@cdk8s/awscdk-resolver 0.0.98 → 0.0.100

package/.jsii

@@ -7,7 +7,7 @@
     "url": "https://aws.amazon.com"
   },
   "bundled": {
-    "@aws-sdk/client-cloudformation": "^3.572.0"
+    "@aws-sdk/client-cloudformation": "^3.574.0"
   },
   "dependencies": {
     "aws-cdk-lib": "^2.106.1",
@@ -3585,7 +3585,7 @@
     "stability": "stable"
   },
   "homepage": "https://github.com/cdk8s-team/cdk8s-awscdk-resolver.git",
-  "jsiiVersion": "5.4.12 (build bc82b08)",
+  "jsiiVersion": "5.4.15 (build 6db1d31)",
   "license": "Apache-2.0",
   "metadata": {
     "jsii": {
@@ -3674,6 +3674,6 @@
       "symbolId": "src/resolve:AwsCdkResolver"
     }
   },
-  "version": "0.0.98",
-  "fingerprint": "NPiiq87YlbBOmYTtNxlWUo0rhtHrJh0J+LKDpRwTh7g="
+  "version": "0.0.100",
+  "fingerprint": "cs66JqVwp9L9z/VaenuZSdHR7zJJ7D4NsYzQjdMNEG4="
 }

package/lib/resolve.js

@@ -61,5 +61,5 @@ class AwsCdkResolver {
 }
 exports.AwsCdkResolver = AwsCdkResolver;
 _a = JSII_RTTI_SYMBOL_1;
-AwsCdkResolver[_a] = { fqn: "@cdk8s/awscdk-resolver.AwsCdkResolver", version: "0.0.98" };
+AwsCdkResolver[_a] = { fqn: "@cdk8s/awscdk-resolver.AwsCdkResolver", version: "0.0.100" };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzb2x2ZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3NyYy9yZXNvbHZlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEsaURBQTZDO0FBQzdDLDZCQUE2QjtBQUM3Qiw2Q0FBK0U7QUFJL0UsTUFBYSxjQUFjO0lBRWxCLE9BQU8sQ0FBQyxPQUEwQjtRQUV2QyxJQUFJLENBQUMsbUJBQUssQ0FBQyxZQUFZLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDdkMsT0FBTztRQUNULENBQUM7UUFFRCxJQUFJLE9BQU8sT0FBTyxDQUFDLEtBQUssS0FBSyxRQUFRLEVBQUUsQ0FBQztZQUN0QywrREFBK0Q7WUFDL0QsbUJBQW1CO1lBQ25CLE1BQU0sSUFBSSxLQUFLLENBQUMsdUJBQXVCLE9BQU0sQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLHNCQUFzQixDQUFDLENBQUM7UUFDdEYsQ0FBQztRQUVELE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQzlDLElBQUksQ0FBQztZQUNILE1BQU0sV0FBVyxHQUFHLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxNQUFNLENBQUMsQ0FBQztZQUNsRCxPQUFPLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxDQUFDO1FBQ3BDLENBQUM7UUFBQyxPQUFPLEdBQUcsRUFBRSxDQUFDO1lBQ2IsMkVBQTJFO1lBQzNFLGtFQUFrRTtZQUNsRSwyRUFBMkU7WUFDM0UsK0VBQStFO1lBQy9FLCtDQUErQztZQUMvQyxPQUFPLENBQUMsWUFBWSxDQUFDLG9DQUFvQyxNQUFNLENBQUMsSUFBSSxDQUFDLElBQUksS0FBSyxHQUFHLEVBQUUsQ0FBQyxDQUFDO1FBQ3ZGLENBQUM7SUFFSCxDQUFDO0lBRU8sVUFBVSxDQUFDLEtBQWE7UUFFOUIsTUFBTSxlQUFlLEdBQVksRUFBRSxDQUFDO1FBRXBDLEtBQUssTUFBTSxLQUFLLElBQUksMEJBQVksQ0FBQyxhQUFhLENBQUMsS0FBSyxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUM7WUFDN0QsSUFBSSx1QkFBUyxDQUFDLFdBQVcsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO2dCQUNqQyxNQUFNLEtBQUssR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLENBQUM7Z0JBQ3JDLGVBQWUsQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUM7Z0JBQzVCLE1BQU0sTUFBTSxHQUFHLEtBQUssQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxZQUFZLHVCQUFTLElBQUksQ0FBQyxDQUFDLEtBQUssS0FBSyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQWMsQ0FBQztnQkFDN0csa0ZBQWtGO2dCQUNsRix3REFBd0Q7Z0JBQ3hELElBQUksTUFBTTtvQkFBRSxPQUFPLE1BQU0sQ0FBQztZQUM1QixDQUFDO1FBQ0gsQ0FBQztRQUVELDZCQUE2QjtRQUM3Qiw2QkFBNkI7UUFDN0Isb0NBQW9DO1FBQ3BDLG9GQUFvRjtRQUNwRiwrREFBK0Q7UUFDL0QsTUFBTSxJQUFJLEtBQUssQ0FBQyxxQ0FBcUMsS0FBSyx1QkFBdUIsZUFBZSxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBRXZJLENBQUM7SUFFTyxnQkFBZ0IsQ0FBQyxNQUFpQjtRQUV4QyxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDLFNBQVMsRUFBRSxJQUFJLEVBQUUsS0FBSyxFQUFFLHVCQUF1QixDQUFDLENBQUM7UUFDMUUsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLElBQUEsNEJBQVksRUFBQyxPQUFPLENBQUMsUUFBUSxFQUFFO1lBQy9DLE1BQU07WUFDTixtQkFBSyxDQUFDLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxTQUFTO1lBQzFCLE1BQU0sQ0FBQyxJQUFJLENBQUMsRUFBRTtTQUNmLEVBQUUsRUFBRSxRQUFRLEVBQUUsT0FBTyxFQUFFLEtBQUssRUFBRSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDO0lBRWhFLENBQUM7O0FBOURILHdDQWdFQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IGV4ZWNGaWxlU3luYyB9IGZyb20gJ2NoaWxkX3Byb2Nlc3MnO1xuaW1wb3J0ICogYXMgcGF0aCBmcm9tICdwYXRoJztcbmltcG9ydCB7IFRva2VuLCBTdGFjaywgVG9rZW5pemF0aW9uLCBSZWZlcmVuY2UsIENmbk91dHB1dCB9IGZyb20gJ2F3cy1jZGstbGliJztcbmltcG9ydCB7IElSZXNvbHZlciwgUmVzb2x1dGlvbkNvbnRleHQgfSBmcm9tICdjZGs4cyc7XG5cblxuZXhwb3J0IGNsYXNzIEF3c0Nka1Jlc29sdmVyIGltcGxlbWVudHMgSVJlc29sdmVyIHtcblxuICBwdWJsaWMgcmVzb2x2ZShjb250ZXh0OiBSZXNvbHV0aW9uQ29udGV4dCkge1xuXG4gICAgaWYgKCFUb2tlbi5pc1VucmVzb2x2ZWQoY29udGV4dC52YWx1ZSkpIHtcbiAgICAgIHJldHVybjtcbiAgICB9XG5cbiAgICBpZiAodHlwZW9mIGNvbnRleHQudmFsdWUgIT09ICdzdHJpbmcnKSB7XG4gICAgICAvLyBzaG91bGQgYmUgb2sgYmVjYXVzZSB3ZSBvbmx5IHJlc29sdmUgQ2ZuT3V0cHV0IHZhbHVlcywgd2hpY2hcbiAgICAgIC8vIG11c3QgYmUgc3RyaW5ncy5cbiAgICAgIHRocm93IG5ldyBFcnJvcihgSW52YWxpZCB2YWx1ZSB0eXBlOiAke3R5cGVvZihjb250ZXh0LnZhbHVlKX0gKEV4cGVjdGVkICdzdHJpbmcnKWApO1xuICAgIH1cblxuICAgIGNvbnN0IG91dHB1dCA9IHRoaXMuZmluZE91dHB1dChjb250ZXh0LnZhbHVlKTtcbiAgICB0cnkge1xuICAgICAgY29uc3Qgb3V0cHV0VmFsdWUgPSB0aGlzLmZldGNoT3V0cHV0VmFsdWUob3V0cHV0KTtcbiAgICAgIGNvbnRleHQucmVwbGFjZVZhbHVlKG91dHB1dFZhbHVlKTtcbiAgICB9IGNhdGNoIChlcnIpIHtcbiAgICAgIC8vIGlmIGJvdGggY2RrOHMgYW5kIEFXUyBDREsgYXBwbGljYXRpb25zIGFyZSBkZWZpbmVkIHdpdGhpbiB0aGUgc2FtZSBmaWxlLFxuICAgICAgLy8gYSBjZGs4cyBzeW50aCBpcyBnb2luZyB0byBoYXBwZW4gYmVmb3JlIHRoZSBBV1MgQ0RLIGRlcGxveW1lbnQuXG4gICAgICAvLyBpbiB0aGlzIGNhc2Ugd2UgbXVzdCBzd2FsbG93IHRoZSBlcnJvciwgb3RoZXJ3aXNlIHRoZSBBV1MgQ0RLIGRlcGxveW1lbnRcbiAgICAgIC8vIHdvbid0IGJlIGFibGUgdG8gZ28gdGhyb3VnaC4gd2UgcmVwbGFjZSB0aGUgdmFsdWUgd2l0aCBzb21ldGhpbmcgdG8gaW5kaWNhdGVcbiAgICAgIC8vIHRoYXQgYSBmZXRjaGluZyBhdHRlbXB0IHdhcyBtYWRlIGFuZCBmYWlsZWQuXG4gICAgICBjb250ZXh0LnJlcGxhY2VWYWx1ZShgRmFpbGVkIGZldGNoaW5nIHZhbHVlIGZvciBvdXRwdXQgJHtvdXRwdXQubm9kZS5wYXRofTogJHtlcnJ9YCk7XG4gICAgfVxuXG4gIH1cblxuICBwcml2YXRlIGZpbmRPdXRwdXQodmFsdWU6IHN0cmluZykge1xuXG4gICAgY29uc3QgaW5zcGVjdGVkU3RhY2tzOiBTdGFja1tdID0gW107XG5cbiAgICBmb3IgKGNvbnN0IHRva2VuIG9mIFRva2VuaXphdGlvbi5yZXZlcnNlU3RyaW5nKHZhbHVlKS50b2tlbnMpIHtcbiAgICAgIGlmIChSZWZlcmVuY2UuaXNSZWZlcmVuY2UodG9rZW4pKSB7XG4gICAgICAgIGNvbnN0IHN0YWNrID0gU3RhY2sub2YodG9rZW4udGFyZ2V0KTtcbiAgICAgICAgaW5zcGVjdGVkU3RhY2tzLnB1c2goc3RhY2spO1xuICAgICAgICBjb25zdCBvdXRwdXQgPSBzdGFjay5ub2RlLmZpbmRBbGwoKS5maWx0ZXIoYyA9PiBjIGluc3RhbmNlb2YgQ2ZuT3V0cHV0ICYmIGMudmFsdWUgPT09IHZhbHVlKVswXSBhcyBDZm5PdXRwdXQ7XG4gICAgICAgIC8vIHdlIGRvbid0IHJlYWxseSBjYXJlIGlmIHRoZXJlIGFyZSBtb3JlIG91dHB1dHMgKHBvc3NpYmx5IGZyb20gZGlmZmVyZW50IHN0YWNrcylcbiAgICAgICAgLy8gdGhhdCBwb2ludCB0byB0aGUgc2FtZSB2YWx1ZS4gdGhlIGZpcnN0IHdpbGwgc3VmZmljZS5cbiAgICAgICAgaWYgKG91dHB1dCkgcmV0dXJuIG91dHB1dDtcbiAgICAgIH1cbiAgICB9XG5cbiAgICAvLyBUaGlzIGNhbiBoYXBwZW4gaWYgZWl0aGVyOlxuICAgIC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXG4gICAgLy8gIDEuIFVzZXIgZGlkbid0IGRlZmluZSBhbiBvdXRwdXQuXG4gICAgLy8gIDIuIE91dHB1dCB3YXMgZGVmaW5lZCBpbiBhIGRpZmZlcmVudCBzdGFjayB0aGFuIHRoZSB0b2tlbnMgY29tcHJpc2luZyBpdHMgdmFsdWUuXG4gICAgLy8gIDMuIE5vbmUgb2YgdGhlIHRva2VucyBjb21wcmlzaW5nIHRoZSB2YWx1ZSBhcmUgYSBSZWZlcmVuY2UuXG4gICAgdGhyb3cgbmV3IEVycm9yKGBVbmFibGUgdG8gZmluZCBvdXRwdXQgZGVmaW5lZCBmb3IgJHt2YWx1ZX0gKEluc3BlY3RlZCBzdGFja3M6ICR7aW5zcGVjdGVkU3RhY2tzLm1hcChzID0+IHMuc3RhY2tOYW1lKS5qb2luKCcsJyl9KWApO1xuXG4gIH1cblxuICBwcml2YXRlIGZldGNoT3V0cHV0VmFsdWUob3V0cHV0OiBDZm5PdXRwdXQpIHtcblxuICAgIGNvbnN0IHNjcmlwdCA9IHBhdGguam9pbihfX2Rpcm5hbWUsICcuLicsICdsaWInLCAnZmV0Y2gtb3V0cHV0LXZhbHVlLmpzJyk7XG4gICAgcmV0dXJuIEpTT04ucGFyc2UoZXhlY0ZpbGVTeW5jKHByb2Nlc3MuZXhlY1BhdGgsIFtcbiAgICAgIHNjcmlwdCxcbiAgICAgIFN0YWNrLm9mKG91dHB1dCkuc3RhY2tOYW1lLFxuICAgICAgb3V0cHV0Lm5vZGUuaWQsXG4gICAgXSwgeyBlbmNvZGluZzogJ3V0Zi04Jywgc3RkaW86IFsncGlwZSddIH0pLnRvU3RyaW5nKCkudHJpbSgpKTtcblxuICB9XG5cbn1cbiJdfQ==

package/node_modules/@aws-sdk/client-cloudformation/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-cloudformation",
   "description": "AWS SDK for JavaScript Cloudformation Client for Node.js, Browser and React Native",
-  "version": "3.572.0",
+  "version": "3.574.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-cloudformation",
@@ -20,8 +20,8 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sso-oidc": "3.572.0",
-    "@aws-sdk/client-sts": "3.572.0",
+    "@aws-sdk/client-sso-oidc": "3.574.0",
+    "@aws-sdk/client-sts": "3.574.0",
     "@aws-sdk/core": "3.572.0",
     "@aws-sdk/credential-provider-node": "3.572.0",
     "@aws-sdk/middleware-host-header": "3.567.0",

package/node_modules/@aws-sdk/client-sso-oidc/dist-cjs/index.js

@@ -34,6 +34,7 @@ __export(src_exports, {
   InvalidClientException: () => InvalidClientException,
   InvalidClientMetadataException: () => InvalidClientMetadataException,
   InvalidGrantException: () => InvalidGrantException,
+  InvalidRedirectUriException: () => InvalidRedirectUriException,
   InvalidRequestException: () => InvalidRequestException,
   InvalidRequestRegionException: () => InvalidRequestRegionException,
   InvalidScopeException: () => InvalidScopeException,
@@ -470,10 +471,30 @@ var _InvalidClientMetadataException = class _InvalidClientMetadataException exte
 };
 __name(_InvalidClientMetadataException, "InvalidClientMetadataException");
 var InvalidClientMetadataException = _InvalidClientMetadataException;
+var _InvalidRedirectUriException = class _InvalidRedirectUriException extends SSOOIDCServiceException {
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "InvalidRedirectUriException",
+      $fault: "client",
+      ...opts
+    });
+    this.name = "InvalidRedirectUriException";
+    this.$fault = "client";
+    Object.setPrototypeOf(this, _InvalidRedirectUriException.prototype);
+    this.error = opts.error;
+    this.error_description = opts.error_description;
+  }
+};
+__name(_InvalidRedirectUriException, "InvalidRedirectUriException");
+var InvalidRedirectUriException = _InvalidRedirectUriException;
 var CreateTokenRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.clientSecret && { clientSecret: import_smithy_client.SENSITIVE_STRING },
-  ...obj.refreshToken && { refreshToken: import_smithy_client.SENSITIVE_STRING }
+  ...obj.refreshToken && { refreshToken: import_smithy_client.SENSITIVE_STRING },
+  ...obj.codeVerifier && { codeVerifier: import_smithy_client.SENSITIVE_STRING }
 }), "CreateTokenRequestFilterSensitiveLog");
 var CreateTokenResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
@@ -485,7 +506,8 @@ var CreateTokenWithIAMRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) =
   ...obj,
   ...obj.refreshToken && { refreshToken: import_smithy_client.SENSITIVE_STRING },
   ...obj.assertion && { assertion: import_smithy_client.SENSITIVE_STRING },
-  ...obj.subjectToken && { subjectToken: import_smithy_client.SENSITIVE_STRING }
+  ...obj.subjectToken && { subjectToken: import_smithy_client.SENSITIVE_STRING },
+  ...obj.codeVerifier && { codeVerifier: import_smithy_client.SENSITIVE_STRING }
 }), "CreateTokenWithIAMRequestFilterSensitiveLog");
 var CreateTokenWithIAMResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
@@ -518,6 +540,7 @@ var se_CreateTokenCommand = /* @__PURE__ */ __name(async (input, context) => {
       clientId: [],
       clientSecret: [],
       code: [],
+      codeVerifier: [],
       deviceCode: [],
       grantType: [],
       redirectUri: [],
@@ -543,6 +566,7 @@ var se_CreateTokenWithIAMCommand = /* @__PURE__ */ __name(async (input, context)
       assertion: [],
       clientId: [],
       code: [],
+      codeVerifier: [],
       grantType: [],
       redirectUri: [],
       refreshToken: [],
@@ -566,6 +590,10 @@ var se_RegisterClientCommand = /* @__PURE__ */ __name(async (input, context) =>
     (0, import_smithy_client.take)(input, {
       clientName: [],
       clientType: [],
+      entitledApplicationArn: [],
+      grantTypes: (_) => (0, import_smithy_client._json)(_),
+      issuerUrl: [],
+      redirectUris: (_) => (0, import_smithy_client._json)(_),
       scopes: (_) => (0, import_smithy_client._json)(_)
     })
   );
@@ -711,6 +739,9 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
     case "InvalidClientMetadataException":
     case "com.amazonaws.ssooidc#InvalidClientMetadataException":
       throw await de_InvalidClientMetadataExceptionRes(parsedOutput, context);
+    case "InvalidRedirectUriException":
+    case "com.amazonaws.ssooidc#InvalidRedirectUriException":
+      throw await de_InvalidRedirectUriExceptionRes(parsedOutput, context);
     default:
       const parsedBody = parsedOutput.body;
       return throwDefaultError({
@@ -819,6 +850,20 @@ var de_InvalidGrantExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, co
   });
   return (0, import_smithy_client.decorateServiceException)(exception, parsedOutput.body);
 }, "de_InvalidGrantExceptionRes");
+var de_InvalidRedirectUriExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
+  const contents = (0, import_smithy_client.map)({});
+  const data = parsedOutput.body;
+  const doc = (0, import_smithy_client.take)(data, {
+    error: import_smithy_client.expectString,
+    error_description: import_smithy_client.expectString
+  });
+  Object.assign(contents, doc);
+  const exception = new InvalidRedirectUriException({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...contents
+  });
+  return (0, import_smithy_client.decorateServiceException)(exception, parsedOutput.body);
+}, "de_InvalidRedirectUriExceptionRes");
 var de_InvalidRequestExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
   const contents = (0, import_smithy_client.map)({});
   const data = parsedOutput.body;
@@ -1014,6 +1059,7 @@ var SSOOIDC = _SSOOIDC;
   UnsupportedGrantTypeException,
   InvalidRequestRegionException,
   InvalidClientMetadataException,
+  InvalidRedirectUriException,
   CreateTokenRequestFilterSensitiveLog,
   CreateTokenResponseFilterSensitiveLog,
   CreateTokenWithIAMRequestFilterSensitiveLog,

package/node_modules/@aws-sdk/client-sso-oidc/dist-es/models/models_0.js

@@ -184,10 +184,25 @@ export class InvalidClientMetadataException extends __BaseException {
         this.error_description = opts.error_description;
     }
 }
+export class InvalidRedirectUriException extends __BaseException {
+    constructor(opts) {
+        super({
+            name: "InvalidRedirectUriException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "InvalidRedirectUriException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, InvalidRedirectUriException.prototype);
+        this.error = opts.error;
+        this.error_description = opts.error_description;
+    }
+}
 export const CreateTokenRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.clientSecret && { clientSecret: SENSITIVE_STRING }),
     ...(obj.refreshToken && { refreshToken: SENSITIVE_STRING }),
+    ...(obj.codeVerifier && { codeVerifier: SENSITIVE_STRING }),
 });
 export const CreateTokenResponseFilterSensitiveLog = (obj) => ({
     ...obj,
@@ -200,6 +215,7 @@ export const CreateTokenWithIAMRequestFilterSensitiveLog = (obj) => ({
     ...(obj.refreshToken && { refreshToken: SENSITIVE_STRING }),
     ...(obj.assertion && { assertion: SENSITIVE_STRING }),
     ...(obj.subjectToken && { subjectToken: SENSITIVE_STRING }),
+    ...(obj.codeVerifier && { codeVerifier: SENSITIVE_STRING }),
 });
 export const CreateTokenWithIAMResponseFilterSensitiveLog = (obj) => ({
     ...obj,

package/node_modules/@aws-sdk/client-sso-oidc/dist-es/protocols/Aws_restJson1.js

@@ -1,7 +1,7 @@
 import { loadRestJsonErrorCode, parseJsonBody as parseBody, parseJsonErrorBody as parseErrorBody } from "@aws-sdk/core";
 import { requestBuilder as rb } from "@smithy/core";
 import { _json, collectBody, decorateServiceException as __decorateServiceException, expectInt32 as __expectInt32, expectLong as __expectLong, expectNonNull as __expectNonNull, expectObject as __expectObject, expectString as __expectString, map, take, withBaseException, } from "@smithy/smithy-client";
-import { AccessDeniedException, AuthorizationPendingException, ExpiredTokenException, InternalServerException, InvalidClientException, InvalidClientMetadataException, InvalidGrantException, InvalidRequestException, InvalidRequestRegionException, InvalidScopeException, SlowDownException, UnauthorizedClientException, UnsupportedGrantTypeException, } from "../models/models_0";
+import { AccessDeniedException, AuthorizationPendingException, ExpiredTokenException, InternalServerException, InvalidClientException, InvalidClientMetadataException, InvalidGrantException, InvalidRedirectUriException, InvalidRequestException, InvalidRequestRegionException, InvalidScopeException, SlowDownException, UnauthorizedClientException, UnsupportedGrantTypeException, } from "../models/models_0";
 import { SSOOIDCServiceException as __BaseException } from "../models/SSOOIDCServiceException";
 export const se_CreateTokenCommand = async (input, context) => {
     const b = rb(input, context);
@@ -14,6 +14,7 @@ export const se_CreateTokenCommand = async (input, context) => {
         clientId: [],
         clientSecret: [],
         code: [],
+        codeVerifier: [],
         deviceCode: [],
         grantType: [],
         redirectUri: [],
@@ -37,6 +38,7 @@ export const se_CreateTokenWithIAMCommand = async (input, context) => {
         assertion: [],
         clientId: [],
         code: [],
+        codeVerifier: [],
         grantType: [],
         redirectUri: [],
         refreshToken: [],
@@ -58,6 +60,10 @@ export const se_RegisterClientCommand = async (input, context) => {
     body = JSON.stringify(take(input, {
         clientName: [],
         clientType: [],
+        entitledApplicationArn: [],
+        grantTypes: (_) => _json(_),
+        issuerUrl: [],
+        redirectUris: (_) => _json(_),
         scopes: (_) => _json(_),
     }));
     b.m("POST").h(headers).b(body);
@@ -200,6 +206,9 @@ const de_CommandError = async (output, context) => {
         case "InvalidClientMetadataException":
         case "com.amazonaws.ssooidc#InvalidClientMetadataException":
             throw await de_InvalidClientMetadataExceptionRes(parsedOutput, context);
+        case "InvalidRedirectUriException":
+        case "com.amazonaws.ssooidc#InvalidRedirectUriException":
+            throw await de_InvalidRedirectUriExceptionRes(parsedOutput, context);
         default:
             const parsedBody = parsedOutput.body;
             return throwDefaultError({
@@ -308,6 +317,20 @@ const de_InvalidGrantExceptionRes = async (parsedOutput, context) => {
     });
     return __decorateServiceException(exception, parsedOutput.body);
 };
+const de_InvalidRedirectUriExceptionRes = async (parsedOutput, context) => {
+    const contents = map({});
+    const data = parsedOutput.body;
+    const doc = take(data, {
+        error: __expectString,
+        error_description: __expectString,
+    });
+    Object.assign(contents, doc);
+    const exception = new InvalidRedirectUriException({
+        $metadata: deserializeMetadata(parsedOutput),
+        ...contents,
+    });
+    return __decorateServiceException(exception, parsedOutput.body);
+};
 const de_InvalidRequestExceptionRes = async (parsedOutput, context) => {
     const contents = map({});
     const data = parsedOutput.body;

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/CreateTokenCommand.d.ts

@@ -46,6 +46,7 @@ declare const CreateTokenCommand_base: {
  *     "STRING_VALUE",
  *   ],
  *   redirectUri: "STRING_VALUE",
+ *   codeVerifier: "STRING_VALUE",
  * };
  * const command = new CreateTokenCommand(input);
  * const response = await client.send(command);

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/CreateTokenWithIAMCommand.d.ts

@@ -28,7 +28,7 @@ declare const CreateTokenWithIAMCommand_base: {
 /**
  * <p>Creates and returns access and refresh tokens for clients and applications that are
  *       authenticated using IAM entities. The access token can be used to fetch short-term credentials
- *       for the assigned AWS accounts or to access application APIs using <code>bearer</code>
+ *       for the assigned Amazon Web Services accounts or to access application APIs using <code>bearer</code>
  *       authentication.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
@@ -49,6 +49,7 @@ declare const CreateTokenWithIAMCommand_base: {
  *   subjectToken: "STRING_VALUE",
  *   subjectTokenType: "STRING_VALUE",
  *   requestedTokenType: "STRING_VALUE",
+ *   codeVerifier: "STRING_VALUE",
  * };
  * const command = new CreateTokenWithIAMCommand(input);
  * const response = await client.send(command);

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/commands/RegisterClientCommand.d.ts

@@ -40,6 +40,14 @@ declare const RegisterClientCommand_base: {
  *   scopes: [ // Scopes
  *     "STRING_VALUE",
  *   ],
+ *   redirectUris: [ // RedirectUris
+ *     "STRING_VALUE",
+ *   ],
+ *   grantTypes: [ // GrantTypes
+ *     "STRING_VALUE",
+ *   ],
+ *   issuerUrl: "STRING_VALUE",
+ *   entitledApplicationArn: "STRING_VALUE",
  * };
  * const command = new RegisterClientCommand(input);
  * const response = await client.send(command);
@@ -68,6 +76,9 @@ declare const RegisterClientCommand_base: {
  *  <p>Indicates that the client information sent in the request during registration is
  *       invalid.</p>
  *
+ * @throws {@link InvalidRedirectUriException} (client fault)
+ *  <p>Indicates that one or more redirect URI in the request is not supported for this operation.</p>
+ *
  * @throws {@link InvalidRequestException} (client fault)
  *  <p>Indicates that something is wrong with the input to the request. For example, a required
  *       parameter might be missing or out of range.</p>
@@ -75,6 +86,9 @@ declare const RegisterClientCommand_base: {
  * @throws {@link InvalidScopeException} (client fault)
  *  <p>Indicates that the scope provided in the request is invalid.</p>
  *
+ * @throws {@link UnsupportedGrantTypeException} (client fault)
+ *  <p>Indicates that the grant type in the request is not supported by the service.</p>
+ *
  * @throws {@link SSOOIDCServiceException}
  * <p>Base exception class for all service exceptions from SSOOIDC service.</p>
  *

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/models/models_0.d.ts

@@ -114,13 +114,20 @@ export interface CreateTokenRequest {
      * @public
      */
     redirectUri?: string;
+    /**
+     * <p>Used only when calling this API for the Authorization Code grant type. This value is generated
+     *       by the client and presented to validate the original code challenge value the client passed at
+     *       authorization time.</p>
+     * @public
+     */
+    codeVerifier?: string;
 }
 /**
  * @public
  */
 export interface CreateTokenResponse {
     /**
-     * <p>A bearer token to access AWS accounts and applications assigned to a user.</p>
+     * <p>A bearer token to access Amazon Web Services accounts and applications assigned to a user.</p>
      * @public
      */
     accessToken?: string;
@@ -470,13 +477,20 @@ export interface CreateTokenWithIAMRequest {
      * @public
      */
     requestedTokenType?: string;
+    /**
+     * <p>Used only when calling this API for the Authorization Code grant type. This value is generated
+     *       by the client and presented to validate the original code challenge value the client passed at
+     *       authorization time.</p>
+     * @public
+     */
+    codeVerifier?: string;
 }
 /**
  * @public
  */
 export interface CreateTokenWithIAMResponse {
     /**
-     * <p>A bearer token to access AWS accounts and applications assigned to a user.</p>
+     * <p>A bearer token to access Amazon Web Services accounts and applications assigned to a user.</p>
      * @public
      */
     accessToken?: string;
@@ -584,6 +598,30 @@ export declare class InvalidClientMetadataException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<InvalidClientMetadataException, __BaseException>);
 }
+/**
+ * <p>Indicates that one or more redirect URI in the request is not supported for this operation.</p>
+ * @public
+ */
+export declare class InvalidRedirectUriException extends __BaseException {
+    readonly name: "InvalidRedirectUriException";
+    readonly $fault: "client";
+    /**
+     * <p>Single error code.
+     *       For this exception the value will be <code>invalid_redirect_uri</code>.</p>
+     * @public
+     */
+    error?: string;
+    /**
+     * <p>Human-readable text providing additional information, used to assist the
+     *       client developer in understanding the error that occurred.</p>
+     * @public
+     */
+    error_description?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidRedirectUriException, __BaseException>);
+}
 /**
  * @public
  */
@@ -605,6 +643,29 @@ export interface RegisterClientRequest {
      * @public
      */
     scopes?: string[];
+    /**
+     * <p>The list of redirect URI that are defined by the client. At completion of authorization,
+     *       this list is used to restrict what locations the user agent can be redirected back to.</p>
+     * @public
+     */
+    redirectUris?: string[];
+    /**
+     * <p>The list of OAuth 2.0 grant types that are defined by the client. This list is used to
+     *       restrict the token granting flows available to the client.</p>
+     * @public
+     */
+    grantTypes?: string[];
+    /**
+     * <p>The IAM Identity Center Issuer URL associated with an instance of IAM Identity Center. This value is needed for user access to resources through the client.</p>
+     * @public
+     */
+    issuerUrl?: string;
+    /**
+     * <p>This IAM Identity Center application ARN is used to define administrator-managed configuration for public client access to resources. At
+     *       authorization, the scopes, grants, and redirect URI available to this client will be restricted by this application resource.</p>
+     * @public
+     */
+    entitledApplicationArn?: string;
 }
 /**
  * @public

package/node_modules/@aws-sdk/client-sso-oidc/dist-types/ts3.4/models/models_0.d.ts

@@ -27,6 +27,7 @@ export interface CreateTokenRequest {
   refreshToken?: string;
   scope?: string[];
   redirectUri?: string;
+  codeVerifier?: string;
 }
 export interface CreateTokenResponse {
   accessToken?: string;
@@ -125,6 +126,7 @@ export interface CreateTokenWithIAMRequest {
   subjectToken?: string;
   subjectTokenType?: string;
   requestedTokenType?: string;
+  codeVerifier?: string;
 }
 export interface CreateTokenWithIAMResponse {
   accessToken?: string;
@@ -155,10 +157,23 @@ export declare class InvalidClientMetadataException extends __BaseException {
     opts: __ExceptionOptionType<InvalidClientMetadataException, __BaseException>
   );
 }
+export declare class InvalidRedirectUriException extends __BaseException {
+  readonly name: "InvalidRedirectUriException";
+  readonly $fault: "client";
+  error?: string;
+  error_description?: string;
+  constructor(
+    opts: __ExceptionOptionType<InvalidRedirectUriException, __BaseException>
+  );
+}
 export interface RegisterClientRequest {
   clientName: string | undefined;
   clientType: string | undefined;
   scopes?: string[];
+  redirectUris?: string[];
+  grantTypes?: string[];
+  issuerUrl?: string;
+  entitledApplicationArn?: string;
 }
 export interface RegisterClientResponse {
   clientId?: string;

package/node_modules/@aws-sdk/client-sso-oidc/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sso-oidc",
   "description": "AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native",
-  "version": "3.572.0",
+  "version": "3.574.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sso-oidc",
@@ -20,7 +20,7 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.572.0",
+    "@aws-sdk/client-sts": "3.574.0",
     "@aws-sdk/core": "3.572.0",
     "@aws-sdk/credential-provider-node": "3.572.0",
     "@aws-sdk/middleware-host-header": "3.567.0",

package/node_modules/@aws-sdk/client-sts/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-sts",
   "description": "AWS SDK for JavaScript Sts Client for Node.js, Browser and React Native",
-  "version": "3.572.0",
+  "version": "3.574.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-sts",
@@ -22,7 +22,7 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sso-oidc": "3.572.0",
+    "@aws-sdk/client-sso-oidc": "3.574.0",
     "@aws-sdk/core": "3.572.0",
     "@aws-sdk/credential-provider-node": "3.572.0",
     "@aws-sdk/middleware-host-header": "3.567.0",

package/package.json

@@ -42,16 +42,16 @@
     "organization": false
   },
   "devDependencies": {
-    "@cdk8s/projen-common": "0.0.519",
+    "@cdk8s/projen-common": "0.0.520",
     "@types/fs-extra": "^11.0.4",
     "@types/jest": "^27",
     "@types/node": "16.18.78",
     "@typescript-eslint/eslint-plugin": "^6",
     "@typescript-eslint/parser": "^6",
-    "aws-cdk": "^2.140.0",
+    "aws-cdk": "^2.141.0",
     "aws-cdk-lib": "2.109.0",
     "cdk8s": "2.68.4",
-    "cdk8s-cli": "^2.198.113",
+    "cdk8s-cli": "^2.198.117",
     "constructs": "10.3.0",
     "eslint": "^8",
     "eslint-import-resolver-typescript": "^3.6.1",
@@ -64,7 +64,7 @@
     "jsii-docgen": "^9.2.2",
     "jsii-pacmak": "^1.98.0",
     "jsii-rosetta": "^5",
-    "projen": "^0.81.8",
+    "projen": "^0.81.10",
     "standard-version": "^9",
     "ts-jest": "^27",
     "ts-node": "^10.9.2",
@@ -76,7 +76,7 @@
     "constructs": "^10.3.0"
   },
   "dependencies": {
-    "@aws-sdk/client-cloudformation": "^3.572.0"
+    "@aws-sdk/client-cloudformation": "^3.574.0"
   },
   "bundledDependencies": [
     "@aws-sdk/client-cloudformation"
@@ -92,7 +92,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.0.98",
+  "version": "0.0.100",
   "jest": {
     "testMatch": [
       "<rootDir>/src/**/__tests__/**/*.ts?(x)",