@aws-sdk/client-cognito-identity-provider 3.787.0 → 3.796.0

package/README.md

@@ -776,6 +776,14 @@ GetSigningCertificate
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GetSigningCertificateCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cognito-identity-provider/Interface/GetSigningCertificateCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cognito-identity-provider/Interface/GetSigningCertificateCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetTokensFromRefreshToken
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cognito-identity-provider/command/GetTokensFromRefreshTokenCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cognito-identity-provider/Interface/GetTokensFromRefreshTokenCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cognito-identity-provider/Interface/GetTokensFromRefreshTokenCommandOutput/)
+
 </details>
 <details>
 <summary>

package/dist-cjs/index.js

@@ -171,6 +171,7 @@ __export(index_exports, {
   EventType: () => EventType,
   ExpiredCodeException: () => ExpiredCodeException,
   ExplicitAuthFlowsType: () => ExplicitAuthFlowsType,
+  FeatureType: () => FeatureType,
   FeatureUnavailableInTierException: () => FeatureUnavailableInTierException,
   FeedbackValueType: () => FeedbackValueType,
   ForbiddenException: () => ForbiddenException,
@@ -186,6 +187,9 @@ __export(index_exports, {
   GetIdentityProviderByIdentifierCommand: () => GetIdentityProviderByIdentifierCommand,
   GetLogDeliveryConfigurationCommand: () => GetLogDeliveryConfigurationCommand,
   GetSigningCertificateCommand: () => GetSigningCertificateCommand,
+  GetTokensFromRefreshTokenCommand: () => GetTokensFromRefreshTokenCommand,
+  GetTokensFromRefreshTokenRequestFilterSensitiveLog: () => GetTokensFromRefreshTokenRequestFilterSensitiveLog,
+  GetTokensFromRefreshTokenResponseFilterSensitiveLog: () => GetTokensFromRefreshTokenResponseFilterSensitiveLog,
   GetUICustomizationCommand: () => GetUICustomizationCommand,
   GetUICustomizationRequestFilterSensitiveLog: () => GetUICustomizationRequestFilterSensitiveLog,
   GetUICustomizationResponseFilterSensitiveLog: () => GetUICustomizationResponseFilterSensitiveLog,
@@ -244,6 +248,7 @@ __export(index_exports, {
   PreconditionNotMetException: () => PreconditionNotMetException,
   PreventUserExistenceErrorTypes: () => PreventUserExistenceErrorTypes,
   RecoveryOptionNameType: () => RecoveryOptionNameType,
+  RefreshTokenReuseException: () => RefreshTokenReuseException,
   ResendConfirmationCodeCommand: () => ResendConfirmationCodeCommand,
   ResendConfirmationCodeRequestFilterSensitiveLog: () => ResendConfirmationCodeRequestFilterSensitiveLog,
   ResourceNotFoundException: () => ResourceNotFoundException,
@@ -1021,6 +1026,24 @@ var PasswordResetRequiredException = class _PasswordResetRequiredException exten
     Object.setPrototypeOf(this, _PasswordResetRequiredException.prototype);
   }
 };
+var UnsupportedOperationException = class _UnsupportedOperationException extends CognitoIdentityProviderServiceException {
+  static {
+    __name(this, "UnsupportedOperationException");
+  }
+  name = "UnsupportedOperationException";
+  $fault = "client";
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "UnsupportedOperationException",
+      $fault: "client",
+      ...opts
+    });
+    Object.setPrototypeOf(this, _UnsupportedOperationException.prototype);
+  }
+};
 var UserNotConfirmedException = class _UserNotConfirmedException extends CognitoIdentityProviderServiceException {
   static {
     __name(this, "UserNotConfirmedException");
@@ -1569,6 +1592,10 @@ var PreventUserExistenceErrorTypes = {
   ENABLED: "ENABLED",
   LEGACY: "LEGACY"
 };
+var FeatureType = {
+  DISABLED: "DISABLED",
+  ENABLED: "ENABLED"
+};
 var TimeUnitsType = {
   DAYS: "days",
   HOURS: "hours",
@@ -1653,6 +1680,24 @@ var LogLevel = {
   ERROR: "ERROR",
   INFO: "INFO"
 };
+var RefreshTokenReuseException = class _RefreshTokenReuseException extends CognitoIdentityProviderServiceException {
+  static {
+    __name(this, "RefreshTokenReuseException");
+  }
+  name = "RefreshTokenReuseException";
+  $fault = "client";
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "RefreshTokenReuseException",
+      $fault: "client",
+      ...opts
+    });
+    Object.setPrototypeOf(this, _RefreshTokenReuseException.prototype);
+  }
+};
 var AdminAddUserToGroupRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.Username && { Username: import_smithy_client.SENSITIVE_STRING }
@@ -1936,6 +1981,18 @@ var GetDeviceResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.Device && { Device: DeviceTypeFilterSensitiveLog(obj.Device) }
 }), "GetDeviceResponseFilterSensitiveLog");
+var GetTokensFromRefreshTokenRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.RefreshToken && { RefreshToken: import_smithy_client.SENSITIVE_STRING },
+  ...obj.ClientId && { ClientId: import_smithy_client.SENSITIVE_STRING },
+  ...obj.ClientSecret && { ClientSecret: import_smithy_client.SENSITIVE_STRING }
+}), "GetTokensFromRefreshTokenRequestFilterSensitiveLog");
+var GetTokensFromRefreshTokenResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.AuthenticationResult && {
+    AuthenticationResult: AuthenticationResultTypeFilterSensitiveLog(obj.AuthenticationResult)
+  }
+}), "GetTokensFromRefreshTokenResponseFilterSensitiveLog");
 var GetUICustomizationRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.ClientId && { ClientId: import_smithy_client.SENSITIVE_STRING }
@@ -1963,14 +2020,6 @@ var GetUserAttributeVerificationCodeRequestFilterSensitiveLog = /* @__PURE__ */
   ...obj,
   ...obj.AccessToken && { AccessToken: import_smithy_client.SENSITIVE_STRING }
 }), "GetUserAttributeVerificationCodeRequestFilterSensitiveLog");
-var GetUserAuthFactorsRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
-  ...obj,
-  ...obj.AccessToken && { AccessToken: import_smithy_client.SENSITIVE_STRING }
-}), "GetUserAuthFactorsRequestFilterSensitiveLog");
-var GetUserAuthFactorsResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
-  ...obj,
-  ...obj.Username && { Username: import_smithy_client.SENSITIVE_STRING }
-}), "GetUserAuthFactorsResponseFilterSensitiveLog");
 
 // src/models/models_1.ts
 
@@ -1996,24 +2045,6 @@ var UnauthorizedException = class _UnauthorizedException extends CognitoIdentity
     Object.setPrototypeOf(this, _UnauthorizedException.prototype);
   }
 };
-var UnsupportedOperationException = class _UnsupportedOperationException extends CognitoIdentityProviderServiceException {
-  static {
-    __name(this, "UnsupportedOperationException");
-  }
-  name = "UnsupportedOperationException";
-  $fault = "client";
-  /**
-   * @internal
-   */
-  constructor(opts) {
-    super({
-      name: "UnsupportedOperationException",
-      $fault: "client",
-      ...opts
-    });
-    Object.setPrototypeOf(this, _UnsupportedOperationException.prototype);
-  }
-};
 var UnsupportedTokenTypeException = class _UnsupportedTokenTypeException extends CognitoIdentityProviderServiceException {
   static {
     __name(this, "UnsupportedTokenTypeException");
@@ -2072,6 +2103,14 @@ var VerifySoftwareTokenResponseType = {
   ERROR: "ERROR",
   SUCCESS: "SUCCESS"
 };
+var GetUserAuthFactorsRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.AccessToken && { AccessToken: import_smithy_client.SENSITIVE_STRING }
+}), "GetUserAuthFactorsRequestFilterSensitiveLog");
+var GetUserAuthFactorsResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.Username && { Username: import_smithy_client.SENSITIVE_STRING }
+}), "GetUserAuthFactorsResponseFilterSensitiveLog");
 var GlobalSignOutRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.AccessToken && { AccessToken: import_smithy_client.SENSITIVE_STRING }
@@ -2640,6 +2679,12 @@ var se_GetSigningCertificateCommand = /* @__PURE__ */ __name(async (input, conte
   body = JSON.stringify((0, import_smithy_client._json)(input));
   return buildHttpRpcRequest(context, headers, "/", void 0, body);
 }, "se_GetSigningCertificateCommand");
+var se_GetTokensFromRefreshTokenCommand = /* @__PURE__ */ __name(async (input, context) => {
+  const headers = sharedHeaders("GetTokensFromRefreshToken");
+  let body;
+  body = JSON.stringify((0, import_smithy_client._json)(input));
+  return buildHttpRpcRequest(context, headers, "/", void 0, body);
+}, "se_GetTokensFromRefreshTokenCommand");
 var se_GetUICustomizationCommand = /* @__PURE__ */ __name(async (input, context) => {
   const headers = sharedHeaders("GetUICustomization");
   let body;
@@ -3758,6 +3803,19 @@ var de_GetSigningCertificateCommand = /* @__PURE__ */ __name(async (output, cont
   };
   return response;
 }, "de_GetSigningCertificateCommand");
+var de_GetTokensFromRefreshTokenCommand = /* @__PURE__ */ __name(async (output, context) => {
+  if (output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
+  let contents = {};
+  contents = (0, import_smithy_client._json)(data);
+  const response = {
+    $metadata: deserializeMetadata(output),
+    ...contents
+  };
+  return response;
+}, "de_GetTokensFromRefreshTokenCommand");
 var de_GetUICustomizationCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
@@ -4422,6 +4480,9 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
     case "PasswordResetRequiredException":
     case "com.amazonaws.cognitoidentityprovider#PasswordResetRequiredException":
       throw await de_PasswordResetRequiredExceptionRes(parsedOutput, context);
+    case "UnsupportedOperationException":
+    case "com.amazonaws.cognitoidentityprovider#UnsupportedOperationException":
+      throw await de_UnsupportedOperationExceptionRes(parsedOutput, context);
     case "UserNotConfirmedException":
     case "com.amazonaws.cognitoidentityprovider#UserNotConfirmedException":
       throw await de_UserNotConfirmedExceptionRes(parsedOutput, context);
@@ -4494,12 +4555,12 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
     case "UnsupportedIdentityProviderException":
     case "com.amazonaws.cognitoidentityprovider#UnsupportedIdentityProviderException":
       throw await de_UnsupportedIdentityProviderExceptionRes(parsedOutput, context);
+    case "RefreshTokenReuseException":
+    case "com.amazonaws.cognitoidentityprovider#RefreshTokenReuseException":
+      throw await de_RefreshTokenReuseExceptionRes(parsedOutput, context);
     case "UnauthorizedException":
     case "com.amazonaws.cognitoidentityprovider#UnauthorizedException":
       throw await de_UnauthorizedExceptionRes(parsedOutput, context);
-    case "UnsupportedOperationException":
-    case "com.amazonaws.cognitoidentityprovider#UnsupportedOperationException":
-      throw await de_UnsupportedOperationExceptionRes(parsedOutput, context);
     case "UnsupportedTokenTypeException":
     case "com.amazonaws.cognitoidentityprovider#UnsupportedTokenTypeException":
       throw await de_UnsupportedTokenTypeExceptionRes(parsedOutput, context);
@@ -4761,6 +4822,15 @@ var de_PreconditionNotMetExceptionRes = /* @__PURE__ */ __name(async (parsedOutp
   });
   return (0, import_smithy_client.decorateServiceException)(exception, body);
 }, "de_PreconditionNotMetExceptionRes");
+var de_RefreshTokenReuseExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
+  const body = parsedOutput.body;
+  const deserialized = (0, import_smithy_client._json)(body);
+  const exception = new RefreshTokenReuseException({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...deserialized
+  });
+  return (0, import_smithy_client.decorateServiceException)(exception, body);
+}, "de_RefreshTokenReuseExceptionRes");
 var de_ResourceNotFoundExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
   const body = parsedOutput.body;
   const deserialized = (0, import_smithy_client._json)(body);
@@ -5441,6 +5511,7 @@ var de_UserPoolClientType = /* @__PURE__ */ __name((output, context) => {
     LogoutURLs: import_smithy_client._json,
     PreventUserExistenceErrors: import_smithy_client.expectString,
     ReadAttributes: import_smithy_client._json,
+    RefreshTokenRotation: import_smithy_client._json,
     RefreshTokenValidity: import_smithy_client.expectInt32,
     SupportedIdentityProviders: import_smithy_client._json,
     TokenValidityUnits: import_smithy_client._json,
@@ -6585,6 +6656,21 @@ var GetSigningCertificateCommand = class extends import_smithy_client.Command.cl
   }
 };
 
+// src/commands/GetTokensFromRefreshTokenCommand.ts
+
+
+
+var GetTokensFromRefreshTokenCommand = class extends import_smithy_client.Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+  return [
+    (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
+    (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
+  ];
+}).s("AWSCognitoIdentityProviderService", "GetTokensFromRefreshToken", {}).n("CognitoIdentityProviderClient", "GetTokensFromRefreshTokenCommand").f(GetTokensFromRefreshTokenRequestFilterSensitiveLog, GetTokensFromRefreshTokenResponseFilterSensitiveLog).ser(se_GetTokensFromRefreshTokenCommand).de(de_GetTokensFromRefreshTokenCommand).build() {
+  static {
+    __name(this, "GetTokensFromRefreshTokenCommand");
+  }
+};
+
 // src/commands/GetUICustomizationCommand.ts
 
 
@@ -7330,6 +7416,7 @@ var commands = {
   GetIdentityProviderByIdentifierCommand,
   GetLogDeliveryConfigurationCommand,
   GetSigningCertificateCommand,
+  GetTokensFromRefreshTokenCommand,
   GetUICustomizationCommand,
   GetUserCommand,
   GetUserAttributeVerificationCodeCommand,
@@ -7494,6 +7581,7 @@ var paginateListUsers = (0, import_core.createPaginator)(CognitoIdentityProvider
   GetIdentityProviderByIdentifierCommand,
   GetLogDeliveryConfigurationCommand,
   GetSigningCertificateCommand,
+  GetTokensFromRefreshTokenCommand,
   GetUICustomizationCommand,
   GetUserAttributeVerificationCodeCommand,
   GetUserAuthFactorsCommand,
@@ -7580,6 +7668,7 @@ var paginateListUsers = (0, import_core.createPaginator)(CognitoIdentityProvider
   InvalidEmailRoleAccessPolicyException,
   MFAMethodNotFoundException,
   PasswordResetRequiredException,
+  UnsupportedOperationException,
   UserNotConfirmedException,
   ChallengeName,
   ChallengeResponse,
@@ -7632,6 +7721,7 @@ var paginateListUsers = (0, import_core.createPaginator)(CognitoIdentityProvider
   OAuthFlowType,
   ExplicitAuthFlowsType,
   PreventUserExistenceErrorTypes,
+  FeatureType,
   TimeUnitsType,
   InvalidOAuthFlowException,
   ScopeDoesNotExistException,
@@ -7641,6 +7731,7 @@ var paginateListUsers = (0, import_core.createPaginator)(CognitoIdentityProvider
   DomainStatusType,
   EventSourceName,
   LogLevel,
+  RefreshTokenReuseException,
   AdminAddUserToGroupRequestFilterSensitiveLog,
   AdminConfirmSignUpRequestFilterSensitiveLog,
   AttributeTypeFilterSensitiveLog,
@@ -7701,21 +7792,22 @@ var paginateListUsers = (0, import_core.createPaginator)(CognitoIdentityProvider
   ForgotPasswordRequestFilterSensitiveLog,
   GetDeviceRequestFilterSensitiveLog,
   GetDeviceResponseFilterSensitiveLog,
+  GetTokensFromRefreshTokenRequestFilterSensitiveLog,
+  GetTokensFromRefreshTokenResponseFilterSensitiveLog,
   GetUICustomizationRequestFilterSensitiveLog,
   UICustomizationTypeFilterSensitiveLog,
   GetUICustomizationResponseFilterSensitiveLog,
   GetUserRequestFilterSensitiveLog,
   GetUserResponseFilterSensitiveLog,
   GetUserAttributeVerificationCodeRequestFilterSensitiveLog,
-  GetUserAuthFactorsRequestFilterSensitiveLog,
-  GetUserAuthFactorsResponseFilterSensitiveLog,
   UserVerificationType,
   UnauthorizedException,
-  UnsupportedOperationException,
   UnsupportedTokenTypeException,
   WebAuthnConfigurationMissingException,
   EnableSoftwareTokenMFAException,
   VerifySoftwareTokenResponseType,
+  GetUserAuthFactorsRequestFilterSensitiveLog,
+  GetUserAuthFactorsResponseFilterSensitiveLog,
   GlobalSignOutRequestFilterSensitiveLog,
   InitiateAuthRequestFilterSensitiveLog,
   InitiateAuthResponseFilterSensitiveLog,

package/dist-es/CognitoIdentityProvider.js

@@ -68,6 +68,7 @@ import { GetGroupCommand } from "./commands/GetGroupCommand";
 import { GetIdentityProviderByIdentifierCommand, } from "./commands/GetIdentityProviderByIdentifierCommand";
 import { GetLogDeliveryConfigurationCommand, } from "./commands/GetLogDeliveryConfigurationCommand";
 import { GetSigningCertificateCommand, } from "./commands/GetSigningCertificateCommand";
+import { GetTokensFromRefreshTokenCommand, } from "./commands/GetTokensFromRefreshTokenCommand";
 import { GetUICustomizationCommand, } from "./commands/GetUICustomizationCommand";
 import { GetUserAttributeVerificationCodeCommand, } from "./commands/GetUserAttributeVerificationCodeCommand";
 import { GetUserAuthFactorsCommand, } from "./commands/GetUserAuthFactorsCommand";
@@ -182,6 +183,7 @@ const commands = {
     GetIdentityProviderByIdentifierCommand,
     GetLogDeliveryConfigurationCommand,
     GetSigningCertificateCommand,
+    GetTokensFromRefreshTokenCommand,
     GetUICustomizationCommand,
     GetUserCommand,
     GetUserAttributeVerificationCodeCommand,

package/dist-es/commands/GetTokensFromRefreshTokenCommand.js

@@ -0,0 +1,23 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetTokensFromRefreshTokenRequestFilterSensitiveLog, GetTokensFromRefreshTokenResponseFilterSensitiveLog, } from "../models/models_0";
+import { de_GetTokensFromRefreshTokenCommand, se_GetTokensFromRefreshTokenCommand } from "../protocols/Aws_json1_1";
+export { $Command };
+export class GetTokensFromRefreshTokenCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("AWSCognitoIdentityProviderService", "GetTokensFromRefreshToken", {})
+    .n("CognitoIdentityProviderClient", "GetTokensFromRefreshTokenCommand")
+    .f(GetTokensFromRefreshTokenRequestFilterSensitiveLog, GetTokensFromRefreshTokenResponseFilterSensitiveLog)
+    .ser(se_GetTokensFromRefreshTokenCommand)
+    .de(de_GetTokensFromRefreshTokenCommand)
+    .build() {
+}

package/dist-es/commands/GetUserAuthFactorsCommand.js

@@ -2,7 +2,7 @@ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
 import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { GetUserAuthFactorsRequestFilterSensitiveLog, GetUserAuthFactorsResponseFilterSensitiveLog, } from "../models/models_0";
+import { GetUserAuthFactorsRequestFilterSensitiveLog, GetUserAuthFactorsResponseFilterSensitiveLog, } from "../models/models_1";
 import { de_GetUserAuthFactorsCommand, se_GetUserAuthFactorsCommand } from "../protocols/Aws_json1_1";
 export { $Command };
 export class GetUserAuthFactorsCommand extends $Command

package/dist-es/commands/index.js

@@ -66,6 +66,7 @@ export * from "./GetGroupCommand";
 export * from "./GetIdentityProviderByIdentifierCommand";
 export * from "./GetLogDeliveryConfigurationCommand";
 export * from "./GetSigningCertificateCommand";
+export * from "./GetTokensFromRefreshTokenCommand";
 export * from "./GetUICustomizationCommand";
 export * from "./GetUserAttributeVerificationCodeCommand";
 export * from "./GetUserAuthFactorsCommand";

package/dist-es/models/models_0.js

@@ -353,6 +353,18 @@ export class PasswordResetRequiredException extends __BaseException {
         Object.setPrototypeOf(this, PasswordResetRequiredException.prototype);
     }
 }
+export class UnsupportedOperationException extends __BaseException {
+    name = "UnsupportedOperationException";
+    $fault = "client";
+    constructor(opts) {
+        super({
+            name: "UnsupportedOperationException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, UnsupportedOperationException.prototype);
+    }
+}
 export class UserNotConfirmedException extends __BaseException {
     name = "UserNotConfirmedException";
     $fault = "client";
@@ -775,6 +787,10 @@ export const PreventUserExistenceErrorTypes = {
     ENABLED: "ENABLED",
     LEGACY: "LEGACY",
 };
+export const FeatureType = {
+    DISABLED: "DISABLED",
+    ENABLED: "ENABLED",
+};
 export const TimeUnitsType = {
     DAYS: "days",
     HOURS: "hours",
@@ -841,6 +857,18 @@ export const LogLevel = {
     ERROR: "ERROR",
     INFO: "INFO",
 };
+export class RefreshTokenReuseException extends __BaseException {
+    name = "RefreshTokenReuseException";
+    $fault = "client";
+    constructor(opts) {
+        super({
+            name: "RefreshTokenReuseException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, RefreshTokenReuseException.prototype);
+    }
+}
 export const AdminAddUserToGroupRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Username && { Username: SENSITIVE_STRING }),
@@ -1124,6 +1152,18 @@ export const GetDeviceResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Device && { Device: DeviceTypeFilterSensitiveLog(obj.Device) }),
 });
+export const GetTokensFromRefreshTokenRequestFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.RefreshToken && { RefreshToken: SENSITIVE_STRING }),
+    ...(obj.ClientId && { ClientId: SENSITIVE_STRING }),
+    ...(obj.ClientSecret && { ClientSecret: SENSITIVE_STRING }),
+});
+export const GetTokensFromRefreshTokenResponseFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.AuthenticationResult && {
+        AuthenticationResult: AuthenticationResultTypeFilterSensitiveLog(obj.AuthenticationResult),
+    }),
+});
 export const GetUICustomizationRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.ClientId && { ClientId: SENSITIVE_STRING }),
@@ -1151,11 +1191,3 @@ export const GetUserAttributeVerificationCodeRequestFilterSensitiveLog = (obj) =
     ...obj,
     ...(obj.AccessToken && { AccessToken: SENSITIVE_STRING }),
 });
-export const GetUserAuthFactorsRequestFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.AccessToken && { AccessToken: SENSITIVE_STRING }),
-});
-export const GetUserAuthFactorsResponseFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.Username && { Username: SENSITIVE_STRING }),
-});

package/dist-es/models/models_1.js

@@ -17,18 +17,6 @@ export class UnauthorizedException extends __BaseException {
         Object.setPrototypeOf(this, UnauthorizedException.prototype);
     }
 }
-export class UnsupportedOperationException extends __BaseException {
-    name = "UnsupportedOperationException";
-    $fault = "client";
-    constructor(opts) {
-        super({
-            name: "UnsupportedOperationException",
-            $fault: "client",
-            ...opts,
-        });
-        Object.setPrototypeOf(this, UnsupportedOperationException.prototype);
-    }
-}
 export class UnsupportedTokenTypeException extends __BaseException {
     name = "UnsupportedTokenTypeException";
     $fault = "client";
@@ -69,6 +57,14 @@ export const VerifySoftwareTokenResponseType = {
     ERROR: "ERROR",
     SUCCESS: "SUCCESS",
 };
+export const GetUserAuthFactorsRequestFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.AccessToken && { AccessToken: SENSITIVE_STRING }),
+});
+export const GetUserAuthFactorsResponseFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Username && { Username: SENSITIVE_STRING }),
+});
 export const GlobalSignOutRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.AccessToken && { AccessToken: SENSITIVE_STRING }),

package/dist-es/protocols/Aws_json1_1.js

@@ -2,8 +2,8 @@ import { loadRestJsonErrorCode, parseJsonBody as parseBody, parseJsonErrorBody a
 import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
 import { _json, collectBody, decorateServiceException as __decorateServiceException, expectBoolean as __expectBoolean, expectInt32 as __expectInt32, expectLong as __expectLong, expectNonNull as __expectNonNull, expectNumber as __expectNumber, expectString as __expectString, parseEpochTimestamp as __parseEpochTimestamp, take, withBaseException, } from "@smithy/smithy-client";
 import { CognitoIdentityProviderServiceException as __BaseException } from "../models/CognitoIdentityProviderServiceException";
-import { AliasExistsException, CodeDeliveryFailureException, CodeMismatchException, ConcurrentModificationException, DeviceKeyExistsException, DuplicateProviderException, ExpiredCodeException, FeatureUnavailableInTierException, ForbiddenException, GroupExistsException, InternalErrorException, InvalidEmailRoleAccessPolicyException, InvalidLambdaResponseException, InvalidOAuthFlowException, InvalidParameterException, InvalidPasswordException, InvalidSmsRoleAccessPolicyException, InvalidSmsRoleTrustRelationshipException, InvalidUserPoolConfigurationException, LimitExceededException, ManagedLoginBrandingExistsException, MFAMethodNotFoundException, NotAuthorizedException, PasswordHistoryPolicyViolationException, PasswordResetRequiredException, PreconditionNotMetException, ResourceNotFoundException, ScopeDoesNotExistException, SoftwareTokenMFANotFoundException, TierChangeNotAllowedException, TooManyFailedAttemptsException, TooManyRequestsException, UnexpectedLambdaException, UnsupportedIdentityProviderException, UnsupportedUserStateException, UserImportInProgressException, UserLambdaValidationException, UsernameExistsException, UserNotConfirmedException, UserNotFoundException, UserPoolAddOnNotEnabledException, UserPoolTaggingException, WebAuthnChallengeNotFoundException, WebAuthnClientMismatchException, WebAuthnCredentialNotSupportedException, WebAuthnNotEnabledException, WebAuthnOriginNotAllowedException, WebAuthnRelyingPartyMismatchException, } from "../models/models_0";
-import { EnableSoftwareTokenMFAException, UnauthorizedException, UnsupportedOperationException, UnsupportedTokenTypeException, WebAuthnConfigurationMissingException, } from "../models/models_1";
+import { AliasExistsException, CodeDeliveryFailureException, CodeMismatchException, ConcurrentModificationException, DeviceKeyExistsException, DuplicateProviderException, ExpiredCodeException, FeatureUnavailableInTierException, ForbiddenException, GroupExistsException, InternalErrorException, InvalidEmailRoleAccessPolicyException, InvalidLambdaResponseException, InvalidOAuthFlowException, InvalidParameterException, InvalidPasswordException, InvalidSmsRoleAccessPolicyException, InvalidSmsRoleTrustRelationshipException, InvalidUserPoolConfigurationException, LimitExceededException, ManagedLoginBrandingExistsException, MFAMethodNotFoundException, NotAuthorizedException, PasswordHistoryPolicyViolationException, PasswordResetRequiredException, PreconditionNotMetException, RefreshTokenReuseException, ResourceNotFoundException, ScopeDoesNotExistException, SoftwareTokenMFANotFoundException, TierChangeNotAllowedException, TooManyFailedAttemptsException, TooManyRequestsException, UnexpectedLambdaException, UnsupportedIdentityProviderException, UnsupportedOperationException, UnsupportedUserStateException, UserImportInProgressException, UserLambdaValidationException, UsernameExistsException, UserNotConfirmedException, UserNotFoundException, UserPoolAddOnNotEnabledException, UserPoolTaggingException, WebAuthnChallengeNotFoundException, WebAuthnClientMismatchException, WebAuthnCredentialNotSupportedException, WebAuthnNotEnabledException, WebAuthnOriginNotAllowedException, WebAuthnRelyingPartyMismatchException, } from "../models/models_0";
+import { EnableSoftwareTokenMFAException, UnauthorizedException, UnsupportedTokenTypeException, WebAuthnConfigurationMissingException, } from "../models/models_1";
 export const se_AddCustomAttributesCommand = async (input, context) => {
     const headers = sharedHeaders("AddCustomAttributes");
     let body;
@@ -412,6 +412,12 @@ export const se_GetSigningCertificateCommand = async (input, context) => {
     body = JSON.stringify(_json(input));
     return buildHttpRpcRequest(context, headers, "/", undefined, body);
 };
+export const se_GetTokensFromRefreshTokenCommand = async (input, context) => {
+    const headers = sharedHeaders("GetTokensFromRefreshToken");
+    let body;
+    body = JSON.stringify(_json(input));
+    return buildHttpRpcRequest(context, headers, "/", undefined, body);
+};
 export const se_GetUICustomizationCommand = async (input, context) => {
     const headers = sharedHeaders("GetUICustomization");
     let body;
@@ -1530,6 +1536,19 @@ export const de_GetSigningCertificateCommand = async (output, context) => {
     };
     return response;
 };
+export const de_GetTokensFromRefreshTokenCommand = async (output, context) => {
+    if (output.statusCode >= 300) {
+        return de_CommandError(output, context);
+    }
+    const data = await parseBody(output.body, context);
+    let contents = {};
+    contents = _json(data);
+    const response = {
+        $metadata: deserializeMetadata(output),
+        ...contents,
+    };
+    return response;
+};
 export const de_GetUICustomizationCommand = async (output, context) => {
     if (output.statusCode >= 300) {
         return de_CommandError(output, context);
@@ -2194,6 +2213,9 @@ const de_CommandError = async (output, context) => {
         case "PasswordResetRequiredException":
         case "com.amazonaws.cognitoidentityprovider#PasswordResetRequiredException":
             throw await de_PasswordResetRequiredExceptionRes(parsedOutput, context);
+        case "UnsupportedOperationException":
+        case "com.amazonaws.cognitoidentityprovider#UnsupportedOperationException":
+            throw await de_UnsupportedOperationExceptionRes(parsedOutput, context);
         case "UserNotConfirmedException":
         case "com.amazonaws.cognitoidentityprovider#UserNotConfirmedException":
             throw await de_UserNotConfirmedExceptionRes(parsedOutput, context);
@@ -2266,12 +2288,12 @@ const de_CommandError = async (output, context) => {
         case "UnsupportedIdentityProviderException":
         case "com.amazonaws.cognitoidentityprovider#UnsupportedIdentityProviderException":
             throw await de_UnsupportedIdentityProviderExceptionRes(parsedOutput, context);
+        case "RefreshTokenReuseException":
+        case "com.amazonaws.cognitoidentityprovider#RefreshTokenReuseException":
+            throw await de_RefreshTokenReuseExceptionRes(parsedOutput, context);
         case "UnauthorizedException":
         case "com.amazonaws.cognitoidentityprovider#UnauthorizedException":
             throw await de_UnauthorizedExceptionRes(parsedOutput, context);
-        case "UnsupportedOperationException":
-        case "com.amazonaws.cognitoidentityprovider#UnsupportedOperationException":
-            throw await de_UnsupportedOperationExceptionRes(parsedOutput, context);
         case "UnsupportedTokenTypeException":
         case "com.amazonaws.cognitoidentityprovider#UnsupportedTokenTypeException":
             throw await de_UnsupportedTokenTypeExceptionRes(parsedOutput, context);
@@ -2533,6 +2555,15 @@ const de_PreconditionNotMetExceptionRes = async (parsedOutput, context) => {
     });
     return __decorateServiceException(exception, body);
 };
+const de_RefreshTokenReuseExceptionRes = async (parsedOutput, context) => {
+    const body = parsedOutput.body;
+    const deserialized = _json(body);
+    const exception = new RefreshTokenReuseException({
+        $metadata: deserializeMetadata(parsedOutput),
+        ...deserialized,
+    });
+    return __decorateServiceException(exception, body);
+};
 const de_ResourceNotFoundExceptionRes = async (parsedOutput, context) => {
     const body = parsedOutput.body;
     const deserialized = _json(body);
@@ -3227,6 +3258,7 @@ const de_UserPoolClientType = (output, context) => {
         LogoutURLs: _json,
         PreventUserExistenceErrors: __expectString,
         ReadAttributes: _json,
+        RefreshTokenRotation: _json,
         RefreshTokenValidity: __expectInt32,
         SupportedIdentityProviders: _json,
         TokenValidityUnits: _json,

package/dist-types/CognitoIdentityProvider.d.ts

@@ -68,6 +68,7 @@ import { GetGroupCommandInput, GetGroupCommandOutput } from "./commands/GetGroup
 import { GetIdentityProviderByIdentifierCommandInput, GetIdentityProviderByIdentifierCommandOutput } from "./commands/GetIdentityProviderByIdentifierCommand";
 import { GetLogDeliveryConfigurationCommandInput, GetLogDeliveryConfigurationCommandOutput } from "./commands/GetLogDeliveryConfigurationCommand";
 import { GetSigningCertificateCommandInput, GetSigningCertificateCommandOutput } from "./commands/GetSigningCertificateCommand";
+import { GetTokensFromRefreshTokenCommandInput, GetTokensFromRefreshTokenCommandOutput } from "./commands/GetTokensFromRefreshTokenCommand";
 import { GetUICustomizationCommandInput, GetUICustomizationCommandOutput } from "./commands/GetUICustomizationCommand";
 import { GetUserAttributeVerificationCodeCommandInput, GetUserAttributeVerificationCodeCommandOutput } from "./commands/GetUserAttributeVerificationCodeCommand";
 import { GetUserAuthFactorsCommandInput, GetUserAuthFactorsCommandOutput } from "./commands/GetUserAuthFactorsCommand";
@@ -523,6 +524,12 @@ export interface CognitoIdentityProvider {
     getSigningCertificate(args: GetSigningCertificateCommandInput, options?: __HttpHandlerOptions): Promise<GetSigningCertificateCommandOutput>;
     getSigningCertificate(args: GetSigningCertificateCommandInput, cb: (err: any, data?: GetSigningCertificateCommandOutput) => void): void;
     getSigningCertificate(args: GetSigningCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetSigningCertificateCommandOutput) => void): void;
+    /**
+     * @see {@link GetTokensFromRefreshTokenCommand}
+     */
+    getTokensFromRefreshToken(args: GetTokensFromRefreshTokenCommandInput, options?: __HttpHandlerOptions): Promise<GetTokensFromRefreshTokenCommandOutput>;
+    getTokensFromRefreshToken(args: GetTokensFromRefreshTokenCommandInput, cb: (err: any, data?: GetTokensFromRefreshTokenCommandOutput) => void): void;
+    getTokensFromRefreshToken(args: GetTokensFromRefreshTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTokensFromRefreshTokenCommandOutput) => void): void;
     /**
      * @see {@link GetUICustomizationCommand}
      */