software.amazon.awscdk.services.cognito

Class OAuthScope

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.cognito.OAuthScope

All Implemented Interfaces:

software.amazon.jsii.JsiiSerializable

@Generated(value="jsii-pacmak/1.29.0 (build 41df200)",
           date="2021-06-02T09:55:16.751Z")
 @Stability(value=Experimental)
public class OAuthScope
extends software.amazon.jsii.JsiiObject

(experimental) OAuth scopes that are allowed with this client.

See Also:

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-idp-settings.html

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Field Summary

Fields

Modifier and Type	Field and Description
static OAuthScope	COGNITO_ADMIN (experimental) Grants access to Amazon Cognito User Pool API operations that require access tokens, such as UpdateUserAttributes and VerifyUserAttribute.
static OAuthScope	EMAIL (experimental) Grants access to the 'email' and 'email_verified' claims.
static OAuthScope	OPENID (experimental) Returns all user attributes in the ID token that are readable by the client.
static OAuthScope	PHONE (experimental) Grants access to the 'phone_number' and 'phone_number_verified' claims.
static OAuthScope	PROFILE (experimental) Grants access to all user attributes that are readable by the client Automatically includes access to `OAuthScope.OPENID`.

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	OAuthScope(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	OAuthScope(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method and Description
static OAuthScope	custom(String name) (experimental) Custom scope is one that you define for your own resource server in the Resource Servers.
String	getScopeName() (experimental) The name of this scope as recognized by CloudFormation.
static OAuthScope	resourceServer(IUserPoolResourceServer server, ResourceServerScope scope) (experimental) Adds a custom scope that's tied to a resource server in your stack.

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Field Detail

COGNITO_ADMIN

@Stability(value=Experimental)
public static final OAuthScope COGNITO_ADMIN

(experimental) Grants access to Amazon Cognito User Pool API operations that require access tokens, such as UpdateUserAttributes and VerifyUserAttribute.

EMAIL

@Stability(value=Experimental)
public static final OAuthScope EMAIL

(experimental) Grants access to the 'email' and 'email_verified' claims.

Automatically includes access to OAuthScope.OPENID.

OPENID

@Stability(value=Experimental)
public static final OAuthScope OPENID

(experimental) Returns all user attributes in the ID token that are readable by the client.

PHONE

@Stability(value=Experimental)
public static final OAuthScope PHONE

(experimental) Grants access to the 'phone_number' and 'phone_number_verified' claims.

Automatically includes access to OAuthScope.OPENID.

PROFILE

@Stability(value=Experimental)
public static final OAuthScope PROFILE

(experimental) Grants access to all user attributes that are readable by the client Automatically includes access to `OAuthScope.OPENID`.

Constructor Detail

OAuthScope

protected OAuthScope(software.amazon.jsii.JsiiObjectRef objRef)

OAuthScope

protected OAuthScope(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

Method Detail

custom

@Stability(value=Experimental)
 @NotNull
public static OAuthScope custom(@NotNull
                                                                         String name)

(experimental) Custom scope is one that you define for your own resource server in the Resource Servers.

The format is 'resource-server-identifier/scope'.

Parameters:

name - This parameter is required.

See Also:

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-define-resource-servers.html

resourceServer

@Stability(value=Experimental)
 @NotNull
public static OAuthScope resourceServer(@NotNull
                                                                                 IUserPoolResourceServer server,
                                                                                 @NotNull
                                                                                 ResourceServerScope scope)

(experimental) Adds a custom scope that's tied to a resource server in your stack.

Parameters:

server - This parameter is required.

scope - This parameter is required.

getScopeName

@Stability(value=Experimental)
 @NotNull
public String getScopeName()

(experimental) The name of this scope as recognized by CloudFormation.

See Also:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-allowedoauthscopes