types

type AccessDeniedException struct {
	Message *string

	ErrorCodeOverride *string

	Error_ OAuth2ErrorCode
	// contains filtered or unexported fields
}

type AccessToken struct {

	// AWS access key ID for temporary credentials
	//
	// This member is required.
	AccessKeyId *string

	// AWS secret access key for temporary credentials
	//
	// This member is required.
	SecretAccessKey *string

	// AWS session token for temporary credentials
	//
	// This member is required.
	SessionToken *string
	// contains filtered or unexported fields
}

type CreateOAuth2TokenRequestBody struct {

	// The client identifier (ARN) used during Sign-In onboarding Required for both
	// authorization code and refresh token flows
	//
	// This member is required.
	ClientId *string

	// OAuth 2.0 grant type - determines which flow is used Must be
	// "authorization_code" or "refresh_token"
	//
	// This member is required.
	GrantType *string

	// The authorization code received from /v1/authorize Required only when
	// grant_type=authorization_code
	Code *string

	// PKCE code verifier to prove possession of the original code challenge Required
	// only when grant_type=authorization_code
	CodeVerifier *string

	// The redirect URI that must match the original authorization request Required
	// only when grant_type=authorization_code
	RedirectUri *string

	// The refresh token returned from auth_code redemption Required only when
	// grant_type=refresh_token
	RefreshToken *string
	// contains filtered or unexported fields
}

type CreateOAuth2TokenResponseBody struct {

	// Scoped-down AWS credentials (15 minute duration) Present for both authorization
	// code redemption and token refresh
	//
	// This member is required.
	AccessToken *AccessToken

	// Time to expiry in seconds (maximum 900) Present for both authorization code
	// redemption and token refresh
	//
	// This member is required.
	ExpiresIn *int32

	// Encrypted refresh token with cnf.jkt (SHA-256 thumbprint of presented jwk)
	// Always present in responses (required for both flows)
	//
	// This member is required.
	RefreshToken *string

	// Token type indicating this is AWS SigV4 credentials Value is "aws_sigv4" for
	// both flows
	//
	// This member is required.
	TokenType *string

	// ID token containing user identity information Present only in authorization
	// code redemption response (grant_type=authorization_code) Not included in token
	// refresh responses
	IdToken *string
	// contains filtered or unexported fields
}

type InternalServerException struct {
	Message *string

	ErrorCodeOverride *string

	Error_ OAuth2ErrorCode
	// contains filtered or unexported fields
}

type OAuth2ErrorCode string

type TooManyRequestsError struct {
	Message *string

	ErrorCodeOverride *string

	Error_ OAuth2ErrorCode
	// contains filtered or unexported fields
}

type ValidationException struct {
	Message *string

	ErrorCodeOverride *string

	Error_ OAuth2ErrorCode
	// contains filtered or unexported fields
}