@aws-sdk/client-cognito-identity-provider 3.1119.0 → 3.1121.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/README.md +21 -0
  2. package/dist-cjs/index.js +94 -13
  3. package/dist-es/CognitoIdentityProvider.js +6 -0
  4. package/dist-es/commands/AdminDeleteSoftwareTokenCommand.js +4 -0
  5. package/dist-es/commands/DescribeTermsByClientCommand.js +4 -0
  6. package/dist-es/commands/GetClientTokenCommand.js +4 -0
  7. package/dist-es/commands/index.js +3 -0
  8. package/dist-es/models/errors.js +12 -12
  9. package/dist-es/schemas/schemas_0.js +56 -0
  10. package/dist-types/CognitoIdentityProvider.d.ts +21 -0
  11. package/dist-types/CognitoIdentityProviderClient.d.ts +5 -2
  12. package/dist-types/commands/AdminDeleteSoftwareTokenCommand.d.ts +122 -0
  13. package/dist-types/commands/DescribeTermsByClientCommand.d.ts +134 -0
  14. package/dist-types/commands/DescribeUserPoolDomainCommand.d.ts +6 -0
  15. package/dist-types/commands/GetClientTokenCommand.d.ts +144 -0
  16. package/dist-types/commands/SetUserPoolMfaConfigCommand.d.ts +2 -1
  17. package/dist-types/commands/SetUserSettingsCommand.d.ts +1 -1
  18. package/dist-types/commands/SignUpCommand.d.ts +1 -1
  19. package/dist-types/commands/StartUserImportJobCommand.d.ts +1 -1
  20. package/dist-types/commands/index.d.ts +3 -0
  21. package/dist-types/models/errors.d.ts +12 -12
  22. package/dist-types/models/models_0.d.ts +147 -237
  23. package/dist-types/models/models_1.d.ts +233 -1
  24. package/dist-types/schemas/schemas_0.d.ts +10 -0
  25. package/dist-types/ts3.4/CognitoIdentityProvider.d.ts +51 -0
  26. package/dist-types/ts3.4/CognitoIdentityProviderClient.d.ts +18 -0
  27. package/dist-types/ts3.4/commands/AdminDeleteSoftwareTokenCommand.d.ts +42 -0
  28. package/dist-types/ts3.4/commands/DescribeTermsByClientCommand.d.ts +39 -0
  29. package/dist-types/ts3.4/commands/GetClientTokenCommand.d.ts +38 -0
  30. package/dist-types/ts3.4/commands/SetUserPoolMfaConfigCommand.d.ts +2 -1
  31. package/dist-types/ts3.4/commands/SetUserSettingsCommand.d.ts +1 -1
  32. package/dist-types/ts3.4/commands/SignUpCommand.d.ts +1 -1
  33. package/dist-types/ts3.4/commands/StartUserImportJobCommand.d.ts +1 -1
  34. package/dist-types/ts3.4/commands/index.d.ts +3 -0
  35. package/dist-types/ts3.4/models/errors.d.ts +5 -5
  36. package/dist-types/ts3.4/models/models_0.d.ts +27 -36
  37. package/dist-types/ts3.4/models/models_1.d.ts +43 -0
  38. package/dist-types/ts3.4/schemas/schemas_0.d.ts +10 -0
  39. package/package.json +1 -1
@@ -862,6 +862,31 @@ export interface AdminCreateUserConfigType {
862
862
  */
863
863
  InviteMessageTemplate?: MessageTemplateType | undefined;
864
864
  }
865
+ /**
866
+ * @public
867
+ */
868
+ export interface AdminDeleteSoftwareTokenRequest {
869
+ /**
870
+ * <p>The ID of the user pool where you want to delete the user's software
871
+ * token.</p>
872
+ * @public
873
+ */
874
+ UserPoolId: string | undefined;
875
+ /**
876
+ * <p>The name of the user that you want to query or modify. The value of this parameter
877
+ * is typically your user's username, but it can be any of their alias attributes. If
878
+ * <code>username</code> isn't an alias attribute in your user pool, this value
879
+ * must be the <code>sub</code> of a local user or the username of a user from a
880
+ * third-party IdP.</p>
881
+ * @public
882
+ */
883
+ Username: string | undefined;
884
+ }
885
+ /**
886
+ * @public
887
+ */
888
+ export interface AdminDeleteSoftwareTokenResponse {
889
+ }
865
890
  /**
866
891
  * <p>Represents the request to delete a user as an administrator.</p>
867
892
  * @public
@@ -1825,11 +1850,6 @@ export interface AdminLinkProviderForUserRequest {
1825
1850
  * ignored.</p>
1826
1851
  * <p>The <code>ProviderName</code> should be set to <code>Cognito</code> for users in
1827
1852
  * Cognito user pools.</p>
1828
- * <important>
1829
- * <p>All attributes in the DestinationUser profile must be mutable. If you have
1830
- * assigned the user any immutable custom attributes, the operation won't
1831
- * succeed.</p>
1832
- * </important>
1833
1853
  * @public
1834
1854
  */
1835
1855
  DestinationUser: ProviderUserIdentifierType | undefined;
@@ -7702,6 +7722,38 @@ export interface DescribeTermsResponse {
7702
7722
  */
7703
7723
  Terms?: TermsType | undefined;
7704
7724
  }
7725
+ /**
7726
+ * @public
7727
+ */
7728
+ export interface DescribeTermsByClientRequest {
7729
+ /**
7730
+ * <p>The ID of the app client that the terms documents are associated with.</p>
7731
+ * @public
7732
+ */
7733
+ ClientId: string | undefined;
7734
+ /**
7735
+ * <p>The ID of the user pool that contains the terms documents that you want to
7736
+ * describe.</p>
7737
+ * @public
7738
+ */
7739
+ UserPoolId: string | undefined;
7740
+ /**
7741
+ * <p>The name of the terms documents that you want to describe.</p>
7742
+ * @public
7743
+ */
7744
+ TermsName: string | undefined;
7745
+ }
7746
+ /**
7747
+ * @public
7748
+ */
7749
+ export interface DescribeTermsByClientResponse {
7750
+ /**
7751
+ * <p>A summary of the requested terms documents. Includes a unique identifier for later
7752
+ * changes to the terms documents.</p>
7753
+ * @public
7754
+ */
7755
+ Terms?: TermsType | undefined;
7756
+ }
7705
7757
  /**
7706
7758
  * <p>Represents the request to describe the user import job.</p>
7707
7759
  * @public
@@ -7995,6 +8047,96 @@ export interface ForgotPasswordResponse {
7995
8047
  */
7996
8048
  CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
7997
8049
  }
8050
+ /**
8051
+ * @public
8052
+ */
8053
+ export interface GetClientTokenRequest {
8054
+ /**
8055
+ * <p>The ID of the app client that requests the access token. The app client must have a
8056
+ * client secret and the <code>ALLOW_CLIENT_TOKEN_AUTH</code> authentication flow.</p>
8057
+ * @public
8058
+ */
8059
+ ClientId: string | undefined;
8060
+ /**
8061
+ * <p>An active secret for the app client.</p>
8062
+ * @public
8063
+ */
8064
+ Secret: string | undefined;
8065
+ /**
8066
+ * <p>The custom scopes to authorize in the access token, in the format
8067
+ * <code>resource-server-identifier/scope-name</code>. Each scope must belong to a
8068
+ * resource server in your user pool. If you don't specify any scopes, Amazon Cognito authorizes the
8069
+ * scopes that are configured for the app client.</p>
8070
+ * @public
8071
+ */
8072
+ Scopes?: string[] | undefined;
8073
+ /**
8074
+ * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
8075
+ * that this action triggers. You create custom workflows by assigning Lambda functions
8076
+ * to user pool triggers.</p>
8077
+ * <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
8078
+ * function receives as input. This payload contains a <code>clientMetadata</code>
8079
+ * attribute that provides the data that you assigned to the ClientMetadata parameter in
8080
+ * your request. In your function code, you can process the <code>clientMetadata</code>
8081
+ * value to enhance your workflow for your specific needs.</p>
8082
+ * <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
8083
+ * Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
8084
+ * <note>
8085
+ * <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
8086
+ * following:</p>
8087
+ * <ul>
8088
+ * <li>
8089
+ * <p>Store the <code>ClientMetadata</code> value. This data is available only
8090
+ * to Lambda triggers that are assigned to a user pool to support custom
8091
+ * workflows. If your user pool configuration doesn't include triggers, the
8092
+ * <code>ClientMetadata</code> parameter serves no purpose.</p>
8093
+ * </li>
8094
+ * <li>
8095
+ * <p>Validate the <code>ClientMetadata</code> value.</p>
8096
+ * </li>
8097
+ * <li>
8098
+ * <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
8099
+ * information in this parameter.</p>
8100
+ * </li>
8101
+ * </ul>
8102
+ * </note>
8103
+ * @public
8104
+ */
8105
+ ClientMetadata?: Record<string, string> | undefined;
8106
+ }
8107
+ /**
8108
+ * <p>The access token and its metadata from a machine-to-machine (M2M) client credentials
8109
+ * grant.</p>
8110
+ * @public
8111
+ */
8112
+ export interface ClientAuthenticationResultType {
8113
+ /**
8114
+ * <p>The access token for the requested app client. Present this token to a resource server
8115
+ * to authorize a request, using the scopes granted in the token.</p>
8116
+ * @public
8117
+ */
8118
+ AccessToken?: string | undefined;
8119
+ /**
8120
+ * <p>The number of seconds until the access token expires.</p>
8121
+ * @public
8122
+ */
8123
+ ExpiresIn?: number | undefined;
8124
+ /**
8125
+ * <p>The type of the token. For example, <code>Bearer</code>.</p>
8126
+ * @public
8127
+ */
8128
+ TokenType?: string | undefined;
8129
+ }
8130
+ /**
8131
+ * @public
8132
+ */
8133
+ export interface GetClientTokenResponse {
8134
+ /**
8135
+ * <p>The access token that Amazon Cognito issues for the app client, and its metadata.</p>
8136
+ * @public
8137
+ */
8138
+ ClientAuthenticationResult?: ClientAuthenticationResultType | undefined;
8139
+ }
7998
8140
  /**
7999
8141
  * <p>Represents the request to get the header information of the CSV file for the user
8000
8142
  * import job.</p>
@@ -10966,235 +11108,3 @@ export interface SetUserPoolMfaConfigRequest {
10966
11108
  */
10967
11109
  WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
10968
11110
  }
10969
- /**
10970
- * @public
10971
- */
10972
- export interface SetUserPoolMfaConfigResponse {
10973
- /**
10974
- * <p>Shows user pool SMS message configuration for MFA and sign-in with SMS-message OTPs.
10975
- * Includes the message template and the SMS message sending configuration for
10976
- * Amazon SNS.</p>
10977
- * @public
10978
- */
10979
- SmsMfaConfiguration?: SmsMfaConfigType | undefined;
10980
- /**
10981
- * <p>Shows user pool configuration for time-based one-time password (TOTP) MFA. Includes
10982
- * TOTP enabled or disabled state.</p>
10983
- * @public
10984
- */
10985
- SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType | undefined;
10986
- /**
10987
- * <p>Shows configuration for user pool email message MFA and sign-in with one-time
10988
- * passwords (OTPs). Includes the subject and body of the email message template for
10989
- * sign-in and MFA messages. To activate this setting, your user pool must be in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html">
10990
- * Essentials tier</a> or higher.</p>
10991
- * @public
10992
- */
10993
- EmailMfaConfiguration?: EmailMfaConfigType | undefined;
10994
- /**
10995
- * <p>Displays multi-factor authentication (MFA) as on, off, or optional. When
10996
- * <code>ON</code>, all users must set up MFA before they can sign in. When
10997
- * <code>OPTIONAL</code>, your application must make a client-side determination of
10998
- * whether a user wants to register an MFA device. For user pools with adaptive
10999
- * authentication with threat protection, choose <code>OPTIONAL</code>.</p>
11000
- * <p>When <code>MfaConfiguration</code> is <code>OPTIONAL</code>, managed login
11001
- * doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in
11002
- * API responses and in managed login for users who have chosen and configured a preferred
11003
- * MFA factor.</p>
11004
- * @public
11005
- */
11006
- MfaConfiguration?: UserPoolMfaType | undefined;
11007
- /**
11008
- * <p>The configuration of your user pool for passkey, or WebAuthn, sign-in with
11009
- * authenticators such as biometric and security-key devices. Includes relying-party
11010
- * configuration and settings for user-verification requirements.</p>
11011
- * @public
11012
- */
11013
- WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
11014
- }
11015
- /**
11016
- * <p>Represents the request to set user settings.</p>
11017
- * @public
11018
- */
11019
- export interface SetUserSettingsRequest {
11020
- /**
11021
- * <p>A valid access token that Amazon Cognito issued to the currently signed-in user. Must include a scope claim for
11022
- * <code>aws.cognito.signin.user.admin</code>.</p>
11023
- * @public
11024
- */
11025
- AccessToken: string | undefined;
11026
- /**
11027
- * <p>You can use this parameter only to set an SMS configuration that uses SMS for
11028
- * delivery.</p>
11029
- * @public
11030
- */
11031
- MFAOptions: MFAOptionType[] | undefined;
11032
- }
11033
- /**
11034
- * <p>The response from the server for a set user settings request.</p>
11035
- * @public
11036
- */
11037
- export interface SetUserSettingsResponse {
11038
- }
11039
- /**
11040
- * <p>Represents the request to register a user.</p>
11041
- * @public
11042
- */
11043
- export interface SignUpRequest {
11044
- /**
11045
- * <p>The ID of the app client where the user wants to sign up.</p>
11046
- * @public
11047
- */
11048
- ClientId: string | undefined;
11049
- /**
11050
- * <p>A keyed-hash message authentication code (HMAC) calculated using the secret key of a
11051
- * user pool client and username plus the client ID in the message. For more information
11052
- * about <code>SecretHash</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#cognito-user-pools-computing-secret-hash">Computing secret hash values</a>.</p>
11053
- * @public
11054
- */
11055
- SecretHash?: string | undefined;
11056
- /**
11057
- * <p>The username of the user that you want to sign up. The value of this parameter is
11058
- * typically a username, but can be any alias attribute in your user pool.</p>
11059
- * @public
11060
- */
11061
- Username: string | undefined;
11062
- /**
11063
- * <p>The user's proposed password. The password must comply with the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/managing-users-passwords.html">password requirements</a> of your user pool.</p>
11064
- * <p>Users can sign up without a password when your user pool supports passwordless sign-in
11065
- * with email or SMS OTPs. To create a user with no password, omit this parameter or submit
11066
- * a blank value. You can only create a passwordless user when passwordless sign-in is
11067
- * available.</p>
11068
- * @public
11069
- */
11070
- Password?: string | undefined;
11071
- /**
11072
- * <p>An array of name-value pairs representing user attributes.</p>
11073
- * <p>For custom attributes, include a <code>custom:</code> prefix in the attribute name,
11074
- * for example <code>custom:department</code>.</p>
11075
- * @public
11076
- */
11077
- UserAttributes?: AttributeType[] | undefined;
11078
- /**
11079
- * <p>Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda
11080
- * trigger. This set of key-value pairs are for custom validation of information that you
11081
- * collect from your users but don't need to retain.</p>
11082
- * <p>Your Lambda function can analyze this additional data and act on it. Your function
11083
- * can automatically confirm and verify select users or perform external API operations
11084
- * like logging user attributes and validation data to Amazon CloudWatch Logs.</p>
11085
- * <p>For more information about the pre sign-up Lambda trigger, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">Pre sign-up Lambda trigger</a>.</p>
11086
- * @public
11087
- */
11088
- ValidationData?: AttributeType[] | undefined;
11089
- /**
11090
- * <p>Information that supports analytics outcomes with Amazon Pinpoint, including the
11091
- * user's endpoint ID. The endpoint ID is a destination for Amazon Pinpoint push notifications, for example a device identifier,
11092
- * email address, or phone number.</p>
11093
- * @public
11094
- */
11095
- AnalyticsMetadata?: AnalyticsMetadataType | undefined;
11096
- /**
11097
- * <p>Contextual data about your user session like the device fingerprint, IP address, or location. Amazon Cognito threat
11098
- * protection evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
11099
- * when it makes API requests.</p>
11100
- * <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-viewing-threat-protection-app.html">Collecting data for threat protection in
11101
- * applications</a>.</p>
11102
- * @public
11103
- */
11104
- UserContextData?: UserContextDataType | undefined;
11105
- /**
11106
- * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
11107
- * that this action triggers. You create custom workflows by assigning Lambda functions
11108
- * to user pool triggers.</p>
11109
- * <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
11110
- * function receives as input. This payload contains a <code>clientMetadata</code>
11111
- * attribute that provides the data that you assigned to the ClientMetadata parameter in
11112
- * your request. In your function code, you can process the <code>clientMetadata</code>
11113
- * value to enhance your workflow for your specific needs.</p>
11114
- * <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
11115
- * Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
11116
- * <note>
11117
- * <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
11118
- * following:</p>
11119
- * <ul>
11120
- * <li>
11121
- * <p>Store the <code>ClientMetadata</code> value. This data is available only
11122
- * to Lambda triggers that are assigned to a user pool to support custom
11123
- * workflows. If your user pool configuration doesn't include triggers, the
11124
- * <code>ClientMetadata</code> parameter serves no purpose.</p>
11125
- * </li>
11126
- * <li>
11127
- * <p>Validate the <code>ClientMetadata</code> value.</p>
11128
- * </li>
11129
- * <li>
11130
- * <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
11131
- * information in this parameter.</p>
11132
- * </li>
11133
- * </ul>
11134
- * </note>
11135
- * @public
11136
- */
11137
- ClientMetadata?: Record<string, string> | undefined;
11138
- }
11139
- /**
11140
- * <p>The response from the server for a registration request.</p>
11141
- * @public
11142
- */
11143
- export interface SignUpResponse {
11144
- /**
11145
- * <p>Indicates whether the user was automatically confirmed. You can auto-confirm users
11146
- * with a <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">pre sign-up Lambda trigger</a>.</p>
11147
- * @public
11148
- */
11149
- UserConfirmed: boolean | undefined;
11150
- /**
11151
- * <p>In user pools that automatically verify and confirm new users, Amazon Cognito sends users a
11152
- * message with a code or link that confirms ownership of the phone number or email address
11153
- * that they entered. The <code>CodeDeliveryDetails</code> object is information about the
11154
- * delivery destination for that link or code.</p>
11155
- * @public
11156
- */
11157
- CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
11158
- /**
11159
- * <p>The unique identifier of the new user, for example
11160
- * <code>a1b2c3d4-5678-90ab-cdef-EXAMPLE11111</code>.</p>
11161
- * @public
11162
- */
11163
- UserSub: string | undefined;
11164
- /**
11165
- * <p>A session Id that you can pass to <code>ConfirmSignUp</code> when you want to
11166
- * immediately sign in your user with the <code>USER_AUTH</code> flow after they complete
11167
- * sign-up.</p>
11168
- * @public
11169
- */
11170
- Session?: string | undefined;
11171
- }
11172
- /**
11173
- * <p>Represents the request to start the user import job.</p>
11174
- * @public
11175
- */
11176
- export interface StartUserImportJobRequest {
11177
- /**
11178
- * <p>The ID of the user pool that you want to start importing users into.</p>
11179
- * @public
11180
- */
11181
- UserPoolId: string | undefined;
11182
- /**
11183
- * <p>The ID of a user import job that you previously created.</p>
11184
- * @public
11185
- */
11186
- JobId: string | undefined;
11187
- }
11188
- /**
11189
- * <p>Represents the response from the server to the request to start the user import
11190
- * job.</p>
11191
- * @public
11192
- */
11193
- export interface StartUserImportJobResponse {
11194
- /**
11195
- * <p>The details of the user import job. Includes logging destination, status, and the Amazon S3
11196
- * pre-signed URL for CSV upload.</p>
11197
- * @public
11198
- */
11199
- UserImportJob?: UserImportJobType | undefined;
11200
- }
@@ -1,6 +1,238 @@
1
1
  import type { DocumentType as __DocumentType } from "@smithy/types";
2
2
  import type { DeletionProtectionType, DeviceRememberedStatusType, ExplicitAuthFlowsType, FeedbackValueType, OAuthFlowType, PreventUserExistenceErrorTypes, TermsEnforcementType, TermsSourceType, UpdateReplicaStatusType, UserPoolMfaType, UserPoolTierType, VerifiedAttributeType, VerifySoftwareTokenResponseType } from "./enums";
3
- import type { AccountRecoverySettingType, AdminCreateUserConfigType, AnalyticsConfigurationType, AssetType, AttributeType, CodeDeliveryDetailsType, CustomDomainConfigType, DeviceConfigurationType, EmailConfigurationType, GroupType, IdentityProviderType, IssuerConfigurationType, KeyConfigurationType, LambdaConfigType, LimitDefinitionType, LimitType, ManagedLoginBrandingType, RefreshTokenRotationType, ResourceServerScopeType, ResourceServerType, RoutingType, SmsConfigurationType, TermsType, TokenValidityUnitsType, UserAttributeUpdateSettingsType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolPolicyType, UserPoolReplicaType, VerificationMessageTemplateType } from "./models_0";
3
+ import type { AccountRecoverySettingType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AssetType, AttributeType, CodeDeliveryDetailsType, CustomDomainConfigType, DeviceConfigurationType, EmailConfigurationType, EmailMfaConfigType, GroupType, IdentityProviderType, IssuerConfigurationType, KeyConfigurationType, LambdaConfigType, LimitDefinitionType, LimitType, ManagedLoginBrandingType, MFAOptionType, RefreshTokenRotationType, ResourceServerScopeType, ResourceServerType, RoutingType, SmsConfigurationType, SmsMfaConfigType, SoftwareTokenMfaConfigType, TermsType, TokenValidityUnitsType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolPolicyType, UserPoolReplicaType, VerificationMessageTemplateType, WebAuthnConfigurationType } from "./models_0";
4
+ /**
5
+ * @public
6
+ */
7
+ export interface SetUserPoolMfaConfigResponse {
8
+ /**
9
+ * <p>Shows user pool SMS message configuration for MFA and sign-in with SMS-message OTPs.
10
+ * Includes the message template and the SMS message sending configuration for
11
+ * Amazon SNS.</p>
12
+ * @public
13
+ */
14
+ SmsMfaConfiguration?: SmsMfaConfigType | undefined;
15
+ /**
16
+ * <p>Shows user pool configuration for time-based one-time password (TOTP) MFA. Includes
17
+ * TOTP enabled or disabled state.</p>
18
+ * @public
19
+ */
20
+ SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType | undefined;
21
+ /**
22
+ * <p>Shows configuration for user pool email message MFA and sign-in with one-time
23
+ * passwords (OTPs). Includes the subject and body of the email message template for
24
+ * sign-in and MFA messages. To activate this setting, your user pool must be in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html">
25
+ * Essentials tier</a> or higher.</p>
26
+ * @public
27
+ */
28
+ EmailMfaConfiguration?: EmailMfaConfigType | undefined;
29
+ /**
30
+ * <p>Displays multi-factor authentication (MFA) as on, off, or optional. When
31
+ * <code>ON</code>, all users must set up MFA before they can sign in. When
32
+ * <code>OPTIONAL</code>, your application must make a client-side determination of
33
+ * whether a user wants to register an MFA device. For user pools with adaptive
34
+ * authentication with threat protection, choose <code>OPTIONAL</code>.</p>
35
+ * <p>When <code>MfaConfiguration</code> is <code>OPTIONAL</code>, managed login
36
+ * doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in
37
+ * API responses and in managed login for users who have chosen and configured a preferred
38
+ * MFA factor.</p>
39
+ * @public
40
+ */
41
+ MfaConfiguration?: UserPoolMfaType | undefined;
42
+ /**
43
+ * <p>The configuration of your user pool for passkey, or WebAuthn, sign-in with
44
+ * authenticators such as biometric and security-key devices. Includes relying-party
45
+ * configuration and settings for user-verification requirements.</p>
46
+ * @public
47
+ */
48
+ WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
49
+ }
50
+ /**
51
+ * <p>Represents the request to set user settings.</p>
52
+ * @public
53
+ */
54
+ export interface SetUserSettingsRequest {
55
+ /**
56
+ * <p>A valid access token that Amazon Cognito issued to the currently signed-in user. Must include a scope claim for
57
+ * <code>aws.cognito.signin.user.admin</code>.</p>
58
+ * @public
59
+ */
60
+ AccessToken: string | undefined;
61
+ /**
62
+ * <p>You can use this parameter only to set an SMS configuration that uses SMS for
63
+ * delivery.</p>
64
+ * @public
65
+ */
66
+ MFAOptions: MFAOptionType[] | undefined;
67
+ }
68
+ /**
69
+ * <p>The response from the server for a set user settings request.</p>
70
+ * @public
71
+ */
72
+ export interface SetUserSettingsResponse {
73
+ }
74
+ /**
75
+ * <p>Represents the request to register a user.</p>
76
+ * @public
77
+ */
78
+ export interface SignUpRequest {
79
+ /**
80
+ * <p>The ID of the app client where the user wants to sign up.</p>
81
+ * @public
82
+ */
83
+ ClientId: string | undefined;
84
+ /**
85
+ * <p>A keyed-hash message authentication code (HMAC) calculated using the secret key of a
86
+ * user pool client and username plus the client ID in the message. For more information
87
+ * about <code>SecretHash</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#cognito-user-pools-computing-secret-hash">Computing secret hash values</a>.</p>
88
+ * @public
89
+ */
90
+ SecretHash?: string | undefined;
91
+ /**
92
+ * <p>The username of the user that you want to sign up. The value of this parameter is
93
+ * typically a username, but can be any alias attribute in your user pool.</p>
94
+ * @public
95
+ */
96
+ Username: string | undefined;
97
+ /**
98
+ * <p>The user's proposed password. The password must comply with the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/managing-users-passwords.html">password requirements</a> of your user pool.</p>
99
+ * <p>Users can sign up without a password when your user pool supports passwordless sign-in
100
+ * with email or SMS OTPs. To create a user with no password, omit this parameter or submit
101
+ * a blank value. You can only create a passwordless user when passwordless sign-in is
102
+ * available.</p>
103
+ * @public
104
+ */
105
+ Password?: string | undefined;
106
+ /**
107
+ * <p>An array of name-value pairs representing user attributes.</p>
108
+ * <p>For custom attributes, include a <code>custom:</code> prefix in the attribute name,
109
+ * for example <code>custom:department</code>.</p>
110
+ * @public
111
+ */
112
+ UserAttributes?: AttributeType[] | undefined;
113
+ /**
114
+ * <p>Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda
115
+ * trigger. This set of key-value pairs are for custom validation of information that you
116
+ * collect from your users but don't need to retain.</p>
117
+ * <p>Your Lambda function can analyze this additional data and act on it. Your function
118
+ * can automatically confirm and verify select users or perform external API operations
119
+ * like logging user attributes and validation data to Amazon CloudWatch Logs.</p>
120
+ * <p>For more information about the pre sign-up Lambda trigger, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">Pre sign-up Lambda trigger</a>.</p>
121
+ * @public
122
+ */
123
+ ValidationData?: AttributeType[] | undefined;
124
+ /**
125
+ * <p>Information that supports analytics outcomes with Amazon Pinpoint, including the
126
+ * user's endpoint ID. The endpoint ID is a destination for Amazon Pinpoint push notifications, for example a device identifier,
127
+ * email address, or phone number.</p>
128
+ * @public
129
+ */
130
+ AnalyticsMetadata?: AnalyticsMetadataType | undefined;
131
+ /**
132
+ * <p>Contextual data about your user session like the device fingerprint, IP address, or location. Amazon Cognito threat
133
+ * protection evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
134
+ * when it makes API requests.</p>
135
+ * <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-viewing-threat-protection-app.html">Collecting data for threat protection in
136
+ * applications</a>.</p>
137
+ * @public
138
+ */
139
+ UserContextData?: UserContextDataType | undefined;
140
+ /**
141
+ * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
142
+ * that this action triggers. You create custom workflows by assigning Lambda functions
143
+ * to user pool triggers.</p>
144
+ * <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
145
+ * function receives as input. This payload contains a <code>clientMetadata</code>
146
+ * attribute that provides the data that you assigned to the ClientMetadata parameter in
147
+ * your request. In your function code, you can process the <code>clientMetadata</code>
148
+ * value to enhance your workflow for your specific needs.</p>
149
+ * <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
150
+ * Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
151
+ * <note>
152
+ * <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
153
+ * following:</p>
154
+ * <ul>
155
+ * <li>
156
+ * <p>Store the <code>ClientMetadata</code> value. This data is available only
157
+ * to Lambda triggers that are assigned to a user pool to support custom
158
+ * workflows. If your user pool configuration doesn't include triggers, the
159
+ * <code>ClientMetadata</code> parameter serves no purpose.</p>
160
+ * </li>
161
+ * <li>
162
+ * <p>Validate the <code>ClientMetadata</code> value.</p>
163
+ * </li>
164
+ * <li>
165
+ * <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
166
+ * information in this parameter.</p>
167
+ * </li>
168
+ * </ul>
169
+ * </note>
170
+ * @public
171
+ */
172
+ ClientMetadata?: Record<string, string> | undefined;
173
+ }
174
+ /**
175
+ * <p>The response from the server for a registration request.</p>
176
+ * @public
177
+ */
178
+ export interface SignUpResponse {
179
+ /**
180
+ * <p>Indicates whether the user was automatically confirmed. You can auto-confirm users
181
+ * with a <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">pre sign-up Lambda trigger</a>.</p>
182
+ * @public
183
+ */
184
+ UserConfirmed: boolean | undefined;
185
+ /**
186
+ * <p>In user pools that automatically verify and confirm new users, Amazon Cognito sends users a
187
+ * message with a code or link that confirms ownership of the phone number or email address
188
+ * that they entered. The <code>CodeDeliveryDetails</code> object is information about the
189
+ * delivery destination for that link or code.</p>
190
+ * @public
191
+ */
192
+ CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
193
+ /**
194
+ * <p>The unique identifier of the new user, for example
195
+ * <code>a1b2c3d4-5678-90ab-cdef-EXAMPLE11111</code>.</p>
196
+ * @public
197
+ */
198
+ UserSub: string | undefined;
199
+ /**
200
+ * <p>A session Id that you can pass to <code>ConfirmSignUp</code> when you want to
201
+ * immediately sign in your user with the <code>USER_AUTH</code> flow after they complete
202
+ * sign-up.</p>
203
+ * @public
204
+ */
205
+ Session?: string | undefined;
206
+ }
207
+ /**
208
+ * <p>Represents the request to start the user import job.</p>
209
+ * @public
210
+ */
211
+ export interface StartUserImportJobRequest {
212
+ /**
213
+ * <p>The ID of the user pool that you want to start importing users into.</p>
214
+ * @public
215
+ */
216
+ UserPoolId: string | undefined;
217
+ /**
218
+ * <p>The ID of a user import job that you previously created.</p>
219
+ * @public
220
+ */
221
+ JobId: string | undefined;
222
+ }
223
+ /**
224
+ * <p>Represents the response from the server to the request to start the user import
225
+ * job.</p>
226
+ * @public
227
+ */
228
+ export interface StartUserImportJobResponse {
229
+ /**
230
+ * <p>The details of the user import job. Includes logging destination, status, and the Amazon S3
231
+ * pre-signed URL for CSV upload.</p>
232
+ * @public
233
+ */
234
+ UserImportJob?: UserImportJobType | undefined;
235
+ }
4
236
  /**
5
237
  * @public
6
238
  */