tokens

Creates, updates, deletes, gets or lists a tokens resource.

Overview

Name	tokens
Type	Resource
Id	aws.sso_oidc.tokens

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
create_token	insert	region, clientId, clientSecret, grantType		Creates and returns access and refresh tokens for clients that are authenticated using client secrets. The access token can be used to fetch short-lived credentials for the assigned AWS accounts or to access application APIs using bearer authentication.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

INSERT examples

create_token

Creates and returns access and refresh tokens for clients that are authenticated using client secrets. The access token can be used to fetch short-lived credentials for the assigned AWS accounts or to access application APIs using bearer authentication.

INSERT INTO aws.sso_oidc.tokens (
clientId,
clientSecret,
grantType,
deviceCode,
code,
refreshToken,
scope,
redirectUri,
codeVerifier,
region
)
SELECT 
'{{ clientId }}' /* required */,
'{{ clientSecret }}' /* required */,
'{{ grantType }}' /* required */,
'{{ deviceCode }}',
'{{ code }}',
'{{ refreshToken }}',
'{{ scope }}',
'{{ redirectUri }}',
'{{ codeVerifier }}',
'{{ region }}'
RETURNING
access_token,
expires_in,
id_token,
refresh_token,
token_type
;

Manifest

# Description fields are for documentation purposes
- name: tokens
props:
  - name: region
    value: "{{ region }}"
    description: Required parameter for the tokens resource.
  - name: clientId
    value: "{{ clientId }}"
  - name: clientSecret
    value: "{{ clientSecret }}"
  - name: grantType
    value: "{{ grantType }}"
  - name: deviceCode
    value: "{{ deviceCode }}"
  - name: code
    value: "{{ code }}"
  - name: refreshToken
    value: "{{ refreshToken }}"
  - name: scope
    value:
      - "{{ scope }}"
  - name: redirectUri
    value: "{{ redirectUri }}"
  - name: codeVerifier
    value: "{{ codeVerifier }}"