sdk/middleware-host-header";
 import { getLoggerPlugin } from "@aws-sdk/middleware-logger";
+import { getRecursionDetectionPlugin } from "@aws-sdk/middleware-recursion-detection";
 import { getRetryPlugin, resolveRetryConfig } from "@aws-sdk/middleware-retry";
 import { resolveAwsAuthConfig } from "@aws-sdk/middleware-signing";
 import { getUserAgentPlugin, resolveUserAgentConfig, } from "@aws-sdk/middleware-user-agent";
@@ -25,6 +26,7 @@ var CognitoIdentityProviderClient = (function (_super) {
         _this.middlewareStack.use(getContentLengthPlugin(_this.config));
         _this.middlewareStack.use(getHostHeaderPlugin(_this.config));
         _this.middlewareStack.use(getLoggerPlugin(_this.config));
+        _this.middlewareStack.use(getRecursionDetectionPlugin(_this.config));
         _this.middlewareStack.use(getUserAgentPlugin(_this.config));
         return _this;
     }

package/dist-es/protocols/Aws_json1_1.js

@@ -9615,7 +9615,7 @@ var serializeAws_json1_1CreateUserImportJobRequest = function (input, context) {
         input.CloudWatchLogsRoleArn !== null && { CloudWatchLogsRoleArn: input.CloudWatchLogsRoleArn })), (input.JobName !== undefined && input.JobName !== null && { JobName: input.JobName })), (input.UserPoolId !== undefined && input.UserPoolId !== null && { UserPoolId: input.UserPoolId }));
 };
 var serializeAws_json1_1CreateUserPoolClientRequest = function (input, context) {
-    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
+    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
         input.AccessTokenValidity !== null && { AccessTokenValidity: input.AccessTokenValidity })), (input.AllowedOAuthFlows !== undefined &&
         input.AllowedOAuthFlows !== null && {
         AllowedOAuthFlows: serializeAws_json1_1OAuthFlowsType(input.AllowedOAuthFlows, context),
@@ -9632,7 +9632,10 @@ var serializeAws_json1_1CreateUserPoolClientRequest = function (input, context)
         input.CallbackURLs !== null && {
         CallbackURLs: serializeAws_json1_1CallbackURLsListType(input.CallbackURLs, context),
     })), (input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName })), (input.DefaultRedirectURI !== undefined &&
-        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnableTokenRevocation !== undefined &&
+        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnablePropagateAdditionalUserContextData !== undefined &&
+        input.EnablePropagateAdditionalUserContextData !== null && {
+        EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+    })), (input.EnableTokenRevocation !== undefined &&
         input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation })), (input.ExplicitAuthFlows !== undefined &&
         input.ExplicitAuthFlows !== null && {
         ExplicitAuthFlows: serializeAws_json1_1ExplicitAuthFlowsListType(input.ExplicitAuthFlows, context),
@@ -10303,7 +10306,7 @@ var serializeAws_json1_1UpdateUserAttributesRequest = function (input, context)
     }));
 };
 var serializeAws_json1_1UpdateUserPoolClientRequest = function (input, context) {
-    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
+    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
         input.AccessTokenValidity !== null && { AccessTokenValidity: input.AccessTokenValidity })), (input.AllowedOAuthFlows !== undefined &&
         input.AllowedOAuthFlows !== null && {
         AllowedOAuthFlows: serializeAws_json1_1OAuthFlowsType(input.AllowedOAuthFlows, context),
@@ -10320,7 +10323,10 @@ var serializeAws_json1_1UpdateUserPoolClientRequest = function (input, context)
         input.CallbackURLs !== null && {
         CallbackURLs: serializeAws_json1_1CallbackURLsListType(input.CallbackURLs, context),
     })), (input.ClientId !== undefined && input.ClientId !== null && { ClientId: input.ClientId })), (input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName })), (input.DefaultRedirectURI !== undefined &&
-        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnableTokenRevocation !== undefined &&
+        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnablePropagateAdditionalUserContextData !== undefined &&
+        input.EnablePropagateAdditionalUserContextData !== null && {
+        EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+    })), (input.EnableTokenRevocation !== undefined &&
         input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation })), (input.ExplicitAuthFlows !== undefined &&
         input.ExplicitAuthFlows !== null && {
         ExplicitAuthFlows: serializeAws_json1_1ExplicitAuthFlowsListType(input.ExplicitAuthFlows, context),
@@ -10397,7 +10403,7 @@ var serializeAws_json1_1UserAttributeUpdateSettingsType = function (input, conte
     }));
 };
 var serializeAws_json1_1UserContextDataType = function (input, context) {
-    return __assign({}, (input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData }));
+    return __assign(__assign({}, (input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData })), (input.IpAddress !== undefined && input.IpAddress !== null && { IpAddress: input.IpAddress }));
 };
 var serializeAws_json1_1UsernameAttributesListType = function (input, context) {
     return input
@@ -12101,6 +12107,7 @@ var deserializeAws_json1_1UserPoolClientType = function (output, context) {
             ? __expectNonNull(__parseEpochTimestamp(__expectNumber(output.CreationDate)))
             : undefined,
         DefaultRedirectURI: __expectString(output.DefaultRedirectURI),
+        EnablePropagateAdditionalUserContextData: __expectBoolean(output.EnablePropagateAdditionalUserContextData),
         EnableTokenRevocation: __expectBoolean(output.EnableTokenRevocation),
         ExplicitAuthFlows: output.ExplicitAuthFlows !== undefined && output.ExplicitAuthFlows !== null
             ? deserializeAws_json1_1ExplicitAuthFlowsListType(output.ExplicitAuthFlows, context)

package/dist-types/CognitoIdentityProvider.d.ts

@@ -483,15 +483,22 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     /**
-     * <p>Returns a unique generated shared secret key code for the user account. The request
-     *             takes an access token or a session string, but not both.</p>
+     * <p>Begins setup of time-based one-time password multi-factor authentication (TOTP MFA)
+     *             for a user, with a unique private key that Amazon Cognito generates and returns in the API
+     *             response. You can authorize an <code>AssociateSoftwareToken</code> request with either
+     *             the user's access token, or a session string from a challenge response that you received
+     *             from Amazon Cognito.</p>
      *         <note>
-     *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software
-     *                 token from the user account. If the user doesn't subsequently verify the software
-     *                 token, their account is set up to authenticate without MFA. If MFA config is set to
-     *                 Optional at the user pool level, the user can then log in without MFA. However, if
-     *                 MFA is set to Required for the user pool, the user is asked to set up a new software
-     *                 token MFA during sign-in.</p>
+     *             <p>Amazon Cognito disassociates an existing software token when you verify the new token in a
+     *                     <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html"> VerifySoftwareToken</a> API request. If you don't verify the software
+     *                 token and your user pool doesn't require MFA, the user can then authenticate with
+     *                 user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito
+     *                 generates an <code>MFA_SETUP</code> or <code>SOFTWARE_TOKEN_SETUP</code> challenge
+     *                 each time your user signs. Complete setup with <code>AssociateSoftwareToken</code>
+     *                 and <code>VerifySoftwareToken</code>.</p>
+     *             <p>After you set up software token MFA for your user, Amazon Cognito generates a
+     *                     <code>SOFTWARE_TOKEN_MFA</code> challenge when they authenticate. Respond to
+     *                 this challenge with your user's TOTP.</p>
      *         </note>
      */
     associateSoftwareToken(args: AssociateSoftwareTokenCommandInput, options?: __HttpHandlerOptions): Promise<AssociateSoftwareTokenCommandOutput>;

package/dist-types/commands/AssociateSoftwareTokenCommand.d.ts

@@ -7,15 +7,22 @@ export interface AssociateSoftwareTokenCommandInput extends AssociateSoftwareTok
 export interface AssociateSoftwareTokenCommandOutput extends AssociateSoftwareTokenResponse, __MetadataBearer {
 }
 /**
- * <p>Returns a unique generated shared secret key code for the user account. The request
- *             takes an access token or a session string, but not both.</p>
+ * <p>Begins setup of time-based one-time password multi-factor authentication (TOTP MFA)
+ *             for a user, with a unique private key that Amazon Cognito generates and returns in the API
+ *             response. You can authorize an <code>AssociateSoftwareToken</code> request with either
+ *             the user's access token, or a session string from a challenge response that you received
+ *             from Amazon Cognito.</p>
  *         <note>
- *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software
- *                 token from the user account. If the user doesn't subsequently verify the software
- *                 token, their account is set up to authenticate without MFA. If MFA config is set to
- *                 Optional at the user pool level, the user can then log in without MFA. However, if
- *                 MFA is set to Required for the user pool, the user is asked to set up a new software
- *                 token MFA during sign-in.</p>
+ *             <p>Amazon Cognito disassociates an existing software token when you verify the new token in a
+ *                     <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html"> VerifySoftwareToken</a> API request. If you don't verify the software
+ *                 token and your user pool doesn't require MFA, the user can then authenticate with
+ *                 user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito
+ *                 generates an <code>MFA_SETUP</code> or <code>SOFTWARE_TOKEN_SETUP</code> challenge
+ *                 each time your user signs. Complete setup with <code>AssociateSoftwareToken</code>
+ *                 and <code>VerifySoftwareToken</code>.</p>
+ *             <p>After you set up software token MFA for your user, Amazon Cognito generates a
+ *                     <code>SOFTWARE_TOKEN_MFA</code> challenge when they authenticate. Respond to
+ *                 this challenge with your user's TOTP.</p>
  *         </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.