@aws-sdk/client-sso-oidc 3.775.0 → 3.782.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +1 -0
- package/dist-es/protocols/Aws_restJson1.js +1 -0
- package/dist-types/commands/CreateTokenCommand.d.ts +21 -22
- package/dist-types/commands/CreateTokenWithIAMCommand.d.ts +62 -53
- package/dist-types/commands/RegisterClientCommand.d.ts +14 -14
- package/dist-types/commands/StartDeviceAuthorizationCommand.d.ts +12 -12
- package/dist-types/models/models_0.d.ts +22 -0
- package/dist-types/ts3.4/models/models_0.d.ts +4 -0
- package/package.json +5 -5
package/dist-cjs/index.js
CHANGED
|
@@ -829,6 +829,7 @@ var de_CreateTokenWithIAMCommand = /* @__PURE__ */ __name(async (output, context
|
|
|
829
829
|
const data = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.expectObject)(await (0, import_core2.parseJsonBody)(output.body, context)), "body");
|
|
830
830
|
const doc = (0, import_smithy_client.take)(data, {
|
|
831
831
|
accessToken: import_smithy_client.expectString,
|
|
832
|
+
awsAdditionalDetails: import_smithy_client._json,
|
|
832
833
|
expiresIn: import_smithy_client.expectInt32,
|
|
833
834
|
idToken: import_smithy_client.expectString,
|
|
834
835
|
issuedTokenType: import_smithy_client.expectString,
|
|
@@ -112,6 +112,7 @@ export const de_CreateTokenWithIAMCommand = async (output, context) => {
|
|
|
112
112
|
const data = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
|
|
113
113
|
const doc = take(data, {
|
|
114
114
|
accessToken: __expectString,
|
|
115
|
+
awsAdditionalDetails: _json,
|
|
115
116
|
expiresIn: __expectInt32,
|
|
116
117
|
idToken: __expectString,
|
|
117
118
|
issuedTokenType: __expectString,
|
|
@@ -111,54 +111,53 @@ declare const CreateTokenCommand_base: {
|
|
|
111
111
|
* @throws {@link SSOOIDCServiceException}
|
|
112
112
|
* <p>Base exception class for all service exceptions from SSOOIDC service.</p>
|
|
113
113
|
*
|
|
114
|
-
*
|
|
114
|
+
*
|
|
115
115
|
* @example Call OAuth/OIDC /token endpoint for Device Code grant with Secret authentication
|
|
116
116
|
* ```javascript
|
|
117
117
|
* //
|
|
118
118
|
* const input = {
|
|
119
|
-
*
|
|
120
|
-
*
|
|
121
|
-
*
|
|
122
|
-
*
|
|
119
|
+
* clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
|
|
120
|
+
* clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
|
|
121
|
+
* deviceCode: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
|
|
122
|
+
* grantType: "urn:ietf:params:oauth:grant-type:device-code"
|
|
123
123
|
* };
|
|
124
124
|
* const command = new CreateTokenCommand(input);
|
|
125
125
|
* const response = await client.send(command);
|
|
126
|
-
* /* response
|
|
126
|
+
* /* response is
|
|
127
127
|
* {
|
|
128
|
-
*
|
|
129
|
-
*
|
|
130
|
-
*
|
|
131
|
-
*
|
|
128
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
129
|
+
* expiresIn: 1579729529,
|
|
130
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
131
|
+
* tokenType: "Bearer"
|
|
132
132
|
* }
|
|
133
133
|
* *\/
|
|
134
|
-
* // example id: create-token-for-device-code
|
|
135
134
|
* ```
|
|
136
135
|
*
|
|
137
136
|
* @example Call OAuth/OIDC /token endpoint for Refresh Token grant with Secret authentication
|
|
138
137
|
* ```javascript
|
|
139
138
|
* //
|
|
140
139
|
* const input = {
|
|
141
|
-
*
|
|
142
|
-
*
|
|
143
|
-
*
|
|
144
|
-
*
|
|
145
|
-
*
|
|
140
|
+
* clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
|
|
141
|
+
* clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
|
|
142
|
+
* grantType: "refresh_token",
|
|
143
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
144
|
+
* scope: [
|
|
146
145
|
* "codewhisperer:completions"
|
|
147
146
|
* ]
|
|
148
147
|
* };
|
|
149
148
|
* const command = new CreateTokenCommand(input);
|
|
150
149
|
* const response = await client.send(command);
|
|
151
|
-
* /* response
|
|
150
|
+
* /* response is
|
|
152
151
|
* {
|
|
153
|
-
*
|
|
154
|
-
*
|
|
155
|
-
*
|
|
156
|
-
*
|
|
152
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
153
|
+
* expiresIn: 1579729529,
|
|
154
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
155
|
+
* tokenType: "Bearer"
|
|
157
156
|
* }
|
|
158
157
|
* *\/
|
|
159
|
-
* // example id: create-token-for-refresh-token
|
|
160
158
|
* ```
|
|
161
159
|
*
|
|
160
|
+
* @public
|
|
162
161
|
*/
|
|
163
162
|
export declare class CreateTokenCommand extends CreateTokenCommand_base {
|
|
164
163
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -64,6 +64,9 @@ declare const CreateTokenWithIAMCommand_base: {
|
|
|
64
64
|
* // scope: [ // Scopes
|
|
65
65
|
* // "STRING_VALUE",
|
|
66
66
|
* // ],
|
|
67
|
+
* // awsAdditionalDetails: { // AwsAdditionalDetails
|
|
68
|
+
* // identityContext: "STRING_VALUE",
|
|
69
|
+
* // },
|
|
67
70
|
* // };
|
|
68
71
|
*
|
|
69
72
|
* ```
|
|
@@ -122,16 +125,16 @@ declare const CreateTokenWithIAMCommand_base: {
|
|
|
122
125
|
* @throws {@link SSOOIDCServiceException}
|
|
123
126
|
* <p>Base exception class for all service exceptions from SSOOIDC service.</p>
|
|
124
127
|
*
|
|
125
|
-
*
|
|
128
|
+
*
|
|
126
129
|
* @example Call OAuth/OIDC /token endpoint for Authorization Code grant with IAM authentication
|
|
127
130
|
* ```javascript
|
|
128
131
|
* //
|
|
129
132
|
* const input = {
|
|
130
|
-
*
|
|
131
|
-
*
|
|
132
|
-
*
|
|
133
|
-
*
|
|
134
|
-
*
|
|
133
|
+
* clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
|
|
134
|
+
* code: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzg0In0EXAMPLEAUTHCODE",
|
|
135
|
+
* grantType: "authorization_code",
|
|
136
|
+
* redirectUri: "https://mywebapp.example/redirect",
|
|
137
|
+
* scope: [
|
|
135
138
|
* "openid",
|
|
136
139
|
* "aws",
|
|
137
140
|
* "sts:identity_context"
|
|
@@ -139,108 +142,114 @@ declare const CreateTokenWithIAMCommand_base: {
|
|
|
139
142
|
* };
|
|
140
143
|
* const command = new CreateTokenWithIAMCommand(input);
|
|
141
144
|
* const response = await client.send(command);
|
|
142
|
-
* /* response
|
|
145
|
+
* /* response is
|
|
143
146
|
* {
|
|
144
|
-
*
|
|
145
|
-
*
|
|
146
|
-
*
|
|
147
|
-
*
|
|
148
|
-
*
|
|
149
|
-
* "
|
|
147
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
148
|
+
* awsAdditionalDetails: {
|
|
149
|
+
* identityContext: "EXAMPLEIDENTITYCONTEXT"
|
|
150
|
+
* },
|
|
151
|
+
* expiresIn: 1579729529,
|
|
152
|
+
* idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
|
|
153
|
+
* issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
|
|
154
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
155
|
+
* scope: [
|
|
150
156
|
* "openid",
|
|
151
157
|
* "aws",
|
|
152
158
|
* "sts:identity_context"
|
|
153
159
|
* ],
|
|
154
|
-
*
|
|
160
|
+
* tokenType: "Bearer"
|
|
155
161
|
* }
|
|
156
162
|
* *\/
|
|
157
|
-
* // example id: create-token-with-iam-for-auth-code
|
|
158
163
|
* ```
|
|
159
164
|
*
|
|
160
|
-
* @example Call OAuth/OIDC /token endpoint for
|
|
165
|
+
* @example Call OAuth/OIDC /token endpoint for JWT Bearer grant with IAM authentication
|
|
161
166
|
* ```javascript
|
|
162
167
|
* //
|
|
163
168
|
* const input = {
|
|
164
|
-
*
|
|
165
|
-
*
|
|
166
|
-
*
|
|
169
|
+
* assertion: "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjFMVE16YWtpaGlSbGFfOHoyQkVKVlhlV01xbyJ9.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.1AFWW-Ck5nROwSlltm7GzZvDwUkqvhSQpm55TQsmVo9Y59cLhRXpvB8n-55HCr9Z6G_31_UbeUkoz612I2j_Sm9FFShSDDjoaLQr54CreGIJvjtmS3EkK9a7SJBbcpL1MpUtlfygow39tFjY7EVNW9plWUvRrTgVk7lYLprvfzw-CIqw3gHC-T7IK_m_xkr08INERBtaecwhTeN4chPC4W3jdmw_lIxzC48YoQ0dB1L9-ImX98Egypfrlbm0IBL5spFzL6JDZIRRJOu8vecJvj1mq-IUhGt0MacxX8jdxYLP-KUu2d9MbNKpCKJuZ7p8gwTL5B7NlUdh_dmSviPWrw",
|
|
170
|
+
* clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
|
|
171
|
+
* grantType: "urn:ietf:params:oauth:grant-type:jwt-bearer"
|
|
167
172
|
* };
|
|
168
173
|
* const command = new CreateTokenWithIAMCommand(input);
|
|
169
174
|
* const response = await client.send(command);
|
|
170
|
-
* /* response
|
|
175
|
+
* /* response is
|
|
171
176
|
* {
|
|
172
|
-
*
|
|
173
|
-
*
|
|
174
|
-
*
|
|
175
|
-
*
|
|
176
|
-
*
|
|
177
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
178
|
+
* awsAdditionalDetails: {
|
|
179
|
+
* identityContext: "EXAMPLEIDENTITYCONTEXT"
|
|
180
|
+
* },
|
|
181
|
+
* expiresIn: 1579729529,
|
|
182
|
+
* idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Xyah6qbk78qThzJ41iFU2yfGuRqqtKXHrJYwQ8L9Ip0",
|
|
183
|
+
* issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
|
|
184
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
185
|
+
* scope: [
|
|
177
186
|
* "openid",
|
|
178
187
|
* "aws",
|
|
179
188
|
* "sts:identity_context"
|
|
180
189
|
* ],
|
|
181
|
-
*
|
|
190
|
+
* tokenType: "Bearer"
|
|
182
191
|
* }
|
|
183
192
|
* *\/
|
|
184
|
-
* // example id: create-token-with-iam-for-refresh-token
|
|
185
193
|
* ```
|
|
186
194
|
*
|
|
187
|
-
* @example Call OAuth/OIDC /token endpoint for
|
|
195
|
+
* @example Call OAuth/OIDC /token endpoint for Refresh Token grant with IAM authentication
|
|
188
196
|
* ```javascript
|
|
189
197
|
* //
|
|
190
198
|
* const input = {
|
|
191
|
-
*
|
|
192
|
-
*
|
|
193
|
-
*
|
|
199
|
+
* clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
|
|
200
|
+
* grantType: "refresh_token",
|
|
201
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN"
|
|
194
202
|
* };
|
|
195
203
|
* const command = new CreateTokenWithIAMCommand(input);
|
|
196
204
|
* const response = await client.send(command);
|
|
197
|
-
* /* response
|
|
205
|
+
* /* response is
|
|
198
206
|
* {
|
|
199
|
-
*
|
|
200
|
-
*
|
|
201
|
-
*
|
|
202
|
-
*
|
|
203
|
-
*
|
|
204
|
-
* "scope": [
|
|
207
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
208
|
+
* expiresIn: 1579729529,
|
|
209
|
+
* issuedTokenType: "urn:ietf:params:oauth:token-type:refresh_token",
|
|
210
|
+
* refreshToken: "aorvJYubGpU6i91YnH7Mfo-AT2fIVa1zCfA_Rvq9yjVKIP3onFmmykuQ7E93y2I-9Nyj-A_sVvMufaLNL0bqnDRtgAkc0:MGUCMFrRsktMRVlWaOR70XGMFGLL0SlcCw4DiYveIiOVx1uK9BbD0gvAddsW3UTLozXKMgIxAJ3qxUvjpnlLIOaaKOoa/FuNgqJVvr9GMwDtnAtlh9iZzAkEXAMPLEREFRESHTOKEN",
|
|
211
|
+
* scope: [
|
|
205
212
|
* "openid",
|
|
206
213
|
* "aws",
|
|
207
214
|
* "sts:identity_context"
|
|
208
215
|
* ],
|
|
209
|
-
*
|
|
216
|
+
* tokenType: "Bearer"
|
|
210
217
|
* }
|
|
211
218
|
* *\/
|
|
212
|
-
* // example id: create-token-with-iam-for-jwt-bearer
|
|
213
219
|
* ```
|
|
214
220
|
*
|
|
215
221
|
* @example Call OAuth/OIDC /token endpoint for Token Exchange grant with IAM authentication
|
|
216
222
|
* ```javascript
|
|
217
223
|
* //
|
|
218
224
|
* const input = {
|
|
219
|
-
*
|
|
220
|
-
*
|
|
221
|
-
*
|
|
222
|
-
*
|
|
223
|
-
*
|
|
225
|
+
* clientId: "arn:aws:sso::123456789012:application/ssoins-111111111111/apl-222222222222",
|
|
226
|
+
* grantType: "urn:ietf:params:oauth:grant-type:token-exchange",
|
|
227
|
+
* requestedTokenType: "urn:ietf:params:oauth:token-type:access_token",
|
|
228
|
+
* subjectToken: "aoak-Hig8TUDPNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZDIFFERENTACCESSTOKEN",
|
|
229
|
+
* subjectTokenType: "urn:ietf:params:oauth:token-type:access_token"
|
|
224
230
|
* };
|
|
225
231
|
* const command = new CreateTokenWithIAMCommand(input);
|
|
226
232
|
* const response = await client.send(command);
|
|
227
|
-
* /* response
|
|
233
|
+
* /* response is
|
|
228
234
|
* {
|
|
229
|
-
*
|
|
230
|
-
*
|
|
231
|
-
*
|
|
232
|
-
*
|
|
233
|
-
*
|
|
235
|
+
* accessToken: "aoal-YigITUDiNX1xZwOMXM5MxOWDL0E0jg9P6_C_jKQPxS_SKCP6f0kh1Up4g7TtvQqkMnD-GJiU_S1gvug6SrggAkc0:MGYCMQD3IatVjV7jAJU91kK3PkS/SfA2wtgWzOgZWDOR7sDGN9t0phCZz5It/aes/3C1Zj0CMQCKWOgRaiz6AIhza3DSXQNMLjRKXC8F8ceCsHlgYLMZ7hZidEXAMPLEACCESSTOKEN",
|
|
236
|
+
* awsAdditionalDetails: {
|
|
237
|
+
* identityContext: "EXAMPLEIDENTITYCONTEXT"
|
|
238
|
+
* },
|
|
239
|
+
* expiresIn: 1579729529,
|
|
240
|
+
* idToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5SYiW1kMsuUr7nna-l5tlakM0GNbMHvIM2_n0QD23jM",
|
|
241
|
+
* issuedTokenType: "urn:ietf:params:oauth:token-type:access_token",
|
|
242
|
+
* scope: [
|
|
234
243
|
* "openid",
|
|
235
244
|
* "aws",
|
|
236
245
|
* "sts:identity_context"
|
|
237
246
|
* ],
|
|
238
|
-
*
|
|
247
|
+
* tokenType: "Bearer"
|
|
239
248
|
* }
|
|
240
249
|
* *\/
|
|
241
|
-
* // example id: create-token-with-iam-for-token-exchange
|
|
242
250
|
* ```
|
|
243
251
|
*
|
|
252
|
+
* @public
|
|
244
253
|
*/
|
|
245
254
|
export declare class CreateTokenWithIAMCommand extends CreateTokenWithIAMCommand_base {
|
|
246
255
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -95,40 +95,40 @@ declare const RegisterClientCommand_base: {
|
|
|
95
95
|
* @throws {@link SSOOIDCServiceException}
|
|
96
96
|
* <p>Base exception class for all service exceptions from SSOOIDC service.</p>
|
|
97
97
|
*
|
|
98
|
-
*
|
|
98
|
+
*
|
|
99
99
|
* @example Call OAuth/OIDC /register-client endpoint
|
|
100
100
|
* ```javascript
|
|
101
101
|
* //
|
|
102
102
|
* const input = {
|
|
103
|
-
*
|
|
104
|
-
*
|
|
105
|
-
*
|
|
106
|
-
*
|
|
103
|
+
* clientName: "My IDE Plugin",
|
|
104
|
+
* clientType: "public",
|
|
105
|
+
* entitledApplicationArn: "arn:aws:sso::ACCOUNTID:application/ssoins-1111111111111111/apl-1111111111111111",
|
|
106
|
+
* grantTypes: [
|
|
107
107
|
* "authorization_code",
|
|
108
108
|
* "refresh_token"
|
|
109
109
|
* ],
|
|
110
|
-
*
|
|
111
|
-
*
|
|
110
|
+
* issuerUrl: "https://identitycenter.amazonaws.com/ssoins-1111111111111111",
|
|
111
|
+
* redirectUris: [
|
|
112
112
|
* "127.0.0.1:PORT/oauth/callback"
|
|
113
113
|
* ],
|
|
114
|
-
*
|
|
114
|
+
* scopes: [
|
|
115
115
|
* "sso:account:access",
|
|
116
116
|
* "codewhisperer:completions"
|
|
117
117
|
* ]
|
|
118
118
|
* };
|
|
119
119
|
* const command = new RegisterClientCommand(input);
|
|
120
120
|
* const response = await client.send(command);
|
|
121
|
-
* /* response
|
|
121
|
+
* /* response is
|
|
122
122
|
* {
|
|
123
|
-
*
|
|
124
|
-
*
|
|
125
|
-
*
|
|
126
|
-
*
|
|
123
|
+
* clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
|
|
124
|
+
* clientIdIssuedAt: 1579725929,
|
|
125
|
+
* clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
|
|
126
|
+
* clientSecretExpiresAt: 1587584729
|
|
127
127
|
* }
|
|
128
128
|
* *\/
|
|
129
|
-
* // example id: register-client
|
|
130
129
|
* ```
|
|
131
130
|
*
|
|
131
|
+
* @public
|
|
132
132
|
*/
|
|
133
133
|
export declare class RegisterClientCommand extends RegisterClientCommand_base {
|
|
134
134
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -83,30 +83,30 @@ declare const StartDeviceAuthorizationCommand_base: {
|
|
|
83
83
|
* @throws {@link SSOOIDCServiceException}
|
|
84
84
|
* <p>Base exception class for all service exceptions from SSOOIDC service.</p>
|
|
85
85
|
*
|
|
86
|
-
*
|
|
86
|
+
*
|
|
87
87
|
* @example Call OAuth/OIDC /start-device-authorization endpoint
|
|
88
88
|
* ```javascript
|
|
89
89
|
* //
|
|
90
90
|
* const input = {
|
|
91
|
-
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
91
|
+
* clientId: "_yzkThXVzLWVhc3QtMQEXAMPLECLIENTID",
|
|
92
|
+
* clientSecret: "VERYLONGSECRETeyJraWQiOiJrZXktMTU2NDAyODA5OSIsImFsZyI6IkhTMzg0In0",
|
|
93
|
+
* startUrl: "https://identitycenter.amazonaws.com/ssoins-111111111111"
|
|
94
94
|
* };
|
|
95
95
|
* const command = new StartDeviceAuthorizationCommand(input);
|
|
96
96
|
* const response = await client.send(command);
|
|
97
|
-
* /* response
|
|
97
|
+
* /* response is
|
|
98
98
|
* {
|
|
99
|
-
*
|
|
100
|
-
*
|
|
101
|
-
*
|
|
102
|
-
*
|
|
103
|
-
*
|
|
104
|
-
*
|
|
99
|
+
* deviceCode: "yJraWQiOiJrZXktMTU2Njk2ODA4OCIsImFsZyI6IkhTMzIn0EXAMPLEDEVICECODE",
|
|
100
|
+
* expiresIn: 1579729529,
|
|
101
|
+
* interval: 1,
|
|
102
|
+
* userCode: "makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE",
|
|
103
|
+
* verificationUri: "https://directory-alias-example.awsapps.com/start/#/device",
|
|
104
|
+
* verificationUriComplete: "https://directory-alias-example.awsapps.com/start/#/device?user_code=makdfsk83yJraWQiOiJrZXktMTU2Njk2sImFsZyI6IkhTMzIn0EXAMPLEUSERCODE"
|
|
105
105
|
* }
|
|
106
106
|
* *\/
|
|
107
|
-
* // example id: start-device-authorization
|
|
108
107
|
* ```
|
|
109
108
|
*
|
|
109
|
+
* @public
|
|
110
110
|
*/
|
|
111
111
|
export declare class StartDeviceAuthorizationCommand extends StartDeviceAuthorizationCommand_base {
|
|
112
112
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -48,6 +48,20 @@ export declare class AuthorizationPendingException extends __BaseException {
|
|
|
48
48
|
*/
|
|
49
49
|
constructor(opts: __ExceptionOptionType<AuthorizationPendingException, __BaseException>);
|
|
50
50
|
}
|
|
51
|
+
/**
|
|
52
|
+
* <p>This structure contains Amazon Web Services-specific parameter extensions for the token endpoint
|
|
53
|
+
* responses and includes the identity context.</p>
|
|
54
|
+
* @public
|
|
55
|
+
*/
|
|
56
|
+
export interface AwsAdditionalDetails {
|
|
57
|
+
/**
|
|
58
|
+
* <p>STS context assertion that carries a user identifier to the Amazon Web Services service that it calls
|
|
59
|
+
* and can be used to obtain an identity-enhanced IAM role session. This value corresponds to
|
|
60
|
+
* the <code>sts:identity_context</code> claim in the ID token.</p>
|
|
61
|
+
* @public
|
|
62
|
+
*/
|
|
63
|
+
identityContext?: string | undefined;
|
|
64
|
+
}
|
|
51
65
|
/**
|
|
52
66
|
* @public
|
|
53
67
|
*/
|
|
@@ -526,6 +540,14 @@ export interface CreateTokenWithIAMResponse {
|
|
|
526
540
|
* @public
|
|
527
541
|
*/
|
|
528
542
|
scope?: string[] | undefined;
|
|
543
|
+
/**
|
|
544
|
+
* <p>A structure containing information from the <code>idToken</code>. Only the
|
|
545
|
+
* <code>identityContext</code> is in it, which is a value extracted from the
|
|
546
|
+
* <code>idToken</code>. This provides direct access to identity information without requiring
|
|
547
|
+
* JWT parsing.</p>
|
|
548
|
+
* @public
|
|
549
|
+
*/
|
|
550
|
+
awsAdditionalDetails?: AwsAdditionalDetails | undefined;
|
|
529
551
|
}
|
|
530
552
|
/**
|
|
531
553
|
* <p>Indicates that a token provided as input to the request was issued by and is only usable
|
|
@@ -18,6 +18,9 @@ export declare class AuthorizationPendingException extends __BaseException {
|
|
|
18
18
|
opts: __ExceptionOptionType<AuthorizationPendingException, __BaseException>
|
|
19
19
|
);
|
|
20
20
|
}
|
|
21
|
+
export interface AwsAdditionalDetails {
|
|
22
|
+
identityContext?: string | undefined;
|
|
23
|
+
}
|
|
21
24
|
export interface CreateTokenRequest {
|
|
22
25
|
clientId: string | undefined;
|
|
23
26
|
clientSecret: string | undefined;
|
|
@@ -136,6 +139,7 @@ export interface CreateTokenWithIAMResponse {
|
|
|
136
139
|
idToken?: string | undefined;
|
|
137
140
|
issuedTokenType?: string | undefined;
|
|
138
141
|
scope?: string[] | undefined;
|
|
142
|
+
awsAdditionalDetails?: AwsAdditionalDetails | undefined;
|
|
139
143
|
}
|
|
140
144
|
export declare class InvalidRequestRegionException extends __BaseException {
|
|
141
145
|
readonly name: "InvalidRequestRegionException";
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-sso-oidc",
|
|
3
3
|
"description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.782.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "node ../../scripts/compilation/inline client-sso-oidc",
|
|
@@ -21,16 +21,16 @@
|
|
|
21
21
|
"@aws-crypto/sha256-browser": "5.2.0",
|
|
22
22
|
"@aws-crypto/sha256-js": "5.2.0",
|
|
23
23
|
"@aws-sdk/core": "3.775.0",
|
|
24
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
24
|
+
"@aws-sdk/credential-provider-node": "3.782.0",
|
|
25
25
|
"@aws-sdk/middleware-host-header": "3.775.0",
|
|
26
26
|
"@aws-sdk/middleware-logger": "3.775.0",
|
|
27
27
|
"@aws-sdk/middleware-recursion-detection": "3.775.0",
|
|
28
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
28
|
+
"@aws-sdk/middleware-user-agent": "3.782.0",
|
|
29
29
|
"@aws-sdk/region-config-resolver": "3.775.0",
|
|
30
30
|
"@aws-sdk/types": "3.775.0",
|
|
31
|
-
"@aws-sdk/util-endpoints": "3.
|
|
31
|
+
"@aws-sdk/util-endpoints": "3.782.0",
|
|
32
32
|
"@aws-sdk/util-user-agent-browser": "3.775.0",
|
|
33
|
-
"@aws-sdk/util-user-agent-node": "3.
|
|
33
|
+
"@aws-sdk/util-user-agent-node": "3.782.0",
|
|
34
34
|
"@smithy/config-resolver": "^4.1.0",
|
|
35
35
|
"@smithy/core": "^3.2.0",
|
|
36
36
|
"@smithy/fetch-http-handler": "^5.0.2",
|