/* * Copyright 2018-2023 Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with * the License. A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR * CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions * and limitations under the License. */ package com.amazonaws.services.cognitoidp.model; import java.io.Serializable; import javax.annotation.Generated; import com.amazonaws.AmazonWebServiceRequest; /** *

* Represents the request to create a user pool client. *

* * @see AWS * API Documentation */ @Generated("com.amazonaws:aws-java-sdk-code-generator") public class CreateUserPoolClientRequest extends com.amazonaws.AmazonWebServiceRequest implements Serializable, Cloneable { /** *

* The user pool ID for the user pool where you want to create a user pool client. *

*/ private String userPoolId; /** *

* The client name for the user pool client you would like to create. *

*/ private String clientName; /** *

* Boolean to specify whether you want to generate a secret for the user pool client being created. *

*/ private Boolean generateSecret; /** *

* The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the * time unit for RefreshTokenValidity as seconds, minutes, hours * , or days, set a TokenValidityUnits value in your API request. *

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new access * and ID tokens for 10 days. *

* The default time unit for RefreshTokenValidity in an API request is days. You can't set * RefreshTokenValidity to 0. If you do, Amazon Cognito overrides the value with the default value of * 30 days. Valid range is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 * days. *

*/ private Integer refreshTokenValidity; /** *

* The access token time limit. After this limit expires, your user can't use their access token. To specify the * time unit for AccessTokenValidity as seconds, minutes, hours, * or days, set a TokenValidityUnits value in your API request. *

* For example, when you set AccessTokenValidity to 10 and TokenValidityUnits * to hours, your user can authorize access with their access token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one * hour. *

*/ private Integer accessTokenValidity; /** *

* The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit * for IdTokenValidity as seconds, minutes, hours, or * days, set a TokenValidityUnits value in your API request. *

* For example, when you set IdTokenValidity as 10 and TokenValidityUnits as * hours, your user can authenticate their session with their ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour. *

*/ private Integer idTokenValidity; /** *

* The units in which the validity times are represented. The default unit for RefreshToken is days, and default for * ID and access tokens are hours. *

*/ private TokenValidityUnitsType tokenValidityUnits; /** *

* The read attributes. *

*/ private java.util.List readAttributes; /** *

* The user pool attributes that the app client can write to. *

* If your app client allows users to sign in through an IdP, this array must include all attributes that you have * mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through * an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when * it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. *

*/ private java.util.List writeAttributes; /** *

* The authentication flows that you want your user pool client to support. For each app client in your user pool, * you can sign in your users with any combination of one or more flows, including with a user name and Secure * Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda * functions. *

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* In some environments, you will see the values ADMIN_NO_SRP_AUTH, CUSTOM_AUTH_FLOW_ONLY, * or USER_PASSWORD_AUTH. You can't assign these legacy ExplicitAuthFlows values to user * pool clients at the same time as values that begin with ALLOW_, like * ALLOW_USER_SRP_AUTH. *

*/ private java.util.List explicitAuthFlows; /** *

* A list of provider names for the identity providers (IdPs) that are supported on this client. The following are * supported: COGNITO, Facebook, Google, SignInWithApple, and * LoginWithAmazon. You can also specify the names that you configured for the SAML and OIDC IdPs in * your user pool, for example MySAMLIdP or MyOIDCIdP. *

*/ private java.util.List supportedIdentityProviders; /** *

* A list of allowed redirect (callback) URLs for the IdPs. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

*/ private java.util.List callbackURLs; /** *

* A list of allowed logout URLs for the IdPs. *

*/ private java.util.List logoutURLs; /** *

* The default redirect URI. Must be in the CallbackURLs list. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

*/ private String defaultRedirectURI; /** *

* The allowed OAuth flows. *

code: *
* Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for * access tokens with the /oauth2/token endpoint. *
*
implicit: *
* Issue the access token (and, optionally, ID token, based on scopes) directly to your user. *
*
client_credentials: *
* Issue the access token from the /oauth2/token endpoint directly to a non-person user using a * combination of the client ID and client secret. *
*

*/ private java.util.List allowedOAuthFlows; /** *

* The allowed OAuth scopes. Possible values provided by OAuth are phone, email, * openid, and profile. Possible values provided by Amazon Web Services are * aws.cognito.signin.user.admin. Custom scopes created in Resource Servers are also supported. *

*/ private java.util.List allowedOAuthScopes; /** *

* Set to true if the client is allowed to follow the OAuth protocol when interacting with Amazon Cognito user * pools. *

*/ private Boolean allowedOAuthFlowsUserPoolClient; /** *

* The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign. *

* *

* In Amazon Web Services Regions where Amazon Pinpoint isn't available, user pools only support sending events to * Amazon Pinpoint projects in Amazon Web Services Region us-east-1. In Regions where Amazon Pinpoint is available, * user pools support sending events to Amazon Pinpoint projects within that same Region. *

* */ private AnalyticsConfigurationType analyticsConfiguration; /** *

* Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and * password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user * doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account * confirmation and password recovery return a response indicating a code was sent to a simulated destination. When * set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't * exist in the user pool. *

* Valid values include: *

*
* ENABLED - This prevents user existence-related errors. *
*
*
* LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors * aren't prevented. *
*

*/ private String preventUserExistenceErrors; /** *

* Activates or deactivates token revocation. For more information about revoking tokens, see RevokeToken. *

* If you don't include this parameter, token revocation is automatically activated for the new user pool client. *

*/ private Boolean enableTokenRevocation; /** *

* Activates the propagation of additional user context data. For more information about propagation of user context * data, see * Adding advanced security to a user pool. If you don’t include this parameter, you can't send device * fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate * EnablePropagateAdditionalUserContextData in an app client that has a client secret. *

*/ private Boolean enablePropagateAdditionalUserContextData; /** *

* Amazon Cognito creates a session token for each API request in an authentication flow. * AuthSessionValidity is the duration, in minutes, of that session token. Your user pool native user * must respond to each authentication challenge before the session expires. *

*/ private Integer authSessionValidity; /** *

* The user pool ID for the user pool where you want to create a user pool client. *

* * @param userPoolId * The user pool ID for the user pool where you want to create a user pool client. */ public void setUserPoolId(String userPoolId) { this.userPoolId = userPoolId; } /** *

* The user pool ID for the user pool where you want to create a user pool client. *

* * @return The user pool ID for the user pool where you want to create a user pool client. */ public String getUserPoolId() { return this.userPoolId; } /** *

* The user pool ID for the user pool where you want to create a user pool client. *

* * @param userPoolId * The user pool ID for the user pool where you want to create a user pool client. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withUserPoolId(String userPoolId) { setUserPoolId(userPoolId); return this; } /** *

* The client name for the user pool client you would like to create. *

* * @param clientName * The client name for the user pool client you would like to create. */ public void setClientName(String clientName) { this.clientName = clientName; } /** *

* The client name for the user pool client you would like to create. *

* * @return The client name for the user pool client you would like to create. */ public String getClientName() { return this.clientName; } /** *

* The client name for the user pool client you would like to create. *

* * @param clientName * The client name for the user pool client you would like to create. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withClientName(String clientName) { setClientName(clientName); return this; } /** *

* Boolean to specify whether you want to generate a secret for the user pool client being created. *

* * @param generateSecret * Boolean to specify whether you want to generate a secret for the user pool client being created. */ public void setGenerateSecret(Boolean generateSecret) { this.generateSecret = generateSecret; } /** *

* Boolean to specify whether you want to generate a secret for the user pool client being created. *

* * @return Boolean to specify whether you want to generate a secret for the user pool client being created. */ public Boolean getGenerateSecret() { return this.generateSecret; } /** *

* Boolean to specify whether you want to generate a secret for the user pool client being created. *

* * @param generateSecret * Boolean to specify whether you want to generate a secret for the user pool client being created. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withGenerateSecret(Boolean generateSecret) { setGenerateSecret(generateSecret); return this; } /** *

* Boolean to specify whether you want to generate a secret for the user pool client being created. *

* * @return Boolean to specify whether you want to generate a secret for the user pool client being created. */ public Boolean isGenerateSecret() { return this.generateSecret; } /** *

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new access * and ID tokens for 10 days. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 * days. *

* * @param refreshTokenValidity * The refresh token time limit. After this limit expires, your user can't use their refresh token. To * specify the time unit for RefreshTokenValidity as seconds, minutes, * hours, or days, set a TokenValidityUnits value in your API * request.

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new * access and ID tokens for 10 days. *

* The default time unit for RefreshTokenValidity in an API request is days. You can't set * RefreshTokenValidity to 0. If you do, Amazon Cognito overrides the value with the default * value of 30 days. Valid range is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for * 30 days. */ public void setRefreshTokenValidity(Integer refreshTokenValidity) { this.refreshTokenValidity = refreshTokenValidity; } /** *

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new access * and ID tokens for 10 days. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 * days. *

* * @return The refresh token time limit. After this limit expires, your user can't use their refresh token. To * specify the time unit for RefreshTokenValidity as seconds, minutes * , hours, or days, set a TokenValidityUnits value in your API * request.

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve * new access and ID tokens for 10 days. *

* The default time unit for RefreshTokenValidity in an API request is days. You can't set * RefreshTokenValidity to 0. If you do, Amazon Cognito overrides the value with the default * value of 30 days. Valid range is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for * 30 days. */ public Integer getRefreshTokenValidity() { return this.refreshTokenValidity; } /** *

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new access * and ID tokens for 10 days. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 * days. *

* For example, when you set RefreshTokenValidity as 10 and * TokenValidityUnits as days, your user can refresh their session and retrieve new * access and ID tokens for 10 days. *

* The default time unit for RefreshTokenValidity in an API request is days. You can't set * RefreshTokenValidity to 0. If you do, Amazon Cognito overrides the value with the default * value of 30 days. Valid range is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for * 30 days. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withRefreshTokenValidity(Integer refreshTokenValidity) { setRefreshTokenValidity(refreshTokenValidity); return this; } /** *

* For example, when you set AccessTokenValidity to 10 and TokenValidityUnits * to hours, your user can authorize access with their access token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one * hour. *

* * @param accessTokenValidity * The access token time limit. After this limit expires, your user can't use their access token. To specify * the time unit for AccessTokenValidity as seconds, minutes, * hours, or days, set a TokenValidityUnits value in your API * request.

* For example, when you set AccessTokenValidity to 10 and * TokenValidityUnits to hours, your user can authorize access with their access * token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for * one hour. */ public void setAccessTokenValidity(Integer accessTokenValidity) { this.accessTokenValidity = accessTokenValidity; } /** *

* For example, when you set AccessTokenValidity to 10 and TokenValidityUnits * to hours, your user can authorize access with their access token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one * hour. *

* * @return The access token time limit. After this limit expires, your user can't use their access token. To specify * the time unit for AccessTokenValidity as seconds, minutes, * hours, or days, set a TokenValidityUnits value in your API * request.

* For example, when you set AccessTokenValidity to 10 and * TokenValidityUnits to hours, your user can authorize access with their access * token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for * one hour. */ public Integer getAccessTokenValidity() { return this.accessTokenValidity; } /** *

* For example, when you set AccessTokenValidity to 10 and TokenValidityUnits * to hours, your user can authorize access with their access token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one * hour. *

* For example, when you set AccessTokenValidity to 10 and * TokenValidityUnits to hours, your user can authorize access with their access * token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your access tokens are valid for * one hour. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withAccessTokenValidity(Integer accessTokenValidity) { setAccessTokenValidity(accessTokenValidity); return this; } /** *

* For example, when you set IdTokenValidity as 10 and TokenValidityUnits as * hours, your user can authenticate their session with their ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour. *

* * @param idTokenValidity * The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time * unit for IdTokenValidity as seconds, minutes, hours, * or days, set a TokenValidityUnits value in your API request.

* For example, when you set IdTokenValidity as 10 and * TokenValidityUnits as hours, your user can authenticate their session with their * ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one * hour. */ public void setIdTokenValidity(Integer idTokenValidity) { this.idTokenValidity = idTokenValidity; } /** *

* For example, when you set IdTokenValidity as 10 and TokenValidityUnits as * hours, your user can authenticate their session with their ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour. *

* * @return The ID token time limit. After this limit expires, your user can't use their ID token. To specify the * time unit for IdTokenValidity as seconds, minutes, * hours, or days, set a TokenValidityUnits value in your API * request.

* For example, when you set IdTokenValidity as 10 and * TokenValidityUnits as hours, your user can authenticate their session with * their ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one * hour. */ public Integer getIdTokenValidity() { return this.idTokenValidity; } /** *

* For example, when you set IdTokenValidity as 10 and TokenValidityUnits as * hours, your user can authenticate their session with their ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range is * displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour. *

* For example, when you set IdTokenValidity as 10 and * TokenValidityUnits as hours, your user can authenticate their session with their * ID token for 10 hours. *

* The default time unit for AccessTokenValidity in an API request is hours. Valid range * is displayed below in seconds. *

* If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one * hour. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withIdTokenValidity(Integer idTokenValidity) { setIdTokenValidity(idTokenValidity); return this; } /** *

* The units in which the validity times are represented. The default unit for RefreshToken is days, and default for * ID and access tokens are hours. *

* * @param tokenValidityUnits * The units in which the validity times are represented. The default unit for RefreshToken is days, and * default for ID and access tokens are hours. */ public void setTokenValidityUnits(TokenValidityUnitsType tokenValidityUnits) { this.tokenValidityUnits = tokenValidityUnits; } /** *

* The units in which the validity times are represented. The default unit for RefreshToken is days, and default for * ID and access tokens are hours. *

* * @return The units in which the validity times are represented. The default unit for RefreshToken is days, and * default for ID and access tokens are hours. */ public TokenValidityUnitsType getTokenValidityUnits() { return this.tokenValidityUnits; } /** *

* The units in which the validity times are represented. The default unit for RefreshToken is days, and default for * ID and access tokens are hours. *

* * @param tokenValidityUnits * The units in which the validity times are represented. The default unit for RefreshToken is days, and * default for ID and access tokens are hours. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withTokenValidityUnits(TokenValidityUnitsType tokenValidityUnits) { setTokenValidityUnits(tokenValidityUnits); return this; } /** *

* The read attributes. *

* * @return The read attributes. */ public java.util.List getReadAttributes() { return readAttributes; } /** *

* The read attributes. *

* * @param readAttributes * The read attributes. */ public void setReadAttributes(java.util.Collection readAttributes) { if (readAttributes == null) { this.readAttributes = null; return; } this.readAttributes = new java.util.ArrayList(readAttributes); } /** *

* The read attributes. *

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setReadAttributes(java.util.Collection)} or {@link #withReadAttributes(java.util.Collection)} if you want * to override the existing values. *

* * @param readAttributes * The read attributes. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withReadAttributes(String... readAttributes) { if (this.readAttributes == null) { setReadAttributes(new java.util.ArrayList(readAttributes.length)); } for (String ele : readAttributes) { this.readAttributes.add(ele); } return this; } /** *

* The read attributes. *

* The user pool attributes that the app client can write to. *

* * @return The user pool attributes that the app client can write to.

* If your app client allows users to sign in through an IdP, this array must include all attributes that * you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your * application through an IdP. If your app client does not have write access to a mapped attribute, Amazon * Cognito throws an error when it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. */ public java.util.List getWriteAttributes() { return writeAttributes; } /** *

* The user pool attributes that the app client can write to. *

* * @param writeAttributes * The user pool attributes that the app client can write to.

* If your app client allows users to sign in through an IdP, this array must include all attributes that you * have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your * application through an IdP. If your app client does not have write access to a mapped attribute, Amazon * Cognito throws an error when it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. */ public void setWriteAttributes(java.util.Collection writeAttributes) { if (writeAttributes == null) { this.writeAttributes = null; return; } this.writeAttributes = new java.util.ArrayList(writeAttributes); } /** *

* The user pool attributes that the app client can write to. *

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setWriteAttributes(java.util.Collection)} or {@link #withWriteAttributes(java.util.Collection)} if you * want to override the existing values. *

* * @param writeAttributes * The user pool attributes that the app client can write to.

* If your app client allows users to sign in through an IdP, this array must include all attributes that you * have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your * application through an IdP. If your app client does not have write access to a mapped attribute, Amazon * Cognito throws an error when it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withWriteAttributes(String... writeAttributes) { if (this.writeAttributes == null) { setWriteAttributes(new java.util.ArrayList(writeAttributes.length)); } for (String ele : writeAttributes) { this.writeAttributes.add(ele); } return this; } /** *

* The user pool attributes that the app client can write to. *

* * @param writeAttributes * The user pool attributes that the app client can write to.

* If your app client allows users to sign in through an IdP, this array must include all attributes that you * have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your * application through an IdP. If your app client does not have write access to a mapped attribute, Amazon * Cognito throws an error when it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withWriteAttributes(java.util.Collection writeAttributes) { setWriteAttributes(writeAttributes); return this; } /** *

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* * @return The authentication flows that you want your user pool client to support. For each app client in your user * pool, you can sign in your users with any combination of one or more flows, including with a user name * and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you * define with Lambda functions.

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and * ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. * With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, * instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon * Cognito receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* * @param explicitAuthFlows * The authentication flows that you want your user pool client to support. For each app client in your user * pool, you can sign in your users with any combination of one or more flows, including with a user name and * Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define * with Lambda functions.

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and * ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. * With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, * instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon * Cognito receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setExplicitAuthFlows(java.util.Collection)} or {@link #withExplicitAuthFlows(java.util.Collection)} if * you want to override the existing values. *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and * ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. * With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, * instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon * Cognito receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* In some environments, you will see the values ADMIN_NO_SRP_AUTH, * CUSTOM_AUTH_FLOW_ONLY, or USER_PASSWORD_AUTH. You can't assign these legacy * ExplicitAuthFlows values to user pool clients at the same time as values that begin with * ALLOW_, like ALLOW_USER_SRP_AUTH. * @return Returns a reference to this object so that method calls can be chained together. * @see ExplicitAuthFlowsType */ public CreateUserPoolClientRequest withExplicitAuthFlows(String... explicitAuthFlows) { if (this.explicitAuthFlows == null) { setExplicitAuthFlows(new java.util.ArrayList(explicitAuthFlows.length)); } for (String ele : explicitAuthFlows) { this.explicitAuthFlows.add(ele); } return this; } /** *

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and * ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. * With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, * instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon * Cognito receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* *

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. With * this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of * using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon Cognito * receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* If you don't specify a value for ExplicitAuthFlows, your user client supports * ALLOW_REFRESH_TOKEN_AUTH, ALLOW_USER_SRP_AUTH, and * ALLOW_CUSTOM_AUTH. *

* *

* Valid values include: *

*
* ALLOW_ADMIN_USER_PASSWORD_AUTH: Enable admin based user password authentication flow * ADMIN_USER_PASSWORD_AUTH. This setting replaces the ADMIN_NO_SRP_AUTH setting. * With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, * instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. *
*
*
* ALLOW_CUSTOM_AUTH: Enable Lambda trigger based authentication. *
*
*
* ALLOW_USER_PASSWORD_AUTH: Enable user password-based authentication. In this flow, Amazon * Cognito receives the password in the request instead of using the SRP protocol to verify passwords. *
*
*
* ALLOW_USER_SRP_AUTH: Enable SRP-based authentication. *
*
*
* ALLOW_REFRESH_TOKEN_AUTH: Enable authflow to refresh tokens. *
*

* In some environments, you will see the values ADMIN_NO_SRP_AUTH, * CUSTOM_AUTH_FLOW_ONLY, or USER_PASSWORD_AUTH. You can't assign these legacy * ExplicitAuthFlows values to user pool clients at the same time as values that begin with * ALLOW_, like ALLOW_USER_SRP_AUTH. * @return Returns a reference to this object so that method calls can be chained together. * @see ExplicitAuthFlowsType */ public CreateUserPoolClientRequest withExplicitAuthFlows(ExplicitAuthFlowsType... explicitAuthFlows) { java.util.ArrayList explicitAuthFlowsCopy = new java.util.ArrayList(explicitAuthFlows.length); for (ExplicitAuthFlowsType value : explicitAuthFlows) { explicitAuthFlowsCopy.add(value.toString()); } if (getExplicitAuthFlows() == null) { setExplicitAuthFlows(explicitAuthFlowsCopy); } else { getExplicitAuthFlows().addAll(explicitAuthFlowsCopy); } return this; } /** *

* * @return A list of provider names for the identity providers (IdPs) that are supported on this client. The * following are supported: COGNITO, Facebook, Google, * SignInWithApple, and LoginWithAmazon. You can also specify the names that you * configured for the SAML and OIDC IdPs in your user pool, for example MySAMLIdP or * MyOIDCIdP. */ public java.util.List getSupportedIdentityProviders() { return supportedIdentityProviders; } /** *

* * @param supportedIdentityProviders * A list of provider names for the identity providers (IdPs) that are supported on this client. The * following are supported: COGNITO, Facebook, Google, * SignInWithApple, and LoginWithAmazon. You can also specify the names that you * configured for the SAML and OIDC IdPs in your user pool, for example MySAMLIdP or * MyOIDCIdP. */ public void setSupportedIdentityProviders(java.util.Collection supportedIdentityProviders) { if (supportedIdentityProviders == null) { this.supportedIdentityProviders = null; return; } this.supportedIdentityProviders = new java.util.ArrayList(supportedIdentityProviders); } /** *

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setSupportedIdentityProviders(java.util.Collection)} or * {@link #withSupportedIdentityProviders(java.util.Collection)} if you want to override the existing values. *

* * @param supportedIdentityProviders * A list of provider names for the identity providers (IdPs) that are supported on this client. The * following are supported: COGNITO, Facebook, Google, * SignInWithApple, and LoginWithAmazon. You can also specify the names that you * configured for the SAML and OIDC IdPs in your user pool, for example MySAMLIdP or * MyOIDCIdP. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withSupportedIdentityProviders(String... supportedIdentityProviders) { if (this.supportedIdentityProviders == null) { setSupportedIdentityProviders(new java.util.ArrayList(supportedIdentityProviders.length)); } for (String ele : supportedIdentityProviders) { this.supportedIdentityProviders.add(ele); } return this; } /** *

* * @param supportedIdentityProviders * A list of provider names for the identity providers (IdPs) that are supported on this client. The * following are supported: COGNITO, Facebook, Google, * SignInWithApple, and LoginWithAmazon. You can also specify the names that you * configured for the SAML and OIDC IdPs in your user pool, for example MySAMLIdP or * MyOIDCIdP. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withSupportedIdentityProviders(java.util.Collection supportedIdentityProviders) { setSupportedIdentityProviders(supportedIdentityProviders); return this; } /** *

* A list of allowed redirect (callback) URLs for the IdPs. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @return A list of allowed redirect (callback) URLs for the IdPs.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. */ public java.util.List getCallbackURLs() { return callbackURLs; } /** *

* A list of allowed redirect (callback) URLs for the IdPs. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @param callbackURLs * A list of allowed redirect (callback) URLs for the IdPs.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. */ public void setCallbackURLs(java.util.Collection callbackURLs) { if (callbackURLs == null) { this.callbackURLs = null; return; } this.callbackURLs = new java.util.ArrayList(callbackURLs); } /** *

* A list of allowed redirect (callback) URLs for the IdPs. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setCallbackURLs(java.util.Collection)} or {@link #withCallbackURLs(java.util.Collection)} if you want to * override the existing values. *

* * @param callbackURLs * A list of allowed redirect (callback) URLs for the IdPs.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withCallbackURLs(String... callbackURLs) { if (this.callbackURLs == null) { setCallbackURLs(new java.util.ArrayList(callbackURLs.length)); } for (String ele : callbackURLs) { this.callbackURLs.add(ele); } return this; } /** *

* A list of allowed redirect (callback) URLs for the IdPs. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @param callbackURLs * A list of allowed redirect (callback) URLs for the IdPs.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withCallbackURLs(java.util.Collection callbackURLs) { setCallbackURLs(callbackURLs); return this; } /** *

* A list of allowed logout URLs for the IdPs. *

* * @return A list of allowed logout URLs for the IdPs. */ public java.util.List getLogoutURLs() { return logoutURLs; } /** *

* A list of allowed logout URLs for the IdPs. *

* * @param logoutURLs * A list of allowed logout URLs for the IdPs. */ public void setLogoutURLs(java.util.Collection logoutURLs) { if (logoutURLs == null) { this.logoutURLs = null; return; } this.logoutURLs = new java.util.ArrayList(logoutURLs); } /** *

* A list of allowed logout URLs for the IdPs. *

* NOTE: This method appends the values to the existing list (if any). Use * {@link #setLogoutURLs(java.util.Collection)} or {@link #withLogoutURLs(java.util.Collection)} if you want to * override the existing values. *

* * @param logoutURLs * A list of allowed logout URLs for the IdPs. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withLogoutURLs(String... logoutURLs) { if (this.logoutURLs == null) { setLogoutURLs(new java.util.ArrayList(logoutURLs.length)); } for (String ele : logoutURLs) { this.logoutURLs.add(ele); } return this; } /** *

* A list of allowed logout URLs for the IdPs. *

* * @param logoutURLs * A list of allowed logout URLs for the IdPs. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withLogoutURLs(java.util.Collection logoutURLs) { setLogoutURLs(logoutURLs); return this; } /** *

* The default redirect URI. Must be in the CallbackURLs list. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @param defaultRedirectURI * The default redirect URI. Must be in the CallbackURLs list.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. */ public void setDefaultRedirectURI(String defaultRedirectURI) { this.defaultRedirectURI = defaultRedirectURI; } /** *

* The default redirect URI. Must be in the CallbackURLs list. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @return The default redirect URI. Must be in the CallbackURLs list.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. */ public String getDefaultRedirectURI() { return this.defaultRedirectURI; } /** *

* The default redirect URI. Must be in the CallbackURLs list. *

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. *

* * @param defaultRedirectURI * The default redirect URI. Must be in the CallbackURLs list.

* A redirect URI must: *

*
* Be an absolute URI. *
*
*
* Be registered with the authorization server. *
*
*
* Not include a fragment component. *
*

* See OAuth 2.0 - Redirection Endpoint. *

* Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only. *

* App callback URLs such as myapp://example are also supported. * @return Returns a reference to this object so that method calls can be chained together. */ public CreateUserPoolClientRequest withDefaultRedirectURI(String defaultRedirectURI) { setDefaultRedirectURI(defaultRedirectURI); return this; } /** *

* The allowed OAuth flows. *

code: *
* Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for * access tokens with the /oauth2/token endpoint. *
*
implicit: *
* Issue the access token (and, optionally, ID token, based on scopes) directly to your user. *
*
client_credentials: *
* Issue the access token from the /oauth2/token endpoint directly to a non-person user using a * combination of the client ID and client secret. *
*

* * @return The allowed OAuth flows.

code: *
* Use a code grant flow, which provides an authorization code as the response. This code can be exchanged * for access tokens with the /oauth2/token endpoint. *
*
implicit: *
* Issue the access token (and, optionally, ID token, based on scopes) directly to your user. *
*
client_credentials: *
* Issue the access token from the /oauth2/token endpoint directly to a non-person user using a * combination of the client ID and client secret. *
*