@aws-sdk/client-cognito-identity-provider 3.1119.0 → 3.1121.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -0
- package/dist-cjs/index.js +94 -13
- package/dist-es/CognitoIdentityProvider.js +6 -0
- package/dist-es/commands/AdminDeleteSoftwareTokenCommand.js +4 -0
- package/dist-es/commands/DescribeTermsByClientCommand.js +4 -0
- package/dist-es/commands/GetClientTokenCommand.js +4 -0
- package/dist-es/commands/index.js +3 -0
- package/dist-es/models/errors.js +12 -12
- package/dist-es/schemas/schemas_0.js +56 -0
- package/dist-types/CognitoIdentityProvider.d.ts +21 -0
- package/dist-types/CognitoIdentityProviderClient.d.ts +5 -2
- package/dist-types/commands/AdminDeleteSoftwareTokenCommand.d.ts +122 -0
- package/dist-types/commands/DescribeTermsByClientCommand.d.ts +134 -0
- package/dist-types/commands/DescribeUserPoolDomainCommand.d.ts +6 -0
- package/dist-types/commands/GetClientTokenCommand.d.ts +144 -0
- package/dist-types/commands/SetUserPoolMfaConfigCommand.d.ts +2 -1
- package/dist-types/commands/SetUserSettingsCommand.d.ts +1 -1
- package/dist-types/commands/SignUpCommand.d.ts +1 -1
- package/dist-types/commands/StartUserImportJobCommand.d.ts +1 -1
- package/dist-types/commands/index.d.ts +3 -0
- package/dist-types/models/errors.d.ts +12 -12
- package/dist-types/models/models_0.d.ts +147 -237
- package/dist-types/models/models_1.d.ts +233 -1
- package/dist-types/schemas/schemas_0.d.ts +10 -0
- package/dist-types/ts3.4/CognitoIdentityProvider.d.ts +51 -0
- package/dist-types/ts3.4/CognitoIdentityProviderClient.d.ts +18 -0
- package/dist-types/ts3.4/commands/AdminDeleteSoftwareTokenCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/DescribeTermsByClientCommand.d.ts +39 -0
- package/dist-types/ts3.4/commands/GetClientTokenCommand.d.ts +38 -0
- package/dist-types/ts3.4/commands/SetUserPoolMfaConfigCommand.d.ts +2 -1
- package/dist-types/ts3.4/commands/SetUserSettingsCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/SignUpCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/StartUserImportJobCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/index.d.ts +3 -0
- package/dist-types/ts3.4/models/errors.d.ts +5 -5
- package/dist-types/ts3.4/models/models_0.d.ts +27 -36
- package/dist-types/ts3.4/models/models_1.d.ts +43 -0
- package/dist-types/ts3.4/schemas/schemas_0.d.ts +10 -0
- package/package.json +1 -1
|
@@ -862,6 +862,31 @@ export interface AdminCreateUserConfigType {
|
|
|
862
862
|
*/
|
|
863
863
|
InviteMessageTemplate?: MessageTemplateType | undefined;
|
|
864
864
|
}
|
|
865
|
+
/**
|
|
866
|
+
* @public
|
|
867
|
+
*/
|
|
868
|
+
export interface AdminDeleteSoftwareTokenRequest {
|
|
869
|
+
/**
|
|
870
|
+
* <p>The ID of the user pool where you want to delete the user's software
|
|
871
|
+
* token.</p>
|
|
872
|
+
* @public
|
|
873
|
+
*/
|
|
874
|
+
UserPoolId: string | undefined;
|
|
875
|
+
/**
|
|
876
|
+
* <p>The name of the user that you want to query or modify. The value of this parameter
|
|
877
|
+
* is typically your user's username, but it can be any of their alias attributes. If
|
|
878
|
+
* <code>username</code> isn't an alias attribute in your user pool, this value
|
|
879
|
+
* must be the <code>sub</code> of a local user or the username of a user from a
|
|
880
|
+
* third-party IdP.</p>
|
|
881
|
+
* @public
|
|
882
|
+
*/
|
|
883
|
+
Username: string | undefined;
|
|
884
|
+
}
|
|
885
|
+
/**
|
|
886
|
+
* @public
|
|
887
|
+
*/
|
|
888
|
+
export interface AdminDeleteSoftwareTokenResponse {
|
|
889
|
+
}
|
|
865
890
|
/**
|
|
866
891
|
* <p>Represents the request to delete a user as an administrator.</p>
|
|
867
892
|
* @public
|
|
@@ -1825,11 +1850,6 @@ export interface AdminLinkProviderForUserRequest {
|
|
|
1825
1850
|
* ignored.</p>
|
|
1826
1851
|
* <p>The <code>ProviderName</code> should be set to <code>Cognito</code> for users in
|
|
1827
1852
|
* Cognito user pools.</p>
|
|
1828
|
-
* <important>
|
|
1829
|
-
* <p>All attributes in the DestinationUser profile must be mutable. If you have
|
|
1830
|
-
* assigned the user any immutable custom attributes, the operation won't
|
|
1831
|
-
* succeed.</p>
|
|
1832
|
-
* </important>
|
|
1833
1853
|
* @public
|
|
1834
1854
|
*/
|
|
1835
1855
|
DestinationUser: ProviderUserIdentifierType | undefined;
|
|
@@ -7702,6 +7722,38 @@ export interface DescribeTermsResponse {
|
|
|
7702
7722
|
*/
|
|
7703
7723
|
Terms?: TermsType | undefined;
|
|
7704
7724
|
}
|
|
7725
|
+
/**
|
|
7726
|
+
* @public
|
|
7727
|
+
*/
|
|
7728
|
+
export interface DescribeTermsByClientRequest {
|
|
7729
|
+
/**
|
|
7730
|
+
* <p>The ID of the app client that the terms documents are associated with.</p>
|
|
7731
|
+
* @public
|
|
7732
|
+
*/
|
|
7733
|
+
ClientId: string | undefined;
|
|
7734
|
+
/**
|
|
7735
|
+
* <p>The ID of the user pool that contains the terms documents that you want to
|
|
7736
|
+
* describe.</p>
|
|
7737
|
+
* @public
|
|
7738
|
+
*/
|
|
7739
|
+
UserPoolId: string | undefined;
|
|
7740
|
+
/**
|
|
7741
|
+
* <p>The name of the terms documents that you want to describe.</p>
|
|
7742
|
+
* @public
|
|
7743
|
+
*/
|
|
7744
|
+
TermsName: string | undefined;
|
|
7745
|
+
}
|
|
7746
|
+
/**
|
|
7747
|
+
* @public
|
|
7748
|
+
*/
|
|
7749
|
+
export interface DescribeTermsByClientResponse {
|
|
7750
|
+
/**
|
|
7751
|
+
* <p>A summary of the requested terms documents. Includes a unique identifier for later
|
|
7752
|
+
* changes to the terms documents.</p>
|
|
7753
|
+
* @public
|
|
7754
|
+
*/
|
|
7755
|
+
Terms?: TermsType | undefined;
|
|
7756
|
+
}
|
|
7705
7757
|
/**
|
|
7706
7758
|
* <p>Represents the request to describe the user import job.</p>
|
|
7707
7759
|
* @public
|
|
@@ -7995,6 +8047,96 @@ export interface ForgotPasswordResponse {
|
|
|
7995
8047
|
*/
|
|
7996
8048
|
CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
|
|
7997
8049
|
}
|
|
8050
|
+
/**
|
|
8051
|
+
* @public
|
|
8052
|
+
*/
|
|
8053
|
+
export interface GetClientTokenRequest {
|
|
8054
|
+
/**
|
|
8055
|
+
* <p>The ID of the app client that requests the access token. The app client must have a
|
|
8056
|
+
* client secret and the <code>ALLOW_CLIENT_TOKEN_AUTH</code> authentication flow.</p>
|
|
8057
|
+
* @public
|
|
8058
|
+
*/
|
|
8059
|
+
ClientId: string | undefined;
|
|
8060
|
+
/**
|
|
8061
|
+
* <p>An active secret for the app client.</p>
|
|
8062
|
+
* @public
|
|
8063
|
+
*/
|
|
8064
|
+
Secret: string | undefined;
|
|
8065
|
+
/**
|
|
8066
|
+
* <p>The custom scopes to authorize in the access token, in the format
|
|
8067
|
+
* <code>resource-server-identifier/scope-name</code>. Each scope must belong to a
|
|
8068
|
+
* resource server in your user pool. If you don't specify any scopes, Amazon Cognito authorizes the
|
|
8069
|
+
* scopes that are configured for the app client.</p>
|
|
8070
|
+
* @public
|
|
8071
|
+
*/
|
|
8072
|
+
Scopes?: string[] | undefined;
|
|
8073
|
+
/**
|
|
8074
|
+
* <p>A map of custom key-value pairs that you can provide as input for any custom workflows
|
|
8075
|
+
* that this action triggers. You create custom workflows by assigning Lambda functions
|
|
8076
|
+
* to user pool triggers.</p>
|
|
8077
|
+
* <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
|
|
8078
|
+
* function receives as input. This payload contains a <code>clientMetadata</code>
|
|
8079
|
+
* attribute that provides the data that you assigned to the ClientMetadata parameter in
|
|
8080
|
+
* your request. In your function code, you can process the <code>clientMetadata</code>
|
|
8081
|
+
* value to enhance your workflow for your specific needs.</p>
|
|
8082
|
+
* <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
|
|
8083
|
+
* Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
8084
|
+
* <note>
|
|
8085
|
+
* <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
|
|
8086
|
+
* following:</p>
|
|
8087
|
+
* <ul>
|
|
8088
|
+
* <li>
|
|
8089
|
+
* <p>Store the <code>ClientMetadata</code> value. This data is available only
|
|
8090
|
+
* to Lambda triggers that are assigned to a user pool to support custom
|
|
8091
|
+
* workflows. If your user pool configuration doesn't include triggers, the
|
|
8092
|
+
* <code>ClientMetadata</code> parameter serves no purpose.</p>
|
|
8093
|
+
* </li>
|
|
8094
|
+
* <li>
|
|
8095
|
+
* <p>Validate the <code>ClientMetadata</code> value.</p>
|
|
8096
|
+
* </li>
|
|
8097
|
+
* <li>
|
|
8098
|
+
* <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
|
|
8099
|
+
* information in this parameter.</p>
|
|
8100
|
+
* </li>
|
|
8101
|
+
* </ul>
|
|
8102
|
+
* </note>
|
|
8103
|
+
* @public
|
|
8104
|
+
*/
|
|
8105
|
+
ClientMetadata?: Record<string, string> | undefined;
|
|
8106
|
+
}
|
|
8107
|
+
/**
|
|
8108
|
+
* <p>The access token and its metadata from a machine-to-machine (M2M) client credentials
|
|
8109
|
+
* grant.</p>
|
|
8110
|
+
* @public
|
|
8111
|
+
*/
|
|
8112
|
+
export interface ClientAuthenticationResultType {
|
|
8113
|
+
/**
|
|
8114
|
+
* <p>The access token for the requested app client. Present this token to a resource server
|
|
8115
|
+
* to authorize a request, using the scopes granted in the token.</p>
|
|
8116
|
+
* @public
|
|
8117
|
+
*/
|
|
8118
|
+
AccessToken?: string | undefined;
|
|
8119
|
+
/**
|
|
8120
|
+
* <p>The number of seconds until the access token expires.</p>
|
|
8121
|
+
* @public
|
|
8122
|
+
*/
|
|
8123
|
+
ExpiresIn?: number | undefined;
|
|
8124
|
+
/**
|
|
8125
|
+
* <p>The type of the token. For example, <code>Bearer</code>.</p>
|
|
8126
|
+
* @public
|
|
8127
|
+
*/
|
|
8128
|
+
TokenType?: string | undefined;
|
|
8129
|
+
}
|
|
8130
|
+
/**
|
|
8131
|
+
* @public
|
|
8132
|
+
*/
|
|
8133
|
+
export interface GetClientTokenResponse {
|
|
8134
|
+
/**
|
|
8135
|
+
* <p>The access token that Amazon Cognito issues for the app client, and its metadata.</p>
|
|
8136
|
+
* @public
|
|
8137
|
+
*/
|
|
8138
|
+
ClientAuthenticationResult?: ClientAuthenticationResultType | undefined;
|
|
8139
|
+
}
|
|
7998
8140
|
/**
|
|
7999
8141
|
* <p>Represents the request to get the header information of the CSV file for the user
|
|
8000
8142
|
* import job.</p>
|
|
@@ -10966,235 +11108,3 @@ export interface SetUserPoolMfaConfigRequest {
|
|
|
10966
11108
|
*/
|
|
10967
11109
|
WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
|
|
10968
11110
|
}
|
|
10969
|
-
/**
|
|
10970
|
-
* @public
|
|
10971
|
-
*/
|
|
10972
|
-
export interface SetUserPoolMfaConfigResponse {
|
|
10973
|
-
/**
|
|
10974
|
-
* <p>Shows user pool SMS message configuration for MFA and sign-in with SMS-message OTPs.
|
|
10975
|
-
* Includes the message template and the SMS message sending configuration for
|
|
10976
|
-
* Amazon SNS.</p>
|
|
10977
|
-
* @public
|
|
10978
|
-
*/
|
|
10979
|
-
SmsMfaConfiguration?: SmsMfaConfigType | undefined;
|
|
10980
|
-
/**
|
|
10981
|
-
* <p>Shows user pool configuration for time-based one-time password (TOTP) MFA. Includes
|
|
10982
|
-
* TOTP enabled or disabled state.</p>
|
|
10983
|
-
* @public
|
|
10984
|
-
*/
|
|
10985
|
-
SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType | undefined;
|
|
10986
|
-
/**
|
|
10987
|
-
* <p>Shows configuration for user pool email message MFA and sign-in with one-time
|
|
10988
|
-
* passwords (OTPs). Includes the subject and body of the email message template for
|
|
10989
|
-
* sign-in and MFA messages. To activate this setting, your user pool must be in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html">
|
|
10990
|
-
* Essentials tier</a> or higher.</p>
|
|
10991
|
-
* @public
|
|
10992
|
-
*/
|
|
10993
|
-
EmailMfaConfiguration?: EmailMfaConfigType | undefined;
|
|
10994
|
-
/**
|
|
10995
|
-
* <p>Displays multi-factor authentication (MFA) as on, off, or optional. When
|
|
10996
|
-
* <code>ON</code>, all users must set up MFA before they can sign in. When
|
|
10997
|
-
* <code>OPTIONAL</code>, your application must make a client-side determination of
|
|
10998
|
-
* whether a user wants to register an MFA device. For user pools with adaptive
|
|
10999
|
-
* authentication with threat protection, choose <code>OPTIONAL</code>.</p>
|
|
11000
|
-
* <p>When <code>MfaConfiguration</code> is <code>OPTIONAL</code>, managed login
|
|
11001
|
-
* doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in
|
|
11002
|
-
* API responses and in managed login for users who have chosen and configured a preferred
|
|
11003
|
-
* MFA factor.</p>
|
|
11004
|
-
* @public
|
|
11005
|
-
*/
|
|
11006
|
-
MfaConfiguration?: UserPoolMfaType | undefined;
|
|
11007
|
-
/**
|
|
11008
|
-
* <p>The configuration of your user pool for passkey, or WebAuthn, sign-in with
|
|
11009
|
-
* authenticators such as biometric and security-key devices. Includes relying-party
|
|
11010
|
-
* configuration and settings for user-verification requirements.</p>
|
|
11011
|
-
* @public
|
|
11012
|
-
*/
|
|
11013
|
-
WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
|
|
11014
|
-
}
|
|
11015
|
-
/**
|
|
11016
|
-
* <p>Represents the request to set user settings.</p>
|
|
11017
|
-
* @public
|
|
11018
|
-
*/
|
|
11019
|
-
export interface SetUserSettingsRequest {
|
|
11020
|
-
/**
|
|
11021
|
-
* <p>A valid access token that Amazon Cognito issued to the currently signed-in user. Must include a scope claim for
|
|
11022
|
-
* <code>aws.cognito.signin.user.admin</code>.</p>
|
|
11023
|
-
* @public
|
|
11024
|
-
*/
|
|
11025
|
-
AccessToken: string | undefined;
|
|
11026
|
-
/**
|
|
11027
|
-
* <p>You can use this parameter only to set an SMS configuration that uses SMS for
|
|
11028
|
-
* delivery.</p>
|
|
11029
|
-
* @public
|
|
11030
|
-
*/
|
|
11031
|
-
MFAOptions: MFAOptionType[] | undefined;
|
|
11032
|
-
}
|
|
11033
|
-
/**
|
|
11034
|
-
* <p>The response from the server for a set user settings request.</p>
|
|
11035
|
-
* @public
|
|
11036
|
-
*/
|
|
11037
|
-
export interface SetUserSettingsResponse {
|
|
11038
|
-
}
|
|
11039
|
-
/**
|
|
11040
|
-
* <p>Represents the request to register a user.</p>
|
|
11041
|
-
* @public
|
|
11042
|
-
*/
|
|
11043
|
-
export interface SignUpRequest {
|
|
11044
|
-
/**
|
|
11045
|
-
* <p>The ID of the app client where the user wants to sign up.</p>
|
|
11046
|
-
* @public
|
|
11047
|
-
*/
|
|
11048
|
-
ClientId: string | undefined;
|
|
11049
|
-
/**
|
|
11050
|
-
* <p>A keyed-hash message authentication code (HMAC) calculated using the secret key of a
|
|
11051
|
-
* user pool client and username plus the client ID in the message. For more information
|
|
11052
|
-
* about <code>SecretHash</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#cognito-user-pools-computing-secret-hash">Computing secret hash values</a>.</p>
|
|
11053
|
-
* @public
|
|
11054
|
-
*/
|
|
11055
|
-
SecretHash?: string | undefined;
|
|
11056
|
-
/**
|
|
11057
|
-
* <p>The username of the user that you want to sign up. The value of this parameter is
|
|
11058
|
-
* typically a username, but can be any alias attribute in your user pool.</p>
|
|
11059
|
-
* @public
|
|
11060
|
-
*/
|
|
11061
|
-
Username: string | undefined;
|
|
11062
|
-
/**
|
|
11063
|
-
* <p>The user's proposed password. The password must comply with the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/managing-users-passwords.html">password requirements</a> of your user pool.</p>
|
|
11064
|
-
* <p>Users can sign up without a password when your user pool supports passwordless sign-in
|
|
11065
|
-
* with email or SMS OTPs. To create a user with no password, omit this parameter or submit
|
|
11066
|
-
* a blank value. You can only create a passwordless user when passwordless sign-in is
|
|
11067
|
-
* available.</p>
|
|
11068
|
-
* @public
|
|
11069
|
-
*/
|
|
11070
|
-
Password?: string | undefined;
|
|
11071
|
-
/**
|
|
11072
|
-
* <p>An array of name-value pairs representing user attributes.</p>
|
|
11073
|
-
* <p>For custom attributes, include a <code>custom:</code> prefix in the attribute name,
|
|
11074
|
-
* for example <code>custom:department</code>.</p>
|
|
11075
|
-
* @public
|
|
11076
|
-
*/
|
|
11077
|
-
UserAttributes?: AttributeType[] | undefined;
|
|
11078
|
-
/**
|
|
11079
|
-
* <p>Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda
|
|
11080
|
-
* trigger. This set of key-value pairs are for custom validation of information that you
|
|
11081
|
-
* collect from your users but don't need to retain.</p>
|
|
11082
|
-
* <p>Your Lambda function can analyze this additional data and act on it. Your function
|
|
11083
|
-
* can automatically confirm and verify select users or perform external API operations
|
|
11084
|
-
* like logging user attributes and validation data to Amazon CloudWatch Logs.</p>
|
|
11085
|
-
* <p>For more information about the pre sign-up Lambda trigger, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">Pre sign-up Lambda trigger</a>.</p>
|
|
11086
|
-
* @public
|
|
11087
|
-
*/
|
|
11088
|
-
ValidationData?: AttributeType[] | undefined;
|
|
11089
|
-
/**
|
|
11090
|
-
* <p>Information that supports analytics outcomes with Amazon Pinpoint, including the
|
|
11091
|
-
* user's endpoint ID. The endpoint ID is a destination for Amazon Pinpoint push notifications, for example a device identifier,
|
|
11092
|
-
* email address, or phone number.</p>
|
|
11093
|
-
* @public
|
|
11094
|
-
*/
|
|
11095
|
-
AnalyticsMetadata?: AnalyticsMetadataType | undefined;
|
|
11096
|
-
/**
|
|
11097
|
-
* <p>Contextual data about your user session like the device fingerprint, IP address, or location. Amazon Cognito threat
|
|
11098
|
-
* protection evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
|
|
11099
|
-
* when it makes API requests.</p>
|
|
11100
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-viewing-threat-protection-app.html">Collecting data for threat protection in
|
|
11101
|
-
* applications</a>.</p>
|
|
11102
|
-
* @public
|
|
11103
|
-
*/
|
|
11104
|
-
UserContextData?: UserContextDataType | undefined;
|
|
11105
|
-
/**
|
|
11106
|
-
* <p>A map of custom key-value pairs that you can provide as input for any custom workflows
|
|
11107
|
-
* that this action triggers. You create custom workflows by assigning Lambda functions
|
|
11108
|
-
* to user pool triggers.</p>
|
|
11109
|
-
* <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
|
|
11110
|
-
* function receives as input. This payload contains a <code>clientMetadata</code>
|
|
11111
|
-
* attribute that provides the data that you assigned to the ClientMetadata parameter in
|
|
11112
|
-
* your request. In your function code, you can process the <code>clientMetadata</code>
|
|
11113
|
-
* value to enhance your workflow for your specific needs.</p>
|
|
11114
|
-
* <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
|
|
11115
|
-
* Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
11116
|
-
* <note>
|
|
11117
|
-
* <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
|
|
11118
|
-
* following:</p>
|
|
11119
|
-
* <ul>
|
|
11120
|
-
* <li>
|
|
11121
|
-
* <p>Store the <code>ClientMetadata</code> value. This data is available only
|
|
11122
|
-
* to Lambda triggers that are assigned to a user pool to support custom
|
|
11123
|
-
* workflows. If your user pool configuration doesn't include triggers, the
|
|
11124
|
-
* <code>ClientMetadata</code> parameter serves no purpose.</p>
|
|
11125
|
-
* </li>
|
|
11126
|
-
* <li>
|
|
11127
|
-
* <p>Validate the <code>ClientMetadata</code> value.</p>
|
|
11128
|
-
* </li>
|
|
11129
|
-
* <li>
|
|
11130
|
-
* <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
|
|
11131
|
-
* information in this parameter.</p>
|
|
11132
|
-
* </li>
|
|
11133
|
-
* </ul>
|
|
11134
|
-
* </note>
|
|
11135
|
-
* @public
|
|
11136
|
-
*/
|
|
11137
|
-
ClientMetadata?: Record<string, string> | undefined;
|
|
11138
|
-
}
|
|
11139
|
-
/**
|
|
11140
|
-
* <p>The response from the server for a registration request.</p>
|
|
11141
|
-
* @public
|
|
11142
|
-
*/
|
|
11143
|
-
export interface SignUpResponse {
|
|
11144
|
-
/**
|
|
11145
|
-
* <p>Indicates whether the user was automatically confirmed. You can auto-confirm users
|
|
11146
|
-
* with a <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">pre sign-up Lambda trigger</a>.</p>
|
|
11147
|
-
* @public
|
|
11148
|
-
*/
|
|
11149
|
-
UserConfirmed: boolean | undefined;
|
|
11150
|
-
/**
|
|
11151
|
-
* <p>In user pools that automatically verify and confirm new users, Amazon Cognito sends users a
|
|
11152
|
-
* message with a code or link that confirms ownership of the phone number or email address
|
|
11153
|
-
* that they entered. The <code>CodeDeliveryDetails</code> object is information about the
|
|
11154
|
-
* delivery destination for that link or code.</p>
|
|
11155
|
-
* @public
|
|
11156
|
-
*/
|
|
11157
|
-
CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
|
|
11158
|
-
/**
|
|
11159
|
-
* <p>The unique identifier of the new user, for example
|
|
11160
|
-
* <code>a1b2c3d4-5678-90ab-cdef-EXAMPLE11111</code>.</p>
|
|
11161
|
-
* @public
|
|
11162
|
-
*/
|
|
11163
|
-
UserSub: string | undefined;
|
|
11164
|
-
/**
|
|
11165
|
-
* <p>A session Id that you can pass to <code>ConfirmSignUp</code> when you want to
|
|
11166
|
-
* immediately sign in your user with the <code>USER_AUTH</code> flow after they complete
|
|
11167
|
-
* sign-up.</p>
|
|
11168
|
-
* @public
|
|
11169
|
-
*/
|
|
11170
|
-
Session?: string | undefined;
|
|
11171
|
-
}
|
|
11172
|
-
/**
|
|
11173
|
-
* <p>Represents the request to start the user import job.</p>
|
|
11174
|
-
* @public
|
|
11175
|
-
*/
|
|
11176
|
-
export interface StartUserImportJobRequest {
|
|
11177
|
-
/**
|
|
11178
|
-
* <p>The ID of the user pool that you want to start importing users into.</p>
|
|
11179
|
-
* @public
|
|
11180
|
-
*/
|
|
11181
|
-
UserPoolId: string | undefined;
|
|
11182
|
-
/**
|
|
11183
|
-
* <p>The ID of a user import job that you previously created.</p>
|
|
11184
|
-
* @public
|
|
11185
|
-
*/
|
|
11186
|
-
JobId: string | undefined;
|
|
11187
|
-
}
|
|
11188
|
-
/**
|
|
11189
|
-
* <p>Represents the response from the server to the request to start the user import
|
|
11190
|
-
* job.</p>
|
|
11191
|
-
* @public
|
|
11192
|
-
*/
|
|
11193
|
-
export interface StartUserImportJobResponse {
|
|
11194
|
-
/**
|
|
11195
|
-
* <p>The details of the user import job. Includes logging destination, status, and the Amazon S3
|
|
11196
|
-
* pre-signed URL for CSV upload.</p>
|
|
11197
|
-
* @public
|
|
11198
|
-
*/
|
|
11199
|
-
UserImportJob?: UserImportJobType | undefined;
|
|
11200
|
-
}
|
|
@@ -1,6 +1,238 @@
|
|
|
1
1
|
import type { DocumentType as __DocumentType } from "@smithy/types";
|
|
2
2
|
import type { DeletionProtectionType, DeviceRememberedStatusType, ExplicitAuthFlowsType, FeedbackValueType, OAuthFlowType, PreventUserExistenceErrorTypes, TermsEnforcementType, TermsSourceType, UpdateReplicaStatusType, UserPoolMfaType, UserPoolTierType, VerifiedAttributeType, VerifySoftwareTokenResponseType } from "./enums";
|
|
3
|
-
import type { AccountRecoverySettingType, AdminCreateUserConfigType, AnalyticsConfigurationType, AssetType, AttributeType, CodeDeliveryDetailsType, CustomDomainConfigType, DeviceConfigurationType, EmailConfigurationType, GroupType, IdentityProviderType, IssuerConfigurationType, KeyConfigurationType, LambdaConfigType, LimitDefinitionType, LimitType, ManagedLoginBrandingType, RefreshTokenRotationType, ResourceServerScopeType, ResourceServerType, RoutingType, SmsConfigurationType, TermsType, TokenValidityUnitsType, UserAttributeUpdateSettingsType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolPolicyType, UserPoolReplicaType, VerificationMessageTemplateType } from "./models_0";
|
|
3
|
+
import type { AccountRecoverySettingType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AssetType, AttributeType, CodeDeliveryDetailsType, CustomDomainConfigType, DeviceConfigurationType, EmailConfigurationType, EmailMfaConfigType, GroupType, IdentityProviderType, IssuerConfigurationType, KeyConfigurationType, LambdaConfigType, LimitDefinitionType, LimitType, ManagedLoginBrandingType, MFAOptionType, RefreshTokenRotationType, ResourceServerScopeType, ResourceServerType, RoutingType, SmsConfigurationType, SmsMfaConfigType, SoftwareTokenMfaConfigType, TermsType, TokenValidityUnitsType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolPolicyType, UserPoolReplicaType, VerificationMessageTemplateType, WebAuthnConfigurationType } from "./models_0";
|
|
4
|
+
/**
|
|
5
|
+
* @public
|
|
6
|
+
*/
|
|
7
|
+
export interface SetUserPoolMfaConfigResponse {
|
|
8
|
+
/**
|
|
9
|
+
* <p>Shows user pool SMS message configuration for MFA and sign-in with SMS-message OTPs.
|
|
10
|
+
* Includes the message template and the SMS message sending configuration for
|
|
11
|
+
* Amazon SNS.</p>
|
|
12
|
+
* @public
|
|
13
|
+
*/
|
|
14
|
+
SmsMfaConfiguration?: SmsMfaConfigType | undefined;
|
|
15
|
+
/**
|
|
16
|
+
* <p>Shows user pool configuration for time-based one-time password (TOTP) MFA. Includes
|
|
17
|
+
* TOTP enabled or disabled state.</p>
|
|
18
|
+
* @public
|
|
19
|
+
*/
|
|
20
|
+
SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType | undefined;
|
|
21
|
+
/**
|
|
22
|
+
* <p>Shows configuration for user pool email message MFA and sign-in with one-time
|
|
23
|
+
* passwords (OTPs). Includes the subject and body of the email message template for
|
|
24
|
+
* sign-in and MFA messages. To activate this setting, your user pool must be in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html">
|
|
25
|
+
* Essentials tier</a> or higher.</p>
|
|
26
|
+
* @public
|
|
27
|
+
*/
|
|
28
|
+
EmailMfaConfiguration?: EmailMfaConfigType | undefined;
|
|
29
|
+
/**
|
|
30
|
+
* <p>Displays multi-factor authentication (MFA) as on, off, or optional. When
|
|
31
|
+
* <code>ON</code>, all users must set up MFA before they can sign in. When
|
|
32
|
+
* <code>OPTIONAL</code>, your application must make a client-side determination of
|
|
33
|
+
* whether a user wants to register an MFA device. For user pools with adaptive
|
|
34
|
+
* authentication with threat protection, choose <code>OPTIONAL</code>.</p>
|
|
35
|
+
* <p>When <code>MfaConfiguration</code> is <code>OPTIONAL</code>, managed login
|
|
36
|
+
* doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in
|
|
37
|
+
* API responses and in managed login for users who have chosen and configured a preferred
|
|
38
|
+
* MFA factor.</p>
|
|
39
|
+
* @public
|
|
40
|
+
*/
|
|
41
|
+
MfaConfiguration?: UserPoolMfaType | undefined;
|
|
42
|
+
/**
|
|
43
|
+
* <p>The configuration of your user pool for passkey, or WebAuthn, sign-in with
|
|
44
|
+
* authenticators such as biometric and security-key devices. Includes relying-party
|
|
45
|
+
* configuration and settings for user-verification requirements.</p>
|
|
46
|
+
* @public
|
|
47
|
+
*/
|
|
48
|
+
WebAuthnConfiguration?: WebAuthnConfigurationType | undefined;
|
|
49
|
+
}
|
|
50
|
+
/**
|
|
51
|
+
* <p>Represents the request to set user settings.</p>
|
|
52
|
+
* @public
|
|
53
|
+
*/
|
|
54
|
+
export interface SetUserSettingsRequest {
|
|
55
|
+
/**
|
|
56
|
+
* <p>A valid access token that Amazon Cognito issued to the currently signed-in user. Must include a scope claim for
|
|
57
|
+
* <code>aws.cognito.signin.user.admin</code>.</p>
|
|
58
|
+
* @public
|
|
59
|
+
*/
|
|
60
|
+
AccessToken: string | undefined;
|
|
61
|
+
/**
|
|
62
|
+
* <p>You can use this parameter only to set an SMS configuration that uses SMS for
|
|
63
|
+
* delivery.</p>
|
|
64
|
+
* @public
|
|
65
|
+
*/
|
|
66
|
+
MFAOptions: MFAOptionType[] | undefined;
|
|
67
|
+
}
|
|
68
|
+
/**
|
|
69
|
+
* <p>The response from the server for a set user settings request.</p>
|
|
70
|
+
* @public
|
|
71
|
+
*/
|
|
72
|
+
export interface SetUserSettingsResponse {
|
|
73
|
+
}
|
|
74
|
+
/**
|
|
75
|
+
* <p>Represents the request to register a user.</p>
|
|
76
|
+
* @public
|
|
77
|
+
*/
|
|
78
|
+
export interface SignUpRequest {
|
|
79
|
+
/**
|
|
80
|
+
* <p>The ID of the app client where the user wants to sign up.</p>
|
|
81
|
+
* @public
|
|
82
|
+
*/
|
|
83
|
+
ClientId: string | undefined;
|
|
84
|
+
/**
|
|
85
|
+
* <p>A keyed-hash message authentication code (HMAC) calculated using the secret key of a
|
|
86
|
+
* user pool client and username plus the client ID in the message. For more information
|
|
87
|
+
* about <code>SecretHash</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#cognito-user-pools-computing-secret-hash">Computing secret hash values</a>.</p>
|
|
88
|
+
* @public
|
|
89
|
+
*/
|
|
90
|
+
SecretHash?: string | undefined;
|
|
91
|
+
/**
|
|
92
|
+
* <p>The username of the user that you want to sign up. The value of this parameter is
|
|
93
|
+
* typically a username, but can be any alias attribute in your user pool.</p>
|
|
94
|
+
* @public
|
|
95
|
+
*/
|
|
96
|
+
Username: string | undefined;
|
|
97
|
+
/**
|
|
98
|
+
* <p>The user's proposed password. The password must comply with the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/managing-users-passwords.html">password requirements</a> of your user pool.</p>
|
|
99
|
+
* <p>Users can sign up without a password when your user pool supports passwordless sign-in
|
|
100
|
+
* with email or SMS OTPs. To create a user with no password, omit this parameter or submit
|
|
101
|
+
* a blank value. You can only create a passwordless user when passwordless sign-in is
|
|
102
|
+
* available.</p>
|
|
103
|
+
* @public
|
|
104
|
+
*/
|
|
105
|
+
Password?: string | undefined;
|
|
106
|
+
/**
|
|
107
|
+
* <p>An array of name-value pairs representing user attributes.</p>
|
|
108
|
+
* <p>For custom attributes, include a <code>custom:</code> prefix in the attribute name,
|
|
109
|
+
* for example <code>custom:department</code>.</p>
|
|
110
|
+
* @public
|
|
111
|
+
*/
|
|
112
|
+
UserAttributes?: AttributeType[] | undefined;
|
|
113
|
+
/**
|
|
114
|
+
* <p>Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda
|
|
115
|
+
* trigger. This set of key-value pairs are for custom validation of information that you
|
|
116
|
+
* collect from your users but don't need to retain.</p>
|
|
117
|
+
* <p>Your Lambda function can analyze this additional data and act on it. Your function
|
|
118
|
+
* can automatically confirm and verify select users or perform external API operations
|
|
119
|
+
* like logging user attributes and validation data to Amazon CloudWatch Logs.</p>
|
|
120
|
+
* <p>For more information about the pre sign-up Lambda trigger, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">Pre sign-up Lambda trigger</a>.</p>
|
|
121
|
+
* @public
|
|
122
|
+
*/
|
|
123
|
+
ValidationData?: AttributeType[] | undefined;
|
|
124
|
+
/**
|
|
125
|
+
* <p>Information that supports analytics outcomes with Amazon Pinpoint, including the
|
|
126
|
+
* user's endpoint ID. The endpoint ID is a destination for Amazon Pinpoint push notifications, for example a device identifier,
|
|
127
|
+
* email address, or phone number.</p>
|
|
128
|
+
* @public
|
|
129
|
+
*/
|
|
130
|
+
AnalyticsMetadata?: AnalyticsMetadataType | undefined;
|
|
131
|
+
/**
|
|
132
|
+
* <p>Contextual data about your user session like the device fingerprint, IP address, or location. Amazon Cognito threat
|
|
133
|
+
* protection evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
|
|
134
|
+
* when it makes API requests.</p>
|
|
135
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-viewing-threat-protection-app.html">Collecting data for threat protection in
|
|
136
|
+
* applications</a>.</p>
|
|
137
|
+
* @public
|
|
138
|
+
*/
|
|
139
|
+
UserContextData?: UserContextDataType | undefined;
|
|
140
|
+
/**
|
|
141
|
+
* <p>A map of custom key-value pairs that you can provide as input for any custom workflows
|
|
142
|
+
* that this action triggers. You create custom workflows by assigning Lambda functions
|
|
143
|
+
* to user pool triggers.</p>
|
|
144
|
+
* <p>When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the
|
|
145
|
+
* function receives as input. This payload contains a <code>clientMetadata</code>
|
|
146
|
+
* attribute that provides the data that you assigned to the ClientMetadata parameter in
|
|
147
|
+
* your request. In your function code, you can process the <code>clientMetadata</code>
|
|
148
|
+
* value to enhance your workflow for your specific needs.</p>
|
|
149
|
+
* <p>To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event">
|
|
150
|
+
* Connecting API actions to Lambda triggers</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
151
|
+
* <note>
|
|
152
|
+
* <p>When you use the <code>ClientMetadata</code> parameter, note that Amazon Cognito won't do the
|
|
153
|
+
* following:</p>
|
|
154
|
+
* <ul>
|
|
155
|
+
* <li>
|
|
156
|
+
* <p>Store the <code>ClientMetadata</code> value. This data is available only
|
|
157
|
+
* to Lambda triggers that are assigned to a user pool to support custom
|
|
158
|
+
* workflows. If your user pool configuration doesn't include triggers, the
|
|
159
|
+
* <code>ClientMetadata</code> parameter serves no purpose.</p>
|
|
160
|
+
* </li>
|
|
161
|
+
* <li>
|
|
162
|
+
* <p>Validate the <code>ClientMetadata</code> value.</p>
|
|
163
|
+
* </li>
|
|
164
|
+
* <li>
|
|
165
|
+
* <p>Encrypt the <code>ClientMetadata</code> value. Don't send sensitive
|
|
166
|
+
* information in this parameter.</p>
|
|
167
|
+
* </li>
|
|
168
|
+
* </ul>
|
|
169
|
+
* </note>
|
|
170
|
+
* @public
|
|
171
|
+
*/
|
|
172
|
+
ClientMetadata?: Record<string, string> | undefined;
|
|
173
|
+
}
|
|
174
|
+
/**
|
|
175
|
+
* <p>The response from the server for a registration request.</p>
|
|
176
|
+
* @public
|
|
177
|
+
*/
|
|
178
|
+
export interface SignUpResponse {
|
|
179
|
+
/**
|
|
180
|
+
* <p>Indicates whether the user was automatically confirmed. You can auto-confirm users
|
|
181
|
+
* with a <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">pre sign-up Lambda trigger</a>.</p>
|
|
182
|
+
* @public
|
|
183
|
+
*/
|
|
184
|
+
UserConfirmed: boolean | undefined;
|
|
185
|
+
/**
|
|
186
|
+
* <p>In user pools that automatically verify and confirm new users, Amazon Cognito sends users a
|
|
187
|
+
* message with a code or link that confirms ownership of the phone number or email address
|
|
188
|
+
* that they entered. The <code>CodeDeliveryDetails</code> object is information about the
|
|
189
|
+
* delivery destination for that link or code.</p>
|
|
190
|
+
* @public
|
|
191
|
+
*/
|
|
192
|
+
CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
|
|
193
|
+
/**
|
|
194
|
+
* <p>The unique identifier of the new user, for example
|
|
195
|
+
* <code>a1b2c3d4-5678-90ab-cdef-EXAMPLE11111</code>.</p>
|
|
196
|
+
* @public
|
|
197
|
+
*/
|
|
198
|
+
UserSub: string | undefined;
|
|
199
|
+
/**
|
|
200
|
+
* <p>A session Id that you can pass to <code>ConfirmSignUp</code> when you want to
|
|
201
|
+
* immediately sign in your user with the <code>USER_AUTH</code> flow after they complete
|
|
202
|
+
* sign-up.</p>
|
|
203
|
+
* @public
|
|
204
|
+
*/
|
|
205
|
+
Session?: string | undefined;
|
|
206
|
+
}
|
|
207
|
+
/**
|
|
208
|
+
* <p>Represents the request to start the user import job.</p>
|
|
209
|
+
* @public
|
|
210
|
+
*/
|
|
211
|
+
export interface StartUserImportJobRequest {
|
|
212
|
+
/**
|
|
213
|
+
* <p>The ID of the user pool that you want to start importing users into.</p>
|
|
214
|
+
* @public
|
|
215
|
+
*/
|
|
216
|
+
UserPoolId: string | undefined;
|
|
217
|
+
/**
|
|
218
|
+
* <p>The ID of a user import job that you previously created.</p>
|
|
219
|
+
* @public
|
|
220
|
+
*/
|
|
221
|
+
JobId: string | undefined;
|
|
222
|
+
}
|
|
223
|
+
/**
|
|
224
|
+
* <p>Represents the response from the server to the request to start the user import
|
|
225
|
+
* job.</p>
|
|
226
|
+
* @public
|
|
227
|
+
*/
|
|
228
|
+
export interface StartUserImportJobResponse {
|
|
229
|
+
/**
|
|
230
|
+
* <p>The details of the user import job. Includes logging destination, status, and the Amazon S3
|
|
231
|
+
* pre-signed URL for CSV upload.</p>
|
|
232
|
+
* @public
|
|
233
|
+
*/
|
|
234
|
+
UserImportJob?: UserImportJobType | undefined;
|
|
235
|
+
}
|
|
4
236
|
/**
|
|
5
237
|
* @public
|
|
6
238
|
*/
|