@aws-sdk/client-sso-oidc 3.145.0 → 3.159.0

package/CHANGELOG.md

@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.159.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.158.0...v3.159.0) (2022-08-26)
+
+**Note:** Version bump only for package @aws-sdk/client-sso-oidc
+
+
+
+
+
+# [3.158.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.157.0...v3.158.0) (2022-08-25)
+
+
+### Features
+
+* **client-sso-oidc:** Updated required request parameters on IAM Identity Center's OIDC CreateToken action. ([ab82210](https://github.com/aws/aws-sdk-js-v3/commit/ab82210186cfaaddb6130c28153d3ac3f0fb8389))
+
+
+
+
+
+# [3.154.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.153.0...v3.154.0) (2022-08-19)
+
+**Note:** Version bump only for package @aws-sdk/client-sso-oidc
+
+
+
+
+
 # [3.145.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.144.0...v3.145.0) (2022-08-08)
 
 **Note:** Version bump only for package @aws-sdk/client-sso-oidc

package/README.md

@@ -9,46 +9,24 @@
 
 AWS SDK for JavaScript SSOOIDC Client for Node.js, Browser and React Native.
 
-<p>Amazon Web Services Single Sign On OpenID Connect (OIDC) is a web service that enables a client (such as Amazon Web Services CLI
-or a native application) to register with Amazon Web Services SSO. The service also enables the client to
-fetch the user’s access token upon successful authentication and authorization with
-Amazon Web Services SSO.</p>
+<p>AWS Single Sign-On (SSO) OpenID Connect (OIDC) is a web service that enables a client
+(such as AWS CLI or a native application) to register with AWS SSO. The service also
+enables the client to fetch the user’s access token upon successful authentication and
+authorization with AWS SSO. This service conforms with the OAuth 2.0 based implementation of
+the device authorization grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>).</p>
+
+<p>For general information about AWS SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is AWS
+Single Sign-On?</a> in the <i>AWS SSO User Guide</i>.</p>
+
+<p>This API reference guide describes the AWS SSO OIDC operations that you can call
+programatically and includes detailed information on data types and errors.</p>
+
 <note>
-<p>Although Amazon Web Services Single Sign-On was renamed, the <code>sso</code> and
-<code>identitystore</code> API namespaces will continue to retain their original name for
-backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">Amazon Web Services SSO rename</a>.</p>
+<p>AWS provides SDKs that consist of libraries and sample code for various programming
+languages and platforms such as Java, Ruby, .Net, iOS, and Android. The SDKs provide a
+convenient way to create programmatic access to AWS SSO and other AWS services. For more
+information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
 </note>
-<p>
-<b>Considerations for Using This Guide</b>
-</p>
-<p>Before you begin using this guide, we recommend that you first review the following
-important information about how the Amazon Web Services SSO OIDC service works.</p>
-<ul>
-<li>
-<p>The Amazon Web Services SSO OIDC service currently implements only the portions of the OAuth 2.0
-Device Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
-sign-on authentication with the AWS CLI. Support for other OIDC flows frequently needed
-for native applications, such as Authorization Code Flow (+ PKCE), will be addressed in
-future releases.</p>
-</li>
-<li>
-<p>The service emits only OIDC access tokens, such that obtaining a new token (For
-example, token refresh) requires explicit user re-authentication.</p>
-</li>
-<li>
-<p>The access tokens provided by this service grant access to all AWS account
-entitlements assigned to an Amazon Web Services SSO user, not just a particular application.</p>
-</li>
-<li>
-<p>The documentation in this guide does not describe the mechanism to convert the access
-token into AWS Auth (“sigv4”) credentials for use with IAM-protected AWS service
-endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>Amazon Web Services SSO Portal API Reference
-Guide</i>.</p>
-</li>
-</ul>
-
-<p>For general information about Amazon Web Services SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
-Amazon Web Services SSO?</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
 
 ## Installing
 

package/dist-types/SSOOIDC.d.ts

@@ -4,66 +4,43 @@ import { RegisterClientCommandInput, RegisterClientCommandOutput } from "./comma
 import { StartDeviceAuthorizationCommandInput, StartDeviceAuthorizationCommandOutput } from "./commands/StartDeviceAuthorizationCommand";
 import { SSOOIDCClient } from "./SSOOIDCClient";
 /**
- * <p>Amazon Web Services Single Sign On OpenID Connect (OIDC) is a web service that enables a client (such as Amazon Web Services CLI
- *       or a native application) to register with Amazon Web Services SSO. The service also enables the client to
- *       fetch the user’s access token upon successful authentication and authorization with
- *       Amazon Web Services SSO.</p>
+ * <p>AWS Single Sign-On (SSO) OpenID Connect (OIDC) is a web service that enables a client
+ *       (such as AWS CLI or a native application) to register with AWS SSO. The service also
+ *       enables the client to fetch the user’s access token upon successful authentication and
+ *       authorization with AWS SSO. This service conforms with the OAuth 2.0 based implementation of
+ *       the device authorization grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>).</p>
+ *
+ *          <p>For general information about AWS SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is AWS
+ *         Single Sign-On?</a> in the <i>AWS SSO User Guide</i>.</p>
+ *
+ *          <p>This API reference guide describes the AWS SSO OIDC operations that you can call
+ *       programatically and includes detailed information on data types and errors.</p>
+ *
  *          <note>
- *             <p>Although Amazon Web Services Single Sign-On was renamed, the <code>sso</code> and
- *         <code>identitystore</code> API namespaces will continue to retain their original name for
- *         backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">Amazon Web Services SSO rename</a>.</p>
+ *             <p>AWS provides SDKs that consist of libraries and sample code for various programming
+ *         languages and platforms such as Java, Ruby, .Net, iOS, and Android. The SDKs provide a
+ *         convenient way to create programmatic access to AWS SSO and other AWS services. For more
+ *         information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
  *          </note>
- *          <p>
- *             <b>Considerations for Using This Guide</b>
- *          </p>
- *          <p>Before you begin using this guide, we recommend that you first review the following
- *       important information about how the Amazon Web Services SSO OIDC service works.</p>
- *          <ul>
- *             <li>
- *                <p>The Amazon Web Services SSO OIDC service currently implements only the portions of the OAuth 2.0
- *           Device Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
- *           sign-on authentication with the AWS CLI. Support for other OIDC flows frequently needed
- *           for native applications, such as Authorization Code Flow (+ PKCE), will be addressed in
- *           future releases.</p>
- *             </li>
- *             <li>
- *                <p>The service emits only OIDC access tokens, such that obtaining a new token (For
- *           example, token refresh) requires explicit user re-authentication.</p>
- *             </li>
- *             <li>
- *                <p>The access tokens provided by this service grant access to all AWS account
- *           entitlements assigned to an Amazon Web Services SSO user, not just a particular application.</p>
- *             </li>
- *             <li>
- *                <p>The documentation in this guide does not describe the mechanism to convert the access
- *           token into AWS Auth (“sigv4”) credentials for use with IAM-protected AWS service
- *           endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>Amazon Web Services SSO Portal API Reference
- *             Guide</i>.</p>
- *             </li>
- *          </ul>
- *
- *          <p>For general information about Amazon Web Services SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
- *         Amazon Web Services SSO?</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
  */
 export declare class SSOOIDC extends SSOOIDCClient {
     /**
      * <p>Creates and returns an access token for the authorized client. The access token issued
-     *       will be used to fetch short-term credentials for the assigned roles in the Amazon Web Services
+     *       will be used to fetch short-term credentials for the assigned roles in the AWS
      *       account.</p>
      */
     createToken(args: CreateTokenCommandInput, options?: __HttpHandlerOptions): Promise<CreateTokenCommandOutput>;
     createToken(args: CreateTokenCommandInput, cb: (err: any, data?: CreateTokenCommandOutput) => void): void;
     createToken(args: CreateTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateTokenCommandOutput) => void): void;
     /**
-     * <p>Registers a client with Amazon Web Services SSO. This allows clients to initiate device authorization.
+     * <p>Registers a client with AWS SSO. This allows clients to initiate device authorization.
      *       The output should be persisted for reuse through many authentication requests.</p>
      */
     registerClient(args: RegisterClientCommandInput, options?: __HttpHandlerOptions): Promise<RegisterClientCommandOutput>;
     registerClient(args: RegisterClientCommandInput, cb: (err: any, data?: RegisterClientCommandOutput) => void): void;
     registerClient(args: RegisterClientCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterClientCommandOutput) => void): void;
     /**
-     * <p>Initiates device authorization by requesting a pair of verification codes from the
-     *       authorization service.</p>
+     * <p>Initiates device authorization by requesting a pair of verification codes from the authorization service.</p>
      */
     startDeviceAuthorization(args: StartDeviceAuthorizationCommandInput, options?: __HttpHandlerOptions): Promise<StartDeviceAuthorizationCommandOutput>;
     startDeviceAuthorization(args: StartDeviceAuthorizationCommandInput, cb: (err: any, data?: StartDeviceAuthorizationCommandOutput) => void): void;

package/dist-types/SSOOIDCClient.d.ts

@@ -123,46 +123,24 @@ declare type SSOOIDCClientResolvedConfigType = __SmithyResolvedConfiguration<__H
 export interface SSOOIDCClientResolvedConfig extends SSOOIDCClientResolvedConfigType {
 }
 /**
- * <p>Amazon Web Services Single Sign On OpenID Connect (OIDC) is a web service that enables a client (such as Amazon Web Services CLI
- *       or a native application) to register with Amazon Web Services SSO. The service also enables the client to
- *       fetch the user’s access token upon successful authentication and authorization with
- *       Amazon Web Services SSO.</p>
+ * <p>AWS Single Sign-On (SSO) OpenID Connect (OIDC) is a web service that enables a client
+ *       (such as AWS CLI or a native application) to register with AWS SSO. The service also
+ *       enables the client to fetch the user’s access token upon successful authentication and
+ *       authorization with AWS SSO. This service conforms with the OAuth 2.0 based implementation of
+ *       the device authorization grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>).</p>
+ *
+ *          <p>For general information about AWS SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is AWS
+ *         Single Sign-On?</a> in the <i>AWS SSO User Guide</i>.</p>
+ *
+ *          <p>This API reference guide describes the AWS SSO OIDC operations that you can call
+ *       programatically and includes detailed information on data types and errors.</p>
+ *
  *          <note>
- *             <p>Although Amazon Web Services Single Sign-On was renamed, the <code>sso</code> and
- *         <code>identitystore</code> API namespaces will continue to retain their original name for
- *         backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">Amazon Web Services SSO rename</a>.</p>
+ *             <p>AWS provides SDKs that consist of libraries and sample code for various programming
+ *         languages and platforms such as Java, Ruby, .Net, iOS, and Android. The SDKs provide a
+ *         convenient way to create programmatic access to AWS SSO and other AWS services. For more
+ *         information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
  *          </note>
- *          <p>
- *             <b>Considerations for Using This Guide</b>
- *          </p>
- *          <p>Before you begin using this guide, we recommend that you first review the following
- *       important information about how the Amazon Web Services SSO OIDC service works.</p>
- *          <ul>
- *             <li>
- *                <p>The Amazon Web Services SSO OIDC service currently implements only the portions of the OAuth 2.0
- *           Device Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
- *           sign-on authentication with the AWS CLI. Support for other OIDC flows frequently needed
- *           for native applications, such as Authorization Code Flow (+ PKCE), will be addressed in
- *           future releases.</p>
- *             </li>
- *             <li>
- *                <p>The service emits only OIDC access tokens, such that obtaining a new token (For
- *           example, token refresh) requires explicit user re-authentication.</p>
- *             </li>
- *             <li>
- *                <p>The access tokens provided by this service grant access to all AWS account
- *           entitlements assigned to an Amazon Web Services SSO user, not just a particular application.</p>
- *             </li>
- *             <li>
- *                <p>The documentation in this guide does not describe the mechanism to convert the access
- *           token into AWS Auth (“sigv4”) credentials for use with IAM-protected AWS service
- *           endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>Amazon Web Services SSO Portal API Reference
- *             Guide</i>.</p>
- *             </li>
- *          </ul>
- *
- *          <p>For general information about Amazon Web Services SSO, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
- *         Amazon Web Services SSO?</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
  */
 export declare class SSOOIDCClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, SSOOIDCClientResolvedConfig> {
     /**

package/dist-types/commands/CreateTokenCommand.d.ts

@@ -8,7 +8,7 @@ export interface CreateTokenCommandOutput extends CreateTokenResponse, __Metadat
 }
 /**
  * <p>Creates and returns an access token for the authorized client. The access token issued
- *       will be used to fetch short-term credentials for the assigned roles in the Amazon Web Services
+ *       will be used to fetch short-term credentials for the assigned roles in the AWS
  *       account.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/RegisterClientCommand.d.ts

@@ -7,7 +7,7 @@ export interface RegisterClientCommandInput extends RegisterClientRequest {
 export interface RegisterClientCommandOutput extends RegisterClientResponse, __MetadataBearer {
 }
 /**
- * <p>Registers a client with Amazon Web Services SSO. This allows clients to initiate device authorization.
+ * <p>Registers a client with AWS SSO. This allows clients to initiate device authorization.
  *       The output should be persisted for reuse through many authentication requests.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/StartDeviceAuthorizationCommand.d.ts

@@ -7,8 +7,7 @@ export interface StartDeviceAuthorizationCommandInput extends StartDeviceAuthori
 export interface StartDeviceAuthorizationCommandOutput extends StartDeviceAuthorizationResponse, __MetadataBearer {
 }
 /**
- * <p>Initiates device authorization by requesting a pair of verification codes from the
- *       authorization service.</p>
+ * <p>Initiates device authorization by requesting a pair of verification codes from the authorization service.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/models/models_0.d.ts

@@ -14,8 +14,7 @@ export declare class AccessDeniedException extends __BaseException {
     constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
 }
 /**
- * <p>Indicates that a request to authorize a client with an access user session token is
- *       pending.</p>
+ * <p>Indicates that a request to authorize a client with an access user session token is pending.</p>
  */
 export declare class AuthorizationPendingException extends __BaseException {
     readonly name: "AuthorizationPendingException";
@@ -29,25 +28,15 @@ export declare class AuthorizationPendingException extends __BaseException {
 }
 export interface CreateTokenRequest {
     /**
-     * <p>The unique identifier string for each client. This value should come from the persisted
-     *       result of the <a>RegisterClient</a> API.</p>
+     * <p>The unique identifier string for each client. This value should come from the persisted result of the <a>RegisterClient</a> API.</p>
      */
     clientId: string | undefined;
     /**
-     * <p>A secret string generated for the client. This value should come from the persisted result
-     *       of the <a>RegisterClient</a> API.</p>
+     * <p>A secret string generated for the client. This value should come from the persisted result of the <a>RegisterClient</a> API.</p>
      */
     clientSecret: string | undefined;
     /**
-     * <p>Supports grant types for the authorization code, refresh token, and device code request.
-     *       For device code requests, specify the following value:</p>
-     *
-     *          <p>
-     *             <code>urn:ietf:params:oauth:grant-type:<i>device_code</i>
-     *             </code>
-     *          </p>
-     *
-     *          <p>For information about how to obtain the device code, see the <a>StartDeviceAuthorization</a> topic.</p>
+     * <p>Supports grant types for authorization code, refresh token, and device code request.</p>
      */
     grantType: string | undefined;
     /**
@@ -55,19 +44,13 @@ export interface CreateTokenRequest {
      *       used to identify this authentication attempt. This should come from an in-memory reference to
      *       the result of the <a>StartDeviceAuthorization</a> API.</p>
      */
-    deviceCode: string | undefined;
+    deviceCode?: string;
     /**
-     * <p>The authorization code received from the authorization service. This parameter is required
-     *       to perform an authorization grant request to get access to a token.</p>
+     * <p>The authorization code received from the authorization service. This parameter is required to perform an authorization grant request to get access to a token.</p>
      */
     code?: string;
     /**
-     * <p>Currently, <code>refreshToken</code> is not yet implemented and is not supported. For more
-     *       information about the features and limitations of the current Amazon Web Services SSO OIDC implementation,
-     *       see <i>Considerations for Using this Guide</i> in the <a href="https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/Welcome.html">Amazon Web Services SSO
-     *         OIDC API Reference</a>.</p>
-     *          <p>The token used to obtain an access token in the event that the access token is invalid or
-     *       expired.</p>
+     * <p>The token used to obtain an access token in the event that the access token is invalid or expired. This token is not issued by the service.</p>
      */
     refreshToken?: string;
     /**
@@ -83,7 +66,7 @@ export interface CreateTokenRequest {
 }
 export interface CreateTokenResponse {
     /**
-     * <p>An opaque token to access Amazon Web Services SSO resources assigned to a user.</p>
+     * <p>An opaque token to access AWS SSO resources assigned to a user.</p>
      */
     accessToken?: string;
     /**
@@ -96,20 +79,12 @@ export interface CreateTokenResponse {
      */
     expiresIn?: number;
     /**
-     * <p>Currently, <code>refreshToken</code> is not yet implemented and is not supported. For more
-     *       information about the features and limitations of the current Amazon Web Services SSO OIDC implementation,
-     *       see <i>Considerations for Using this Guide</i> in the <a href="https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/Welcome.html">Amazon Web Services SSO
-     *         OIDC API Reference</a>.</p>
-     *          <p>A token that, if present, can be used to refresh a previously issued access token that
+     * <p>A token that, if present, can be used to refresh a previously issued access token that
      *       might have expired.</p>
      */
     refreshToken?: string;
     /**
-     * <p>Currently, <code>idToken</code> is not yet implemented and is not supported. For more
-     *       information about the features and limitations of the current Amazon Web Services SSO OIDC implementation,
-     *       see <i>Considerations for Using this Guide</i> in the <a href="https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/Welcome.html">Amazon Web Services SSO
-     *         OIDC API Reference</a>.</p>
-     *          <p>The identifier of the user that associated with the access token, if present.</p>
+     * <p>The identifier of the user that associated with the access token, if present.</p>
      */
     idToken?: string;
 }
@@ -127,8 +102,7 @@ export declare class ExpiredTokenException extends __BaseException {
     constructor(opts: __ExceptionOptionType<ExpiredTokenException, __BaseException>);
 }
 /**
- * <p>Indicates that an error from the service occurred while trying to process a
- *       request.</p>
+ * <p>Indicates that an error from the service occurred while trying to process a request.</p>
  */
 export declare class InternalServerException extends __BaseException {
     readonly name: "InternalServerException";
@@ -156,8 +130,7 @@ export declare class InvalidClientException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidClientException, __BaseException>);
 }
 /**
- * <p>Indicates that a request contains an invalid grant. This can occur if a client makes a
- *         <a>CreateToken</a> request with an invalid grant type.</p>
+ * <p>Indicates that a request contains an invalid grant. This can occur if a client makes a <a>CreateToken</a> request with an invalid grant type.</p>
  */
 export declare class InvalidGrantException extends __BaseException {
     readonly name: "InvalidGrantException";
@@ -197,8 +170,7 @@ export declare class InvalidScopeException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidScopeException, __BaseException>);
 }
 /**
- * <p>Indicates that the client is making the request too frequently and is more than the
- *       service can handle. </p>
+ * <p>Indicates that the client is making the request too frequently and is more than the service can handle. </p>
  */
 export declare class SlowDownException extends __BaseException {
     readonly name: "SlowDownException";
@@ -238,8 +210,7 @@ export declare class UnsupportedGrantTypeException extends __BaseException {
     constructor(opts: __ExceptionOptionType<UnsupportedGrantTypeException, __BaseException>);
 }
 /**
- * <p>Indicates that the client information sent in the request during registration is
- *       invalid.</p>
+ * <p>Indicates that the client information sent in the request during registration is invalid.</p>
  */
 export declare class InvalidClientMetadataException extends __BaseException {
     readonly name: "InvalidClientMetadataException";
@@ -257,8 +228,7 @@ export interface RegisterClientRequest {
      */
     clientName: string | undefined;
     /**
-     * <p>The type of client. The service supports only <code>public</code> as a client type.
-     *       Anything other than public will be rejected by the service.</p>
+     * <p>The type of client. The service supports only <code>public</code> as a client type. Anything other than public will be rejected by the service.</p>
      */
     clientType: string | undefined;
     /**
@@ -279,13 +249,11 @@ export interface RegisterClientResponse {
      */
     clientSecret?: string;
     /**
-     * <p>Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> were
-     *       issued.</p>
+     * <p>Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> were issued.</p>
      */
     clientIdIssuedAt?: number;
     /**
-     * <p>Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> will
-     *       become invalid.</p>
+     * <p>Indicates the time at which the <code>clientId</code> and <code>clientSecret</code> will become invalid.</p>
      */
     clientSecretExpiresAt?: number;
     /**
@@ -299,7 +267,7 @@ export interface RegisterClientResponse {
 }
 export interface StartDeviceAuthorizationRequest {
     /**
-     * <p>The unique identifier string for the client that is registered with Amazon Web Services SSO. This value
+     * <p>The unique identifier string for the client that is registered with AWS SSO. This value
      *       should come from the persisted result of the <a>RegisterClient</a> API
      *       operation.</p>
      */
@@ -310,8 +278,8 @@ export interface StartDeviceAuthorizationRequest {
      */
     clientSecret: string | undefined;
     /**
-     * <p>The URL for the AWS access portal. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/using-the-portal.html">Using
-     *       the AWS access portal</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
+     * <p>The URL for the AWS SSO user portal. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/using-the-portal.html">Using
+     *         the User Portal</a> in the <i>AWS Single Sign-On User Guide</i>.</p>
      */
     startUrl: string | undefined;
 }
@@ -325,8 +293,7 @@ export interface StartDeviceAuthorizationResponse {
      */
     userCode?: string;
     /**
-     * <p>The URI of the verification page that takes the <code>userCode</code> to authorize the
-     *       device.</p>
+     * <p>The URI of the verification page that takes the <code>userCode</code> to authorize the device.</p>
      */
     verificationUri?: string;
     /**
@@ -340,8 +307,7 @@ export interface StartDeviceAuthorizationResponse {
      */
     expiresIn?: number;
     /**
-     * <p>Indicates the number of seconds the client must wait between attempts when polling for a
-     *       session.</p>
+     * <p>Indicates the number of seconds the client must wait between attempts when polling for a session.</p>
      */
     interval?: number;
 }

package/dist-types/ts3.4/models/models_0.d.ts

@@ -26,7 +26,7 @@ export interface CreateTokenRequest {
     
     grantType: string | undefined;
     
-    deviceCode: string | undefined;
+    deviceCode?: string;
     
     code?: string;
     

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso-oidc",
   "description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
-  "version": "3.145.0",
+  "version": "3.159.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -18,32 +18,32 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/config-resolver": "3.130.0",
-    "@aws-sdk/fetch-http-handler": "3.131.0",
-    "@aws-sdk/hash-node": "3.127.0",
-    "@aws-sdk/invalid-dependency": "3.127.0",
-    "@aws-sdk/middleware-content-length": "3.127.0",
-    "@aws-sdk/middleware-host-header": "3.127.0",
-    "@aws-sdk/middleware-logger": "3.127.0",
-    "@aws-sdk/middleware-recursion-detection": "3.127.0",
-    "@aws-sdk/middleware-retry": "3.127.0",
-    "@aws-sdk/middleware-serde": "3.127.0",
-    "@aws-sdk/middleware-stack": "3.127.0",
-    "@aws-sdk/middleware-user-agent": "3.127.0",
-    "@aws-sdk/node-config-provider": "3.127.0",
-    "@aws-sdk/node-http-handler": "3.127.0",
-    "@aws-sdk/protocol-http": "3.127.0",
-    "@aws-sdk/smithy-client": "3.142.0",
-    "@aws-sdk/types": "3.127.0",
-    "@aws-sdk/url-parser": "3.127.0",
+    "@aws-sdk/config-resolver": "3.159.0",
+    "@aws-sdk/fetch-http-handler": "3.159.0",
+    "@aws-sdk/hash-node": "3.159.0",
+    "@aws-sdk/invalid-dependency": "3.159.0",
+    "@aws-sdk/middleware-content-length": "3.159.0",
+    "@aws-sdk/middleware-host-header": "3.159.0",
+    "@aws-sdk/middleware-logger": "3.159.0",
+    "@aws-sdk/middleware-recursion-detection": "3.159.0",
+    "@aws-sdk/middleware-retry": "3.159.0",
+    "@aws-sdk/middleware-serde": "3.159.0",
+    "@aws-sdk/middleware-stack": "3.159.0",
+    "@aws-sdk/middleware-user-agent": "3.159.0",
+    "@aws-sdk/node-config-provider": "3.159.0",
+    "@aws-sdk/node-http-handler": "3.159.0",
+    "@aws-sdk/protocol-http": "3.159.0",
+    "@aws-sdk/smithy-client": "3.159.0",
+    "@aws-sdk/types": "3.159.0",
+    "@aws-sdk/url-parser": "3.159.0",
     "@aws-sdk/util-base64-browser": "3.109.0",
     "@aws-sdk/util-base64-node": "3.55.0",
-    "@aws-sdk/util-body-length-browser": "3.55.0",
+    "@aws-sdk/util-body-length-browser": "3.154.0",
     "@aws-sdk/util-body-length-node": "3.55.0",
-    "@aws-sdk/util-defaults-mode-browser": "3.142.0",
-    "@aws-sdk/util-defaults-mode-node": "3.142.0",
-    "@aws-sdk/util-user-agent-browser": "3.127.0",
-    "@aws-sdk/util-user-agent-node": "3.127.0",
+    "@aws-sdk/util-defaults-mode-browser": "3.159.0",
+    "@aws-sdk/util-defaults-mode-node": "3.159.0",
+    "@aws-sdk/util-user-agent-browser": "3.159.0",
+    "@aws-sdk/util-user-agent-node": "3.159.0",
     "@aws-sdk/util-utf8-browser": "3.109.0",
     "@aws-sdk/util-utf8-node": "3.109.0",
     "tslib": "^2.3.1"