AWS solutions documentation change

Service: solutions · 2025-04-20 · Documentation low

File: solutions/latest/dea-api/auth-refreshtoken.md

Summary

Improved refresh token documentation with security benefits explanation and field requirement updates

Security assessment

Added content about refresh tokens minimizing credential exposure and improved data type definitions, enhancing security documentation without addressing specific vulnerabilities.

Diff

diff --git a/solutions/latest/dea-api/auth-refreshtoken.md b/solutions/latest/dea-api/auth-refreshtoken.md
index f73fa5344..7950e73f0 100644
--- a//solutions/latest/dea-api/auth-refreshtoken.md
+++ b//solutions/latest/dea-api/auth-refreshtoken.md
@@ -7 +7,3 @@ URIHTTP methodsSchemasProperties
-#  Auth RefreshToken
+# Auth – Refresh token
+
+Refresh tokens improve user experience by allowing the user to stay logged in for longer periods without having to frequently re-authenticate. It also enhances security by minimizing exposure of the user's credentials. When a user logs in, they receive both an access token and a refresh token. The refresh token obtains a new access token from the refresh endpoint when the current access token expires. If the refresh token is valid, the refresh endpoint returns a new access token.
@@ -19,2 +20,0 @@ URIHTTP methodsSchemasProperties
-Fetches new ID Token to refresh credentials using Refresh Token
-
@@ -23 +23 @@ ResponsesStatus code| Response model| Description
-`200`| `getTokenResult`| Successfully returns Id token and Cognito information for fetching credentials.  
+`200`| `getTokenResult`| Id Token and Cognito information for fetching credentials  
@@ -34 +34 @@ ResponsesStatus code| Response model| Description
-      "expiresIn": "string"
+      "expiresIn": number
@@ -43,4 +43,4 @@ Property| Type| Required| Description
-`expiresIn`| string| False|   
-`identityPoolId`| string| False|   
-`idToken`| string| False|   
-`userPoolId`| string| False|   
+`expiresIn`| number| True|   
+`identityPoolId`| string| True|   
+`idToken`| string| True|   
+`userPoolId`| string| True|   
@@ -54 +54 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Auth LogoutUrl
+Auth – Logout URL
@@ -56 +56 @@ Auth LogoutUrl
-Auth RevokeToken
+Auth – Revoke token