AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Container for the parameters to the UpdateUserPoolClient operation.
Updates the specified user pool app client with the specified attributes. You can
get a list of the current user pool app client settings using DescribeUserPoolClient.
If you don't provide a value for an attribute, Amazon Cognito sets it to its default
value.
You can also use this operation to enable token revocation for user pool clients. For more information about revoking tokens, see RevokeToken.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more
Namespace: Amazon.CognitoIdentityProvider.Model
Assembly: AWSSDK.CognitoIdentityProvider.dll
Version: 3.x.y.z
public class UpdateUserPoolClientRequest : AmazonCognitoIdentityProviderRequest IAmazonWebServiceRequest
The UpdateUserPoolClientRequest type exposes the following members
Name | Description | |
---|---|---|
UpdateUserPoolClientRequest() |
Name | Type | Description | |
---|---|---|---|
AccessTokenValidity | System.Int32 |
Gets and sets the property AccessTokenValidity.
The access token time limit. After this limit expires, your user can't use their access
token. To specify the time unit for
For example, when you set
The default time unit for If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one hour. |
|
AllowedOAuthFlows | System.Collections.Generic.List<System.String> |
Gets and sets the property AllowedOAuthFlows. The allowed OAuth flows.
|
|
AllowedOAuthFlowsUserPoolClient | System.Boolean |
Gets and sets the property AllowedOAuthFlowsUserPoolClient.
Set to
To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console
or set |
|
AllowedOAuthScopes | System.Collections.Generic.List<System.String> |
Gets and sets the property AllowedOAuthScopes.
The allowed OAuth scopes. Possible values provided by OAuth are |
|
AnalyticsConfiguration | Amazon.CognitoIdentityProvider.Model.AnalyticsConfigurationType |
Gets and sets the property AnalyticsConfiguration. The Amazon Pinpoint analytics configuration necessary to collect metrics for this user pool. In Amazon Web Services Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region. |
|
AuthSessionValidity | System.Int32 |
Gets and sets the property AuthSessionValidity.
Amazon Cognito creates a session token for each API request in an authentication flow.
|
|
CallbackURLs | System.Collections.Generic.List<System.String> |
Gets and sets the property CallbackURLs. A list of allowed redirect (callback) URLs for the IdPs. A redirect URI must:
See OAuth 2.0 - Redirection Endpoint. Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
App callback URLs such as |
|
ClientId | System.String |
Gets and sets the property ClientId. The ID of the client associated with the user pool. |
|
ClientName | System.String |
Gets and sets the property ClientName. The client name from the update user pool client request. |
|
DefaultRedirectURI | System.String |
Gets and sets the property DefaultRedirectURI.
The default redirect URI. Must be in the A redirect URI must:
See OAuth 2.0 - Redirection Endpoint.
Amazon Cognito requires HTTPS over HTTP except for
App callback URLs such as |
|
EnablePropagateAdditionalUserContextData | System.Boolean |
Gets and sets the property EnablePropagateAdditionalUserContextData.
Activates the propagation of additional user context data. For more information about
propagation of user context data, see
Adding advanced security to a user pool. If you don’t include this parameter,
you can't send device fingerprint information, including source IP address, to Amazon
Cognito advanced security. You can only activate |
|
EnableTokenRevocation | System.Boolean |
Gets and sets the property EnableTokenRevocation. Activates or deactivates token revocation. For more information about revoking tokens, see RevokeToken. |
|
ExplicitAuthFlows | System.Collections.Generic.List<System.String> |
Gets and sets the property ExplicitAuthFlows. The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.
If you don't specify a value for Valid values include:
In some environments, you will see the values |
|
IdTokenValidity | System.Int32 |
Gets and sets the property IdTokenValidity.
The ID token time limit. After this limit expires, your user can't use their ID token.
To specify the time unit for
For example, when you set
The default time unit for If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour. |
|
LogoutURLs | System.Collections.Generic.List<System.String> |
Gets and sets the property LogoutURLs. A list of allowed logout URLs for the IdPs. |
|
PreventUserExistenceErrors | Amazon.CognitoIdentityProvider.PreventUserExistenceErrorTypes |
Gets and sets the property PreventUserExistenceErrors.
Errors and responses that you want Amazon Cognito APIs to return during authentication,
account confirmation, and password recovery when the user doesn't exist in the user
pool. When set to Valid values include:
|
|
ReadAttributes | System.Collections.Generic.List<System.String> |
Gets and sets the property ReadAttributes. The list of user attributes that you want your app client to have read-only access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a GetUser API request to retrieve and display your user's profile data.
When you don't specify the |
|
RefreshTokenValidity | System.Int32 |
Gets and sets the property RefreshTokenValidity.
The refresh token time limit. After this limit expires, your user can't use their
refresh token. To specify the time unit for
For example, when you set
The default time unit for If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days. |
|
SupportedIdentityProviders | System.Collections.Generic.List<System.String> |
Gets and sets the property SupportedIdentityProviders.
A list of provider names for the IdPs that this client supports. The following are
supported: |
|
TokenValidityUnits | Amazon.CognitoIdentityProvider.Model.TokenValidityUnitsType |
Gets and sets the property TokenValidityUnits. The time units you use when you set the duration of ID, access, and refresh tokens. The default unit for RefreshToken is days, and the default for ID and access tokens is hours. |
|
UserPoolId | System.String |
Gets and sets the property UserPoolId. The user pool ID for the user pool where you want to update the user pool client. |
|
WriteAttributes | System.Collections.Generic.List<System.String> |
Gets and sets the property WriteAttributes.
The list of user attributes that you want your app client to have write access to.
After your user authenticates in your app, their access token authorizes them to set
or modify their own attribute value for any attribute in this list. An example of
this kind of activity is when you present your user with a form to update their profile
information and they change their last name. Your app then makes an UpdateUserAttributes
API request and sets
When you don't specify the If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see Specifying IdP Attribute Mappings for Your user pool. |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5, 4.0, 3.5