sso-oidc-2019-06-10.min.json 4.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239
  1. {
  2. "version": "2.0",
  3. "metadata": {
  4. "apiVersion": "2019-06-10",
  5. "endpointPrefix": "oidc",
  6. "jsonVersion": "1.1",
  7. "protocol": "rest-json",
  8. "protocols": [
  9. "rest-json"
  10. ],
  11. "serviceAbbreviation": "SSO OIDC",
  12. "serviceFullName": "AWS SSO OIDC",
  13. "serviceId": "SSO OIDC",
  14. "signatureVersion": "v4",
  15. "signingName": "sso-oauth",
  16. "uid": "sso-oidc-2019-06-10"
  17. },
  18. "operations": {
  19. "CreateToken": {
  20. "http": {
  21. "requestUri": "/token"
  22. },
  23. "input": {
  24. "type": "structure",
  25. "required": [
  26. "clientId",
  27. "clientSecret",
  28. "grantType"
  29. ],
  30. "members": {
  31. "clientId": {},
  32. "clientSecret": {
  33. "shape": "S3"
  34. },
  35. "grantType": {},
  36. "deviceCode": {},
  37. "code": {},
  38. "refreshToken": {
  39. "shape": "S7"
  40. },
  41. "scope": {
  42. "shape": "S8"
  43. },
  44. "redirectUri": {},
  45. "codeVerifier": {
  46. "shape": "Sb"
  47. }
  48. }
  49. },
  50. "output": {
  51. "type": "structure",
  52. "members": {
  53. "accessToken": {
  54. "shape": "Sd"
  55. },
  56. "tokenType": {},
  57. "expiresIn": {
  58. "type": "integer"
  59. },
  60. "refreshToken": {
  61. "shape": "S7"
  62. },
  63. "idToken": {
  64. "shape": "Sg"
  65. }
  66. }
  67. },
  68. "authtype": "none"
  69. },
  70. "CreateTokenWithIAM": {
  71. "http": {
  72. "requestUri": "/token?aws_iam=t"
  73. },
  74. "input": {
  75. "type": "structure",
  76. "required": [
  77. "clientId",
  78. "grantType"
  79. ],
  80. "members": {
  81. "clientId": {},
  82. "grantType": {},
  83. "code": {},
  84. "refreshToken": {
  85. "shape": "S7"
  86. },
  87. "assertion": {
  88. "type": "string",
  89. "sensitive": true
  90. },
  91. "scope": {
  92. "shape": "S8"
  93. },
  94. "redirectUri": {},
  95. "subjectToken": {
  96. "type": "string",
  97. "sensitive": true
  98. },
  99. "subjectTokenType": {},
  100. "requestedTokenType": {},
  101. "codeVerifier": {
  102. "shape": "Sb"
  103. }
  104. }
  105. },
  106. "output": {
  107. "type": "structure",
  108. "members": {
  109. "accessToken": {
  110. "shape": "Sd"
  111. },
  112. "tokenType": {},
  113. "expiresIn": {
  114. "type": "integer"
  115. },
  116. "refreshToken": {
  117. "shape": "S7"
  118. },
  119. "idToken": {
  120. "shape": "Sg"
  121. },
  122. "issuedTokenType": {},
  123. "scope": {
  124. "shape": "S8"
  125. }
  126. }
  127. }
  128. },
  129. "RegisterClient": {
  130. "http": {
  131. "requestUri": "/client/register"
  132. },
  133. "input": {
  134. "type": "structure",
  135. "required": [
  136. "clientName",
  137. "clientType"
  138. ],
  139. "members": {
  140. "clientName": {},
  141. "clientType": {},
  142. "scopes": {
  143. "shape": "S8"
  144. },
  145. "redirectUris": {
  146. "type": "list",
  147. "member": {}
  148. },
  149. "grantTypes": {
  150. "type": "list",
  151. "member": {}
  152. },
  153. "issuerUrl": {},
  154. "entitledApplicationArn": {}
  155. }
  156. },
  157. "output": {
  158. "type": "structure",
  159. "members": {
  160. "clientId": {},
  161. "clientSecret": {
  162. "shape": "S3"
  163. },
  164. "clientIdIssuedAt": {
  165. "type": "long"
  166. },
  167. "clientSecretExpiresAt": {
  168. "type": "long"
  169. },
  170. "authorizationEndpoint": {},
  171. "tokenEndpoint": {}
  172. }
  173. },
  174. "authtype": "none"
  175. },
  176. "StartDeviceAuthorization": {
  177. "http": {
  178. "requestUri": "/device_authorization"
  179. },
  180. "input": {
  181. "type": "structure",
  182. "required": [
  183. "clientId",
  184. "clientSecret",
  185. "startUrl"
  186. ],
  187. "members": {
  188. "clientId": {},
  189. "clientSecret": {
  190. "shape": "S3"
  191. },
  192. "startUrl": {}
  193. }
  194. },
  195. "output": {
  196. "type": "structure",
  197. "members": {
  198. "deviceCode": {},
  199. "userCode": {},
  200. "verificationUri": {},
  201. "verificationUriComplete": {},
  202. "expiresIn": {
  203. "type": "integer"
  204. },
  205. "interval": {
  206. "type": "integer"
  207. }
  208. }
  209. },
  210. "authtype": "none"
  211. }
  212. },
  213. "shapes": {
  214. "S3": {
  215. "type": "string",
  216. "sensitive": true
  217. },
  218. "S7": {
  219. "type": "string",
  220. "sensitive": true
  221. },
  222. "S8": {
  223. "type": "list",
  224. "member": {}
  225. },
  226. "Sb": {
  227. "type": "string",
  228. "sensitive": true
  229. },
  230. "Sd": {
  231. "type": "string",
  232. "sensitive": true
  233. },
  234. "Sg": {
  235. "type": "string",
  236. "sensitive": true
  237. }
  238. }
  239. }