public class AdminRespondToAuthChallengeRequest extends AmazonWebServiceRequest implements Serializable
Responds to an authentication challenge, as an administrator.
Calling this action requires developer credentials.
Constructor and Description |
---|
AdminRespondToAuthChallengeRequest() |
Modifier and Type | Method and Description |
---|---|
AdminRespondToAuthChallengeRequest |
addChallengeResponsesEntry(String key,
String value)
The challenge responses.
|
AdminRespondToAuthChallengeRequest |
addClientMetadataEntry(String key,
String value)
A map of custom key-value pairs that you can provide as input for any
custom workflows that this action triggers.
|
AdminRespondToAuthChallengeRequest |
clearChallengeResponsesEntries()
Removes all the entries added into ChallengeResponses.
|
AdminRespondToAuthChallengeRequest |
clearClientMetadataEntries()
Removes all the entries added into ClientMetadata.
|
boolean |
equals(Object obj) |
AnalyticsMetadataType |
getAnalyticsMetadata()
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge calls. |
String |
getChallengeName()
The challenge name.
|
Map<String,String> |
getChallengeResponses()
The challenge responses.
|
String |
getClientId()
The app client ID.
|
Map<String,String> |
getClientMetadata()
A map of custom key-value pairs that you can provide as input for any
custom workflows that this action triggers.
|
ContextDataType |
getContextData()
Contextual data such as the user's device fingerprint, IP address, or
location used for evaluating the risk of an unexpected event by Amazon
Cognito advanced security.
|
String |
getSession()
The session which should be passed both ways in challenge-response calls
to the service.
|
String |
getUserPoolId()
The ID of the Amazon Cognito user pool.
|
int |
hashCode() |
void |
setAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge calls. |
void |
setChallengeName(ChallengeNameType challengeName)
The challenge name.
|
void |
setChallengeName(String challengeName)
The challenge name.
|
void |
setChallengeResponses(Map<String,String> challengeResponses)
The challenge responses.
|
void |
setClientId(String clientId)
The app client ID.
|
void |
setClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any
custom workflows that this action triggers.
|
void |
setContextData(ContextDataType contextData)
Contextual data such as the user's device fingerprint, IP address, or
location used for evaluating the risk of an unexpected event by Amazon
Cognito advanced security.
|
void |
setSession(String session)
The session which should be passed both ways in challenge-response calls
to the service.
|
void |
setUserPoolId(String userPoolId)
The ID of the Amazon Cognito user pool.
|
String |
toString()
Returns a string representation of this object; useful for testing and
debugging.
|
AdminRespondToAuthChallengeRequest |
withAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge calls. |
AdminRespondToAuthChallengeRequest |
withChallengeName(ChallengeNameType challengeName)
The challenge name.
|
AdminRespondToAuthChallengeRequest |
withChallengeName(String challengeName)
The challenge name.
|
AdminRespondToAuthChallengeRequest |
withChallengeResponses(Map<String,String> challengeResponses)
The challenge responses.
|
AdminRespondToAuthChallengeRequest |
withClientId(String clientId)
The app client ID.
|
AdminRespondToAuthChallengeRequest |
withClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any
custom workflows that this action triggers.
|
AdminRespondToAuthChallengeRequest |
withContextData(ContextDataType contextData)
Contextual data such as the user's device fingerprint, IP address, or
location used for evaluating the risk of an unexpected event by Amazon
Cognito advanced security.
|
AdminRespondToAuthChallengeRequest |
withSession(String session)
The session which should be passed both ways in challenge-response calls
to the service.
|
AdminRespondToAuthChallengeRequest |
withUserPoolId(String userPoolId)
The ID of the Amazon Cognito user pool.
|
clone, copyBaseTo, getCloneRoot, getCloneSource, getGeneralProgressListener, getRequestClientOptions, getRequestCredentials, getRequestMetricCollector, setGeneralProgressListener, setRequestCredentials, setRequestMetricCollector, withGeneralProgressListener, withRequestMetricCollector
public String getUserPoolId()
The ID of the Amazon Cognito user pool.
Constraints:
Length: 1 - 55
Pattern: [\w-]+_[0-9a-zA-Z]+
The ID of the Amazon Cognito user pool.
public void setUserPoolId(String userPoolId)
The ID of the Amazon Cognito user pool.
Constraints:
Length: 1 - 55
Pattern: [\w-]+_[0-9a-zA-Z]+
userPoolId
- The ID of the Amazon Cognito user pool.
public AdminRespondToAuthChallengeRequest withUserPoolId(String userPoolId)
The ID of the Amazon Cognito user pool.
Returns a reference to this object so that method calls can be chained together.
Constraints:
Length: 1 - 55
Pattern: [\w-]+_[0-9a-zA-Z]+
userPoolId
- The ID of the Amazon Cognito user pool.
public String getClientId()
The app client ID.
Constraints:
Length: 1 - 128
Pattern: [\w+]+
The app client ID.
public void setClientId(String clientId)
The app client ID.
Constraints:
Length: 1 - 128
Pattern: [\w+]+
clientId
- The app client ID.
public AdminRespondToAuthChallengeRequest withClientId(String clientId)
The app client ID.
Returns a reference to this object so that method calls can be chained together.
Constraints:
Length: 1 - 128
Pattern: [\w+]+
clientId
- The app client ID.
public String getChallengeName()
The challenge name. For more information, see .
Constraints:
Allowed Values: SMS_MFA, SOFTWARE_TOKEN_MFA, SELECT_MFA_TYPE,
MFA_SETUP, PASSWORD_VERIFIER, CUSTOM_CHALLENGE, DEVICE_SRP_AUTH,
DEVICE_PASSWORD_VERIFIER, ADMIN_NO_SRP_AUTH, NEW_PASSWORD_REQUIRED
The challenge name. For more information, see .
ChallengeNameType
public void setChallengeName(String challengeName)
The challenge name. For more information, see .
Constraints:
Allowed Values: SMS_MFA, SOFTWARE_TOKEN_MFA, SELECT_MFA_TYPE,
MFA_SETUP, PASSWORD_VERIFIER, CUSTOM_CHALLENGE, DEVICE_SRP_AUTH,
DEVICE_PASSWORD_VERIFIER, ADMIN_NO_SRP_AUTH, NEW_PASSWORD_REQUIRED
challengeName
- The challenge name. For more information, see .
ChallengeNameType
public AdminRespondToAuthChallengeRequest withChallengeName(String challengeName)
The challenge name. For more information, see .
Returns a reference to this object so that method calls can be chained together.
Constraints:
Allowed Values: SMS_MFA, SOFTWARE_TOKEN_MFA, SELECT_MFA_TYPE,
MFA_SETUP, PASSWORD_VERIFIER, CUSTOM_CHALLENGE, DEVICE_SRP_AUTH,
DEVICE_PASSWORD_VERIFIER, ADMIN_NO_SRP_AUTH, NEW_PASSWORD_REQUIRED
challengeName
- The challenge name. For more information, see .
ChallengeNameType
public void setChallengeName(ChallengeNameType challengeName)
The challenge name. For more information, see .
Constraints:
Allowed Values: SMS_MFA, SOFTWARE_TOKEN_MFA, SELECT_MFA_TYPE,
MFA_SETUP, PASSWORD_VERIFIER, CUSTOM_CHALLENGE, DEVICE_SRP_AUTH,
DEVICE_PASSWORD_VERIFIER, ADMIN_NO_SRP_AUTH, NEW_PASSWORD_REQUIRED
challengeName
- The challenge name. For more information, see .
ChallengeNameType
public AdminRespondToAuthChallengeRequest withChallengeName(ChallengeNameType challengeName)
The challenge name. For more information, see .
Returns a reference to this object so that method calls can be chained together.
Constraints:
Allowed Values: SMS_MFA, SOFTWARE_TOKEN_MFA, SELECT_MFA_TYPE,
MFA_SETUP, PASSWORD_VERIFIER, CUSTOM_CHALLENGE, DEVICE_SRP_AUTH,
DEVICE_PASSWORD_VERIFIER, ADMIN_NO_SRP_AUTH, NEW_PASSWORD_REQUIRED
challengeName
- The challenge name. For more information, see .
ChallengeNameType
public Map<String,String> getChallengeResponses()
The challenge responses. These are inputs corresponding to the value of
ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
, USERNAME
,
SECRET_HASH
(if app client is configured with client
secret).
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other
required attributes, USERNAME
, SECRET_HASH
(if
app client is configured with client secret).
The value of the USERNAME
attribute must be the user's
actual username, not an alias (such as email address or phone number). To
make this easier, the AdminInitiateAuth
response includes
the actual username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
The challenge responses. These are inputs corresponding to the
value of ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
PASSWORD_VERIFIER
:
PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
,
any other required attributes, USERNAME
,
SECRET_HASH
(if app client is configured with client
secret).
The value of the USERNAME
attribute must be the
user's actual username, not an alias (such as email address or
phone number). To make this easier, the
AdminInitiateAuth
response includes the actual
username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
public void setChallengeResponses(Map<String,String> challengeResponses)
The challenge responses. These are inputs corresponding to the value of
ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
, USERNAME
,
SECRET_HASH
(if app client is configured with client
secret).
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other
required attributes, USERNAME
, SECRET_HASH
(if
app client is configured with client secret).
The value of the USERNAME
attribute must be the user's
actual username, not an alias (such as email address or phone number). To
make this easier, the AdminInitiateAuth
response includes
the actual username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
challengeResponses
-
The challenge responses. These are inputs corresponding to the
value of ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
,
USERNAME
, SECRET_HASH
(if app client
is configured with client secret).
PASSWORD_VERIFIER
:
PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
,
TIMESTAMP
, USERNAME
,
SECRET_HASH
(if app client is configured with
client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client
is configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
,
any other required attributes, USERNAME
,
SECRET_HASH
(if app client is configured with
client secret).
The value of the USERNAME
attribute must be the
user's actual username, not an alias (such as email address or
phone number). To make this easier, the
AdminInitiateAuth
response includes the actual
username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
public AdminRespondToAuthChallengeRequest withChallengeResponses(Map<String,String> challengeResponses)
The challenge responses. These are inputs corresponding to the value of
ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
, USERNAME
,
SECRET_HASH
(if app client is configured with client
secret).
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other
required attributes, USERNAME
, SECRET_HASH
(if
app client is configured with client secret).
The value of the USERNAME
attribute must be the user's
actual username, not an alias (such as email address or phone number). To
make this easier, the AdminInitiateAuth
response includes
the actual username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
Returns a reference to this object so that method calls can be chained together.
challengeResponses
-
The challenge responses. These are inputs corresponding to the
value of ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
,
USERNAME
, SECRET_HASH
(if app client
is configured with client secret).
PASSWORD_VERIFIER
:
PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
,
TIMESTAMP
, USERNAME
,
SECRET_HASH
(if app client is configured with
client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client
is configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
,
any other required attributes, USERNAME
,
SECRET_HASH
(if app client is configured with
client secret).
The value of the USERNAME
attribute must be the
user's actual username, not an alias (such as email address or
phone number). To make this easier, the
AdminInitiateAuth
response includes the actual
username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
public AdminRespondToAuthChallengeRequest addChallengeResponsesEntry(String key, String value)
The challenge responses. These are inputs corresponding to the value of
ChallengeName
, for example:
SMS_MFA
: SMS_MFA_CODE
, USERNAME
,
SECRET_HASH
(if app client is configured with client
secret).
PASSWORD_VERIFIER
: PASSWORD_CLAIM_SIGNATURE
,
PASSWORD_CLAIM_SECRET_BLOCK
, TIMESTAMP
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
ADMIN_NO_SRP_AUTH
: PASSWORD
,
USERNAME
, SECRET_HASH
(if app client is
configured with client secret).
NEW_PASSWORD_REQUIRED
: NEW_PASSWORD
, any other
required attributes, USERNAME
, SECRET_HASH
(if
app client is configured with client secret).
The value of the USERNAME
attribute must be the user's
actual username, not an alias (such as email address or phone number). To
make this easier, the AdminInitiateAuth
response includes
the actual username value in the USERNAMEUSER_ID_FOR_SRP
attribute, even if you specified an alias in your call to
AdminInitiateAuth
.
The method adds a new key-value pair into ChallengeResponses parameter, and returns a reference to this object so that method calls can be chained together.
key
- The key of the entry to be added into ChallengeResponses.value
- The corresponding value of the entry to be added into
ChallengeResponses.public AdminRespondToAuthChallengeRequest clearChallengeResponsesEntries()
Returns a reference to this object so that method calls can be chained together.
public String getSession()
The session which should be passed both ways in challenge-response calls
to the service. If InitiateAuth
or
RespondToAuthChallenge
API call determines that the caller
needs to go through another challenge, they return a session with other
challenge parameters. This session should be passed as it is to the next
RespondToAuthChallenge
API call.
Constraints:
Length: 20 - 2048
The session which should be passed both ways in
challenge-response calls to the service. If
InitiateAuth
or RespondToAuthChallenge
API call determines that the caller needs to go through another
challenge, they return a session with other challenge parameters.
This session should be passed as it is to the next
RespondToAuthChallenge
API call.
public void setSession(String session)
The session which should be passed both ways in challenge-response calls
to the service. If InitiateAuth
or
RespondToAuthChallenge
API call determines that the caller
needs to go through another challenge, they return a session with other
challenge parameters. This session should be passed as it is to the next
RespondToAuthChallenge
API call.
Constraints:
Length: 20 - 2048
session
-
The session which should be passed both ways in
challenge-response calls to the service. If
InitiateAuth
or
RespondToAuthChallenge
API call determines that
the caller needs to go through another challenge, they return
a session with other challenge parameters. This session should
be passed as it is to the next
RespondToAuthChallenge
API call.
public AdminRespondToAuthChallengeRequest withSession(String session)
The session which should be passed both ways in challenge-response calls
to the service. If InitiateAuth
or
RespondToAuthChallenge
API call determines that the caller
needs to go through another challenge, they return a session with other
challenge parameters. This session should be passed as it is to the next
RespondToAuthChallenge
API call.
Returns a reference to this object so that method calls can be chained together.
Constraints:
Length: 20 - 2048
session
-
The session which should be passed both ways in
challenge-response calls to the service. If
InitiateAuth
or
RespondToAuthChallenge
API call determines that
the caller needs to go through another challenge, they return
a session with other challenge parameters. This session should
be passed as it is to the next
RespondToAuthChallenge
API call.
public AnalyticsMetadataType getAnalyticsMetadata()
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge
calls.
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge
calls.
public void setAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge
calls.
analyticsMetadata
-
The analytics metadata for collecting Amazon Pinpoint metrics
for AdminRespondToAuthChallenge
calls.
public AdminRespondToAuthChallengeRequest withAnalyticsMetadata(AnalyticsMetadataType analyticsMetadata)
The analytics metadata for collecting Amazon Pinpoint metrics for
AdminRespondToAuthChallenge
calls.
Returns a reference to this object so that method calls can be chained together.
analyticsMetadata
-
The analytics metadata for collecting Amazon Pinpoint metrics
for AdminRespondToAuthChallenge
calls.
public ContextDataType getContextData()
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
public void setContextData(ContextDataType contextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
contextData
- Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
public AdminRespondToAuthChallengeRequest withContextData(ContextDataType contextData)
Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
Returns a reference to this object so that method calls can be chained together.
contextData
- Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.
public Map<String,String> getClientMetadata()
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user
pool triggers. When you use the AdminRespondToAuthChallenge API action,
Amazon Cognito invokes any functions that are assigned to the following
triggers: pre sign-up, custom message, post
authentication, user migration, pre token generation,
define auth challenge, create auth challenge, and verify
auth challenge response. When Amazon Cognito invokes any of these
functions, it passes a JSON payload, which the function receives as
input. This payload contains a clientMetadata
attribute,
which provides the data that you assigned to the ClientMetadata parameter
in your AdminRespondToAuthChallenge request. In your function code in AWS
Lambda, you can process the clientMetadata
value to enhance
your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to
user pool triggers. When you use the AdminRespondToAuthChallenge
API action, Amazon Cognito invokes any functions that are
assigned to the following triggers: pre sign-up, custom
message, post authentication, user migration,
pre token generation, define auth challenge,
create auth challenge, and verify auth challenge
response. When Amazon Cognito invokes any of these functions,
it passes a JSON payload, which the function receives as input.
This payload contains a clientMetadata
attribute,
which provides the data that you assigned to the ClientMetadata
parameter in your AdminRespondToAuthChallenge request. In your
function code in AWS Lambda, you can process the
clientMetadata
value to enhance your workflow for
your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public void setClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user
pool triggers. When you use the AdminRespondToAuthChallenge API action,
Amazon Cognito invokes any functions that are assigned to the following
triggers: pre sign-up, custom message, post
authentication, user migration, pre token generation,
define auth challenge, create auth challenge, and verify
auth challenge response. When Amazon Cognito invokes any of these
functions, it passes a JSON payload, which the function receives as
input. This payload contains a clientMetadata
attribute,
which provides the data that you assigned to the ClientMetadata parameter
in your AdminRespondToAuthChallenge request. In your function code in AWS
Lambda, you can process the clientMetadata
value to enhance
your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
clientMetadata
- A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions
to user pool triggers. When you use the
AdminRespondToAuthChallenge API action, Amazon Cognito invokes
any functions that are assigned to the following triggers:
pre sign-up, custom message, post
authentication, user migration, pre token
generation, define auth challenge, create auth
challenge, and verify auth challenge response. When
Amazon Cognito invokes any of these functions, it passes a
JSON payload, which the function receives as input. This
payload contains a clientMetadata
attribute,
which provides the data that you assigned to the
ClientMetadata parameter in your AdminRespondToAuthChallenge
request. In your function code in AWS Lambda, you can process
the clientMetadata
value to enhance your workflow
for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public AdminRespondToAuthChallengeRequest withClientMetadata(Map<String,String> clientMetadata)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user
pool triggers. When you use the AdminRespondToAuthChallenge API action,
Amazon Cognito invokes any functions that are assigned to the following
triggers: pre sign-up, custom message, post
authentication, user migration, pre token generation,
define auth challenge, create auth challenge, and verify
auth challenge response. When Amazon Cognito invokes any of these
functions, it passes a JSON payload, which the function receives as
input. This payload contains a clientMetadata
attribute,
which provides the data that you assigned to the ClientMetadata parameter
in your AdminRespondToAuthChallenge request. In your function code in AWS
Lambda, you can process the clientMetadata
value to enhance
your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
Returns a reference to this object so that method calls can be chained together.
clientMetadata
- A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions
to user pool triggers. When you use the
AdminRespondToAuthChallenge API action, Amazon Cognito invokes
any functions that are assigned to the following triggers:
pre sign-up, custom message, post
authentication, user migration, pre token
generation, define auth challenge, create auth
challenge, and verify auth challenge response. When
Amazon Cognito invokes any of these functions, it passes a
JSON payload, which the function receives as input. This
payload contains a clientMetadata
attribute,
which provides the data that you assigned to the
ClientMetadata parameter in your AdminRespondToAuthChallenge
request. In your function code in AWS Lambda, you can process
the clientMetadata
value to enhance your workflow
for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
public AdminRespondToAuthChallengeRequest addClientMetadataEntry(String key, String value)
A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
You create custom workflows by assigning AWS Lambda functions to user
pool triggers. When you use the AdminRespondToAuthChallenge API action,
Amazon Cognito invokes any functions that are assigned to the following
triggers: pre sign-up, custom message, post
authentication, user migration, pre token generation,
define auth challenge, create auth challenge, and verify
auth challenge response. When Amazon Cognito invokes any of these
functions, it passes a JSON payload, which the function receives as
input. This payload contains a clientMetadata
attribute,
which provides the data that you assigned to the ClientMetadata parameter
in your AdminRespondToAuthChallenge request. In your function code in AWS
Lambda, you can process the clientMetadata
value to enhance
your workflow for your specific needs.
For more information, see Customizing User Pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.
Take the following limitations into consideration when you use the ClientMetadata parameter:
Amazon Cognito does not store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration does not include triggers, the ClientMetadata parameter serves no purpose.
Amazon Cognito does not validate the ClientMetadata value.
Amazon Cognito does not encrypt the the ClientMetadata value, so don't use it to provide sensitive information.
The method adds a new key-value pair into ClientMetadata parameter, and returns a reference to this object so that method calls can be chained together.
key
- The key of the entry to be added into ClientMetadata.value
- The corresponding value of the entry to be added into
ClientMetadata.public AdminRespondToAuthChallengeRequest clearClientMetadataEntries()
Returns a reference to this object so that method calls can be chained together.
public String toString()
toString
in class Object
Object.toString()
Copyright © 2019. All rights reserved.