Cognito REFRESH_TOKEN_AUTH should always be allowed

[blimmer]

From my usage, it appears that cognito.UserPoolClient.authFlows needs refreshToken to be true in every scenario. Because of this, should we default it to true, instead of false?

aws-cdk/packages/@aws-cdk/aws-cognito/lib/user-pool-client.ts

Lines 34 to 38 in feadd6c

	/**
	* Enable authflow to refresh tokens
	* @default false
	*/
	readonly refreshToken?: boolean;

Reproduction Steps

const userPool = new UserPool(this, "SystemUserPool", {
      userPoolName: id,
      signInAliases: { username: true },
      lambdaTriggers: {
        preSignUp: preSignUpLambda
        preTokenGeneration: preTokenLambda
      },
    });
new UserPoolClient(this, "UserPoolClient", {
      userPool,
      userPoolClientName: "my-client",
      authFlows: {
        userSrp: true,
      },
    });

Error Log

 2/3 | 12:22:00 PM | UPDATE_FAILED        | AWS::Cognito::UserPoolClient | UserPoolClient (UserPoolClient2F5918F7) REFRESH_TOKEN_AUTH should always be allowed. (Service: AWSCognitoIdentityProviderService; Status Code: 400; Error Code: InvalidParameterException; Request ID: 61d7876f-96c0-4703-ae94-85dba259d380)

Environment

• CLI Version : 1.35.0
• Framework Version: 1.35.0
• OS : MacOS
• Language : English

Other

---

This is 🐛 Bug Report