@aws-sdk/client-signin 3.1156.0 → 3.1158.0

package/dist-types/commands/PutResourcePermissionStatementCommand.d.ts

@@ -58,14 +58,7 @@ declare const PutResourcePermissionStatementCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link ConflictException} (client fault)
  *  Error thrown when request conflicts with current state
@@ -75,11 +68,7 @@ declare const PutResourcePermissionStatementCommand_base: {
  * Used when the request conflicts with the current state of the resource
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
  *  Error thrown when service quota is exceeded
@@ -89,26 +78,10 @@ declare const PutResourcePermissionStatementCommand_base: {
  * Used when the request would cause a service quota to be exceeded
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/RevokeOAuth2TokenWithIAMCommand.d.ts

@@ -24,13 +24,7 @@ declare const RevokeOAuth2TokenWithIAMCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * Grants permission to revoke an OAuth 2.0 refresh token and its associated refresh tokens
- *
- * Revokes a refresh_token issued by AWS Sign-In, invalidating the entire token
- * chain so that the refresh_token can no longer be used to mint new access_tokens.
- *
- * Idempotency: revoking an already-revoked, expired, or otherwise invalid token
- * still returns 200 OK with an empty body. Only the refresh_token type is accepted.
+ * Revokes an OAuth 2.0 refresh token and its associated token chain.
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -55,43 +49,16 @@ declare const RevokeOAuth2TokenWithIAMCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./CreateOAuth2TokenCommand";
 export * from "./CreateOAuth2TokenWithIAMCommand";
+export * from "./CreateOAuth2TokenWithTokenExchangeCommand";
 export * from "./DeleteConsoleAuthorizationConfigurationCommand";
 export * from "./DeleteResourcePermissionStatementCommand";
 export * from "./GetConsoleAuthorizationConfigurationCommand";

package/dist-types/index.d.ts

@@ -1,6 +1,5 @@
 /**
- * AWS Sign-In manages authentication for AWS services. This service provides
- * secure authentication flows for accessing AWS resources from the console and developer tools.
+ * AWS Sign-In manages authentication for AWS services. It implements OAuth 2.0, providing secure token exchange and refresh capabilities.
  *
  * @packageDocumentation
  */

package/dist-types/models/enums.d.ts

@@ -4,39 +4,46 @@
  */
 export declare const OAuth2ErrorCode: {
     /**
-     * Authorization code has expired
+     * Authorization code has expired.
      */
     readonly AUTHCODE_EXPIRED: "AUTHCODE_EXPIRED";
     /**
-     * Request conflicts with current state of the resource
+     * Request conflicts with the current state of the resource.
      */
     readonly CONFLICT: "CONFLICT";
     /**
-     * Insufficient permissions to perform this operation
+     * Insufficient permissions to perform this operation.
      */
     readonly INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS";
     /**
-     * The request is missing a required parameter, includes an invalid parameter value, or is otherwise malformed
+     * The request is missing a required parameter, includes an invalid parameter value, or is otherwise malformed.
      */
     readonly INVALID_REQUEST: "INVALID_REQUEST";
+    readonly OAUTH_INVALID_GRANT: "invalid_grant";
+    readonly OAUTH_INVALID_REQUEST: "invalid_request";
+    readonly OAUTH_INVALID_SCOPE: "invalid_scope";
+    readonly OAUTH_INVALID_TARGET: "invalid_target";
+    readonly OAUTH_RATE_EXCEEDED: "rate_exceeded";
+    readonly OAUTH_SERVICE_UNAVAILABLE: "service_unavailable";
+    readonly OAUTH_UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type";
     /**
-     * Requested resource was not found
+     * Requested resource was not found.
      */
     readonly RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND";
     /**
-     * Internal server error occurred
+     * Internal server error occurred.
      */
     readonly SERVER_ERROR: "server_error";
     /**
-     * Request would cause a service quota to be exceeded
+     * Request would cause a service quota to be exceeded.
      */
     readonly SERVICE_QUOTA_EXCEEDED: "SERVICE_QUOTA_EXCEEDED";
     /**
-     * Token has expired and needs to be refreshed
+     * Token has expired.
      */
     readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
     /**
-     * User credentials have been changed
+     * User credentials have been changed.
      */
     readonly USER_CREDENTIALS_CHANGED: "USER_CREDENTIALS_CHANGED";
 };

package/dist-types/models/errors.d.ts

@@ -2,14 +2,7 @@ import type { ExceptionOptionType as __ExceptionOptionType } from "@smithy/core/
 import type { OAuth2ErrorCode } from "./enums";
 import { SigninServiceException as __BaseException } from "./SigninServiceException";
 /**
- * Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ * You do not have sufficient access to perform this action.
  * @public
  */
 export declare class AccessDeniedException extends __BaseException {
@@ -17,8 +10,7 @@ export declare class AccessDeniedException extends __BaseException {
     readonly name: "AccessDeniedException";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating the specific type of access denial
-     * Can be TOKEN_EXPIRED, AUTHCODE_EXPIRED, USER_CREDENTIALS_CHANGED, or INSUFFICIENT_PERMISSIONS
+     * One of TOKEN_EXPIRED, AUTHCODE_EXPIRED, USER_CREDENTIALS_CHANGED, or INSUFFICIENT_PERMISSIONS.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -51,11 +43,7 @@ export declare class ConflictException extends __BaseException {
     constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
 }
 /**
- * Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ * The request failed because of an internal server error.
  * @public
  */
 export declare class InternalServerException extends __BaseException {
@@ -63,8 +51,7 @@ export declare class InternalServerException extends __BaseException {
     readonly name: "InternalServerException";
     readonly $fault: "server";
     /**
-     * OAuth 2.0 error code indicating server error
-     * Will be SERVER_ERROR for internal server errors
+     * Will be server_error.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -74,18 +61,7 @@ export declare class InternalServerException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
 }
 /**
- * Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ * The request failed because you exceeded the request rate limit for this operation.
  * @public
  */
 export declare class TooManyRequestsError extends __BaseException {
@@ -93,8 +69,7 @@ export declare class TooManyRequestsError extends __BaseException {
     readonly name: "TooManyRequestsError";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating the specific type of error
-     * Will be INVALID_REQUEST for rate limiting scenarios
+     * Will be rate_exceeded.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -104,12 +79,7 @@ export declare class TooManyRequestsError extends __BaseException {
     constructor(opts: __ExceptionOptionType<TooManyRequestsError, __BaseException>);
 }
 /**
- * Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ * The request failed because it contains a malformed, missing, or invalid parameter.
  * @public
  */
 export declare class ValidationException extends __BaseException {
@@ -117,8 +87,7 @@ export declare class ValidationException extends __BaseException {
     readonly name: "ValidationException";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating validation failure
-     * Will be INVALID_REQUEST for validation errors
+     * The specific code depends on which validation failed.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -127,6 +96,61 @@ export declare class ValidationException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
 }
+/**
+ * The request failed because the provided grant is invalid or expired.
+ * @public
+ */
+export declare class InvalidGrantException extends __BaseException {
+    static readonly shapeId: string;
+    readonly name: "InvalidGrantException";
+    readonly $fault: "client";
+    /**
+     * Will be invalid_grant.
+     * @public
+     */
+    error: OAuth2ErrorCode | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidGrantException, __BaseException>);
+}
+/**
+ * The request failed because the requested scope is invalid or exceeds the scope that can be granted.
+ * @public
+ */
+export declare class InvalidScopeException extends __BaseException {
+    static readonly shapeId: string;
+    readonly name: "InvalidScopeException";
+    readonly $fault: "client";
+    /**
+     * Will be invalid_scope.
+     * @public
+     */
+    error: OAuth2ErrorCode | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidScopeException, __BaseException>);
+}
+/**
+ * The request failed because a dependency is temporarily unavailable. You can retry the request.
+ * @public
+ */
+export declare class ServiceUnavailableException extends __BaseException {
+    static readonly shapeId: string;
+    readonly name: "ServiceUnavailableException";
+    readonly $fault: "server";
+    $retryable: {};
+    /**
+     * Will be service_unavailable.
+     * @public
+     */
+    error: OAuth2ErrorCode | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ServiceUnavailableException, __BaseException>);
+}
 /**
  * Error thrown when requested resource is not found
  *