@aws-sdk/client-signin 3.1155.0 → 3.1157.0

package/README.md

@@ -6,8 +6,7 @@
 
 AWS SDK for JavaScript Signin Client for Node.js, Browser and React Native.
 
-AWS Sign-In manages authentication for AWS services. This service provides
-secure authentication flows for accessing AWS resources from the console and developer tools.
+AWS Sign-In manages authentication for AWS services. It implements OAuth 2.0, providing secure token exchange and refresh capabilities.
 
 ## Installing
 
@@ -196,6 +195,13 @@ CreateOAuth2TokenWithIAM
 </details>
 <details>
 <summary>
+CreateOAuth2TokenWithTokenExchange
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/signin/command/CreateOAuth2TokenWithTokenExchangeCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-signin/Interface/CreateOAuth2TokenWithTokenExchangeCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-signin/Interface/CreateOAuth2TokenWithTokenExchangeCommandOutput/)
+</details>
+<details>
+<summary>
 DeleteConsoleAuthorizationConfiguration
 </summary>
 

package/dist-cjs/index.js

@@ -52,6 +52,11 @@ const defaultSigninHttpAuthSchemeProvider = (authParameters) => {
                 options.push(createSmithyApiNoAuthHttpAuthOption());
                 break;
             }
+        case "CreateOAuth2TokenWithTokenExchange":
+            {
+                options.push(createSmithyApiNoAuthHttpAuthOption());
+                break;
+            }
         default: {
             options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
         }
@@ -79,7 +84,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1154.0";
+var version = "3.1156.0";
 var packageInfo = {
 	version: version};
 
@@ -278,6 +283,52 @@ class ValidationException extends SigninServiceException {
         this.error = opts.error;
     }
 }
+class InvalidGrantException extends SigninServiceException {
+    static shapeId = "com.amazonaws.signin#InvalidGrantException";
+    name = "InvalidGrantException";
+    $fault = "client";
+    error;
+    constructor(opts) {
+        super({
+            name: "InvalidGrantException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, InvalidGrantException.prototype);
+        this.error = opts.error;
+    }
+}
+class InvalidScopeException extends SigninServiceException {
+    static shapeId = "com.amazonaws.signin#InvalidScopeException";
+    name = "InvalidScopeException";
+    $fault = "client";
+    error;
+    constructor(opts) {
+        super({
+            name: "InvalidScopeException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, InvalidScopeException.prototype);
+        this.error = opts.error;
+    }
+}
+class ServiceUnavailableException extends SigninServiceException {
+    static shapeId = "com.amazonaws.signin#ServiceUnavailableException";
+    name = "ServiceUnavailableException";
+    $fault = "server";
+    $retryable = {};
+    error;
+    constructor(opts) {
+        super({
+            name: "ServiceUnavailableException",
+            $fault: "server",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, ServiceUnavailableException.prototype);
+        this.error = opts.error;
+    }
+}
 class ResourceNotFoundException extends SigninServiceException {
     static shapeId = "com.amazonaws.signin#ResourceNotFoundException";
     name = "ResourceNotFoundException";
@@ -323,6 +374,9 @@ const _COATRr = "CreateOAuth2TokenResponse";
 const _COATWIAM = "CreateOAuth2TokenWithIAM";
 const _COATWIAMR = "CreateOAuth2TokenWithIAMRequest";
 const _COATWIAMRr = "CreateOAuth2TokenWithIAMResponse";
+const _COATWTE = "CreateOAuth2TokenWithTokenExchange";
+const _COATWTER = "CreateOAuth2TokenWithTokenExchangeRequest";
+const _COATWTERr = "CreateOAuth2TokenWithTokenExchangeResponse";
 const _DCAC = "DeleteConsoleAuthorizationConfiguration";
 const _DCACI = "DeleteConsoleAuthorizationConfigurationInput";
 const _DCACO = "DeleteConsoleAuthorizationConfigurationOutput";
@@ -336,10 +390,12 @@ const _GCACO = "GetConsoleAuthorizationConfigurationOutput";
 const _GRP = "GetResourcePolicy";
 const _GRPI = "GetResourcePolicyInput";
 const _GRPO = "GetResourcePolicyOutput";
+const _IGE = "InvalidGrantException";
 const _IOATWIAM = "IntrospectOAuth2TokenWithIAM";
 const _IOATWIAMR = "IntrospectOAuth2TokenWithIAMRequest";
 const _IOATWIAMRn = "IntrospectOAuth2TokenWithIAMResponse";
 const _ISE = "InternalServerException";
+const _ISEn = "InvalidScopeException";
 const _IT = "IntrospectionToken";
 const _LRPS = "ListResourcePermissionStatements";
 const _LRPSI = "ListResourcePermissionStatementsInput";
@@ -366,6 +422,8 @@ const _RTe = "RevocationToken";
 const _S = "Statement";
 const _SQEE = "ServiceQuotaExceededException";
 const _SRBP = "SigninResourceBasedPolicy";
+const _ST = "SubjectToken";
+const _SUE = "ServiceUnavailableException";
 const _TMRE = "TooManyRequestsError";
 const _V = "Version";
 const _VE = "ValidationException";
@@ -398,7 +456,9 @@ const _h = "http";
 const _hE = "httpError";
 const _i = "iat";
 const _iT = "idToken";
+const _iTT = "issuedTokenType";
 const _is = "iss";
+const _itt = "issued_token_type";
 const _j = "jti";
 const _jN = "jsonName";
 const _m = "message";
@@ -419,12 +479,16 @@ const _sRBP = "signinResourceBasedPolicy";
 const _sS = "signinSession";
 const _sSV = "signinSourceVpce";
 const _sT = "sessionToken";
+const _sTT = "subjectTokenType";
+const _sTu = "subjectToken";
 const _sV = "sourceVpc";
 const _sc = "scope";
 const _se = "server";
 const _si = "sid";
 const _ss = "signin_session";
-const _st = "statement";
+const _st = "subject_token";
+const _sta = "statement";
+const _stt = "subject_token_type";
 const _su = "sub";
 const _t = "token";
 const _tI = "tokenInput";
@@ -461,6 +525,18 @@ var InternalServerException$ = [-3, n0, _ISE,
     [0, 0], 2
 ];
 n0_registry.registerError(InternalServerException$, InternalServerException);
+var InvalidGrantException$ = [-3, n0, _IGE,
+    { [_e]: _c, [_hE]: 400 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(InvalidGrantException$, InvalidGrantException);
+var InvalidScopeException$ = [-3, n0, _ISEn,
+    { [_e]: _c, [_hE]: 400 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(InvalidScopeException$, InvalidScopeException);
 var ResourceNotFoundException$ = [-3, n0, _RNFE,
     { [_e]: _c, [_hE]: 404 },
     [_e, _m],
@@ -473,6 +549,12 @@ var ServiceQuotaExceededException$ = [-3, n0, _SQEE,
     [0, 0], 2
 ];
 n0_registry.registerError(ServiceQuotaExceededException$, ServiceQuotaExceededException);
+var ServiceUnavailableException$ = [-3, n0, _SUE,
+    { [_e]: _se, [_hE]: 503 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(ServiceUnavailableException$, ServiceUnavailableException);
 var TooManyRequestsError$ = [-3, n0, _TMRE,
     { [_e]: _c, [_hE]: 429 },
     [_e, _m],
@@ -493,6 +575,7 @@ var IntrospectionToken = [0, n0, _IT, 8, 0];
 var OAuthAccessToken = [0, n0, _OAAT, 8, 0];
 var RefreshToken = [0, n0, _RT, 8, 0];
 var RevocationToken = [0, n0, _RTe, 8, 0];
+var SubjectToken = [0, n0, _ST, 8, 0];
 var AccessToken$ = [3, n0, _AT,
     8,
     [_aKI, _sAK, _sT],
@@ -528,6 +611,16 @@ var CreateOAuth2TokenWithIAMResponse$ = [3, n0, _COATWIAMRr,
     [_aT, _tT, _eI],
     [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }]], 3
 ];
+var CreateOAuth2TokenWithTokenExchangeRequest$ = [3, n0, _COATWTER,
+    0,
+    [_gT, _sTu, _sTT, _r, _sc],
+    [[0, { [_jN]: _gt }], [() => SubjectToken, { [_jN]: _st }], [0, { [_jN]: _stt }], 0, 0], 1
+];
+var CreateOAuth2TokenWithTokenExchangeResponse$ = [3, n0, _COATWTERr,
+    0,
+    [_aT, _tT, _eI, _iTT],
+    [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }], [0, { [_jN]: _itt }]], 3
+];
 var DeleteConsoleAuthorizationConfigurationInput$ = [3, n0, _DCACI,
     0,
     [_tIa],
@@ -630,7 +723,7 @@ var RevokeOAuth2TokenWithIAMResponse$ = [3, n0, _ROATWIAMRe,
 ];
 var SigninResourceBasedPolicy$ = [3, n0, _SRBP,
     0,
-    [_v, _st],
+    [_v, _sta],
     [[0, { [_jN]: _V }], [() => PolicyStatements, { [_jN]: _S }]]
 ];
 var PermissionStatementSummaries = [1, n0, _PSSe,
@@ -646,6 +739,9 @@ var CreateOAuth2Token$ = [9, n0, _COAT,
 var CreateOAuth2TokenWithIAM$ = [9, n0, _COATWIAM,
     { [_h]: ["POST", "/v1/token?x-amz-client-auth-method=iam", 200] }, () => CreateOAuth2TokenWithIAMRequest$, () => CreateOAuth2TokenWithIAMResponse$
 ];
+var CreateOAuth2TokenWithTokenExchange$ = [9, n0, _COATWTE,
+    { [_h]: ["POST", "/v1/token?x-amz-oauth-token-method=token-exchange", 200] }, () => CreateOAuth2TokenWithTokenExchangeRequest$, () => CreateOAuth2TokenWithTokenExchangeResponse$
+];
 var DeleteConsoleAuthorizationConfiguration$ = [9, n0, _DCAC,
     { [_h]: ["POST", "/delete-console-authorization-configuration", 200] }, () => DeleteConsoleAuthorizationConfigurationInput$, () => DeleteConsoleAuthorizationConfigurationOutput$
 ];
@@ -843,6 +939,9 @@ class CreateOAuth2TokenCommand extends command(_ep0, _mw0, "CreateOAuth2Token",
 class CreateOAuth2TokenWithIAMCommand extends command(_ep1, _mw0, "CreateOAuth2TokenWithIAM", CreateOAuth2TokenWithIAM$) {
 }
 
+class CreateOAuth2TokenWithTokenExchangeCommand extends command(_ep1, _mw0, "CreateOAuth2TokenWithTokenExchange", CreateOAuth2TokenWithTokenExchange$) {
+}
+
 class DeleteConsoleAuthorizationConfigurationCommand extends command(_ep2, _mw0, "DeleteConsoleAuthorizationConfiguration", DeleteConsoleAuthorizationConfiguration$) {
 }
 
@@ -875,6 +974,7 @@ const paginateListResourcePermissionStatements = createPaginator(SigninClient, L
 const commands = {
     CreateOAuth2TokenCommand,
     CreateOAuth2TokenWithIAMCommand,
+    CreateOAuth2TokenWithTokenExchangeCommand,
     DeleteConsoleAuthorizationConfigurationCommand,
     DeleteResourcePermissionStatementCommand,
     GetConsoleAuthorizationConfigurationCommand,
@@ -897,6 +997,13 @@ const OAuth2ErrorCode = {
     CONFLICT: "CONFLICT",
     INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS",
     INVALID_REQUEST: "INVALID_REQUEST",
+    OAUTH_INVALID_GRANT: "invalid_grant",
+    OAUTH_INVALID_REQUEST: "invalid_request",
+    OAUTH_INVALID_SCOPE: "invalid_scope",
+    OAUTH_INVALID_TARGET: "invalid_target",
+    OAUTH_RATE_EXCEEDED: "rate_exceeded",
+    OAUTH_SERVICE_UNAVAILABLE: "service_unavailable",
+    OAUTH_UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type",
     RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND",
     SERVER_ERROR: "server_error",
     SERVICE_QUOTA_EXCEEDED: "SERVICE_QUOTA_EXCEEDED",
@@ -919,6 +1026,10 @@ exports.CreateOAuth2TokenWithIAM$ = CreateOAuth2TokenWithIAM$;
 exports.CreateOAuth2TokenWithIAMCommand = CreateOAuth2TokenWithIAMCommand;
 exports.CreateOAuth2TokenWithIAMRequest$ = CreateOAuth2TokenWithIAMRequest$;
 exports.CreateOAuth2TokenWithIAMResponse$ = CreateOAuth2TokenWithIAMResponse$;
+exports.CreateOAuth2TokenWithTokenExchange$ = CreateOAuth2TokenWithTokenExchange$;
+exports.CreateOAuth2TokenWithTokenExchangeCommand = CreateOAuth2TokenWithTokenExchangeCommand;
+exports.CreateOAuth2TokenWithTokenExchangeRequest$ = CreateOAuth2TokenWithTokenExchangeRequest$;
+exports.CreateOAuth2TokenWithTokenExchangeResponse$ = CreateOAuth2TokenWithTokenExchangeResponse$;
 exports.DeleteConsoleAuthorizationConfiguration$ = DeleteConsoleAuthorizationConfiguration$;
 exports.DeleteConsoleAuthorizationConfigurationCommand = DeleteConsoleAuthorizationConfigurationCommand;
 exports.DeleteConsoleAuthorizationConfigurationInput$ = DeleteConsoleAuthorizationConfigurationInput$;
@@ -941,6 +1052,10 @@ exports.IntrospectOAuth2TokenWithIAM$ = IntrospectOAuth2TokenWithIAM$;
 exports.IntrospectOAuth2TokenWithIAMCommand = IntrospectOAuth2TokenWithIAMCommand;
 exports.IntrospectOAuth2TokenWithIAMRequest$ = IntrospectOAuth2TokenWithIAMRequest$;
 exports.IntrospectOAuth2TokenWithIAMResponse$ = IntrospectOAuth2TokenWithIAMResponse$;
+exports.InvalidGrantException = InvalidGrantException;
+exports.InvalidGrantException$ = InvalidGrantException$;
+exports.InvalidScopeException = InvalidScopeException;
+exports.InvalidScopeException$ = InvalidScopeException$;
 exports.ListResourcePermissionStatements$ = ListResourcePermissionStatements$;
 exports.ListResourcePermissionStatementsCommand = ListResourcePermissionStatementsCommand;
 exports.ListResourcePermissionStatementsInput$ = ListResourcePermissionStatementsInput$;
@@ -964,6 +1079,8 @@ exports.RevokeOAuth2TokenWithIAMRequest$ = RevokeOAuth2TokenWithIAMRequest$;
 exports.RevokeOAuth2TokenWithIAMResponse$ = RevokeOAuth2TokenWithIAMResponse$;
 exports.ServiceQuotaExceededException = ServiceQuotaExceededException;
 exports.ServiceQuotaExceededException$ = ServiceQuotaExceededException$;
+exports.ServiceUnavailableException = ServiceUnavailableException;
+exports.ServiceUnavailableException$ = ServiceUnavailableException$;
 exports.Signin = Signin;
 exports.SigninClient = SigninClient;
 exports.SigninResourceBasedPolicy$ = SigninResourceBasedPolicy$;

package/dist-es/Signin.js

@@ -1,6 +1,7 @@
 import { createAggregatedClient } from "@smithy/core/client";
 import { CreateOAuth2TokenCommand, } from "./commands/CreateOAuth2TokenCommand";
 import { CreateOAuth2TokenWithIAMCommand, } from "./commands/CreateOAuth2TokenWithIAMCommand";
+import { CreateOAuth2TokenWithTokenExchangeCommand, } from "./commands/CreateOAuth2TokenWithTokenExchangeCommand";
 import { DeleteConsoleAuthorizationConfigurationCommand, } from "./commands/DeleteConsoleAuthorizationConfigurationCommand";
 import { DeleteResourcePermissionStatementCommand, } from "./commands/DeleteResourcePermissionStatementCommand";
 import { GetConsoleAuthorizationConfigurationCommand, } from "./commands/GetConsoleAuthorizationConfigurationCommand";
@@ -15,6 +16,7 @@ import { SigninClient } from "./SigninClient";
 const commands = {
     CreateOAuth2TokenCommand,
     CreateOAuth2TokenWithIAMCommand,
+    CreateOAuth2TokenWithTokenExchangeCommand,
     DeleteConsoleAuthorizationConfigurationCommand,
     DeleteResourcePermissionStatementCommand,
     GetConsoleAuthorizationConfigurationCommand,

package/dist-es/auth/httpAuthSchemeProvider.js

@@ -37,6 +37,12 @@ export const defaultSigninHttpAuthSchemeProvider = (authParameters) => {
                 break;
             }
             ;
+        case "CreateOAuth2TokenWithTokenExchange":
+            {
+                options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
+                break;
+            }
+            ;
         default: {
             options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
         }

package/dist-es/commands/CreateOAuth2TokenWithTokenExchangeCommand.js

@@ -0,0 +1,4 @@
+import { _ep1, _mw0, command } from "../commandBuilder";
+import { CreateOAuth2TokenWithTokenExchange$ } from "../schemas/schemas_0";
+export class CreateOAuth2TokenWithTokenExchangeCommand extends command(_ep1, _mw0, "CreateOAuth2TokenWithTokenExchange", CreateOAuth2TokenWithTokenExchange$) {
+}

package/dist-es/commands/index.js

@@ -1,5 +1,6 @@
 export * from "./CreateOAuth2TokenCommand";
 export * from "./CreateOAuth2TokenWithIAMCommand";
+export * from "./CreateOAuth2TokenWithTokenExchangeCommand";
 export * from "./DeleteConsoleAuthorizationConfigurationCommand";
 export * from "./DeleteResourcePermissionStatementCommand";
 export * from "./GetConsoleAuthorizationConfigurationCommand";

package/dist-es/models/enums.js

@@ -3,6 +3,13 @@ export const OAuth2ErrorCode = {
     CONFLICT: "CONFLICT",
     INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS",
     INVALID_REQUEST: "INVALID_REQUEST",
+    OAUTH_INVALID_GRANT: "invalid_grant",
+    OAUTH_INVALID_REQUEST: "invalid_request",
+    OAUTH_INVALID_SCOPE: "invalid_scope",
+    OAUTH_INVALID_TARGET: "invalid_target",
+    OAUTH_RATE_EXCEEDED: "rate_exceeded",
+    OAUTH_SERVICE_UNAVAILABLE: "service_unavailable",
+    OAUTH_UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type",
     RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND",
     SERVER_ERROR: "server_error",
     SERVICE_QUOTA_EXCEEDED: "SERVICE_QUOTA_EXCEEDED",

package/dist-es/models/errors.js

@@ -74,6 +74,52 @@ export class ValidationException extends __BaseException {
         this.error = opts.error;
     }
 }
+export class InvalidGrantException extends __BaseException {
+    static shapeId = "com.amazonaws.signin#InvalidGrantException";
+    name = "InvalidGrantException";
+    $fault = "client";
+    error;
+    constructor(opts) {
+        super({
+            name: "InvalidGrantException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, InvalidGrantException.prototype);
+        this.error = opts.error;
+    }
+}
+export class InvalidScopeException extends __BaseException {
+    static shapeId = "com.amazonaws.signin#InvalidScopeException";
+    name = "InvalidScopeException";
+    $fault = "client";
+    error;
+    constructor(opts) {
+        super({
+            name: "InvalidScopeException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, InvalidScopeException.prototype);
+        this.error = opts.error;
+    }
+}
+export class ServiceUnavailableException extends __BaseException {
+    static shapeId = "com.amazonaws.signin#ServiceUnavailableException";
+    name = "ServiceUnavailableException";
+    $fault = "server";
+    $retryable = {};
+    error;
+    constructor(opts) {
+        super({
+            name: "ServiceUnavailableException",
+            $fault: "server",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, ServiceUnavailableException.prototype);
+        this.error = opts.error;
+    }
+}
 export class ResourceNotFoundException extends __BaseException {
     static shapeId = "com.amazonaws.signin#ResourceNotFoundException";
     name = "ResourceNotFoundException";

package/dist-es/schemas/schemas_0.js

@@ -12,6 +12,9 @@ const _COATRr = "CreateOAuth2TokenResponse";
 const _COATWIAM = "CreateOAuth2TokenWithIAM";
 const _COATWIAMR = "CreateOAuth2TokenWithIAMRequest";
 const _COATWIAMRr = "CreateOAuth2TokenWithIAMResponse";
+const _COATWTE = "CreateOAuth2TokenWithTokenExchange";
+const _COATWTER = "CreateOAuth2TokenWithTokenExchangeRequest";
+const _COATWTERr = "CreateOAuth2TokenWithTokenExchangeResponse";
 const _DCAC = "DeleteConsoleAuthorizationConfiguration";
 const _DCACI = "DeleteConsoleAuthorizationConfigurationInput";
 const _DCACO = "DeleteConsoleAuthorizationConfigurationOutput";
@@ -25,10 +28,12 @@ const _GCACO = "GetConsoleAuthorizationConfigurationOutput";
 const _GRP = "GetResourcePolicy";
 const _GRPI = "GetResourcePolicyInput";
 const _GRPO = "GetResourcePolicyOutput";
+const _IGE = "InvalidGrantException";
 const _IOATWIAM = "IntrospectOAuth2TokenWithIAM";
 const _IOATWIAMR = "IntrospectOAuth2TokenWithIAMRequest";
 const _IOATWIAMRn = "IntrospectOAuth2TokenWithIAMResponse";
 const _ISE = "InternalServerException";
+const _ISEn = "InvalidScopeException";
 const _IT = "IntrospectionToken";
 const _LRPS = "ListResourcePermissionStatements";
 const _LRPSI = "ListResourcePermissionStatementsInput";
@@ -55,6 +60,8 @@ const _RTe = "RevocationToken";
 const _S = "Statement";
 const _SQEE = "ServiceQuotaExceededException";
 const _SRBP = "SigninResourceBasedPolicy";
+const _ST = "SubjectToken";
+const _SUE = "ServiceUnavailableException";
 const _TMRE = "TooManyRequestsError";
 const _V = "Version";
 const _VE = "ValidationException";
@@ -87,7 +94,9 @@ const _h = "http";
 const _hE = "httpError";
 const _i = "iat";
 const _iT = "idToken";
+const _iTT = "issuedTokenType";
 const _is = "iss";
+const _itt = "issued_token_type";
 const _j = "jti";
 const _jN = "jsonName";
 const _m = "message";
@@ -108,12 +117,16 @@ const _sRBP = "signinResourceBasedPolicy";
 const _sS = "signinSession";
 const _sSV = "signinSourceVpce";
 const _sT = "sessionToken";
+const _sTT = "subjectTokenType";
+const _sTu = "subjectToken";
 const _sV = "sourceVpc";
 const _sc = "scope";
 const _se = "server";
 const _si = "sid";
 const _ss = "signin_session";
-const _st = "statement";
+const _st = "subject_token";
+const _sta = "statement";
+const _stt = "subject_token_type";
 const _su = "sub";
 const _t = "token";
 const _tI = "tokenInput";
@@ -129,7 +142,7 @@ const _v = "version";
 const _vSI = "vpcSourceIp";
 const n0 = "com.amazonaws.signin";
 import { TypeRegistry } from "@smithy/core/schema";
-import { AccessDeniedException, ConflictException, InternalServerException, ResourceNotFoundException, ServiceQuotaExceededException, TooManyRequestsError, ValidationException, } from "../models/errors";
+import { AccessDeniedException, ConflictException, InternalServerException, InvalidGrantException, InvalidScopeException, ResourceNotFoundException, ServiceQuotaExceededException, ServiceUnavailableException, TooManyRequestsError, ValidationException, } from "../models/errors";
 import { SigninServiceException } from "../models/SigninServiceException";
 const _s_registry = new TypeRegistry(_s);
 export var SigninServiceException$ = [-3, _s, "SigninServiceException", 0, [], []];
@@ -153,6 +166,18 @@ export var InternalServerException$ = [-3, n0, _ISE,
     [0, 0], 2
 ];
 n0_registry.registerError(InternalServerException$, InternalServerException);
+export var InvalidGrantException$ = [-3, n0, _IGE,
+    { [_e]: _c, [_hE]: 400 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(InvalidGrantException$, InvalidGrantException);
+export var InvalidScopeException$ = [-3, n0, _ISEn,
+    { [_e]: _c, [_hE]: 400 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(InvalidScopeException$, InvalidScopeException);
 export var ResourceNotFoundException$ = [-3, n0, _RNFE,
     { [_e]: _c, [_hE]: 404 },
     [_e, _m],
@@ -165,6 +190,12 @@ export var ServiceQuotaExceededException$ = [-3, n0, _SQEE,
     [0, 0], 2
 ];
 n0_registry.registerError(ServiceQuotaExceededException$, ServiceQuotaExceededException);
+export var ServiceUnavailableException$ = [-3, n0, _SUE,
+    { [_e]: _se, [_hE]: 503 },
+    [_e, _m],
+    [0, 0], 2
+];
+n0_registry.registerError(ServiceUnavailableException$, ServiceUnavailableException);
 export var TooManyRequestsError$ = [-3, n0, _TMRE,
     { [_e]: _c, [_hE]: 429 },
     [_e, _m],
@@ -185,6 +216,7 @@ var IntrospectionToken = [0, n0, _IT, 8, 0];
 var OAuthAccessToken = [0, n0, _OAAT, 8, 0];
 var RefreshToken = [0, n0, _RT, 8, 0];
 var RevocationToken = [0, n0, _RTe, 8, 0];
+var SubjectToken = [0, n0, _ST, 8, 0];
 export var AccessToken$ = [3, n0, _AT,
     8,
     [_aKI, _sAK, _sT],
@@ -220,6 +252,16 @@ export var CreateOAuth2TokenWithIAMResponse$ = [3, n0, _COATWIAMRr,
     [_aT, _tT, _eI],
     [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }]], 3
 ];
+export var CreateOAuth2TokenWithTokenExchangeRequest$ = [3, n0, _COATWTER,
+    0,
+    [_gT, _sTu, _sTT, _r, _sc],
+    [[0, { [_jN]: _gt }], [() => SubjectToken, { [_jN]: _st }], [0, { [_jN]: _stt }], 0, 0], 1
+];
+export var CreateOAuth2TokenWithTokenExchangeResponse$ = [3, n0, _COATWTERr,
+    0,
+    [_aT, _tT, _eI, _iTT],
+    [[() => OAuthAccessToken, { [_jN]: _at }], [0, { [_jN]: _tt }], [1, { [_jN]: _ei }], [0, { [_jN]: _itt }]], 3
+];
 export var DeleteConsoleAuthorizationConfigurationInput$ = [3, n0, _DCACI,
     0,
     [_tIa],
@@ -322,7 +364,7 @@ export var RevokeOAuth2TokenWithIAMResponse$ = [3, n0, _ROATWIAMRe,
 ];
 export var SigninResourceBasedPolicy$ = [3, n0, _SRBP,
     0,
-    [_v, _st],
+    [_v, _sta],
     [[0, { [_jN]: _V }], [() => PolicyStatements, { [_jN]: _S }]]
 ];
 var ConditionValues = 64 | 0;
@@ -347,6 +389,9 @@ export var CreateOAuth2Token$ = [9, n0, _COAT,
 export var CreateOAuth2TokenWithIAM$ = [9, n0, _COATWIAM,
     { [_h]: ["POST", "/v1/token?x-amz-client-auth-method=iam", 200] }, () => CreateOAuth2TokenWithIAMRequest$, () => CreateOAuth2TokenWithIAMResponse$
 ];
+export var CreateOAuth2TokenWithTokenExchange$ = [9, n0, _COATWTE,
+    { [_h]: ["POST", "/v1/token?x-amz-oauth-token-method=token-exchange", 200] }, () => CreateOAuth2TokenWithTokenExchangeRequest$, () => CreateOAuth2TokenWithTokenExchangeResponse$
+];
 export var DeleteConsoleAuthorizationConfiguration$ = [9, n0, _DCAC,
     { [_h]: ["POST", "/delete-console-authorization-configuration", 200] }, () => DeleteConsoleAuthorizationConfigurationInput$, () => DeleteConsoleAuthorizationConfigurationOutput$
 ];

package/dist-types/Signin.d.ts

@@ -1,6 +1,7 @@
 import type { HttpHandlerOptions as __HttpHandlerOptions, MetricsRecorder as __MetricsRecorder, PaginationConfiguration, Paginator } from "@smithy/types";
 import { type CreateOAuth2TokenCommandInput, type CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
 import { type CreateOAuth2TokenWithIAMCommandInput, type CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
+import { type CreateOAuth2TokenWithTokenExchangeCommandInput, type CreateOAuth2TokenWithTokenExchangeCommandOutput } from "./commands/CreateOAuth2TokenWithTokenExchangeCommand";
 import { type DeleteConsoleAuthorizationConfigurationCommandInput, type DeleteConsoleAuthorizationConfigurationCommandOutput } from "./commands/DeleteConsoleAuthorizationConfigurationCommand";
 import { type DeleteResourcePermissionStatementCommandInput, type DeleteResourcePermissionStatementCommandOutput } from "./commands/DeleteResourcePermissionStatementCommand";
 import { type GetConsoleAuthorizationConfigurationCommandInput, type GetConsoleAuthorizationConfigurationCommandOutput } from "./commands/GetConsoleAuthorizationConfigurationCommand";
@@ -30,6 +31,12 @@ export interface Signin {
     createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options?: SigninRequestOptions): Promise<CreateOAuth2TokenWithIAMCommandOutput>;
     createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
     createOAuth2TokenWithIAM(args: CreateOAuth2TokenWithIAMCommandInput, options: SigninRequestOptions, cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void): void;
+    /**
+     * @see {@link CreateOAuth2TokenWithTokenExchangeCommand}
+     */
+    createOAuth2TokenWithTokenExchange(args: CreateOAuth2TokenWithTokenExchangeCommandInput, options?: SigninRequestOptions): Promise<CreateOAuth2TokenWithTokenExchangeCommandOutput>;
+    createOAuth2TokenWithTokenExchange(args: CreateOAuth2TokenWithTokenExchangeCommandInput, cb: (err: any, data?: CreateOAuth2TokenWithTokenExchangeCommandOutput) => void): void;
+    createOAuth2TokenWithTokenExchange(args: CreateOAuth2TokenWithTokenExchangeCommandInput, options: SigninRequestOptions, cb: (err: any, data?: CreateOAuth2TokenWithTokenExchangeCommandOutput) => void): void;
     /**
      * @see {@link DeleteConsoleAuthorizationConfigurationCommand}
      */
@@ -99,8 +106,7 @@ export interface Signin {
     paginateListResourcePermissionStatements(args?: ListResourcePermissionStatementsCommandInput, paginationConfig?: Omit<PaginationConfiguration, "client">): Paginator<ListResourcePermissionStatementsCommandOutput>;
 }
 /**
- * AWS Sign-In manages authentication for AWS services. This service provides
- * secure authentication flows for accessing AWS resources from the console and developer tools.
+ * AWS Sign-In manages authentication for AWS services. It implements OAuth 2.0, providing secure token exchange and refresh capabilities.
  * @public
  */
 export declare class Signin extends SigninClient implements Signin {

package/dist-types/SigninClient.d.ts

@@ -8,6 +8,7 @@ import type { AwsCredentialIdentityProvider, BodyLengthCalculator as __BodyLengt
 import { type HttpAuthSchemeInputConfig, type HttpAuthSchemeResolvedConfig } from "./auth/httpAuthSchemeProvider";
 import type { CreateOAuth2TokenCommandInput, CreateOAuth2TokenCommandOutput } from "./commands/CreateOAuth2TokenCommand";
 import type { CreateOAuth2TokenWithIAMCommandInput, CreateOAuth2TokenWithIAMCommandOutput } from "./commands/CreateOAuth2TokenWithIAMCommand";
+import type { CreateOAuth2TokenWithTokenExchangeCommandInput, CreateOAuth2TokenWithTokenExchangeCommandOutput } from "./commands/CreateOAuth2TokenWithTokenExchangeCommand";
 import type { DeleteConsoleAuthorizationConfigurationCommandInput, DeleteConsoleAuthorizationConfigurationCommandOutput } from "./commands/DeleteConsoleAuthorizationConfigurationCommand";
 import type { DeleteResourcePermissionStatementCommandInput, DeleteResourcePermissionStatementCommandOutput } from "./commands/DeleteResourcePermissionStatementCommand";
 import type { GetConsoleAuthorizationConfigurationCommandInput, GetConsoleAuthorizationConfigurationCommandOutput } from "./commands/GetConsoleAuthorizationConfigurationCommand";
@@ -23,11 +24,11 @@ export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = CreateOAuth2TokenCommandInput | CreateOAuth2TokenWithIAMCommandInput | DeleteConsoleAuthorizationConfigurationCommandInput | DeleteResourcePermissionStatementCommandInput | GetConsoleAuthorizationConfigurationCommandInput | GetResourcePolicyCommandInput | IntrospectOAuth2TokenWithIAMCommandInput | ListResourcePermissionStatementsCommandInput | PutConsoleAuthorizationConfigurationCommandInput | PutResourcePermissionStatementCommandInput | RevokeOAuth2TokenWithIAMCommandInput;
+export type ServiceInputTypes = CreateOAuth2TokenCommandInput | CreateOAuth2TokenWithIAMCommandInput | CreateOAuth2TokenWithTokenExchangeCommandInput | DeleteConsoleAuthorizationConfigurationCommandInput | DeleteResourcePermissionStatementCommandInput | GetConsoleAuthorizationConfigurationCommandInput | GetResourcePolicyCommandInput | IntrospectOAuth2TokenWithIAMCommandInput | ListResourcePermissionStatementsCommandInput | PutConsoleAuthorizationConfigurationCommandInput | PutResourcePermissionStatementCommandInput | RevokeOAuth2TokenWithIAMCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput | CreateOAuth2TokenWithIAMCommandOutput | DeleteConsoleAuthorizationConfigurationCommandOutput | DeleteResourcePermissionStatementCommandOutput | GetConsoleAuthorizationConfigurationCommandOutput | GetResourcePolicyCommandOutput | IntrospectOAuth2TokenWithIAMCommandOutput | ListResourcePermissionStatementsCommandOutput | PutConsoleAuthorizationConfigurationCommandOutput | PutResourcePermissionStatementCommandOutput | RevokeOAuth2TokenWithIAMCommandOutput;
+export type ServiceOutputTypes = CreateOAuth2TokenCommandOutput | CreateOAuth2TokenWithIAMCommandOutput | CreateOAuth2TokenWithTokenExchangeCommandOutput | DeleteConsoleAuthorizationConfigurationCommandOutput | DeleteResourcePermissionStatementCommandOutput | GetConsoleAuthorizationConfigurationCommandOutput | GetResourcePolicyCommandOutput | IntrospectOAuth2TokenWithIAMCommandOutput | ListResourcePermissionStatementsCommandOutput | PutConsoleAuthorizationConfigurationCommandOutput | PutResourcePermissionStatementCommandOutput | RevokeOAuth2TokenWithIAMCommandOutput;
 /**
  * @public
  */
@@ -180,8 +181,7 @@ export type SigninClientResolvedConfigType = __SmithyResolvedConfiguration<__Htt
 export interface SigninClientResolvedConfig extends SigninClientResolvedConfigType {
 }
 /**
- * AWS Sign-In manages authentication for AWS services. This service provides
- * secure authentication flows for accessing AWS resources from the console and developer tools.
+ * AWS Sign-In manages authentication for AWS services. It implements OAuth 2.0, providing secure token exchange and refresh capabilities.
  * @public
  */
 export declare class SigninClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, SigninClientResolvedConfig> {