ProductionCredentials

OAuth credentials for the App on the production Cognito user pool. The same client is used in both draft and active App states — scopes expand on promotion but clientId, tokenUrl, and shape do not change. A future sandboxCredentials sibling envelope will carry sandbox-pool credentials when the sandbox Cognito pool exists.

  • clientId
    Type: string
    required

    OAuth client ID for authenticating your application (client credentials flow). Stable across draft→active promotion.

  • scopes
    Type: array string[]
    required

    OAuth scopes currently authorized on this client. Expands on promotion; today's list reflects the draft scope only.

  • tokenUrl
    Type: stringFormat: uri
    required

    Cognito token endpoint. POST client_id + client_secret here with grant_type=client_credentials to mint an access token.