Skip to content

Commit 34b8266

Browse files
author
AWS
committed
AWS SSO OIDC Update: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response.
1 parent f85cee6 commit 34b8266

File tree

2 files changed

+21
-0
lines changed

2 files changed

+21
-0
lines changed
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS SSO OIDC",
4+
"contributor": "",
5+
"description": "This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response."
6+
}

services/ssooidc/src/main/resources/codegen-resources/service-2.json

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -147,6 +147,16 @@
147147
"error":{"httpStatusCode":400},
148148
"exception":true
149149
},
150+
"AwsAdditionalDetails":{
151+
"type":"structure",
152+
"members":{
153+
"identityContext":{
154+
"shape":"IdentityContext",
155+
"documentation":"<p>STS context assertion that carries a user identifier to the Amazon Web Services service that it calls and can be used to obtain an identity-enhanced IAM role session. This value corresponds to the <code>sts:identity_context</code> claim in the ID token.</p>"
156+
}
157+
},
158+
"documentation":"<p>This structure contains Amazon Web Services-specific parameter extensions for the token endpoint responses and includes the identity context.</p>"
159+
},
150160
"ClientId":{"type":"string"},
151161
"ClientName":{"type":"string"},
152162
"ClientSecret":{
@@ -312,6 +322,10 @@
312322
"scope":{
313323
"shape":"Scopes",
314324
"documentation":"<p>The list of scopes for which authorization is granted. The access token that is issued is limited to the scopes that are granted.</p>"
325+
},
326+
"awsAdditionalDetails":{
327+
"shape":"AwsAdditionalDetails",
328+
"documentation":"<p>A structure containing information from the <code>idToken</code>. Only the <code>identityContext</code> is in it, which is a value extracted from the <code>idToken</code>. This provides direct access to identity information without requiring JWT parsing.</p>"
315329
}
316330
}
317331
},
@@ -344,6 +358,7 @@
344358
"type":"string",
345359
"sensitive":true
346360
},
361+
"IdentityContext":{"type":"string"},
347362
"InternalServerException":{
348363
"type":"structure",
349364
"members":{

0 commit comments

Comments
 (0)