@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class RespondToAuthChallengeRequest extends AmazonWebServiceRequest implements Serializable, Cloneable
The request to respond to an authentication challenge.
NOOP
Constructor and Description |
---|
RespondToAuthChallengeRequest() |
Modifier and Type | Method and Description |
---|---|
RespondToAuthChallengeRequest |
addChallengeResponsesEntry(String key,
String value)
Add a single ChallengeResponses entry
|
RespondToAuthChallengeRequest |
addClientMetadataEntry(String key,
String value)
Add a single ClientMetadata entry
|
RespondToAuthChallengeRequest |
clearChallengeResponsesEntries()
Removes all the entries added into ChallengeResponses.
|
RespondToAuthChallengeRequest |
clearClientMetadataEntries()
Removes all the entries added into ClientMetadata.
|
RespondToAuthChallengeRequest |
clone()
Creates a shallow clone of this object for all fields except the handler context.
|
boolean |
equals(Object obj) |
AnalyticsMetadataType |
getAnalyticsMetadata()
The Amazon Pinpoint analytics metadata for collecting metrics for
RespondToAuthChallenge calls. |
String |
getChallengeName()
The challenge name.
|
Map<String,String> |
getChallengeResponses()
The challenge responses.
|
String |
getClientId()
The app client ID.
|
Map<String,String> |
getClientMetadata()
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
|
String |
getSession()
The session which should be passed both ways in challenge-response calls to the service.
|
UserContextDataType |
getUserContextData()
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an
unexpected event by Amazon Cognito advanced security.
|
int |
hashCode() |
void |
setAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The Amazon Pinpoint analytics metadata for collecting metrics for
RespondToAuthChallenge calls. |
void |
setChallengeName(ChallengeNameType challengeName)
The challenge name.
|
void |
setChallengeName(String challengeName)
The challenge name.
|
void |
setChallengeResponses(Map<String,String> challengeResponses)
The challenge responses.
|
void |
setClientId(String clientId)
The app client ID.
|
void |
setClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
|
void |
setSession(String session)
The session which should be passed both ways in challenge-response calls to the service.
|
void |
setUserContextData(UserContextDataType userContextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an
unexpected event by Amazon Cognito advanced security.
|
String |
toString()
Returns a string representation of this object.
|
RespondToAuthChallengeRequest |
withAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The Amazon Pinpoint analytics metadata for collecting metrics for
RespondToAuthChallenge calls. |
RespondToAuthChallengeRequest |
withChallengeName(ChallengeNameType challengeName)
The challenge name.
|
RespondToAuthChallengeRequest |
withChallengeName(String challengeName)
The challenge name.
|
RespondToAuthChallengeRequest |
withChallengeResponses(Map<String,String> challengeResponses)
The challenge responses.
|
RespondToAuthChallengeRequest |
withClientId(String clientId)
The app client ID.
|
RespondToAuthChallengeRequest |
withClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
|
RespondToAuthChallengeRequest |
withSession(String session)
The session which should be passed both ways in challenge-response calls to the service.
|
RespondToAuthChallengeRequest |
withUserContextData(UserContextDataType userContextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an
unexpected event by Amazon Cognito advanced security.
|
addHandlerContext, getCloneRoot, getCloneSource, getCustomQueryParameters, getCustomRequestHeaders, getGeneralProgressListener, getHandlerContext, getReadLimit, getRequestClientOptions, getRequestCredentials, getRequestCredentialsProvider, getRequestMetricCollector, getSdkClientExecutionTimeout, getSdkRequestTimeout, putCustomQueryParameter, putCustomRequestHeader, setGeneralProgressListener, setRequestCredentials, setRequestCredentialsProvider, setRequestMetricCollector, setSdkClientExecutionTimeout, setSdkRequestTimeout, withGeneralProgressListener, withRequestCredentialsProvider, withRequestMetricCollector, withSdkClientExecutionTimeout, withSdkRequestTimeout
public void setClientId(String clientId)
The app client ID.
clientId
- The app client ID.public String getClientId()
The app client ID.
public RespondToAuthChallengeRequest withClientId(String clientId)
The app client ID.
clientId
- The app client ID.public void setChallengeName(String challengeName)
The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
challengeName
- The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
ChallengeNameType
public String getChallengeName()
The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
ADMIN_NO_SRP_AUTH
is not a valid value.
ChallengeNameType
public RespondToAuthChallengeRequest withChallengeName(String challengeName)
The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
challengeName
- The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
ChallengeNameType
public void setChallengeName(ChallengeNameType challengeName)
The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
challengeName
- The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
ChallengeNameType
public RespondToAuthChallengeRequest withChallengeName(ChallengeNameType challengeName)
The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
challengeName
- The challenge name. For more information, see InitiateAuth.
ADMIN_NO_SRP_AUTH
is not a valid value.
ChallengeNameType
public void setSession(String session)
The session which should be passed both ways in challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs to go
through another challenge, they return a session with other challenge parameters. This session should be passed
as it is to the next RespondToAuthChallenge
API call.
session
- The session which should be passed both ways in challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs
to go through another challenge, they return a session with other challenge parameters. This session
should be passed as it is to the next RespondToAuthChallenge
API call.public String getSession()
The session which should be passed both ways in challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs to go
through another challenge, they return a session with other challenge parameters. This session should be passed
as it is to the next RespondToAuthChallenge
API call.
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller
needs to go through another challenge, they return a session with other challenge parameters. This
session should be passed as it is to the next RespondToAuthChallenge
API call.public RespondToAuthChallengeRequest withSession(String session)
The session which should be passed both ways in challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs to go
through another challenge, they return a session with other challenge parameters. This session should be passed
as it is to the next RespondToAuthChallenge
API call.
session
- The session which should be passed both ways in challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs
to go through another challenge, they return a session with other challenge parameters. This session
should be passed as it is to the next RespondToAuthChallenge
API call.public Map<String,String> getChallengeResponses()
The challenge responses. These are inputs corresponding to the value of ChallengeName
, for example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below (including
SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
, PASSWORD_CLAIM_SECRET_BLOCK
,
TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are required
attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and
SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires plus
DEVICE_KEY
.
ChallengeName
, for
example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below
(including SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are
required attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires
plus DEVICE_KEY
.
public void setChallengeResponses(Map<String,String> challengeResponses)
The challenge responses. These are inputs corresponding to the value of ChallengeName
, for example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below (including
SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
, PASSWORD_CLAIM_SECRET_BLOCK
,
TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are required
attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and
SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires plus
DEVICE_KEY
.
challengeResponses
- The challenge responses. These are inputs corresponding to the value of ChallengeName
, for
example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below
(including SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are
required attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires
plus DEVICE_KEY
.
public RespondToAuthChallengeRequest withChallengeResponses(Map<String,String> challengeResponses)
The challenge responses. These are inputs corresponding to the value of ChallengeName
, for example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below (including
SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
, PASSWORD_CLAIM_SECRET_BLOCK
,
TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are required
attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and
SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires plus
DEVICE_KEY
.
challengeResponses
- The challenge responses. These are inputs corresponding to the value of ChallengeName
, for
example:
SECRET_HASH
(if app client is configured with client secret) applies to all inputs below
(including SOFTWARE_TOKEN_MFA
).
SMS_MFA
: SMS_MFA_CODE
, USERNAME
.
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
, USERNAME
.
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other required attributes,
USERNAME
.
SOFTWARE_TOKEN_MFA
: USERNAME
and SOFTWARE_TOKEN_MFA_CODE
are
required attributes.
DEVICE_SRP_AUTH
requires USERNAME
, DEVICE_KEY
, SRP_A
(and SECRET_HASH
).
DEVICE_PASSWORD_VERIFIER
requires everything that PASSWORD_VERIFIER
requires
plus DEVICE_KEY
.
public RespondToAuthChallengeRequest addChallengeResponsesEntry(String key, String value)
public RespondToAuthChallengeRequest clearChallengeResponsesEntries()
public void setAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The Amazon Pinpoint analytics metadata for collecting metrics for RespondToAuthChallenge
calls.
analyticsMetadata
- The Amazon Pinpoint analytics metadata for collecting metrics for RespondToAuthChallenge
calls.public AnalyticsMetadataType getAnalyticsMetadata()
The Amazon Pinpoint analytics metadata for collecting metrics for RespondToAuthChallenge
calls.
RespondToAuthChallenge
calls.public RespondToAuthChallengeRequest withAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The Amazon Pinpoint analytics metadata for collecting metrics for RespondToAuthChallenge
calls.
analyticsMetadata
- The Amazon Pinpoint analytics metadata for collecting metrics for RespondToAuthChallenge
calls.public void setUserContextData(UserContextDataType userContextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
userContextData
- Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the
risk of an unexpected event by Amazon Cognito advanced security.public UserContextDataType getUserContextData()
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
public RespondToAuthChallengeRequest withUserContextData(UserContextDataType userContextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
userContextData
- Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the
risk of an unexpected event by Amazon Cognito advanced security.public Map<String,String> getClientMetadata()
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the following
triggers: post authentication, pre token generation, define auth challenge, create auth
challenge, and verify auth challenge. When Amazon Cognito invokes any of these functions, it passes a
JSON payload, which the function receives as input. This payload contains a clientMetadata
attribute, which provides the data that you assigned to the ClientMetadata parameter in your
RespondToAuthChallenge request. In your function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the
following triggers: post authentication, pre token generation, define auth
challenge, create auth challenge, and verify auth challenge. When Amazon Cognito
invokes any of these functions, it passes a JSON payload, which the function receives as input. This
payload contains a clientMetadata
attribute, which provides the data that you assigned to
the ClientMetadata parameter in your RespondToAuthChallenge request. In your function code in AWS Lambda,
you can process the clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public void setClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the following
triggers: post authentication, pre token generation, define auth challenge, create auth
challenge, and verify auth challenge. When Amazon Cognito invokes any of these functions, it passes a
JSON payload, which the function receives as input. This payload contains a clientMetadata
attribute, which provides the data that you assigned to the ClientMetadata parameter in your
RespondToAuthChallenge request. In your function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
clientMetadata
- A map of custom key-value pairs that you can provide as input for any custom workflows that this action
triggers.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the following
triggers: post authentication, pre token generation, define auth challenge, create
auth challenge, and verify auth challenge. When Amazon Cognito invokes any of these functions,
it passes a JSON payload, which the function receives as input. This payload contains a
clientMetadata
attribute, which provides the data that you assigned to the ClientMetadata
parameter in your RespondToAuthChallenge request. In your function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public RespondToAuthChallengeRequest withClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the following
triggers: post authentication, pre token generation, define auth challenge, create auth
challenge, and verify auth challenge. When Amazon Cognito invokes any of these functions, it passes a
JSON payload, which the function receives as input. This payload contains a clientMetadata
attribute, which provides the data that you assigned to the ClientMetadata parameter in your
RespondToAuthChallenge request. In your function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
clientMetadata
- A map of custom key-value pairs that you can provide as input for any custom workflows that this action
triggers.
You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the
RespondToAuthChallenge API action, Amazon Cognito invokes any functions that are assigned to the following
triggers: post authentication, pre token generation, define auth challenge, create
auth challenge, and verify auth challenge. When Amazon Cognito invokes any of these functions,
it passes a JSON payload, which the function receives as input. This payload contains a
clientMetadata
attribute, which provides the data that you assigned to the ClientMetadata
parameter in your RespondToAuthChallenge request. In your function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public RespondToAuthChallengeRequest addClientMetadataEntry(String key, String value)
public RespondToAuthChallengeRequest clearClientMetadataEntries()
public String toString()
toString
in class Object
Object.toString()
public RespondToAuthChallengeRequest clone()
AmazonWebServiceRequest
clone
in class AmazonWebServiceRequest
Object.clone()