@aws-sdk/client-sso-oidc 3.774.0 → 3.777.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/dist-cjs/auth/httpAuthSchemeProvider.js +1 -3
  2. package/dist-cjs/index.js +18 -18
  3. package/dist-es/SSOOIDCClient.js +2 -1
  4. package/dist-es/auth/httpAuthSchemeProvider.js +1 -3
  5. package/dist-es/endpoint/EndpointParameters.js +2 -3
  6. package/dist-es/protocols/Aws_restJson1.js +1 -0
  7. package/dist-es/runtimeExtensions.js +2 -14
  8. package/dist-types/commands/CreateTokenCommand.d.ts +21 -22
  9. package/dist-types/commands/CreateTokenWithIAMCommand.d.ts +62 -53
  10. package/dist-types/commands/RegisterClientCommand.d.ts +14 -14
  11. package/dist-types/commands/StartDeviceAuthorizationCommand.d.ts +12 -12
  12. package/dist-types/models/models_0.d.ts +22 -0
  13. package/dist-types/ts3.4/models/models_0.d.ts +4 -0
  14. package/package.json +33 -33
package/dist-cjs/auth/httpAuthSchemeProvider.js CHANGED
@@ -57,8 +57,6 @@ const defaultSSOOIDCHttpAuthSchemeProvider = (authParameters) => {
57
57
  exports.defaultSSOOIDCHttpAuthSchemeProvider = defaultSSOOIDCHttpAuthSchemeProvider;
58
58
  const resolveHttpAuthSchemeConfig = (config) => {
59
59
  const config_0 = (0, core_1.resolveAwsSdkSigV4Config)(config);
60
- return {
61
- ...config_0,
62
- };
60
+ return Object.assign(config_0, {});
63
61
  };
64
62
  exports.resolveHttpAuthSchemeConfig = resolveHttpAuthSchemeConfig;
package/dist-cjs/index.js CHANGED
@@ -67,12 +67,11 @@ var import_httpAuthSchemeProvider = require("./auth/httpAuthSchemeProvider");
67
67
 
68
68
  // src/endpoint/EndpointParameters.ts
69
69
  var resolveClientEndpointParameters = /* @__PURE__ */ __name((options) => {
70
- return {
71
- ...options,
70
+ return Object.assign(options, {
72
71
  useDualstackEndpoint: options.useDualstackEndpoint ?? false,
73
72
  useFipsEndpoint: options.useFipsEndpoint ?? false,
74
73
  defaultSigningName: "sso-oauth"
75
- };
74
+ });
76
75
  }, "resolveClientEndpointParameters");
77
76
  var commonParams = {
78
77
  UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
@@ -129,22 +128,21 @@ var resolveHttpAuthRuntimeConfig = /* @__PURE__ */ __name((config) => {
129
128
  }, "resolveHttpAuthRuntimeConfig");
130
129
 
131
130
  // src/runtimeExtensions.ts
132
- var asPartial = /* @__PURE__ */ __name((t) => t, "asPartial");
133
131
  var resolveRuntimeExtensions = /* @__PURE__ */ __name((runtimeConfig, extensions) => {
134
- const extensionConfiguration = {
135
- ...asPartial((0, import_region_config_resolver.getAwsRegionExtensionConfiguration)(runtimeConfig)),
136
- ...asPartial((0, import_smithy_client.getDefaultExtensionConfiguration)(runtimeConfig)),
137
- ...asPartial((0, import_protocol_http.getHttpHandlerExtensionConfiguration)(runtimeConfig)),
138
- ...asPartial(getHttpAuthExtensionConfiguration(runtimeConfig))
139
- };
132
+ const extensionConfiguration = Object.assign(
133
+ (0, import_region_config_resolver.getAwsRegionExtensionConfiguration)(runtimeConfig),
134
+ (0, import_smithy_client.getDefaultExtensionConfiguration)(runtimeConfig),
135
+ (0, import_protocol_http.getHttpHandlerExtensionConfiguration)(runtimeConfig),
136
+ getHttpAuthExtensionConfiguration(runtimeConfig)
137
+ );
140
138
  extensions.forEach((extension) => extension.configure(extensionConfiguration));
141
- return {
142
- ...runtimeConfig,
143
- ...(0, import_region_config_resolver.resolveAwsRegionExtensionConfiguration)(extensionConfiguration),
144
- ...(0, import_smithy_client.resolveDefaultRuntimeConfig)(extensionConfiguration),
145
- ...(0, import_protocol_http.resolveHttpHandlerRuntimeConfig)(extensionConfiguration),
146
- ...resolveHttpAuthRuntimeConfig(extensionConfiguration)
147
- };
139
+ return Object.assign(
140
+ runtimeConfig,
141
+ (0, import_region_config_resolver.resolveAwsRegionExtensionConfiguration)(extensionConfiguration),
142
+ (0, import_smithy_client.resolveDefaultRuntimeConfig)(extensionConfiguration),
143
+ (0, import_protocol_http.resolveHttpHandlerRuntimeConfig)(extensionConfiguration),
144
+ resolveHttpAuthRuntimeConfig(extensionConfiguration)
145
+ );
148
146
  }, "resolveRuntimeExtensions");
149
147
 
150
148
  // src/SSOOIDCClient.ts
@@ -158,6 +156,8 @@ var SSOOIDCClient = class extends import_smithy_client.Client {
158
156
  config;
159
157
  constructor(...[configuration]) {
160
158
  const _config_0 = (0, import_runtimeConfig.getRuntimeConfig)(configuration || {});
159
+ super(_config_0);
160
+ this.initConfig = _config_0;
161
161
  const _config_1 = resolveClientEndpointParameters(_config_0);
162
162
  const _config_2 = (0, import_middleware_user_agent.resolveUserAgentConfig)(_config_1);
163
163
  const _config_3 = (0, import_middleware_retry.resolveRetryConfig)(_config_2);
@@ -166,7 +166,6 @@ var SSOOIDCClient = class extends import_smithy_client.Client {
166
166
  const _config_6 = (0, import_middleware_endpoint.resolveEndpointConfig)(_config_5);
167
167
  const _config_7 = (0, import_httpAuthSchemeProvider.resolveHttpAuthSchemeConfig)(_config_6);
168
168
  const _config_8 = resolveRuntimeExtensions(_config_7, configuration?.extensions || []);
169
- super(_config_8);
170
169
  this.config = _config_8;
171
170
  this.middlewareStack.use((0, import_middleware_user_agent.getUserAgentPlugin)(this.config));
172
171
  this.middlewareStack.use((0, import_middleware_retry.getRetryPlugin)(this.config));
@@ -830,6 +829,7 @@ var de_CreateTokenWithIAMCommand = /* @__PURE__ */ __name(async (output, context
830
829
  const data = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.expectObject)(await (0, import_core2.parseJsonBody)(output.body, context)), "body");
831
830
  const doc = (0, import_smithy_client.take)(data, {
832
831
  accessToken: import_smithy_client.expectString,
832
+ awsAdditionalDetails: import_smithy_client._json,
833
833
  expiresIn: import_smithy_client.expectInt32,
834
834
  idToken: import_smithy_client.expectString,
835
835
  issuedTokenType: import_smithy_client.expectString,
package/dist-es/SSOOIDCClient.js CHANGED
@@ -17,6 +17,8 @@ export class SSOOIDCClient extends __Client {
17
17
  config;
18
18
  constructor(...[configuration]) {
19
19
  const _config_0 = __getRuntimeConfig(configuration || {});
20
+ super(_config_0);
21
+ this.initConfig = _config_0;
20
22
  const _config_1 = resolveClientEndpointParameters(_config_0);
21
23
  const _config_2 = resolveUserAgentConfig(_config_1);
22
24
  const _config_3 = resolveRetryConfig(_config_2);
@@ -25,7 +27,6 @@ export class SSOOIDCClient extends __Client {
25
27
  const _config_6 = resolveEndpointConfig(_config_5);
26
28
  const _config_7 = resolveHttpAuthSchemeConfig(_config_6);
27
29
  const _config_8 = resolveRuntimeExtensions(_config_7, configuration?.extensions || []);
28
- super(_config_8);
29
30
  this.config = _config_8;
30
31
  this.middlewareStack.use(getUserAgentPlugin(this.config));
31
32
  this.middlewareStack.use(getRetryPlugin(this.config));
package/dist-es/auth/httpAuthSchemeProvider.js CHANGED
@@ -52,7 +52,5 @@ export const defaultSSOOIDCHttpAuthSchemeProvider = (authParameters) => {
52
52
  };
53
53
  export const resolveHttpAuthSchemeConfig = (config) => {
54
54
  const config_0 = resolveAwsSdkSigV4Config(config);
55
- return {
56
- ...config_0,
57
- };
55
+ return Object.assign(config_0, {});
58
56
  };
package/dist-es/endpoint/EndpointParameters.js CHANGED
@@ -1,10 +1,9 @@
1
1
  export const resolveClientEndpointParameters = (options) => {
2
- return {
3
- ...options,
2
+ return Object.assign(options, {
4
3
  useDualstackEndpoint: options.useDualstackEndpoint ?? false,
5
4
  useFipsEndpoint: options.useFipsEndpoint ?? false,
6
5
  defaultSigningName: "sso-oauth",
7
- };
6
+ });
8
7
  };
9
8
  export const commonParams = {
10
9
  UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
package/dist-es/protocols/Aws_restJson1.js CHANGED
@@ -112,6 +112,7 @@ export const de_CreateTokenWithIAMCommand = async (output, context) => {
112
112
  const data = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
113
113
  const doc = take(data, {
114
114
  accessToken: __expectString,
115
+ awsAdditionalDetails: _json,
115
116
  expiresIn: __expectInt32,
116
117
  idToken: __expectString,
117
118
  issuedTokenType: __expectString,
package/dist-es/runtimeExtensions.js CHANGED
@@ -2,20 +2,8 @@ import { getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfigurat
2
2
  import { getHttpHandlerExtensionConfiguration, resolveHttpHandlerRuntimeConfig } from "@smithy/protocol-http";
3
3
  import { getDefaultExtensionConfiguration, resolveDefaultRuntimeConfig } from "@smithy/smithy-client";
4
4
  import { getHttpAuthExtensionConfiguration, resolveHttpAuthRuntimeConfig } from "./auth/httpAuthExtensionConfiguration";
5
- const asPartial = (t) => t;
6
5
  export const resolveRuntimeExtensions = (runtimeConfig, extensions) => {
7
- const extensionConfiguration = {
8
- ...asPartial(getAwsRegionExtensionConfiguration(runtimeConfig)),
9
- ...asPartial(getDefaultExtensionConfiguration(runtimeConfig)),
10
- ...asPartial(getHttpHandlerExtensionConfiguration(runtimeConfig)),
11
- ...asPartial(getHttpAuthExtensionConfiguration(runtimeConfig)),
12
- };
6
+ const extensionConfiguration = Object.assign(getAwsRegionExtensionConfiguration(runtimeConfig), getDefaultExtensionConfiguration(runtimeConfig), getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration(runtimeConfig));
13
7
  extensions.forEach((extension) => extension.configure(extensionConfiguration));
14
- return {
15
- ...runtimeConfig,
16
- ...resolveAwsRegionExtensionConfiguration(extensionConfiguration),
17
- ...resolveDefaultRuntimeConfig(extensionConfiguration),
18
- ...resolveHttpHandlerRuntimeConfig(extensionConfiguration),
19
- ...resolveHttpAuthRuntimeConfig(extensionConfiguration),
20
- };
8
+ return Object.assign(runtimeConfig, resolveAwsRegionExtensionConfiguration(extensionConfiguration), resolveDefaultRuntimeConfig(extensionConfiguration), resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig(extensionConfiguration));
21
9
  };
package/dist-types/commands/CreateTokenCommand.d.ts CHANGED
@@ -111,54 +111,53 @@ declare const CreateTokenCommand_base: {
111
111
  * @throws {@link SSOOIDCServiceException}
112
112
  * <p>Base exception class for all service exceptions from SSOOIDC service.</p>
113
113
  *
114
- * @public
114
+ *
115
115
  * @example Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication
116
116
  * ```javascript
117
117
  * //
118
118
  * const input = {
119
- * "clientId": "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
120
- * "clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
121
- * "deviceCode": "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
122
- * "grantType": "urn:ietf:params:oauth:grant-type:device-code"
119
+ * clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
120
+ * clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
121
+ * deviceCode: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
122
+ * grantType: "urn:ietf:params:oauth:grant-type:device-code"
123
123
  * };
124
124
  * const command = new CreateTokenCommand(input);
125
125
  * const response = await client.send(command);
126
- * /* response ==
126
+ * /* response is
127
127
  * {
128
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
129
- * "expiresIn": 1579729529,
130
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
131
- * "tokenType": "Bearer"
128
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
129
+ * expiresIn: 1579729529,
130
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
131
+ * tokenType: "Bearer"
132
132
  * }
133
133
  * *\/
134
- * // example id: create-token-for-device-code
135
134
  * ```
136
135
  *
137
136
  * @example Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication
138
137
  * ```javascript
139
138
  * //
140
139
  * const input = {
141
- * "clientId": "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
142
- * "clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
143
- * "grantType": "refresh_token",
144
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
145
- * "scope": [
140
+ * clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
141
+ * clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
142
+ * grantType: "refresh_token",
143
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
144
+ * scope: [
146
145
  * "codewhisperer:completions"
147
146
  * ]
148
147
  * };
149
148
  * const command = new CreateTokenCommand(input);
150
149
  * const response = await client.send(command);
151
- * /* response ==
150
+ * /* response is
152
151
  * {
153
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
154
- * "expiresIn": 1579729529,
155
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
156
- * "tokenType": "Bearer"
152
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
153
+ * expiresIn: 1579729529,
154
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
155
+ * tokenType: "Bearer"
157
156
  * }
158
157
  * *\/
159
- * // example id: create-token-for-refresh-token
160
158
  * ```
161
159
  *
160
+ * @public
162
161
  */
163
162
  export declare class CreateTokenCommand extends CreateTokenCommand_base {
164
163
  /** @internal type navigation helper, not in runtime. */
package/dist-types/commands/CreateTokenWithIAMCommand.d.ts CHANGED
@@ -64,6 +64,9 @@ declare const CreateTokenWithIAMCommand_base: {
64
64
  * // scope: [ // Scopes
65
65
  * // "STRING_VALUE",
66
66
  * // ],
67
+ * // awsAdditionalDetails: { // AwsAdditionalDetails
68
+ * // identityContext: "STRING_VALUE",
69
+ * // },
67
70
  * // };
68
71
  *
69
72
  * ```
@@ -122,16 +125,16 @@ declare const CreateTokenWithIAMCommand_base: {
122
125
  * @throws {@link SSOOIDCServiceException}
123
126
  * <p>Base exception class for all service exceptions from SSOOIDC service.</p>
124
127
  *
125
- * @public
128
+ *
126
129
  * @example Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication
127
130
  * ```javascript
128
131
  * //
129
132
  * const input = {
130
- * "clientId": "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
131
- * "code": "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE",
132
- * "grantType": "authorization_code",
133
- * "redirectUri": "https://mywebapp.example/redirect",
134
- * "scope": [
133
+ * clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
134
+ * code: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE",
135
+ * grantType: "authorization_code",
136
+ * redirectUri: "https://mywebapp.example/redirect",
137
+ * scope: [
135
138
  * "openid",
136
139
  * "aws",
137
140
  * "sts:identity_context"
@@ -139,108 +142,114 @@ declare const CreateTokenWithIAMCommand_base: {
139
142
  * };
140
143
  * const command = new CreateTokenWithIAMCommand(input);
141
144
  * const response = await client.send(command);
142
- * /* response ==
145
+ * /* response is
143
146
  * {
144
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
145
- * "expiresIn": 1579729529,
146
- * "idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhd3M6aWRlbnRpdHlfc3RvcmVfaWQiOiJkLTMzMzMzMzMzMzMiLCJzdWIiOiI3MzA0NDhmMi1lMGExLTcwYTctYzk1NC0wMDAwMDAwMDAwMDAiLCJhd3M6aW5zdGFuY2VfYWNjb3VudCI6IjExMTExMTExMTExMSIsInN0czppZGVudGl0eV9jb250ZXh0IjoiRVhBTVBMRUlERU5USVRZQ09OVEVYVCIsInN0czphdWRpdF9jb250ZXh0IjoiRVhBTVBMRUFVRElUQ09OVEVYVCIsImlzcyI6Imh0dHBzOi8vaWRlbnRpdHljZW50ZXIuYW1hem9uYXdzLmNvbS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmlkZW50aXR5X3N0b3JlX2FybiI6ImFybjphd3M6aWRlbnRpdHlzdG9yZTo6MTExMTExMTExMTExOmlkZW50aXR5c3RvcmUvZC0zMzMzMzMzMzMzIiwiYXVkIjoiYXJuOmF3czpzc286OjEyMzQ1Njc4OTAxMjphcHBsaWNhdGlvbi9zc29pbnMtMTExMTExMTExMTExL2FwbC0yMjIyMjIyMjIyMjIiLCJhd3M6aW5zdGFuY2VfYXJuIjoiYXJuOmF3czpzc286OjppbnN0YW5jZS9zc29pbnMtMTExMTExMTExMTExIiwiYXdzOmNyZWRlbnRpYWxfaWQiOiJfWlIyTjZhVkJqMjdGUEtheWpfcEtwVjc3QVBERl80MXB4ZXRfWWpJdUpONlVJR2RBdkpFWEFNUExFQ1JFRElEIiwiYXV0aF90aW1lIjoiMjAyMC0wMS0yMlQxMjo0NToyOVoiLCJleHAiOjE1Nzk3Mjk1MjksImlhdCI6MTU3OTcyNTkyOX0.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
147
- * "issuedTokenType": "urn:ietf:params:oauth:token-type:refresh_token",
148
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
149
- * "scope": [
147
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
148
+ * awsAdditionalDetails: {
149
+ * identityContext: "EXAMPLEIDENTITYCONTEXT"
150
+ * },
151
+ * expiresIn: 1579729529,
152
+ * idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
153
+ * issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
154
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
155
+ * scope: [
150
156
  * "openid",
151
157
  * "aws",
152
158
  * "sts:identity_context"
153
159
  * ],
154
- * "tokenType": "Bearer"
160
+ * tokenType: "Bearer"
155
161
  * }
156
162
  * *\/
157
- * // example id: create-token-with-iam-for-auth-code
158
163
  * ```
159
164
  *
160
- * @example Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication
165
+ * @example Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication
161
166
  * ```javascript
162
167
  * //
163
168
  * const input = {
164
- * "clientId": "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
165
- * "grantType": "refresh_token",
166
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN"
169
+ * assertion: "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw",
170
+ * clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
171
+ * grantType: "urn:ietf:params:oauth:grant-type:jwt-bearer"
167
172
  * };
168
173
  * const command = new CreateTokenWithIAMCommand(input);
169
174
  * const response = await client.send(command);
170
- * /* response ==
175
+ * /* response is
171
176
  * {
172
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
173
- * "expiresIn": 1579729529,
174
- * "issuedTokenType": "urn:ietf:params:oauth:token-type:refresh_token",
175
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
176
- * "scope": [
177
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
178
+ * awsAdditionalDetails: {
179
+ * identityContext: "EXAMPLEIDENTITYCONTEXT"
180
+ * },
181
+ * expiresIn: 1579729529,
182
+ * idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
183
+ * issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
184
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
185
+ * scope: [
177
186
  * "openid",
178
187
  * "aws",
179
188
  * "sts:identity_context"
180
189
  * ],
181
- * "tokenType": "Bearer"
190
+ * tokenType: "Bearer"
182
191
  * }
183
192
  * *\/
184
- * // example id: create-token-with-iam-for-refresh-token
185
193
  * ```
186
194
  *
187
- * @example Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication
195
+ * @example Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication
188
196
  * ```javascript
189
197
  * //
190
198
  * const input = {
191
- * "assertion": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw",
192
- * "clientId": "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
193
- * "grantType": "urn:ietf:params:oauth:grant-type:jwt-bearer"
199
+ * clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
200
+ * grantType: "refresh_token",
201
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN"
194
202
  * };
195
203
  * const command = new CreateTokenWithIAMCommand(input);
196
204
  * const response = await client.send(command);
197
- * /* response ==
205
+ * /* response is
198
206
  * {
199
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
200
- * "expiresIn": 1579729529,
201
- * "idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
202
- * "issuedTokenType": "urn:ietf:params:oauth:token-type:refresh_token",
203
- * "refreshToken": "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
204
- * "scope": [
207
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
208
+ * expiresIn: 1579729529,
209
+ * issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
210
+ * refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
211
+ * scope: [
205
212
  * "openid",
206
213
  * "aws",
207
214
  * "sts:identity_context"
208
215
  * ],
209
- * "tokenType": "Bearer"
216
+ * tokenType: "Bearer"
210
217
  * }
211
218
  * *\/
212
- * // example id: create-token-with-iam-for-jwt-bearer
213
219
  * ```
214
220
  *
215
221
  * @example Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication
216
222
  * ```javascript
217
223
  * //
218
224
  * const input = {
219
- * "clientId": "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
220
- * "grantType": "urn:ietf:params:oauth:grant-type:token-exchange",
221
- * "requestedTokenType": "urn:ietf:params:oauth:token-type:access_token",
222
- * "subjectToken": "aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN",
223
- * "subjectTokenType": "urn:ietf:params:oauth:token-type:access_token"
225
+ * clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
226
+ * grantType: "urn:ietf:params:oauth:grant-type:token-exchange",
227
+ * requestedTokenType: "urn:ietf:params:oauth:token-type:access_token",
228
+ * subjectToken: "aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN",
229
+ * subjectTokenType: "urn:ietf:params:oauth:token-type:access_token"
224
230
  * };
225
231
  * const command = new CreateTokenWithIAMCommand(input);
226
232
  * const response = await client.send(command);
227
- * /* response ==
233
+ * /* response is
228
234
  * {
229
- * "accessToken": "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
230
- * "expiresIn": 1579729529,
231
- * "idToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM",
232
- * "issuedTokenType": "urn:ietf:params:oauth:token-type:access_token",
233
- * "scope": [
235
+ * accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
236
+ * awsAdditionalDetails: {
237
+ * identityContext: "EXAMPLEIDENTITYCONTEXT"
238
+ * },
239
+ * expiresIn: 1579729529,
240
+ * idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM",
241
+ * issuedTokenType: "urn:ietf:params:oauth:token-type:access_token",
242
+ * scope: [
234
243
  * "openid",
235
244
  * "aws",
236
245
  * "sts:identity_context"
237
246
  * ],
238
- * "tokenType": "Bearer"
247
+ * tokenType: "Bearer"
239
248
  * }
240
249
  * *\/
241
- * // example id: create-token-with-iam-for-token-exchange
242
250
  * ```
243
251
  *
252
+ * @public
244
253
  */
245
254
  export declare class CreateTokenWithIAMCommand extends CreateTokenWithIAMCommand_base {
246
255
  /** @internal type navigation helper, not in runtime. */
package/dist-types/commands/RegisterClientCommand.d.ts CHANGED
@@ -95,40 +95,40 @@ declare const RegisterClientCommand_base: {
95
95
  * @throws {@link SSOOIDCServiceException}
96
96
  * <p>Base exception class for all service exceptions from SSOOIDC service.</p>
97
97
  *
98
- * @public
98
+ *
99
99
  * @example Call OAuth/OIDC /register-client endpoint
100
100
  * ```javascript
101
101
  * //
102
102
  * const input = {
103
- * "clientName": "My IDE Plugin",
104
- * "clientType": "public",
105
- * "entitledApplicationArn": "arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111",
106
- * "grantTypes": [
103
+ * clientName: "My IDE Plugin",
104
+ * clientType: "public",
105
+ * entitledApplicationArn: "arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111",
106
+ * grantTypes: [
107
107
  * "authorization_code",
108
108
  * "refresh_token"
109
109
  * ],
110
- * "issuerUrl": "https://identitycenter.amazonaws.com/ssoins-1111111111111111",
111
- * "redirectUris": [
110
+ * issuerUrl: "https://identitycenter.amazonaws.com/ssoins-1111111111111111",
111
+ * redirectUris: [
112
112
  * "127.0.0.1:PORT/oauth/callback"
113
113
  * ],
114
- * "scopes": [
114
+ * scopes: [
115
115
  * "sso:account:access",
116
116
  * "codewhisperer:completions"
117
117
  * ]
118
118
  * };
119
119
  * const command = new RegisterClientCommand(input);
120
120
  * const response = await client.send(command);
121
- * /* response ==
121
+ * /* response is
122
122
  * {
123
- * "clientId": "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
124
- * "clientIdIssuedAt": 1579725929,
125
- * "clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
126
- * "clientSecretExpiresAt": 1587584729
123
+ * clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
124
+ * clientIdIssuedAt: 1579725929,
125
+ * clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
126
+ * clientSecretExpiresAt: 1587584729
127
127
  * }
128
128
  * *\/
129
- * // example id: register-client
130
129
  * ```
131
130
  *
131
+ * @public
132
132
  */
133
133
  export declare class RegisterClientCommand extends RegisterClientCommand_base {
134
134
  /** @internal type navigation helper, not in runtime. */
package/dist-types/commands/StartDeviceAuthorizationCommand.d.ts CHANGED
@@ -83,30 +83,30 @@ declare const StartDeviceAuthorizationCommand_base: {
83
83
  * @throws {@link SSOOIDCServiceException}
84
84
  * <p>Base exception class for all service exceptions from SSOOIDC service.</p>
85
85
  *
86
- * @public
86
+ *
87
87
  * @example Call OAuth/OIDC /start-device-authorization endpoint
88
88
  * ```javascript
89
89
  * //
90
90
  * const input = {
91
- * "clientId": "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
92
- * "clientSecret": "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
93
- * "startUrl": "https://identitycenter.amazonaws.com/ssoins-111111111111"
91
+ * clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
92
+ * clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
93
+ * startUrl: "https://identitycenter.amazonaws.com/ssoins-111111111111"
94
94
  * };
95
95
  * const command = new StartDeviceAuthorizationCommand(input);
96
96
  * const response = await client.send(command);
97
- * /* response ==
97
+ * /* response is
98
98
  * {
99
- * "deviceCode": "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
100
- * "expiresIn": 1579729529,
101
- * "interval": 1,
102
- * "userCode": "makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE",
103
- * "verificationUri": "https://device.sso.us-west-2.amazonaws.com",
104
- * "verificationUriComplete": "https://device.sso.us-west-2.amazonaws.com?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE"
99
+ * deviceCode: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
100
+ * expiresIn: 1579729529,
101
+ * interval: 1,
102
+ * userCode: "makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE",
103
+ * verificationUri: "https://directory-alias-example.awsapps.com/start/#/device",
104
+ * verificationUriComplete: "https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE"
105
105
  * }
106
106
  * *\/
107
- * // example id: start-device-authorization
108
107
  * ```
109
108
  *
109
+ * @public
110
110
  */
111
111
  export declare class StartDeviceAuthorizationCommand extends StartDeviceAuthorizationCommand_base {
112
112
  /** @internal type navigation helper, not in runtime. */
package/dist-types/models/models_0.d.ts CHANGED
@@ -48,6 +48,20 @@ export declare class AuthorizationPendingException extends __BaseException {
48
48
  */
49
49
  constructor(opts: __ExceptionOptionType<AuthorizationPendingException, __BaseException>);
50
50
  }
51
+ /**
52
+ * <p>This structure contains Amazon Web Services-specific parameter extensions for the token endpoint
53
+ * responses and includes the identity context.</p>
54
+ * @public
55
+ */
56
+ export interface AwsAdditionalDetails {
57
+ /**
58
+ * <p>STS context assertion that carries a user identifier to the Amazon Web Services service that it calls
59
+ * and can be used to obtain an identity-enhanced IAM role session. This value corresponds to
60
+ * the <code>sts:identity_context</code> claim in the ID token.</p>
61
+ * @public
62
+ */
63
+ identityContext?: string | undefined;
64
+ }
51
65
  /**
52
66
  * @public
53
67
  */
@@ -526,6 +540,14 @@ export interface CreateTokenWithIAMResponse {
526
540
  * @public
527
541
  */
528
542
  scope?: string[] | undefined;
543
+ /**
544
+ * <p>A structure containing information from the <code>idToken</code>. Only the
545
+ * <code>identityContext</code> is in it, which is a value extracted from the
546
+ * <code>idToken</code>. This provides direct access to identity information without requiring
547
+ * JWT parsing.</p>
548
+ * @public
549
+ */
550
+ awsAdditionalDetails?: AwsAdditionalDetails | undefined;
529
551
  }
530
552
  /**
531
553
  * <p>Indicates that a token provided as input to the request was issued by and is only usable
package/dist-types/ts3.4/models/models_0.d.ts CHANGED
@@ -18,6 +18,9 @@ export declare class AuthorizationPendingException extends __BaseException {
18
18
  opts: __ExceptionOptionType<AuthorizationPendingException, __BaseException>
19
19
  );
20
20
  }
21
+ export interface AwsAdditionalDetails {
22
+ identityContext?: string | undefined;
23
+ }
21
24
  export interface CreateTokenRequest {
22
25
  clientId: string | undefined;
23
26
  clientSecret: string | undefined;
@@ -136,6 +139,7 @@ export interface CreateTokenWithIAMResponse {
136
139
  idToken?: string | undefined;
137
140
  issuedTokenType?: string | undefined;
138
141
  scope?: string[] | undefined;
142
+ awsAdditionalDetails?: AwsAdditionalDetails | undefined;
139
143
  }
140
144
  export declare class InvalidRequestRegionException extends __BaseException {
141
145
  readonly name: "InvalidRequestRegionException";
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-sso-oidc",
3
3
  "description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
4
- "version": "3.774.0",
4
+ "version": "3.777.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-sso-oidc",
@@ -20,41 +20,41 @@
20
20
  "dependencies": {
21
21
  "@aws-crypto/sha256-browser": "5.2.0",
22
22
  "@aws-crypto/sha256-js": "5.2.0",
23
- "@aws-sdk/core": "3.774.0",
24
- "@aws-sdk/credential-provider-node": "3.774.0",
25
- "@aws-sdk/middleware-host-header": "3.774.0",
26
- "@aws-sdk/middleware-logger": "3.734.0",
27
- "@aws-sdk/middleware-recursion-detection": "3.772.0",
28
- "@aws-sdk/middleware-user-agent": "3.774.0",
29
- "@aws-sdk/region-config-resolver": "3.734.0",
30
- "@aws-sdk/types": "3.734.0",
31
- "@aws-sdk/util-endpoints": "3.743.0",
32
- "@aws-sdk/util-user-agent-browser": "3.734.0",
33
- "@aws-sdk/util-user-agent-node": "3.774.0",
34
- "@smithy/config-resolver": "^4.0.1",
35
- "@smithy/core": "^3.1.5",
36
- "@smithy/fetch-http-handler": "^5.0.1",
37
- "@smithy/hash-node": "^4.0.1",
38
- "@smithy/invalid-dependency": "^4.0.1",
39
- "@smithy/middleware-content-length": "^4.0.1",
40
- "@smithy/middleware-endpoint": "^4.0.6",
41
- "@smithy/middleware-retry": "^4.0.7",
42
- "@smithy/middleware-serde": "^4.0.2",
43
- "@smithy/middleware-stack": "^4.0.1",
44
- "@smithy/node-config-provider": "^4.0.1",
45
- "@smithy/node-http-handler": "^4.0.3",
46
- "@smithy/protocol-http": "^5.0.1",
47
- "@smithy/smithy-client": "^4.1.6",
48
- "@smithy/types": "^4.1.0",
49
- "@smithy/url-parser": "^4.0.1",
23
+ "@aws-sdk/core": "3.775.0",
24
+ "@aws-sdk/credential-provider-node": "3.777.0",
25
+ "@aws-sdk/middleware-host-header": "3.775.0",
26
+ "@aws-sdk/middleware-logger": "3.775.0",
27
+ "@aws-sdk/middleware-recursion-detection": "3.775.0",
28
+ "@aws-sdk/middleware-user-agent": "3.775.0",
29
+ "@aws-sdk/region-config-resolver": "3.775.0",
30
+ "@aws-sdk/types": "3.775.0",
31
+ "@aws-sdk/util-endpoints": "3.775.0",
32
+ "@aws-sdk/util-user-agent-browser": "3.775.0",
33
+ "@aws-sdk/util-user-agent-node": "3.775.0",
34
+ "@smithy/config-resolver": "^4.1.0",
35
+ "@smithy/core": "^3.2.0",
36
+ "@smithy/fetch-http-handler": "^5.0.2",
37
+ "@smithy/hash-node": "^4.0.2",
38
+ "@smithy/invalid-dependency": "^4.0.2",
39
+ "@smithy/middleware-content-length": "^4.0.2",
40
+ "@smithy/middleware-endpoint": "^4.1.0",
41
+ "@smithy/middleware-retry": "^4.1.0",
42
+ "@smithy/middleware-serde": "^4.0.3",
43
+ "@smithy/middleware-stack": "^4.0.2",
44
+ "@smithy/node-config-provider": "^4.0.2",
45
+ "@smithy/node-http-handler": "^4.0.4",
46
+ "@smithy/protocol-http": "^5.1.0",
47
+ "@smithy/smithy-client": "^4.2.0",
48
+ "@smithy/types": "^4.2.0",
49
+ "@smithy/url-parser": "^4.0.2",
50
50
  "@smithy/util-base64": "^4.0.0",
51
51
  "@smithy/util-body-length-browser": "^4.0.0",
52
52
  "@smithy/util-body-length-node": "^4.0.0",
53
- "@smithy/util-defaults-mode-browser": "^4.0.7",
54
- "@smithy/util-defaults-mode-node": "^4.0.7",
55
- "@smithy/util-endpoints": "^3.0.1",
56
- "@smithy/util-middleware": "^4.0.1",
57
- "@smithy/util-retry": "^4.0.1",
53
+ "@smithy/util-defaults-mode-browser": "^4.0.8",
54
+ "@smithy/util-defaults-mode-node": "^4.0.8",
55
+ "@smithy/util-endpoints": "^3.0.2",
56
+ "@smithy/util-middleware": "^4.0.2",
57
+ "@smithy/util-retry": "^4.0.2",
58
58
  "@smithy/util-utf8": "^4.0.0",
59
59
  "tslib": "^2.6.2"
60
60
  },