275 lines
9.7 KiB
Markdown
275 lines
9.7 KiB
Markdown
|
<!-- generated file, do not edit directly -->
|
|||
|
|
|||
|
# @aws-sdk/client-sso-oidc
|
|||
|
|
|||
|
## Description
|
|||
|
|
|||
|
AWS SDK for JavaScript SSOOIDC Client for Node.js, Browser and React Native.
|
|||
|
|
|||
|
<p>IAM Identity Center OpenID Connect (OIDC) is a web service that enables a client (such as CLI
|
|||
|
or a native application) to register with IAM Identity Center. The service also enables the client to
|
|||
|
fetch the user’s access token upon successful authentication and authorization with
|
|||
|
IAM Identity Center.</p>
|
|||
|
<note>
|
|||
|
<p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API namespaces.</p>
|
|||
|
</note>
|
|||
|
<p>
|
|||
|
<b>Considerations for Using This Guide</b>
|
|||
|
</p>
|
|||
|
<p>Before you begin using this guide, we recommend that you first review the following
|
|||
|
important information about how the IAM Identity Center OIDC service works.</p>
|
|||
|
<ul>
|
|||
|
<li>
|
|||
|
<p>The IAM Identity Center OIDC service currently implements only the portions of the OAuth 2.0 Device
|
|||
|
Authorization Grant standard (<a href="https://tools.ietf.org/html/rfc8628">https://tools.ietf.org/html/rfc8628</a>) that are necessary to enable single
|
|||
|
sign-on authentication with the CLI. </p>
|
|||
|
</li>
|
|||
|
<li>
|
|||
|
<p>With older versions of the CLI, the service only emits OIDC access tokens, so to
|
|||
|
obtain a new token, users must explicitly re-authenticate. To access the OIDC flow that
|
|||
|
supports token refresh and doesn’t require re-authentication, update to the latest CLI
|
|||
|
version (1.27.10 for CLI V1 and 2.9.0 for CLI V2) with support for OIDC token refresh and
|
|||
|
configurable IAM Identity Center session durations. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/configure-user-session.html">Configure Amazon Web Services access portal session duration </a>. </p>
|
|||
|
</li>
|
|||
|
<li>
|
|||
|
<p>The access tokens provided by this service grant access to all Amazon Web Services account
|
|||
|
entitlements assigned to an IAM Identity Center user, not just a particular application.</p>
|
|||
|
</li>
|
|||
|
<li>
|
|||
|
<p>The documentation in this guide does not describe the mechanism to convert the access
|
|||
|
token into Amazon Web Services Auth (“sigv4”) credentials for use with IAM-protected Amazon Web Services service
|
|||
|
endpoints. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html">GetRoleCredentials</a> in the <i>IAM Identity Center Portal API Reference
|
|||
|
Guide</i>.</p>
|
|||
|
</li>
|
|||
|
</ul>
|
|||
|
<p>For general information about IAM Identity Center, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">What is
|
|||
|
IAM Identity Center?</a> in the <i>IAM Identity Center User Guide</i>.</p>
|
|||
|
|
|||
|
## Installing
|
|||
|
|
|||
|
To install the this package, simply type add or install @aws-sdk/client-sso-oidc
|
|||
|
using your favorite package manager:
|
|||
|
|
|||
|
- `npm install @aws-sdk/client-sso-oidc`
|
|||
|
- `yarn add @aws-sdk/client-sso-oidc`
|
|||
|
- `pnpm add @aws-sdk/client-sso-oidc`
|
|||
|
|
|||
|
## Getting Started
|
|||
|
|
|||
|
### Import
|
|||
|
|
|||
|
The AWS SDK is modulized by clients and commands.
|
|||
|
To send a request, you only need to import the `SSOOIDCClient` and
|
|||
|
the commands you need, for example `CreateTokenCommand`:
|
|||
|
|
|||
|
```js
|
|||
|
// ES5 example
|
|||
|
const { SSOOIDCClient, CreateTokenCommand } = require("@aws-sdk/client-sso-oidc");
|
|||
|
```
|
|||
|
|
|||
|
```ts
|
|||
|
// ES6+ example
|
|||
|
import { SSOOIDCClient, CreateTokenCommand } from "@aws-sdk/client-sso-oidc";
|
|||
|
```
|
|||
|
|
|||
|
### Usage
|
|||
|
|
|||
|
To send a request, you:
|
|||
|
|
|||
|
- Initiate client with configuration (e.g. credentials, region).
|
|||
|
- Initiate command with input parameters.
|
|||
|
- Call `send` operation on client with command object as input.
|
|||
|
- If you are using a custom http handler, you may call `destroy()` to close open connections.
|
|||
|
|
|||
|
```js
|
|||
|
// a client can be shared by different commands.
|
|||
|
const client = new SSOOIDCClient({ region: "REGION" });
|
|||
|
|
|||
|
const params = {
|
|||
|
/** input parameters */
|
|||
|
};
|
|||
|
const command = new CreateTokenCommand(params);
|
|||
|
```
|
|||
|
|
|||
|
#### Async/await
|
|||
|
|
|||
|
We recommend using [await](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/await)
|
|||
|
operator to wait for the promise returned by send operation as follows:
|
|||
|
|
|||
|
```js
|
|||
|
// async/await.
|
|||
|
try {
|
|||
|
const data = await client.send(command);
|
|||
|
// process data.
|
|||
|
} catch (error) {
|
|||
|
// error handling.
|
|||
|
} finally {
|
|||
|
// finally.
|
|||
|
}
|
|||
|
```
|
|||
|
|
|||
|
Async-await is clean, concise, intuitive, easy to debug and has better error handling
|
|||
|
as compared to using Promise chains or callbacks.
|
|||
|
|
|||
|
#### Promises
|
|||
|
|
|||
|
You can also use [Promise chaining](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Using_promises#chaining)
|
|||
|
to execute send operation.
|
|||
|
|
|||
|
```js
|
|||
|
client.send(command).then(
|
|||
|
(data) => {
|
|||
|
// process data.
|
|||
|
},
|
|||
|
(error) => {
|
|||
|
// error handling.
|
|||
|
}
|
|||
|
);
|
|||
|
```
|
|||
|
|
|||
|
Promises can also be called using `.catch()` and `.finally()` as follows:
|
|||
|
|
|||
|
```js
|
|||
|
client
|
|||
|
.send(command)
|
|||
|
.then((data) => {
|
|||
|
// process data.
|
|||
|
})
|
|||
|
.catch((error) => {
|
|||
|
// error handling.
|
|||
|
})
|
|||
|
.finally(() => {
|
|||
|
// finally.
|
|||
|
});
|
|||
|
```
|
|||
|
|
|||
|
#### Callbacks
|
|||
|
|
|||
|
We do not recommend using callbacks because of [callback hell](http://callbackhell.com/),
|
|||
|
but they are supported by the send operation.
|
|||
|
|
|||
|
```js
|
|||
|
// callbacks.
|
|||
|
client.send(command, (err, data) => {
|
|||
|
// process err and data.
|
|||
|
});
|
|||
|
```
|
|||
|
|
|||
|
#### v2 compatible style
|
|||
|
|
|||
|
The client can also send requests using v2 compatible style.
|
|||
|
However, it results in a bigger bundle size and may be dropped in next major version. More details in the blog post
|
|||
|
on [modular packages in AWS SDK for JavaScript](https://aws.amazon.com/blogs/developer/modular-packages-in-aws-sdk-for-javascript/)
|
|||
|
|
|||
|
```ts
|
|||
|
import * as AWS from "@aws-sdk/client-sso-oidc";
|
|||
|
const client = new AWS.SSOOIDC({ region: "REGION" });
|
|||
|
|
|||
|
// async/await.
|
|||
|
try {
|
|||
|
const data = await client.createToken(params);
|
|||
|
// process data.
|
|||
|
} catch (error) {
|
|||
|
// error handling.
|
|||
|
}
|
|||
|
|
|||
|
// Promises.
|
|||
|
client
|
|||
|
.createToken(params)
|
|||
|
.then((data) => {
|
|||
|
// process data.
|
|||
|
})
|
|||
|
.catch((error) => {
|
|||
|
// error handling.
|
|||
|
});
|
|||
|
|
|||
|
// callbacks.
|
|||
|
client.createToken(params, (err, data) => {
|
|||
|
// process err and data.
|
|||
|
});
|
|||
|
```
|
|||
|
|
|||
|
### Troubleshooting
|
|||
|
|
|||
|
When the service returns an exception, the error will include the exception information,
|
|||
|
as well as response metadata (e.g. request id).
|
|||
|
|
|||
|
```js
|
|||
|
try {
|
|||
|
const data = await client.send(command);
|
|||
|
// process data.
|
|||
|
} catch (error) {
|
|||
|
const { requestId, cfId, extendedRequestId } = error.$metadata;
|
|||
|
console.log({ requestId, cfId, extendedRequestId });
|
|||
|
/**
|
|||
|
* The keys within exceptions are also parsed.
|
|||
|
* You can access them by specifying exception names:
|
|||
|
* if (error.name === 'SomeServiceException') {
|
|||
|
* const value = error.specialKeyInException;
|
|||
|
* }
|
|||
|
*/
|
|||
|
}
|
|||
|
```
|
|||
|
|
|||
|
## Getting Help
|
|||
|
|
|||
|
Please use these community resources for getting help.
|
|||
|
We use the GitHub issues for tracking bugs and feature requests, but have limited bandwidth to address them.
|
|||
|
|
|||
|
- Visit [Developer Guide](https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/welcome.html)
|
|||
|
or [API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/index.html).
|
|||
|
- Check out the blog posts tagged with [`aws-sdk-js`](https://aws.amazon.com/blogs/developer/tag/aws-sdk-js/)
|
|||
|
on AWS Developer Blog.
|
|||
|
- Ask a question on [StackOverflow](https://stackoverflow.com/questions/tagged/aws-sdk-js) and tag it with `aws-sdk-js`.
|
|||
|
- Join the AWS JavaScript community on [gitter](https://gitter.im/aws/aws-sdk-js-v3).
|
|||
|
- If it turns out that you may have found a bug, please [open an issue](https://github.com/aws/aws-sdk-js-v3/issues/new/choose).
|
|||
|
|
|||
|
To test your universal JavaScript code in Node.js, browser and react-native environments,
|
|||
|
visit our [code samples repo](https://github.com/aws-samples/aws-sdk-js-tests).
|
|||
|
|
|||
|
## Contributing
|
|||
|
|
|||
|
This client code is generated automatically. Any modifications will be overwritten the next time the `@aws-sdk/client-sso-oidc` package is updated.
|
|||
|
To contribute to client you can check our [generate clients scripts](https://github.com/aws/aws-sdk-js-v3/tree/main/scripts/generate-clients).
|
|||
|
|
|||
|
## License
|
|||
|
|
|||
|
This SDK is distributed under the
|
|||
|
[Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0),
|
|||
|
see LICENSE for more information.
|
|||
|
|
|||
|
## Client Commands (Operations List)
|
|||
|
|
|||
|
<details>
|
|||
|
<summary>
|
|||
|
CreateToken
|
|||
|
</summary>
|
|||
|
|
|||
|
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sso-oidc/command/CreateTokenCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/CreateTokenCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/CreateTokenCommandOutput/)
|
|||
|
|
|||
|
</details>
|
|||
|
<details>
|
|||
|
<summary>
|
|||
|
CreateTokenWithIAM
|
|||
|
</summary>
|
|||
|
|
|||
|
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sso-oidc/command/CreateTokenWithIAMCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/CreateTokenWithIAMCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/CreateTokenWithIAMCommandOutput/)
|
|||
|
|
|||
|
</details>
|
|||
|
<details>
|
|||
|
<summary>
|
|||
|
RegisterClient
|
|||
|
</summary>
|
|||
|
|
|||
|
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sso-oidc/command/RegisterClientCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/RegisterClientCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/RegisterClientCommandOutput/)
|
|||
|
|
|||
|
</details>
|
|||
|
<details>
|
|||
|
<summary>
|
|||
|
StartDeviceAuthorization
|
|||
|
</summary>
|
|||
|
|
|||
|
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sso-oidc/command/StartDeviceAuthorizationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/StartDeviceAuthorizationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-sso-oidc/Interface/StartDeviceAuthorizationCommandOutput/)
|
|||
|
|
|||
|
</details>
|