@aws-sdk/client-cognito-identity-provider 3.782.0 → 3.794.0

package/dist-types/models/models_1.d.ts

@@ -1,7 +1,117 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
 import { DocumentType as __DocumentType } from "@smithy/types";
 import { CognitoIdentityProviderServiceException as __BaseException } from "./CognitoIdentityProviderServiceException";
-import { AccountRecoverySettingType, AccountTakeoverRiskConfigurationType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AssetType, AttributeType, AuthenticationResultType, AuthFlowType, ChallengeNameType, CodeDeliveryDetailsType, CompromisedCredentialsRiskConfigurationType, CustomDomainConfigType, DeletionProtectionType, DeviceConfigurationType, DeviceRememberedStatusType, DeviceType, EmailConfigurationType, EmailMfaConfigType, EmailMfaSettingsType, ExplicitAuthFlowsType, FeedbackValueType, GroupType, IdentityProviderType, IdentityProviderTypeType, LambdaConfigType, LogConfigurationType, LogDeliveryConfigurationType, ManagedLoginBrandingType, MFAOptionType, OAuthFlowType, PreventUserExistenceErrorTypes, ResourceServerScopeType, ResourceServerType, RiskConfigurationType, RiskExceptionConfigurationType, SmsConfigurationType, SmsMfaConfigType, SMSMfaSettingsType, SoftwareTokenMfaConfigType, SoftwareTokenMfaSettingsType, StatusType, TokenValidityUnitsType, UICustomizationType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolMfaType, UserPoolPolicyType, UserPoolTierType, UserType, VerificationMessageTemplateType, VerifiedAttributeType } from "./models_0";
+import { AccountRecoverySettingType, AccountTakeoverRiskConfigurationType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AssetType, AttributeType, AuthenticationResultType, AuthFactorType, AuthFlowType, ChallengeNameType, CodeDeliveryDetailsType, CompromisedCredentialsRiskConfigurationType, CustomDomainConfigType, DeletionProtectionType, DeviceConfigurationType, DeviceRememberedStatusType, DeviceType, EmailConfigurationType, EmailMfaSettingsType, ExplicitAuthFlowsType, FeedbackValueType, GroupType, IdentityProviderType, IdentityProviderTypeType, LambdaConfigType, LogConfigurationType, LogDeliveryConfigurationType, ManagedLoginBrandingType, MFAOptionType, OAuthFlowType, PreventUserExistenceErrorTypes, RefreshTokenRotationType, ResourceServerScopeType, ResourceServerType, RiskConfigurationType, RiskExceptionConfigurationType, SmsConfigurationType, SMSMfaSettingsType, SoftwareTokenMfaSettingsType, StatusType, TokenValidityUnitsType, UICustomizationType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolMfaType, UserPoolPolicyType, UserPoolTierType, UserType, VerificationMessageTemplateType, VerifiedAttributeType } from "./models_0";
+/**
+ * @public
+ */
+export interface GetUserAuthFactorsRequest {
+    /**
+     * <p>A valid access token that Amazon Cognito issued to the currently signed-in user. Must include a scope claim for
+     * <code>aws.cognito.signin.user.admin</code>.</p>
+     * @public
+     */
+    AccessToken: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetUserAuthFactorsResponse {
+    /**
+     * <p>The name of the user who is eligible for the authentication factors in the
+     *             response.</p>
+     * @public
+     */
+    Username: string | undefined;
+    /**
+     * <p>The challenge method that Amazon Cognito returns to the user in response to sign-in requests.
+     *             Users can prefer SMS message, email message, or TOTP MFA.</p>
+     * @public
+     */
+    PreferredMfaSetting?: string | undefined;
+    /**
+     * <p>The MFA options that are activated for the user. The possible values in this list are
+     *                 <code>SMS_MFA</code>, <code>EMAIL_OTP</code>, and
+     *             <code>SOFTWARE_TOKEN_MFA</code>.</p>
+     * @public
+     */
+    UserMFASettingList?: string[] | undefined;
+    /**
+     * <p>The authentication types that are available to the user with <code>USER_AUTH</code>
+     *             sign-in, for example <code>["PASSWORD", "WEB_AUTHN"]</code>.</p>
+     * @public
+     */
+    ConfiguredUserAuthFactors?: AuthFactorType[] | undefined;
+}
+/**
+ * @public
+ */
+export interface GetUserPoolMfaConfigRequest {
+    /**
+     * <p>The ID of the user pool where you want to query WebAuthn and MFA configuration.</p>
+     * @public
+     */
+    UserPoolId: string | undefined;
+}
+/**
+ * <p>Sets or shows configuration for user pool email message MFA and sign-in with one-time
+ *             passwords (OTPs). Includes the subject and body of the email message template for
+ *             sign-in and MFA messages. To activate this setting, your user pool must be in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html">
+ *                      Essentials tier</a> or higher.</p>
+ * @public
+ */
+export interface EmailMfaConfigType {
+    /**
+     * <p>The template for the email messages that your user pool sends to users with codes for
+     *             MFA and sign-in with email OTPs. The message must contain the <code>\{####\}</code>
+     *             placeholder. In the message, Amazon Cognito replaces this placeholder with the code. If you
+     *             don't provide this parameter, Amazon Cognito sends messages in the default format.</p>
+     * @public
+     */
+    Message?: string | undefined;
+    /**
+     * <p>The subject of the email messages that your user pool sends to users with codes for
+     *             MFA and email OTP sign-in.</p>
+     * @public
+     */
+    Subject?: string | undefined;
+}
+/**
+ * <p>The configuration of multi-factor authentication (MFA) with SMS messages in a user
+ *             pool.</p>
+ * @public
+ */
+export interface SmsMfaConfigType {
+    /**
+     * <p>The SMS authentication message that will be sent to users with the code they must sign
+     *             in with. The message must contain the <code>\{####\}</code> placeholder. Your user pool
+     *             replaces the placeholder with the MFA code. If this parameter isn't provided, your user
+     *             pool sends a default message.</p>
+     * @public
+     */
+    SmsAuthenticationMessage?: string | undefined;
+    /**
+     * <p>User pool configuration for delivery of SMS messages with Amazon Simple Notification Service. To send SMS
+     *             messages with Amazon SNS in the Amazon Web Services Region that you want, the Amazon Cognito user pool uses an
+     *             Identity and Access Management (IAM) role in your Amazon Web Services account.</p>
+     *          <p>You can set <code>SmsConfiguration</code> in <code>CreateUserPool</code> and <code>
+     *                 UpdateUserPool</code>, or in <code>SetUserPoolMfaConfig</code>.</p>
+     * @public
+     */
+    SmsConfiguration?: SmsConfigurationType | undefined;
+}
+/**
+ * <p>Settings for time-based one-time password (TOTP) multi-factor authentication (MFA) in
+ *             a user pool. Enables and disables availability of this feature.</p>
+ * @public
+ */
+export interface SoftwareTokenMfaConfigType {
+    /**
+     * <p>The activation state of TOTP MFA.</p>
+     * @public
+     */
+    Enabled?: boolean | undefined;
+}
 /**
  * @public
  * @enum
@@ -1810,19 +1920,6 @@ export declare class UnauthorizedException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<UnauthorizedException, __BaseException>);
 }
-/**
- * <p>Exception that is thrown when you attempt to perform an operation that isn't enabled
- *             for the user pool client.</p>
- * @public
- */
-export declare class UnsupportedOperationException extends __BaseException {
-    readonly name: "UnsupportedOperationException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>);
-}
 /**
  * <p>Exception that is thrown when an unsupported token is passed to an operation.</p>
  * @public
@@ -3367,6 +3464,14 @@ export interface UpdateUserPoolClientRequest {
      * @public
      */
     AuthSessionValidity?: number | undefined;
+    /**
+     * <p>The configuration of your app client for refresh token rotation. When enabled, your
+     *             app client issues new ID, access, and refresh tokens when users renew their sessions
+     *             with refresh tokens. When disabled, token refresh issues only ID and access
+     *             tokens.</p>
+     * @public
+     */
+    RefreshTokenRotation?: RefreshTokenRotationType | undefined;
 }
 /**
  * <p>Represents the response from the server to the request to update the user pool
@@ -3538,6 +3643,14 @@ export interface VerifyUserAttributeRequest {
  */
 export interface VerifyUserAttributeResponse {
 }
+/**
+ * @internal
+ */
+export declare const GetUserAuthFactorsRequestFilterSensitiveLog: (obj: GetUserAuthFactorsRequest) => any;
+/**
+ * @internal
+ */
+export declare const GetUserAuthFactorsResponseFilterSensitiveLog: (obj: GetUserAuthFactorsResponse) => any;
 /**
  * @internal
  */

package/dist-types/protocols/Aws_json1_1.d.ts

@@ -68,6 +68,7 @@ import { GetGroupCommandInput, GetGroupCommandOutput } from "../commands/GetGrou
 import { GetIdentityProviderByIdentifierCommandInput, GetIdentityProviderByIdentifierCommandOutput } from "../commands/GetIdentityProviderByIdentifierCommand";
 import { GetLogDeliveryConfigurationCommandInput, GetLogDeliveryConfigurationCommandOutput } from "../commands/GetLogDeliveryConfigurationCommand";
 import { GetSigningCertificateCommandInput, GetSigningCertificateCommandOutput } from "../commands/GetSigningCertificateCommand";
+import { GetTokensFromRefreshTokenCommandInput, GetTokensFromRefreshTokenCommandOutput } from "../commands/GetTokensFromRefreshTokenCommand";
 import { GetUICustomizationCommandInput, GetUICustomizationCommandOutput } from "../commands/GetUICustomizationCommand";
 import { GetUserAttributeVerificationCodeCommandInput, GetUserAttributeVerificationCodeCommandOutput } from "../commands/GetUserAttributeVerificationCodeCommand";
 import { GetUserAuthFactorsCommandInput, GetUserAuthFactorsCommandOutput } from "../commands/GetUserAuthFactorsCommand";
@@ -385,6 +386,10 @@ export declare const se_GetLogDeliveryConfigurationCommand: (input: GetLogDelive
  * serializeAws_json1_1GetSigningCertificateCommand
  */
 export declare const se_GetSigningCertificateCommand: (input: GetSigningCertificateCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+/**
+ * serializeAws_json1_1GetTokensFromRefreshTokenCommand
+ */
+export declare const se_GetTokensFromRefreshTokenCommand: (input: GetTokensFromRefreshTokenCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 /**
  * serializeAws_json1_1GetUICustomizationCommand
  */
@@ -837,6 +842,10 @@ export declare const de_GetLogDeliveryConfigurationCommand: (output: __HttpRespo
  * deserializeAws_json1_1GetSigningCertificateCommand
  */
 export declare const de_GetSigningCertificateCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetSigningCertificateCommandOutput>;
+/**
+ * deserializeAws_json1_1GetTokensFromRefreshTokenCommand
+ */
+export declare const de_GetTokensFromRefreshTokenCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetTokensFromRefreshTokenCommandOutput>;
 /**
  * deserializeAws_json1_1GetUICustomizationCommand
  */

package/dist-types/ts3.4/CognitoIdentityProvider.d.ts

@@ -272,6 +272,10 @@ import {
   GetSigningCertificateCommandInput,
   GetSigningCertificateCommandOutput,
 } from "./commands/GetSigningCertificateCommand";
+import {
+  GetTokensFromRefreshTokenCommandInput,
+  GetTokensFromRefreshTokenCommandOutput,
+} from "./commands/GetTokensFromRefreshTokenCommand";
 import {
   GetUICustomizationCommandInput,
   GetUICustomizationCommandOutput,
@@ -1344,6 +1348,19 @@ export interface CognitoIdentityProvider {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: GetSigningCertificateCommandOutput) => void
   ): void;
+  getTokensFromRefreshToken(
+    args: GetTokensFromRefreshTokenCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetTokensFromRefreshTokenCommandOutput>;
+  getTokensFromRefreshToken(
+    args: GetTokensFromRefreshTokenCommandInput,
+    cb: (err: any, data?: GetTokensFromRefreshTokenCommandOutput) => void
+  ): void;
+  getTokensFromRefreshToken(
+    args: GetTokensFromRefreshTokenCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetTokensFromRefreshTokenCommandOutput) => void
+  ): void;
   getUICustomization(
     args: GetUICustomizationCommandInput,
     options?: __HttpHandlerOptions

package/dist-types/ts3.4/CognitoIdentityProviderClient.d.ts

@@ -317,6 +317,10 @@ import {
   GetSigningCertificateCommandInput,
   GetSigningCertificateCommandOutput,
 } from "./commands/GetSigningCertificateCommand";
+import {
+  GetTokensFromRefreshTokenCommandInput,
+  GetTokensFromRefreshTokenCommandOutput,
+} from "./commands/GetTokensFromRefreshTokenCommand";
 import {
   GetUICustomizationCommandInput,
   GetUICustomizationCommandOutput,
@@ -573,6 +577,7 @@ export type ServiceInputTypes =
   | GetIdentityProviderByIdentifierCommandInput
   | GetLogDeliveryConfigurationCommandInput
   | GetSigningCertificateCommandInput
+  | GetTokensFromRefreshTokenCommandInput
   | GetUICustomizationCommandInput
   | GetUserAttributeVerificationCodeCommandInput
   | GetUserAuthFactorsCommandInput
@@ -687,6 +692,7 @@ export type ServiceOutputTypes =
   | GetIdentityProviderByIdentifierCommandOutput
   | GetLogDeliveryConfigurationCommandOutput
   | GetSigningCertificateCommandOutput
+  | GetTokensFromRefreshTokenCommandOutput
   | GetUICustomizationCommandOutput
   | GetUserAttributeVerificationCodeCommandOutput
   | GetUserAuthFactorsCommandOutput

package/dist-types/ts3.4/commands/GetTokensFromRefreshTokenCommand.d.ts

@@ -0,0 +1,51 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import {
+  CognitoIdentityProviderClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../CognitoIdentityProviderClient";
+import {
+  GetTokensFromRefreshTokenRequest,
+  GetTokensFromRefreshTokenResponse,
+} from "../models/models_0";
+export { __MetadataBearer };
+export { $Command };
+export interface GetTokensFromRefreshTokenCommandInput
+  extends GetTokensFromRefreshTokenRequest {}
+export interface GetTokensFromRefreshTokenCommandOutput
+  extends GetTokensFromRefreshTokenResponse,
+    __MetadataBearer {}
+declare const GetTokensFromRefreshTokenCommand_base: {
+  new (
+    input: GetTokensFromRefreshTokenCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    GetTokensFromRefreshTokenCommandInput,
+    GetTokensFromRefreshTokenCommandOutput,
+    CognitoIdentityProviderClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  new (
+    __0_0: GetTokensFromRefreshTokenCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    GetTokensFromRefreshTokenCommandInput,
+    GetTokensFromRefreshTokenCommandOutput,
+    CognitoIdentityProviderClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+export declare class GetTokensFromRefreshTokenCommand extends GetTokensFromRefreshTokenCommand_base {
+  protected static __types: {
+    api: {
+      input: GetTokensFromRefreshTokenRequest;
+      output: GetTokensFromRefreshTokenResponse;
+    };
+    sdk: {
+      input: GetTokensFromRefreshTokenCommandInput;
+      output: GetTokensFromRefreshTokenCommandOutput;
+    };
+  };
+}

package/dist-types/ts3.4/commands/GetUserAuthFactorsCommand.d.ts

@@ -8,7 +8,7 @@ import {
 import {
   GetUserAuthFactorsRequest,
   GetUserAuthFactorsResponse,
-} from "../models/models_0";
+} from "../models/models_1";
 export { __MetadataBearer };
 export { $Command };
 export interface GetUserAuthFactorsCommandInput

package/dist-types/ts3.4/commands/GetUserPoolMfaConfigCommand.d.ts

@@ -5,8 +5,10 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../CognitoIdentityProviderClient";
-import { GetUserPoolMfaConfigRequest } from "../models/models_0";
-import { GetUserPoolMfaConfigResponse } from "../models/models_1";
+import {
+  GetUserPoolMfaConfigRequest,
+  GetUserPoolMfaConfigResponse,
+} from "../models/models_1";
 export { __MetadataBearer };
 export { $Command };
 export interface GetUserPoolMfaConfigCommandInput

package/dist-types/ts3.4/commands/index.d.ts

@@ -66,6 +66,7 @@ export * from "./GetGroupCommand";
 export * from "./GetIdentityProviderByIdentifierCommand";
 export * from "./GetLogDeliveryConfigurationCommand";
 export * from "./GetSigningCertificateCommand";
+export * from "./GetTokensFromRefreshTokenCommand";
 export * from "./GetUICustomizationCommand";
 export * from "./GetUserAttributeVerificationCodeCommand";
 export * from "./GetUserAuthFactorsCommand";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -475,6 +475,13 @@ export declare class PasswordResetRequiredException extends __BaseException {
     opts: __ExceptionOptionType<PasswordResetRequiredException, __BaseException>
   );
 }
+export declare class UnsupportedOperationException extends __BaseException {
+  readonly name: "UnsupportedOperationException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>
+  );
+}
 export declare class UserNotConfirmedException extends __BaseException {
   readonly name: "UserNotConfirmedException";
   readonly $fault: "client";
@@ -1359,6 +1366,15 @@ export declare const PreventUserExistenceErrorTypes: {
 };
 export type PreventUserExistenceErrorTypes =
   (typeof PreventUserExistenceErrorTypes)[keyof typeof PreventUserExistenceErrorTypes];
+export declare const FeatureType: {
+  readonly DISABLED: "DISABLED";
+  readonly ENABLED: "ENABLED";
+};
+export type FeatureType = (typeof FeatureType)[keyof typeof FeatureType];
+export interface RefreshTokenRotationType {
+  Feature: FeatureType | undefined;
+  RetryGracePeriodSeconds?: number | undefined;
+}
 export declare const TimeUnitsType: {
   readonly DAYS: "days";
   readonly HOURS: "hours";
@@ -1394,6 +1410,7 @@ export interface CreateUserPoolClientRequest {
   EnableTokenRevocation?: boolean | undefined;
   EnablePropagateAdditionalUserContextData?: boolean | undefined;
   AuthSessionValidity?: number | undefined;
+  RefreshTokenRotation?: RefreshTokenRotationType | undefined;
 }
 export interface UserPoolClientType {
   UserPoolId?: string | undefined;
@@ -1421,6 +1438,7 @@ export interface UserPoolClientType {
   EnableTokenRevocation?: boolean | undefined;
   EnablePropagateAdditionalUserContextData?: boolean | undefined;
   AuthSessionValidity?: number | undefined;
+  RefreshTokenRotation?: RefreshTokenRotationType | undefined;
 }
 export interface CreateUserPoolClientResponse {
   UserPoolClient?: UserPoolClientType | undefined;
@@ -1713,6 +1731,23 @@ export interface GetSigningCertificateRequest {
 export interface GetSigningCertificateResponse {
   Certificate?: string | undefined;
 }
+export interface GetTokensFromRefreshTokenRequest {
+  RefreshToken: string | undefined;
+  ClientId: string | undefined;
+  ClientSecret?: string | undefined;
+  DeviceKey?: string | undefined;
+  ClientMetadata?: Record<string, string> | undefined;
+}
+export interface GetTokensFromRefreshTokenResponse {
+  AuthenticationResult?: AuthenticationResultType | undefined;
+}
+export declare class RefreshTokenReuseException extends __BaseException {
+  readonly name: "RefreshTokenReuseException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<RefreshTokenReuseException, __BaseException>
+  );
+}
 export interface GetUICustomizationRequest {
   UserPoolId: string | undefined;
   ClientId?: string | undefined;
@@ -1747,29 +1782,6 @@ export interface GetUserAttributeVerificationCodeRequest {
 export interface GetUserAttributeVerificationCodeResponse {
   CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
 }
-export interface GetUserAuthFactorsRequest {
-  AccessToken: string | undefined;
-}
-export interface GetUserAuthFactorsResponse {
-  Username: string | undefined;
-  PreferredMfaSetting?: string | undefined;
-  UserMFASettingList?: string[] | undefined;
-  ConfiguredUserAuthFactors?: AuthFactorType[] | undefined;
-}
-export interface GetUserPoolMfaConfigRequest {
-  UserPoolId: string | undefined;
-}
-export interface EmailMfaConfigType {
-  Message?: string | undefined;
-  Subject?: string | undefined;
-}
-export interface SmsMfaConfigType {
-  SmsAuthenticationMessage?: string | undefined;
-  SmsConfiguration?: SmsConfigurationType | undefined;
-}
-export interface SoftwareTokenMfaConfigType {
-  Enabled?: boolean | undefined;
-}
 export declare const AdminAddUserToGroupRequestFilterSensitiveLog: (
   obj: AdminAddUserToGroupRequest
 ) => any;
@@ -1946,6 +1958,12 @@ export declare const GetDeviceRequestFilterSensitiveLog: (
 export declare const GetDeviceResponseFilterSensitiveLog: (
   obj: GetDeviceResponse
 ) => any;
+export declare const GetTokensFromRefreshTokenRequestFilterSensitiveLog: (
+  obj: GetTokensFromRefreshTokenRequest
+) => any;
+export declare const GetTokensFromRefreshTokenResponseFilterSensitiveLog: (
+  obj: GetTokensFromRefreshTokenResponse
+) => any;
 export declare const GetUICustomizationRequestFilterSensitiveLog: (
   obj: GetUICustomizationRequest
 ) => any;
@@ -1964,9 +1982,3 @@ export declare const GetUserResponseFilterSensitiveLog: (
 export declare const GetUserAttributeVerificationCodeRequestFilterSensitiveLog: (
   obj: GetUserAttributeVerificationCodeRequest
 ) => any;
-export declare const GetUserAuthFactorsRequestFilterSensitiveLog: (
-  obj: GetUserAuthFactorsRequest
-) => any;
-export declare const GetUserAuthFactorsResponseFilterSensitiveLog: (
-  obj: GetUserAuthFactorsResponse
-) => any;

package/dist-types/ts3.4/models/models_1.d.ts

@@ -10,6 +10,7 @@ import {
   AssetType,
   AttributeType,
   AuthenticationResultType,
+  AuthFactorType,
   AuthFlowType,
   ChallengeNameType,
   CodeDeliveryDetailsType,
@@ -20,7 +21,6 @@ import {
   DeviceRememberedStatusType,
   DeviceType,
   EmailConfigurationType,
-  EmailMfaConfigType,
   EmailMfaSettingsType,
   ExplicitAuthFlowsType,
   FeedbackValueType,
@@ -34,14 +34,13 @@ import {
   MFAOptionType,
   OAuthFlowType,
   PreventUserExistenceErrorTypes,
+  RefreshTokenRotationType,
   ResourceServerScopeType,
   ResourceServerType,
   RiskConfigurationType,
   RiskExceptionConfigurationType,
   SmsConfigurationType,
-  SmsMfaConfigType,
   SMSMfaSettingsType,
-  SoftwareTokenMfaConfigType,
   SoftwareTokenMfaSettingsType,
   StatusType,
   TokenValidityUnitsType,
@@ -58,6 +57,29 @@ import {
   VerificationMessageTemplateType,
   VerifiedAttributeType,
 } from "./models_0";
+export interface GetUserAuthFactorsRequest {
+  AccessToken: string | undefined;
+}
+export interface GetUserAuthFactorsResponse {
+  Username: string | undefined;
+  PreferredMfaSetting?: string | undefined;
+  UserMFASettingList?: string[] | undefined;
+  ConfiguredUserAuthFactors?: AuthFactorType[] | undefined;
+}
+export interface GetUserPoolMfaConfigRequest {
+  UserPoolId: string | undefined;
+}
+export interface EmailMfaConfigType {
+  Message?: string | undefined;
+  Subject?: string | undefined;
+}
+export interface SmsMfaConfigType {
+  SmsAuthenticationMessage?: string | undefined;
+  SmsConfiguration?: SmsConfigurationType | undefined;
+}
+export interface SoftwareTokenMfaConfigType {
+  Enabled?: boolean | undefined;
+}
 export declare const UserVerificationType: {
   readonly PREFERRED: "preferred";
   readonly REQUIRED: "required";
@@ -259,13 +281,6 @@ export declare class UnauthorizedException extends __BaseException {
     opts: __ExceptionOptionType<UnauthorizedException, __BaseException>
   );
 }
-export declare class UnsupportedOperationException extends __BaseException {
-  readonly name: "UnsupportedOperationException";
-  readonly $fault: "client";
-  constructor(
-    opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>
-  );
-}
 export declare class UnsupportedTokenTypeException extends __BaseException {
   readonly name: "UnsupportedTokenTypeException";
   readonly $fault: "client";
@@ -495,6 +510,7 @@ export interface UpdateUserPoolClientRequest {
   EnableTokenRevocation?: boolean | undefined;
   EnablePropagateAdditionalUserContextData?: boolean | undefined;
   AuthSessionValidity?: number | undefined;
+  RefreshTokenRotation?: RefreshTokenRotationType | undefined;
 }
 export interface UpdateUserPoolClientResponse {
   UserPoolClient?: UserPoolClientType | undefined;
@@ -541,6 +557,12 @@ export interface VerifyUserAttributeRequest {
   Code: string | undefined;
 }
 export interface VerifyUserAttributeResponse {}
+export declare const GetUserAuthFactorsRequestFilterSensitiveLog: (
+  obj: GetUserAuthFactorsRequest
+) => any;
+export declare const GetUserAuthFactorsResponseFilterSensitiveLog: (
+  obj: GetUserAuthFactorsResponse
+) => any;
 export declare const GlobalSignOutRequestFilterSensitiveLog: (
   obj: GlobalSignOutRequest
 ) => any;

package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts

@@ -275,6 +275,10 @@ import {
   GetSigningCertificateCommandInput,
   GetSigningCertificateCommandOutput,
 } from "../commands/GetSigningCertificateCommand";
+import {
+  GetTokensFromRefreshTokenCommandInput,
+  GetTokensFromRefreshTokenCommandOutput,
+} from "../commands/GetTokensFromRefreshTokenCommand";
 import {
   GetUICustomizationCommandInput,
   GetUICustomizationCommandOutput,
@@ -727,6 +731,10 @@ export declare const se_GetSigningCertificateCommand: (
   input: GetSigningCertificateCommandInput,
   context: __SerdeContext
 ) => Promise<__HttpRequest>;
+export declare const se_GetTokensFromRefreshTokenCommand: (
+  input: GetTokensFromRefreshTokenCommandInput,
+  context: __SerdeContext
+) => Promise<__HttpRequest>;
 export declare const se_GetUICustomizationCommand: (
   input: GetUICustomizationCommandInput,
   context: __SerdeContext
@@ -1179,6 +1187,10 @@ export declare const de_GetSigningCertificateCommand: (
   output: __HttpResponse,
   context: __SerdeContext
 ) => Promise<GetSigningCertificateCommandOutput>;
+export declare const de_GetTokensFromRefreshTokenCommand: (
+  output: __HttpResponse,
+  context: __SerdeContext
+) => Promise<GetTokensFromRefreshTokenCommandOutput>;
 export declare const de_GetUICustomizationCommand: (
   output: __HttpResponse,
   context: __SerdeContext

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-cognito-identity-provider",
   "description": "AWS SDK for JavaScript Cognito Identity Provider Client for Node.js, Browser and React Native",
-  "version": "3.782.0",
+  "version": "3.794.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-cognito-identity-provider",
@@ -21,16 +21,16 @@
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
     "@aws-sdk/core": "3.775.0",
-    "@aws-sdk/credential-provider-node": "3.782.0",
+    "@aws-sdk/credential-provider-node": "3.787.0",
     "@aws-sdk/middleware-host-header": "3.775.0",
     "@aws-sdk/middleware-logger": "3.775.0",
     "@aws-sdk/middleware-recursion-detection": "3.775.0",
-    "@aws-sdk/middleware-user-agent": "3.782.0",
+    "@aws-sdk/middleware-user-agent": "3.787.0",
     "@aws-sdk/region-config-resolver": "3.775.0",
     "@aws-sdk/types": "3.775.0",
-    "@aws-sdk/util-endpoints": "3.782.0",
+    "@aws-sdk/util-endpoints": "3.787.0",
     "@aws-sdk/util-user-agent-browser": "3.775.0",
-    "@aws-sdk/util-user-agent-node": "3.782.0",
+    "@aws-sdk/util-user-agent-node": "3.787.0",
     "@smithy/config-resolver": "^4.1.0",
     "@smithy/core": "^3.2.0",
     "@smithy/fetch-http-handler": "^5.0.2",