@aws-sdk/client-sso-oidc 3.137.0 → 3.145.0

package/dist-es/protocols/Aws_restJson1.js

@@ -1,6 +1,6 @@
 import { __assign, __awaiter, __generator } from "tslib";
 import { HttpRequest as __HttpRequest } from "@aws-sdk/protocol-http";
-import { decorateServiceException as __decorateServiceException, expectInt32 as __expectInt32, expectLong as __expectLong, expectNonNull as __expectNonNull, expectObject as __expectObject, expectString as __expectString, } from "@aws-sdk/smithy-client";
+import { decorateServiceException as __decorateServiceException, expectInt32 as __expectInt32, expectLong as __expectLong, expectNonNull as __expectNonNull, expectObject as __expectObject, expectString as __expectString, map as __map, throwDefaultError, } from "@aws-sdk/smithy-client";
 import { AccessDeniedException, AuthorizationPendingException, ExpiredTokenException, InternalServerException, InvalidClientException, InvalidClientMetadataException, InvalidGrantException, InvalidRequestException, InvalidScopeException, SlowDownException, UnauthorizedClientException, UnsupportedGrantTypeException, } from "../models/models_0";
 import { SSOOIDCServiceException as __BaseException } from "../models/SSOOIDCServiceException";
 export var serializeAws_restJson1CreateTokenCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
@@ -83,40 +83,35 @@ export var deserializeAws_restJson1CreateTokenCommand = function (output, contex
                 if (output.statusCode !== 200 && output.statusCode >= 300) {
                     return [2, deserializeAws_restJson1CreateTokenCommandError(output, context)];
                 }
-                contents = {
+                contents = map({
                     $metadata: deserializeMetadata(output),
-                    accessToken: undefined,
-                    expiresIn: undefined,
-                    idToken: undefined,
-                    refreshToken: undefined,
-                    tokenType: undefined,
-                };
+                });
                 _a = __expectNonNull;
                 _b = __expectObject;
                 return [4, parseBody(output.body, context)];
             case 1:
                 data = _a.apply(void 0, [_b.apply(void 0, [_c.sent()]), "body"]);
-                if (data.accessToken !== undefined && data.accessToken !== null) {
+                if (data.accessToken != null) {
                     contents.accessToken = __expectString(data.accessToken);
                 }
-                if (data.expiresIn !== undefined && data.expiresIn !== null) {
+                if (data.expiresIn != null) {
                     contents.expiresIn = __expectInt32(data.expiresIn);
                 }
-                if (data.idToken !== undefined && data.idToken !== null) {
+                if (data.idToken != null) {
                     contents.idToken = __expectString(data.idToken);
                 }
-                if (data.refreshToken !== undefined && data.refreshToken !== null) {
+                if (data.refreshToken != null) {
                     contents.refreshToken = __expectString(data.refreshToken);
                 }
-                if (data.tokenType !== undefined && data.tokenType !== null) {
+                if (data.tokenType != null) {
                     contents.tokenType = __expectString(data.tokenType);
                 }
-                return [2, Promise.resolve(contents)];
+                return [2, contents];
         }
     });
 }); };
 var deserializeAws_restJson1CreateTokenCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
-    var parsedOutput, _a, response, errorCode, _b, parsedBody, $metadata, statusCode;
+    var parsedOutput, _a, errorCode, _b, parsedBody;
     var _c;
     return __generator(this, function (_d) {
         switch (_d.label) {
@@ -177,14 +172,14 @@ var deserializeAws_restJson1CreateTokenCommandError = function (output, context)
             case 23: throw _d.sent();
             case 24:
                 parsedBody = parsedOutput.body;
-                $metadata = deserializeMetadata(output);
-                statusCode = $metadata.httpStatusCode ? $metadata.httpStatusCode + "" : undefined;
-                response = new __BaseException({
-                    name: parsedBody.code || parsedBody.Code || errorCode || statusCode || "UnknowError",
-                    $fault: "client",
-                    $metadata: $metadata,
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
                 });
-                throw __decorateServiceException(response, parsedBody);
+                _d.label = 25;
+            case 25: return [2];
         }
     });
 }); };
@@ -196,44 +191,38 @@ export var deserializeAws_restJson1RegisterClientCommand = function (output, con
                 if (output.statusCode !== 200 && output.statusCode >= 300) {
                     return [2, deserializeAws_restJson1RegisterClientCommandError(output, context)];
                 }
-                contents = {
+                contents = map({
                     $metadata: deserializeMetadata(output),
-                    authorizationEndpoint: undefined,
-                    clientId: undefined,
-                    clientIdIssuedAt: undefined,
-                    clientSecret: undefined,
-                    clientSecretExpiresAt: undefined,
-                    tokenEndpoint: undefined,
-                };
+                });
                 _a = __expectNonNull;
                 _b = __expectObject;
                 return [4, parseBody(output.body, context)];
             case 1:
                 data = _a.apply(void 0, [_b.apply(void 0, [_c.sent()]), "body"]);
-                if (data.authorizationEndpoint !== undefined && data.authorizationEndpoint !== null) {
+                if (data.authorizationEndpoint != null) {
                     contents.authorizationEndpoint = __expectString(data.authorizationEndpoint);
                 }
-                if (data.clientId !== undefined && data.clientId !== null) {
+                if (data.clientId != null) {
                     contents.clientId = __expectString(data.clientId);
                 }
-                if (data.clientIdIssuedAt !== undefined && data.clientIdIssuedAt !== null) {
+                if (data.clientIdIssuedAt != null) {
                     contents.clientIdIssuedAt = __expectLong(data.clientIdIssuedAt);
                 }
-                if (data.clientSecret !== undefined && data.clientSecret !== null) {
+                if (data.clientSecret != null) {
                     contents.clientSecret = __expectString(data.clientSecret);
                 }
-                if (data.clientSecretExpiresAt !== undefined && data.clientSecretExpiresAt !== null) {
+                if (data.clientSecretExpiresAt != null) {
                     contents.clientSecretExpiresAt = __expectLong(data.clientSecretExpiresAt);
                 }
-                if (data.tokenEndpoint !== undefined && data.tokenEndpoint !== null) {
+                if (data.tokenEndpoint != null) {
                     contents.tokenEndpoint = __expectString(data.tokenEndpoint);
                 }
-                return [2, Promise.resolve(contents)];
+                return [2, contents];
         }
     });
 }); };
 var deserializeAws_restJson1RegisterClientCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
-    var parsedOutput, _a, response, errorCode, _b, parsedBody, $metadata, statusCode;
+    var parsedOutput, _a, errorCode, _b, parsedBody;
     var _c;
     return __generator(this, function (_d) {
         switch (_d.label) {
@@ -266,14 +255,14 @@ var deserializeAws_restJson1RegisterClientCommandError = function (output, conte
             case 9: throw _d.sent();
             case 10:
                 parsedBody = parsedOutput.body;
-                $metadata = deserializeMetadata(output);
-                statusCode = $metadata.httpStatusCode ? $metadata.httpStatusCode + "" : undefined;
-                response = new __BaseException({
-                    name: parsedBody.code || parsedBody.Code || errorCode || statusCode || "UnknowError",
-                    $fault: "client",
-                    $metadata: $metadata,
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
                 });
-                throw __decorateServiceException(response, parsedBody);
+                _d.label = 11;
+            case 11: return [2];
         }
     });
 }); };
@@ -285,44 +274,38 @@ export var deserializeAws_restJson1StartDeviceAuthorizationCommand = function (o
                 if (output.statusCode !== 200 && output.statusCode >= 300) {
                     return [2, deserializeAws_restJson1StartDeviceAuthorizationCommandError(output, context)];
                 }
-                contents = {
+                contents = map({
                     $metadata: deserializeMetadata(output),
-                    deviceCode: undefined,
-                    expiresIn: undefined,
-                    interval: undefined,
-                    userCode: undefined,
-                    verificationUri: undefined,
-                    verificationUriComplete: undefined,
-                };
+                });
                 _a = __expectNonNull;
                 _b = __expectObject;
                 return [4, parseBody(output.body, context)];
             case 1:
                 data = _a.apply(void 0, [_b.apply(void 0, [_c.sent()]), "body"]);
-                if (data.deviceCode !== undefined && data.deviceCode !== null) {
+                if (data.deviceCode != null) {
                     contents.deviceCode = __expectString(data.deviceCode);
                 }
-                if (data.expiresIn !== undefined && data.expiresIn !== null) {
+                if (data.expiresIn != null) {
                     contents.expiresIn = __expectInt32(data.expiresIn);
                 }
-                if (data.interval !== undefined && data.interval !== null) {
+                if (data.interval != null) {
                     contents.interval = __expectInt32(data.interval);
                 }
-                if (data.userCode !== undefined && data.userCode !== null) {
+                if (data.userCode != null) {
                     contents.userCode = __expectString(data.userCode);
                 }
-                if (data.verificationUri !== undefined && data.verificationUri !== null) {
+                if (data.verificationUri != null) {
                     contents.verificationUri = __expectString(data.verificationUri);
                 }
-                if (data.verificationUriComplete !== undefined && data.verificationUriComplete !== null) {
+                if (data.verificationUriComplete != null) {
                     contents.verificationUriComplete = __expectString(data.verificationUriComplete);
                 }
-                return [2, Promise.resolve(contents)];
+                return [2, contents];
         }
     });
 }); };
 var deserializeAws_restJson1StartDeviceAuthorizationCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
-    var parsedOutput, _a, response, errorCode, _b, parsedBody, $metadata, statusCode;
+    var parsedOutput, _a, errorCode, _b, parsedBody;
     var _c;
     return __generator(this, function (_d) {
         switch (_d.label) {
@@ -359,26 +342,27 @@ var deserializeAws_restJson1StartDeviceAuthorizationCommandError = function (out
             case 11: throw _d.sent();
             case 12:
                 parsedBody = parsedOutput.body;
-                $metadata = deserializeMetadata(output);
-                statusCode = $metadata.httpStatusCode ? $metadata.httpStatusCode + "" : undefined;
-                response = new __BaseException({
-                    name: parsedBody.code || parsedBody.Code || errorCode || statusCode || "UnknowError",
-                    $fault: "client",
-                    $metadata: $metadata,
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
                 });
-                throw __decorateServiceException(response, parsedBody);
+                _d.label = 13;
+            case 13: return [2];
         }
     });
 }); };
+var map = __map;
 var deserializeAws_restJson1AccessDeniedExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new AccessDeniedException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -388,12 +372,12 @@ var deserializeAws_restJson1AccessDeniedExceptionResponse = function (parsedOutp
 var deserializeAws_restJson1AuthorizationPendingExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new AuthorizationPendingException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -403,12 +387,12 @@ var deserializeAws_restJson1AuthorizationPendingExceptionResponse = function (pa
 var deserializeAws_restJson1ExpiredTokenExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new ExpiredTokenException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -418,12 +402,12 @@ var deserializeAws_restJson1ExpiredTokenExceptionResponse = function (parsedOutp
 var deserializeAws_restJson1InternalServerExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InternalServerException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -433,12 +417,12 @@ var deserializeAws_restJson1InternalServerExceptionResponse = function (parsedOu
 var deserializeAws_restJson1InvalidClientExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InvalidClientException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -448,12 +432,12 @@ var deserializeAws_restJson1InvalidClientExceptionResponse = function (parsedOut
 var deserializeAws_restJson1InvalidClientMetadataExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InvalidClientMetadataException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -463,12 +447,12 @@ var deserializeAws_restJson1InvalidClientMetadataExceptionResponse = function (p
 var deserializeAws_restJson1InvalidGrantExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InvalidGrantException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -478,12 +462,12 @@ var deserializeAws_restJson1InvalidGrantExceptionResponse = function (parsedOutp
 var deserializeAws_restJson1InvalidRequestExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InvalidRequestException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -493,12 +477,12 @@ var deserializeAws_restJson1InvalidRequestExceptionResponse = function (parsedOu
 var deserializeAws_restJson1InvalidScopeExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new InvalidScopeException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -508,12 +492,12 @@ var deserializeAws_restJson1InvalidScopeExceptionResponse = function (parsedOutp
 var deserializeAws_restJson1SlowDownExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new SlowDownException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -523,12 +507,12 @@ var deserializeAws_restJson1SlowDownExceptionResponse = function (parsedOutput,
 var deserializeAws_restJson1UnauthorizedClientExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new UnauthorizedClientException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -538,12 +522,12 @@ var deserializeAws_restJson1UnauthorizedClientExceptionResponse = function (pars
 var deserializeAws_restJson1UnsupportedGrantTypeExceptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
-        contents = {};
+        contents = map({});
         data = parsedOutput.body;
-        if (data.error !== undefined && data.error !== null) {
+        if (data.error != null) {
             contents.error = __expectString(data.error);
         }
-        if (data.error_description !== undefined && data.error_description !== null) {
+        if (data.error_description != null) {
             contents.error_description = __expectString(data.error_description);
         }
         exception = new UnsupportedGrantTypeException(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
@@ -554,9 +538,6 @@ var serializeAws_restJson1Scopes = function (input, context) {
     return input
         .filter(function (e) { return e != null; })
         .map(function (entry) {
-        if (entry === null) {
-            return null;
-        }
         return entry;
     });
 };

package/dist-types/SSOOIDC.d.ts

@@ -4,43 +4,66 @@ import { RegisterClientCommandInput, RegisterClientCommandOutput } from "./comma
 import { StartDeviceAuthorizationCommandInput, StartDeviceAuthorizationCommandOutput } from "./commands/StartDeviceAuthorizationCommand";
 import { SSOOIDCClient } from "./SSOOIDCClient";
 /**
- * <p>AWS Single Sign-On (SSO) OpenID Connect (OIDC) is a web service that enables a client
- *       (such as AWS CLI or a native application) to register with AWS SSO. The service also
- *       enables the client to fetch the user’s access token upon successful authentication and
- *       authorization with AWS SSO. This service conforms with the OAuth 2.0 based implementation of
- *       the device authorization grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>).</p>
- *
- *          <p>For general information about AWS SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is AWS
- *         Single Sign-On?</a> in the <i>AWS SSO User Guide</i>.</p>
- *
- *          <p>This API reference guide describes the AWS SSO OIDC operations that you can call
- *       programatically and includes detailed information on data types and errors.</p>
- *
+ * <p>Amazon Web Services Single Sign On OpenID Connect (OIDC) is a web service that enables a client (such as Amazon Web Services CLI
+ *       or a native application) to register with Amazon Web Services SSO. The service also enables the client to
+ *       fetch the user’s access token upon successful authentication and authorization with
+ *       Amazon Web Services SSO.</p>
  *          <note>
- *             <p>AWS provides SDKs that consist of libraries and sample code for various programming
- *         languages and platforms such as Java, Ruby, .Net, iOS, and Android. The SDKs provide a
- *         convenient way to create programmatic access to AWS SSO and other AWS services. For more
- *         information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
+ *             <p>Although Amazon Web Services Single Sign-On was renamed, the <code>sso</code> and
+ *         <code>identitystore</code> API namespaces will continue to retain their original name for
+ *         backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">Amazon Web Services SSO rename</a>.</p>
  *          </note>
+ *          <p>
+ *             <b>Considerations for Using This Guide</b>
+ *          </p>
+ *          <p>Before you begin using this guide, we recommend that you first review the following
+ *       important information about how the Amazon Web Services SSO OIDC service works.</p>
+ *          <ul>
+ *             <li>
+ *                <p>The Amazon Web Services SSO OIDC service currently implements only the portions of the OAuth 2.0
+ *           Device Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
+ *           sign-on authentication with the AWS CLI. Support for other OIDC flows frequently needed
+ *           for native applications, such as Authorization Code Flow (+ PKCE), will be addressed in
+ *           future releases.</p>
+ *             </li>
+ *             <li>
+ *                <p>The service emits only OIDC access tokens, such that obtaining a new token (For
+ *           example, token refresh) requires explicit user re-authentication.</p>
+ *             </li>
+ *             <li>
+ *                <p>The access tokens provided by this service grant access to all AWS account
+ *           entitlements assigned to an Amazon Web Services SSO user, not just a particular application.</p>
+ *             </li>
+ *             <li>
+ *                <p>The documentation in this guide does not describe the mechanism to convert the access
+ *           token into AWS Auth (“sigv4”) credentials for use with IAM-protected AWS service
+ *           endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>Amazon Web Services SSO Portal API Reference
+ *             Guide</i>.</p>
+ *             </li>
+ *          </ul>
+ *
+ *          <p>For general information about Amazon Web Services SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
+ *         Amazon Web Services SSO?</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
  */
 export declare class SSOOIDC extends SSOOIDCClient {
     /**
      * <p>Creates and returns an access token for the authorized client. The access token issued
-     *       will be used to fetch short-term credentials for the assigned roles in the AWS
+     *       will be used to fetch short-term credentials for the assigned roles in the Amazon Web Services
      *       account.</p>
      */
     createToken(args: CreateTokenCommandInput, options?: __HttpHandlerOptions): Promise<CreateTokenCommandOutput>;
     createToken(args: CreateTokenCommandInput, cb: (err: any, data?: CreateTokenCommandOutput) => void): void;
     createToken(args: CreateTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateTokenCommandOutput) => void): void;
     /**
-     * <p>Registers a client with AWS SSO. This allows clients to initiate device authorization.
+     * <p>Registers a client with Amazon Web Services SSO. This allows clients to initiate device authorization.
      *       The output should be persisted for reuse through many authentication requests.</p>
      */
     registerClient(args: RegisterClientCommandInput, options?: __HttpHandlerOptions): Promise<RegisterClientCommandOutput>;
     registerClient(args: RegisterClientCommandInput, cb: (err: any, data?: RegisterClientCommandOutput) => void): void;
     registerClient(args: RegisterClientCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterClientCommandOutput) => void): void;
     /**
-     * <p>Initiates device authorization by requesting a pair of verification codes from the authorization service.</p>
+     * <p>Initiates device authorization by requesting a pair of verification codes from the
+     *       authorization service.</p>
      */
     startDeviceAuthorization(args: StartDeviceAuthorizationCommandInput, options?: __HttpHandlerOptions): Promise<StartDeviceAuthorizationCommandOutput>;
     startDeviceAuthorization(args: StartDeviceAuthorizationCommandInput, cb: (err: any, data?: StartDeviceAuthorizationCommandOutput) => void): void;

package/dist-types/SSOOIDCClient.d.ts

@@ -123,24 +123,46 @@ declare type SSOOIDCClientResolvedConfigType = __SmithyResolvedConfiguration<__H
 export interface SSOOIDCClientResolvedConfig extends SSOOIDCClientResolvedConfigType {
 }
 /**
- * <p>AWS Single Sign-On (SSO) OpenID Connect (OIDC) is a web service that enables a client
- *       (such as AWS CLI or a native application) to register with AWS SSO. The service also
- *       enables the client to fetch the user’s access token upon successful authentication and
- *       authorization with AWS SSO. This service conforms with the OAuth 2.0 based implementation of
- *       the device authorization grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>).</p>
- *
- *          <p>For general information about AWS SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is AWS
- *         Single Sign-On?</a> in the <i>AWS SSO User Guide</i>.</p>
- *
- *          <p>This API reference guide describes the AWS SSO OIDC operations that you can call
- *       programatically and includes detailed information on data types and errors.</p>
- *
+ * <p>Amazon Web Services Single Sign On OpenID Connect (OIDC) is a web service that enables a client (such as Amazon Web Services CLI
+ *       or a native application) to register with Amazon Web Services SSO. The service also enables the client to
+ *       fetch the user’s access token upon successful authentication and authorization with
+ *       Amazon Web Services SSO.</p>
  *          <note>
- *             <p>AWS provides SDKs that consist of libraries and sample code for various programming
- *         languages and platforms such as Java, Ruby, .Net, iOS, and Android. The SDKs provide a
- *         convenient way to create programmatic access to AWS SSO and other AWS services. For more
- *         information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
+ *             <p>Although Amazon Web Services Single Sign-On was renamed, the <code>sso</code> and
+ *         <code>identitystore</code> API namespaces will continue to retain their original name for
+ *         backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">Amazon Web Services SSO rename</a>.</p>
  *          </note>
+ *          <p>
+ *             <b>Considerations for Using This Guide</b>
+ *          </p>
+ *          <p>Before you begin using this guide, we recommend that you first review the following
+ *       important information about how the Amazon Web Services SSO OIDC service works.</p>
+ *          <ul>
+ *             <li>
+ *                <p>The Amazon Web Services SSO OIDC service currently implements only the portions of the OAuth 2.0
+ *           Device Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
+ *           sign-on authentication with the AWS CLI. Support for other OIDC flows frequently needed
+ *           for native applications, such as Authorization Code Flow (+ PKCE), will be addressed in
+ *           future releases.</p>
+ *             </li>
+ *             <li>
+ *                <p>The service emits only OIDC access tokens, such that obtaining a new token (For
+ *           example, token refresh) requires explicit user re-authentication.</p>
+ *             </li>
+ *             <li>
+ *                <p>The access tokens provided by this service grant access to all AWS account
+ *           entitlements assigned to an Amazon Web Services SSO user, not just a particular application.</p>
+ *             </li>
+ *             <li>
+ *                <p>The documentation in this guide does not describe the mechanism to convert the access
+ *           token into AWS Auth (“sigv4”) credentials for use with IAM-protected AWS service
+ *           endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>Amazon Web Services SSO Portal API Reference
+ *             Guide</i>.</p>
+ *             </li>
+ *          </ul>
+ *
+ *          <p>For general information about Amazon Web Services SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
+ *         Amazon Web Services SSO?</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
  */
 export declare class SSOOIDCClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, SSOOIDCClientResolvedConfig> {
     /**

package/dist-types/commands/CreateTokenCommand.d.ts

@@ -8,7 +8,7 @@ export interface CreateTokenCommandOutput extends CreateTokenResponse, __Metadat
 }
 /**
  * <p>Creates and returns an access token for the authorized client. The access token issued
- *       will be used to fetch short-term credentials for the assigned roles in the AWS
+ *       will be used to fetch short-term credentials for the assigned roles in the Amazon Web Services
  *       account.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/RegisterClientCommand.d.ts

@@ -7,7 +7,7 @@ export interface RegisterClientCommandInput extends RegisterClientRequest {
 export interface RegisterClientCommandOutput extends RegisterClientResponse, __MetadataBearer {
 }
 /**
- * <p>Registers a client with AWS SSO. This allows clients to initiate device authorization.
+ * <p>Registers a client with Amazon Web Services SSO. This allows clients to initiate device authorization.
  *       The output should be persisted for reuse through many authentication requests.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/StartDeviceAuthorizationCommand.d.ts

@@ -7,7 +7,8 @@ export interface StartDeviceAuthorizationCommandInput extends StartDeviceAuthori
 export interface StartDeviceAuthorizationCommandOutput extends StartDeviceAuthorizationResponse, __MetadataBearer {
 }
 /**
- * <p>Initiates device authorization by requesting a pair of verification codes from the authorization service.</p>
+ * <p>Initiates device authorization by requesting a pair of verification codes from the
+ *       authorization service.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript