aws-cognito

API Gateway with Cognito User Pool Authorizer and Lambda

由 三世轮回 提交于 2019-12-07 20:19:07
问题 I am having an Architecture where I am using API Gateway with Cognito User Pool Authorizer and I am passing the IdToken in Authorization Header from client side ReST call. It is working fine. I need the cognitoIdentityId in Lambda. Tried Body Template Mapping in Integration Request in API Gateway Content type - application/json { "cognito-identity" : "$context.identity.cognitoIdentityId" } It doesn't send the identityid (in event or in context) and also it transforms my payload only to this

Is LinkedIn OpenID Connect provider? How can it be used with AWS Cognito Federated Identity?

由 99封情书 提交于 2019-12-06 23:40:07
问题 The AWS Cognito documentation is very sketchy when it comes to explaining OpenID Connect providers or how to implement auth using say LinkedIn. The nearest example is of SalesForce https://aws.amazon.com/blogs/security/building-an-app-using-amazon-cognito-and-an-openid-connect-identity-provider/ These steps did not work for LinkedIn using it Javascript SDK. Not able to retrieve id_token similar to FB or Google JS SDK. AWS needs id_token to return the AWS credentials. Anyone has successfully

AWS Cognito's SMS Multi Factor Authentication returns invalid code or auth state

由 做~自己de王妃 提交于 2019-12-06 17:00:27
问题 I am trying to implement authentication built on Cognito using their Go SDK . I have been able to get basic username/password authentication to work, but when I add in 2-factor authentication using SMS I am getting stuck. Steps to reproduce : I create the user with a username/password and email verification I validate the email address I set the phone number and request a verification code I verify the phone number I enable 2-factor authentication (via SMS) I try to sign in and receive the

In AWS iOS SDK, how do I handle FORCE_CHANGE_PASSWORD User Status

由 有些话、适合烂在心里 提交于 2019-12-06 08:41:03
问题 I have followed the sample here https://github.com/awslabs/aws-sdk-ios-samples/tree/master/CognitoYourUserPools-Sample To integrate interactive cognito login to my iOS app. This is all working well, but when a new user is created in the pool, they initially have a FORCE_CHANGE_PASSWORD status. For android you can follow the procedure below http://docs.aws.amazon.com/cognito/latest/developerguide/using-amazon-cognito-user-identity-pools-android-sdk-authenticate-admin-created-user.html But for

AWS ApiGateway Lambda Proxy access Authorizer

由 家住魔仙堡 提交于 2019-12-06 07:29:34
问题 I´m using an Lambda Proxy and a Cognito User Pool Authorizer in my ApiGateway. In the Lambda function I can access the path etc. variables via the event object. In addition to that I want to access the claims of the authenticated user. In the documentation it is written, that I should use: context.authorizer.claims.property But I authorizer is null so I get Cannot read property 'claims' of undefined Anyone with an idea? 回答1: If you are referring to this part of the documentation, $context

AWS Cognito Switch User to Federated Account

由 蹲街弑〆低调 提交于 2019-12-06 07:23:34
问题 I want to allow users to sign up using either a user-pool identity (email + password) or a Facebook-federated identity. But I also want them to be able to switch later on: either add Facebook federation if they didn't sign up using Facebook initially, or remove the Facebook link from their account if they initially signed up using Facebook. Is this possible? Thanks in advance! 回答1: Yes, it is. I'm assuming that Facebook is added directly to the Userpool as an IdP. Splitting your query into 2

AWS Cognito SMS Role : Cannot create or assign a new role

由 ▼魔方 西西 提交于 2019-12-06 05:06:31
问题 I am not able to get verification codes(sms) and mobile app. i deleted the role. i tried recreating the role in cognito but it doesn't give any option to do so. Error response while i create new user : "Role does not have trust relationship allowing cognito to assume the role" On saving the verification settings on my cognito (with the previous role arn stuck in there) it say " Your roles are still being created " Error while saving verification changes 回答1: I too faced the same issue. Let me

AWS Cognito force refresh session

由 那年仲夏 提交于 2019-12-05 20:12:37
I'm running into some problems when I attempt to refresh my session tokens, (Access, Id, Refresh). I have already read this question and the answer has helped me understand what is going on some. But I feel what I am trying to do isn't quite what getSession is for. I am attempting to implement a session expiration message (done) that allows the user to extend their session (refreshes the tokens). From what I gather about getSession() , it returns either the old tokens, if they are still valid, or new tokens if they are not valid. Please correct me if I am wrong there. I am attempting to give

send email when user registers - AWS Cognito federated Identities

由 我与影子孤独终老i 提交于 2019-12-05 16:55:28
How can i send an email/trigger a lambda function when a new user registers? Under "edit identity pool" i only found a sync trigger. If i understand correctly: This one is triggered every time a user syncs his data... Is there any way to trigger a lambda function only for the "initial" sync or when a certain dataset is created for the user? Edit: To be more specific: I do create the user via lambdas using the JS SDK. I use developer authentication with my own oauth2 flow. I don't know how to distinguish between a user granting access e.g. via Google the first time from someone doing this the

Is LinkedIn OpenID Connect provider? How can it be used with AWS Cognito Federated Identity?

由 可紊 提交于 2019-12-05 03:10:14
The AWS Cognito documentation is very sketchy when it comes to explaining OpenID Connect providers or how to implement auth using say LinkedIn. The nearest example is of SalesForce https://aws.amazon.com/blogs/security/building-an-app-using-amazon-cognito-and-an-openid-connect-identity-provider/ These steps did not work for LinkedIn using it Javascript SDK. Not able to retrieve id_token similar to FB or Google JS SDK. AWS needs id_token to return the AWS credentials. Anyone has successfully implemented Linked with AWS Cognito? Nope. It seems Linkedin does not offer full OpenID Connect. Also
订阅 aws-cognito