@aws-sdk/client-signin 3.1155.0 → 3.1157.0

package/dist-types/models/models_0.d.ts

@@ -1,68 +1,64 @@
 /**
- * AWS credentials structure containing temporary access credentials
- *
- * Scoped, temporary AWS credentials with a 15-minute duration.
+ * Contains the scoped, temporary AWS credentials used to sign requests with SigV4. Valid for 15 minutes.
  * @public
  */
 export interface AccessToken {
     /**
-     * AWS access key ID for temporary credentials
+     * The AWS access key ID for the temporary credentials.
      * @public
      */
     accessKeyId: string | undefined;
     /**
-     * AWS secret access key for temporary credentials
+     * The AWS secret access key used to sign requests.
      * @public
      */
     secretAccessKey: string | undefined;
     /**
-     * AWS session token for temporary credentials
+     * The session token that validates the temporary security credentials.
      * @public
      */
     sessionToken: string | undefined;
 }
 /**
- * Request body payload for CreateOAuth2Token operation
- *
- * The operation type is determined by the grant_type parameter:
- * - grant_type=authorization_code: Requires code, redirect_uri, code_verifier
- * - grant_type=refresh_token: Requires refresh_token
+ * The request body for creating an OAuth 2.0 token. Supports both the authorization code and
+ * refresh token flows, selected by the "grant_type" parameter.
  * @public
  */
 export interface CreateOAuth2TokenRequestBody {
     /**
-     * The client identifier (ARN) used during Sign-In onboarding
-     * Required for both authorization code and refresh token flows
+     * The OAuth 2.0 client identifier. Expected values: "arn:aws:signin:::devtools/same-device"
+     * or "arn:aws:signin:::devtools/cross-device".
      * @public
      */
     clientId: string | undefined;
     /**
-     * OAuth 2.0 grant type - determines which flow is used
-     * Must be "authorization_code" or "refresh_token"
+     * The OAuth 2.0 grant type. Supported values:
+     * - "authorization_code" - Exchange an authorization code for tokens.
+     * - "refresh_token" - Use a refresh token to obtain a new access token.
      * @public
      */
     grantType: string | undefined;
     /**
-     * The authorization code received from /v1/authorize
-     * Required only when grant_type=authorization_code
+     * The authorization code received from the "/v1/authorize" endpoint.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     code?: string | undefined;
     /**
-     * The redirect URI that must match the original authorization request
-     * Required only when grant_type=authorization_code
+     * The redirect URI that was used in the original authorization request. Must match exactly.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     redirectUri?: string | undefined;
     /**
-     * PKCE code verifier to prove possession of the original code challenge
-     * Required only when grant_type=authorization_code
+     * The PKCE code verifier that proves possession of the original code challenge.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     codeVerifier?: string | undefined;
     /**
-     * The refresh token returned from auth_code redemption
-     * Required only when grant_type=refresh_token
+     * The refresh token issued by a previous token response.
+     * Required when "grant_type=refresh_token".
      * @public
      */
     refreshToken?: string | undefined;
@@ -76,49 +72,41 @@ export interface CreateOAuth2TokenRequestBody {
  */
 export interface CreateOAuth2TokenRequest {
     /**
-     * Flattened token operation inputs
-     * The specific operation is determined by grant_type in the request body
+     * Flattened token operation inputs. The "grant_type" in the request body determines the specific operation.
      * @public
      */
     tokenInput: CreateOAuth2TokenRequestBody | undefined;
 }
 /**
- * Response body payload for CreateOAuth2Token operation
- *
- * The response content depends on the grant_type from the request:
- * - grant_type=authorization_code: Returns all fields including refresh_token and id_token
- * - grant_type=refresh_token: Returns access_token, token_type, expires_in, refresh_token (no id_token)
+ * The response body for an OAuth 2.0 token request. The fields returned depend on the "grant_type".
+ * The authorization code flow returns "refresh_token" and "id_token". The refresh token flow omits "id_token".
  * @public
  */
 export interface CreateOAuth2TokenResponseBody {
     /**
-     * Scoped-down AWS credentials (15 minute duration)
-     * Present for both authorization code redemption and token refresh
+     * The access token issued by the authorization server. The token contains temporary
+     * AWS security credentials that you use to sign requests with SigV4.
      * @public
      */
     accessToken: AccessToken | undefined;
     /**
-     * Token type indicating this is AWS SigV4 credentials
-     * Value is "aws_sigv4" for both flows
+     * The type of token issued. Value is "aws_sigv4".
      * @public
      */
     tokenType: string | undefined;
     /**
-     * Time to expiry in seconds (maximum 900)
-     * Present for both authorization code redemption and token refresh
+     * The number of seconds until the access token expires. Maximum value is 900 seconds (15 minutes).
      * @public
      */
     expiresIn: number | undefined;
     /**
-     * Encrypted refresh token with cnf.jkt (SHA-256 thumbprint of presented jwk)
-     * Always present in responses (required for both flows)
+     * A refresh token that can be used to obtain new access tokens without re-authenticating.
      * @public
      */
     refreshToken: string | undefined;
     /**
-     * ID token containing user identity information
-     * Present only in authorization code redemption response (grant_type=authorization_code)
-     * Not included in token refresh responses
+     * A JSON Web Token (JWT) containing user identity claims. Present only when
+     * "grant_type=authorization_code". Not included in refresh token responses.
      * @public
      */
     idToken?: string | undefined;
@@ -132,8 +120,8 @@ export interface CreateOAuth2TokenResponseBody {
  */
 export interface CreateOAuth2TokenResponse {
     /**
-     * Flattened token operation outputs
-     * The specific response fields depend on the grant_type used in the request
+     * Flattened token operation outputs.
+     * The specific response fields depend on the grant_type used in the request.
      * @public
      */
     tokenOutput: CreateOAuth2TokenResponseBody | undefined;
@@ -144,7 +132,7 @@ export interface CreateOAuth2TokenResponse {
  */
 export interface CreateOAuth2TokenWithIAMRequest {
     /**
-     * OAuth 2.0 grant type. Must be "client_credentials".
+     * The OAuth 2.0 grant type. Must be "client_credentials".
      * @public
      */
     grantType: string | undefined;
@@ -158,22 +146,87 @@ export interface CreateOAuth2TokenWithIAMRequest {
 /**
  * Output structure for CreateOAuth2TokenWithIAM operation
  *
- * Contains the JWT access token, token type, and expiration per RFC 6749 §5.1.
+ * Contains the access token, token type, and expiration as defined in RFC 6749 §5.1.
  * @public
  */
 export interface CreateOAuth2TokenWithIAMResponse {
     /**
-     * JWT access token containing principal identity, resource scope, and session metadata
+     * Access token containing principal identity, resource scope, and session metadata.
+     * @public
+     */
+    accessToken: string | undefined;
+    /**
+     * The token type. Always "Bearer" as defined in RFC 6749.
+     * @public
+     */
+    tokenType: string | undefined;
+    /**
+     * Token lifetime in seconds. Value is the minimum of the caller's session validity and 1 hour (3600 seconds).
+     * @public
+     */
+    expiresIn: number | undefined;
+}
+/**
+ * Input structure for CreateOAuth2TokenWithTokenExchange operation
+ * @public
+ */
+export interface CreateOAuth2TokenWithTokenExchangeRequest {
+    /**
+     * The OAuth 2.0 grant type. Currently only supports "urn:ietf:params:oauth:grant-type:token-exchange".
+     * @public
+     */
+    grantType: string | undefined;
+    /**
+     * The subject token that represents the identity of the party on whose behalf the request is made.
+     * Required when "grant_type=urn:ietf:params:oauth:grant-type:token-exchange".
+     * @public
+     */
+    subjectToken?: string | undefined;
+    /**
+     * The token type of the subject token. Currently only supports "urn:ietf:params:oauth:token-type:jwt".
+     * Required when "grant_type=urn:ietf:params:oauth:grant-type:token-exchange".
+     * @public
+     */
+    subjectTokenType?: string | undefined;
+    /**
+     * The OAuth resource for which the access token is requested.
+     * Required when "grant_type=urn:ietf:params:oauth:grant-type:token-exchange".
+     * Example: "glue.amazonaws.com".
+     * @public
+     */
+    resource?: string | undefined;
+    /**
+     * IAM managed policy Amazon Resource Names (ARNs) to apply as session policies that further
+     * scope down the permissions of the issued access token, provided as a space-delimited list.
+     * Example: "arn:aws:iam::444455556666:policy/MyPolicy".
+     * @public
+     */
+    scope?: string | undefined;
+}
+/**
+ * Output structure for CreateOAuth2TokenWithTokenExchange operation.
+ *
+ * Contains the access token, issued token type, token type, and expiration as defined in RFC 6749 §5.1 and RFC 8693 §2.2.1.
+ * @public
+ */
+export interface CreateOAuth2TokenWithTokenExchangeResponse {
+    /**
+     * Access token containing principal identity, resource scope, and session metadata.
      * @public
      */
     accessToken: string | undefined;
     /**
-     * Always "Bearer" per OAuth 2.1 specification
+     * The token type of the issued token. Always "urn:ietf:params:oauth:token-type:access_token" as defined in RFC 8693 §2.2.1.
+     * @public
+     */
+    issuedTokenType?: string | undefined;
+    /**
+     * The token type. Currently only supports "Bearer" as defined in RFC 6749.
      * @public
      */
     tokenType: string | undefined;
     /**
-     * Token lifetime in seconds. Value is the minimum of session validity and 1 hour.
+     * Token lifetime in seconds. Value is the minimum of the subject token's validity and 1 hour (3600 seconds).
      * @public
      */
     expiresIn: number | undefined;
@@ -337,15 +390,13 @@ export interface GetResourcePolicyOutput {
  */
 export interface IntrospectOAuth2TokenWithIAMRequest {
     /**
-     * The string value of the token to introspect.
-     * May be either an access_token or a refresh_token issued by AWS Sign-In.
+     * The access token or refresh token issued by AWS Sign-In.
      * @public
      */
     token: string | undefined;
     /**
-     * Optional hint about the type of the token submitted for introspection.
-     * The server uses this hint to optimize lookup, but still falls back to
-     * the other token type on miss. Allowed values: access_token, refresh_token.
+     * An optional hint about the type of the token submitted for introspection, as defined in RFC 7662 §2.1.
+     * The server checks both token types regardless of the hint. Allowed values: "access_token", "refresh_token".
      * @public
      */
     tokenTypeHint?: string | undefined;
@@ -359,9 +410,8 @@ export interface IntrospectOAuth2TokenWithIAMRequest {
  */
 export interface IntrospectOAuth2TokenWithIAMResponse {
     /**
-     * Indicates whether the token is currently active. `true` only when the
-     * token is valid, has not expired, has not been revoked, and belongs to
-     * the caller's account.
+     * Indicates whether the token is currently active. Returns "true" only when the token is valid,
+     * has not expired, has not been revoked, and belongs to the caller's account.
      * @public
      */
     active: boolean | undefined;
@@ -371,9 +421,7 @@ export interface IntrospectOAuth2TokenWithIAMResponse {
      */
     clientId?: string | undefined;
     /**
-     * User identifier matching sts:GetCallerIdentity's `UserId` field for the
-     * token's subject principal (e.g. "AIDAEXAMPLE" for an IAM user, or
-     * "AROAEXAMPLE:session-name" for an assumed role).
+     * User identifier matching the "UserId" field from "sts:GetCallerIdentity" for the token's subject principal.
      * @public
      */
     userId?: string | undefined;
@@ -399,15 +447,13 @@ export interface IntrospectOAuth2TokenWithIAMResponse {
      */
     nbf?: number | undefined;
     /**
-     * Subject of the token: the IAM principal ARN. For assumed-role sessions,
-     * this is the session ARN (matches sts:GetCallerIdentity's `Arn` field),
-     * e.g. arn:aws:sts::123456789012:assumed-role/MyRole/session-name.
+     * The IAM principal Amazon Resource Name (ARN). For assumed-role sessions, this is the session ARN.
      * @public
      */
     sub?: string | undefined;
     /**
-     * Audience of the token: the OAuth resource the token is scoped to
-     * (for example, "aws-mcp.amazonaws.com"). Omitted for refresh tokens.
+     * The OAuth resource the token is scoped to. Omitted for refresh tokens.
+     * Example: "aws-mcp.amazonaws.com".
      * @public
      */
     aud?: string | undefined;
@@ -433,8 +479,7 @@ export interface IntrospectOAuth2TokenWithIAMResponse {
      */
     signinSession?: string | undefined;
     /**
-     * The OAuth resource the token is scoped to during Human OAuth flow.
-     * Only present for refresh token introspection.
+     * The OAuth resource the token is scoped to. Only present for refresh token introspection.
      * @public
      */
     resource?: string | undefined;
@@ -585,8 +630,8 @@ export interface PutResourcePermissionStatementOutput {
  */
 export interface RevokeOAuth2TokenWithIAMRequest {
     /**
-     * The refresh_token to revoke. Must be a refresh_token issued by AWS
-     * Sign-In (prefix "ASOR"); access_tokens are not accepted for revocation.
+     * The refresh token to revoke. Must be a refresh token issued by AWS Sign-In.
+     * Access tokens are not accepted for revocation.
      * @public
      */
     token: string | undefined;

package/dist-types/schemas/schemas_0.d.ts

@@ -4,8 +4,11 @@ export declare var SigninServiceException$: StaticErrorSchema;
 export declare var AccessDeniedException$: StaticErrorSchema;
 export declare var ConflictException$: StaticErrorSchema;
 export declare var InternalServerException$: StaticErrorSchema;
+export declare var InvalidGrantException$: StaticErrorSchema;
+export declare var InvalidScopeException$: StaticErrorSchema;
 export declare var ResourceNotFoundException$: StaticErrorSchema;
 export declare var ServiceQuotaExceededException$: StaticErrorSchema;
+export declare var ServiceUnavailableException$: StaticErrorSchema;
 export declare var TooManyRequestsError$: StaticErrorSchema;
 export declare var ValidationException$: StaticErrorSchema;
 /**
@@ -21,6 +24,8 @@ export declare var CreateOAuth2TokenResponse$: StaticStructureSchema;
 export declare var CreateOAuth2TokenResponseBody$: StaticStructureSchema;
 export declare var CreateOAuth2TokenWithIAMRequest$: StaticStructureSchema;
 export declare var CreateOAuth2TokenWithIAMResponse$: StaticStructureSchema;
+export declare var CreateOAuth2TokenWithTokenExchangeRequest$: StaticStructureSchema;
+export declare var CreateOAuth2TokenWithTokenExchangeResponse$: StaticStructureSchema;
 export declare var DeleteConsoleAuthorizationConfigurationInput$: StaticStructureSchema;
 export declare var DeleteConsoleAuthorizationConfigurationOutput$: StaticStructureSchema;
 export declare var DeleteResourcePermissionStatementInput$: StaticStructureSchema;
@@ -44,6 +49,7 @@ export declare var RevokeOAuth2TokenWithIAMResponse$: StaticStructureSchema;
 export declare var SigninResourceBasedPolicy$: StaticStructureSchema;
 export declare var CreateOAuth2Token$: StaticOperationSchema;
 export declare var CreateOAuth2TokenWithIAM$: StaticOperationSchema;
+export declare var CreateOAuth2TokenWithTokenExchange$: StaticOperationSchema;
 export declare var DeleteConsoleAuthorizationConfiguration$: StaticOperationSchema;
 export declare var DeleteResourcePermissionStatement$: StaticOperationSchema;
 export declare var GetConsoleAuthorizationConfiguration$: StaticOperationSchema;

package/dist-types/ts3.4/Signin.d.ts

@@ -12,6 +12,10 @@ import {
   CreateOAuth2TokenWithIAMCommandInput,
   CreateOAuth2TokenWithIAMCommandOutput,
 } from "./commands/CreateOAuth2TokenWithIAMCommand";
+import {
+  CreateOAuth2TokenWithTokenExchangeCommandInput,
+  CreateOAuth2TokenWithTokenExchangeCommandOutput,
+} from "./commands/CreateOAuth2TokenWithTokenExchangeCommand";
 import {
   DeleteConsoleAuthorizationConfigurationCommandInput,
   DeleteConsoleAuthorizationConfigurationCommandOutput,
@@ -79,6 +83,19 @@ export interface Signin {
     options: SigninRequestOptions,
     cb: (err: any, data?: CreateOAuth2TokenWithIAMCommandOutput) => void,
   ): void;
+  createOAuth2TokenWithTokenExchange(
+    args: CreateOAuth2TokenWithTokenExchangeCommandInput,
+    options?: SigninRequestOptions,
+  ): Promise<CreateOAuth2TokenWithTokenExchangeCommandOutput>;
+  createOAuth2TokenWithTokenExchange(
+    args: CreateOAuth2TokenWithTokenExchangeCommandInput,
+    cb: (err: any, data?: CreateOAuth2TokenWithTokenExchangeCommandOutput) => void,
+  ): void;
+  createOAuth2TokenWithTokenExchange(
+    args: CreateOAuth2TokenWithTokenExchangeCommandInput,
+    options: SigninRequestOptions,
+    cb: (err: any, data?: CreateOAuth2TokenWithTokenExchangeCommandOutput) => void,
+  ): void;
   deleteConsoleAuthorizationConfiguration(): Promise<DeleteConsoleAuthorizationConfigurationCommandOutput>;
   deleteConsoleAuthorizationConfiguration(
     args: DeleteConsoleAuthorizationConfigurationCommandInput,

package/dist-types/ts3.4/SigninClient.d.ts

@@ -41,6 +41,10 @@ import {
   CreateOAuth2TokenWithIAMCommandInput,
   CreateOAuth2TokenWithIAMCommandOutput,
 } from "./commands/CreateOAuth2TokenWithIAMCommand";
+import {
+  CreateOAuth2TokenWithTokenExchangeCommandInput,
+  CreateOAuth2TokenWithTokenExchangeCommandOutput,
+} from "./commands/CreateOAuth2TokenWithTokenExchangeCommand";
 import {
   DeleteConsoleAuthorizationConfigurationCommandInput,
   DeleteConsoleAuthorizationConfigurationCommandOutput,
@@ -87,6 +91,7 @@ export { __Client };
 export type ServiceInputTypes =
   | CreateOAuth2TokenCommandInput
   | CreateOAuth2TokenWithIAMCommandInput
+  | CreateOAuth2TokenWithTokenExchangeCommandInput
   | DeleteConsoleAuthorizationConfigurationCommandInput
   | DeleteResourcePermissionStatementCommandInput
   | GetConsoleAuthorizationConfigurationCommandInput
@@ -99,6 +104,7 @@ export type ServiceInputTypes =
 export type ServiceOutputTypes =
   | CreateOAuth2TokenCommandOutput
   | CreateOAuth2TokenWithIAMCommandOutput
+  | CreateOAuth2TokenWithTokenExchangeCommandOutput
   | DeleteConsoleAuthorizationConfigurationCommandOutput
   | DeleteResourcePermissionStatementCommandOutput
   | GetConsoleAuthorizationConfigurationCommandOutput

package/dist-types/ts3.4/commands/CreateOAuth2TokenWithTokenExchangeCommand.d.ts

@@ -0,0 +1,42 @@
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import {
+  CreateOAuth2TokenWithTokenExchangeRequest,
+  CreateOAuth2TokenWithTokenExchangeResponse,
+} from "../models/models_0";
+export { __MetadataBearer };
+export interface CreateOAuth2TokenWithTokenExchangeCommandInput extends CreateOAuth2TokenWithTokenExchangeRequest {}
+export interface CreateOAuth2TokenWithTokenExchangeCommandOutput
+  extends CreateOAuth2TokenWithTokenExchangeResponse, __MetadataBearer {}
+declare const CreateOAuth2TokenWithTokenExchangeCommand_base: {
+  new (
+    input: CreateOAuth2TokenWithTokenExchangeCommandInput,
+  ): import("@smithy/core/client").CommandImpl<
+    CreateOAuth2TokenWithTokenExchangeCommandInput,
+    CreateOAuth2TokenWithTokenExchangeCommandOutput,
+    import("..").SigninClientResolvedConfig,
+    import("..").ServiceInputTypes,
+    import("..").ServiceOutputTypes
+  >;
+  new (
+    input: CreateOAuth2TokenWithTokenExchangeCommandInput,
+  ): import("@smithy/core/client").CommandImpl<
+    CreateOAuth2TokenWithTokenExchangeCommandInput,
+    CreateOAuth2TokenWithTokenExchangeCommandOutput,
+    import("..").SigninClientResolvedConfig,
+    import("..").ServiceInputTypes,
+    import("..").ServiceOutputTypes
+  >;
+  getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+export declare class CreateOAuth2TokenWithTokenExchangeCommand extends CreateOAuth2TokenWithTokenExchangeCommand_base {
+  protected static __types: {
+    api: {
+      input: CreateOAuth2TokenWithTokenExchangeRequest;
+      output: CreateOAuth2TokenWithTokenExchangeResponse;
+    };
+    sdk: {
+      input: CreateOAuth2TokenWithTokenExchangeCommandInput;
+      output: CreateOAuth2TokenWithTokenExchangeCommandOutput;
+    };
+  };
+}

package/dist-types/ts3.4/commands/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./CreateOAuth2TokenCommand";
 export * from "./CreateOAuth2TokenWithIAMCommand";
+export * from "./CreateOAuth2TokenWithTokenExchangeCommand";
 export * from "./DeleteConsoleAuthorizationConfigurationCommand";
 export * from "./DeleteResourcePermissionStatementCommand";
 export * from "./GetConsoleAuthorizationConfigurationCommand";

package/dist-types/ts3.4/models/enums.d.ts

@@ -3,6 +3,13 @@ export declare const OAuth2ErrorCode: {
   readonly CONFLICT: "CONFLICT";
   readonly INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS";
   readonly INVALID_REQUEST: "INVALID_REQUEST";
+  readonly OAUTH_INVALID_GRANT: "invalid_grant";
+  readonly OAUTH_INVALID_REQUEST: "invalid_request";
+  readonly OAUTH_INVALID_SCOPE: "invalid_scope";
+  readonly OAUTH_INVALID_TARGET: "invalid_target";
+  readonly OAUTH_RATE_EXCEEDED: "rate_exceeded";
+  readonly OAUTH_SERVICE_UNAVAILABLE: "service_unavailable";
+  readonly OAUTH_UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type";
   readonly RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND";
   readonly SERVER_ERROR: "server_error";
   readonly SERVICE_QUOTA_EXCEEDED: "SERVICE_QUOTA_EXCEEDED";

package/dist-types/ts3.4/models/errors.d.ts

@@ -36,6 +36,28 @@ export declare class ValidationException extends __BaseException {
   error: OAuth2ErrorCode | undefined;
   constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
 }
+export declare class InvalidGrantException extends __BaseException {
+  static readonly shapeId: string;
+  readonly name: "InvalidGrantException";
+  readonly $fault: "client";
+  error: OAuth2ErrorCode | undefined;
+  constructor(opts: __ExceptionOptionType<InvalidGrantException, __BaseException>);
+}
+export declare class InvalidScopeException extends __BaseException {
+  static readonly shapeId: string;
+  readonly name: "InvalidScopeException";
+  readonly $fault: "client";
+  error: OAuth2ErrorCode | undefined;
+  constructor(opts: __ExceptionOptionType<InvalidScopeException, __BaseException>);
+}
+export declare class ServiceUnavailableException extends __BaseException {
+  static readonly shapeId: string;
+  readonly name: "ServiceUnavailableException";
+  readonly $fault: "server";
+  $retryable: {};
+  error: OAuth2ErrorCode | undefined;
+  constructor(opts: __ExceptionOptionType<ServiceUnavailableException, __BaseException>);
+}
 export declare class ResourceNotFoundException extends __BaseException {
   static readonly shapeId: string;
   readonly name: "ResourceNotFoundException";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -33,6 +33,19 @@ export interface CreateOAuth2TokenWithIAMResponse {
   tokenType: string | undefined;
   expiresIn: number | undefined;
 }
+export interface CreateOAuth2TokenWithTokenExchangeRequest {
+  grantType: string | undefined;
+  subjectToken?: string | undefined;
+  subjectTokenType?: string | undefined;
+  resource?: string | undefined;
+  scope?: string | undefined;
+}
+export interface CreateOAuth2TokenWithTokenExchangeResponse {
+  accessToken: string | undefined;
+  issuedTokenType?: string | undefined;
+  tokenType: string | undefined;
+  expiresIn: number | undefined;
+}
 export interface DeleteConsoleAuthorizationConfigurationInput {
   targetId?: string | undefined;
 }

package/dist-types/ts3.4/schemas/schemas_0.d.ts

@@ -4,8 +4,11 @@ export declare var SigninServiceException$: StaticErrorSchema;
 export declare var AccessDeniedException$: StaticErrorSchema;
 export declare var ConflictException$: StaticErrorSchema;
 export declare var InternalServerException$: StaticErrorSchema;
+export declare var InvalidGrantException$: StaticErrorSchema;
+export declare var InvalidScopeException$: StaticErrorSchema;
 export declare var ResourceNotFoundException$: StaticErrorSchema;
 export declare var ServiceQuotaExceededException$: StaticErrorSchema;
+export declare var ServiceUnavailableException$: StaticErrorSchema;
 export declare var TooManyRequestsError$: StaticErrorSchema;
 export declare var ValidationException$: StaticErrorSchema;
 export declare const errorTypeRegistries: TypeRegistry[];
@@ -16,6 +19,8 @@ export declare var CreateOAuth2TokenResponse$: StaticStructureSchema;
 export declare var CreateOAuth2TokenResponseBody$: StaticStructureSchema;
 export declare var CreateOAuth2TokenWithIAMRequest$: StaticStructureSchema;
 export declare var CreateOAuth2TokenWithIAMResponse$: StaticStructureSchema;
+export declare var CreateOAuth2TokenWithTokenExchangeRequest$: StaticStructureSchema;
+export declare var CreateOAuth2TokenWithTokenExchangeResponse$: StaticStructureSchema;
 export declare var DeleteConsoleAuthorizationConfigurationInput$: StaticStructureSchema;
 export declare var DeleteConsoleAuthorizationConfigurationOutput$: StaticStructureSchema;
 export declare var DeleteResourcePermissionStatementInput$: StaticStructureSchema;
@@ -39,6 +44,7 @@ export declare var RevokeOAuth2TokenWithIAMResponse$: StaticStructureSchema;
 export declare var SigninResourceBasedPolicy$: StaticStructureSchema;
 export declare var CreateOAuth2Token$: StaticOperationSchema;
 export declare var CreateOAuth2TokenWithIAM$: StaticOperationSchema;
+export declare var CreateOAuth2TokenWithTokenExchange$: StaticOperationSchema;
 export declare var DeleteConsoleAuthorizationConfiguration$: StaticOperationSchema;
 export declare var DeleteResourcePermissionStatement$: StaticOperationSchema;
 export declare var GetConsoleAuthorizationConfiguration$: StaticOperationSchema;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-signin",
-  "version": "3.1155.0",
+  "version": "3.1157.0",
   "description": "AWS SDK for JavaScript Signin Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-signin",
   "license": "Apache-2.0",
@@ -50,17 +50,17 @@
     "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.5",
-    "@aws-sdk/credential-provider-node": "^3.972.88",
+    "@aws-sdk/core": "^3.978.6",
+    "@aws-sdk/credential-provider-node": "^3.972.89",
     "@aws-sdk/types": "^3.975.0",
-    "@smithy/core": "^3.36.1",
+    "@smithy/core": "^3.37.0",
     "@smithy/fetch-http-handler": "^5.8.0",
-    "@smithy/node-http-handler": "^4.12.1",
+    "@smithy/node-http-handler": "^4.13.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
-    "@smithy/snapshot-testing": "^2.3.2",
+    "@smithy/snapshot-testing": "^2.4.0",
     "@tsconfig/node20": "20.1.8",
     "@types/node": "^20.14.8",
     "concurrently": "7.0.0",