Skip to content

/AWS1/CL_STSGETWEBIDTOKENRSP

GetWebIdentityTokenResponse

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_webidentitytoken TYPE /AWS1/STSWEBIDENTITYTOKENTYPE /AWS1/STSWEBIDENTITYTOKENTYPE

A signed JSON Web Token (JWT) that represents the caller's Amazon Web Services identity. The token contains standard JWT claims such as subject, audience, expiration time, and additional identity attributes added by STS as custom claims. You can also add your own custom claims to the token by passing tags as request parameters to the GetWebIdentityToken API. The token is signed using the specified signing algorithm and can be verified using the verification keys available at the issuer's JWKS endpoint.

iv_expiration TYPE /AWS1/STSDATETYPE /AWS1/STSDATETYPE

The date and time when the web identity token expires, in UTC. The expiration is determined by adding the DurationSeconds value to the time the token was issued. After this time, the token should no longer be considered valid.

Queryable Attributes

WebIdentityToken

A signed JSON Web Token (JWT) that represents the caller's Amazon Web Services identity. The token contains standard JWT claims such as subject, audience, expiration time, and additional identity attributes added by STS as custom claims. You can also add your own custom claims to the token by passing tags as request parameters to the GetWebIdentityToken API. The token is signed using the specified signing algorithm and can be verified using the verification keys available at the issuer's JWKS endpoint.

Accessible with the following methods

Method Description
GET_WEBIDENTITYTOKEN() Getter for WEBIDENTITYTOKEN, with configurable default
ASK_WEBIDENTITYTOKEN() Getter for WEBIDENTITYTOKEN w/ exceptions if field has no va
HAS_WEBIDENTITYTOKEN() Determine if WEBIDENTITYTOKEN has a value

Expiration

The date and time when the web identity token expires, in UTC. The expiration is determined by adding the DurationSeconds value to the time the token was issued. After this time, the token should no longer be considered valid.

Accessible with the following methods

Method Description
GET_EXPIRATION() Getter for EXPIRATION, with configurable default
ASK_EXPIRATION() Getter for EXPIRATION w/ exceptions if field has no value
HAS_EXPIRATION() Determine if EXPIRATION has a value