Cognito Identity Pool client for Cognito User Pool Auth

identity-pool-client.yml

Type: AWS::Cognito::UserPoolClient
Properties:
  UserPoolId: !Ref cognitoUserPool
  AllowedOAuthFlows: 
    - 'implicit'
  AllowedOAuthFlowsUserPoolClient: true
  AllowedOAuthScopes: 
    - 'openid'
    - 'aws.cognito.signin.user.admin'
  CallbackURLs: 
    - !Join ["", ["https://", !Ref s3DeploymentBucket, ".s3.", !Ref AWS::Region, ".amazonaws.com/index.html"]]
  ClientName: ${self:custom.environment.normalWebClient}-${opt:stage}
  DefaultRedirectURI: !Join ["", ["https://", !Ref s3DeploymentBucket, ".s3.", !Ref AWS::Region, ".amazonaws.com/index.html"]]
  ExplicitAuthFlows: 
    - 'ALLOW_USER_PASSWORD_AUTH'
    - 'ALLOW_USER_SRP_AUTH'
    - 'ALLOW_REFRESH_TOKEN_AUTH'
  GenerateSecret: false
  LogoutURLs: 
    - !Join ["", ["https://", !Ref s3DeploymentBucket, ".s3.", !Ref AWS::Region, ".amazonaws.com/index.html"]]
  PreventUserExistenceErrors: 'ENABLED'
  SupportedIdentityProviders:
    - 'COGNITO'
  RefreshTokenValidity: 3650