amazon-cognito

InvalidAction: The action or operation requested is invalid. Verify that the action is typed correctly

好久不见. 提交于 2019-12-11 15:28:22
问题 I am using AWS Cognito Service Provider to create and list User Pool Clients. I have a locally installed DynamoDB to store the additional data. But I am getting the above error in the callback. I looked a lot for the error context but couldn't fine one. const cognitoidentityserviceprovider = new AWS.CognitoIdentityServiceProvider(); cognitoidentityserviceprovider.listUserPoolClients(params, function(clientListError, clientListData) { console.log(clientListError) if(clientListError){ return

AWS Cognito: how to allow users to change email without sending verification code?

混江龙づ霸主 提交于 2019-12-11 10:04:47
问题 In my Android app, I want my users to be able to change their email addresses (that they use to connect to their accounts), without getting any verification code by email. So far, I manage to change the email address, and thanks to a lambda, set email_verified to true automatically. But unfortunately, an email is still sent with a verification code... Here is what I did in my Android app: public void onClickChangeEmail(View view) { CognitoUserAttributes attributes = new CognitoUserAttributes(

AWS Cognito - Can I use the migration trigger in a Custom auth flow

天大地大妈咪最大 提交于 2019-12-11 08:55:02
问题 I am investigating the recently released migration trigger for cognito user pools. To enable the trigger you need to set the AuthFlow type in the InitiateAuthRequest to be "USER_PASSWORD_AUTH" see here: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-import-using-lambda.html I want to use the custom auth flow so that I can return a challenge response for email verification is the users are not email verified from the existing user store. However if I set the

500 error trying to authenticate via AWS Application load balancer and Cognito

和自甴很熟 提交于 2019-12-11 07:52:22
问题 I am trying to setup Authentication for some certain routes using AWS internet-facing Application load balancer. I've done all the steps from the official AWS documentation, and also using this one: https://www.thorntech.com/2018/09/user-authentication-alb-cognito/ I was testing via load balancer's DNS name, and it redirects me properly to the login form of Cognito, but after I am logged in it redirects to the load balancer, and it gives 500 Internal Server Error . URL is like so https:/

Cognito with DynamoDB - connecting to us-east-1 instead eu-central-1

坚强是说给别人听的谎言 提交于 2019-12-11 07:34:43
问题 I'm using AWS DynamoDB with Cognito to authorize access (unauthorized user so far) from Android. My db is in eu-central-1 and I use com.amazonaws:aws-android-sdk-ddb:2.2.8 , as: CognitoCachingCredentialsProvider credentialsProvider = new CognitoCachingCredentialsProvider(context, "eu-central-1:XXX", Regions.EU_CENTRAL_1 ); AmazonDynamoDBClient ddbClient = new AmazonDynamoDBClient(credentialsProvider); final DynamoDBMapper mapper = new DynamoDBMapper(ddbClient); In logs I see:

access AWS API gateway using access token from identityserver

别来无恙 提交于 2019-12-11 07:05:07
问题 We have our identity server implemented using identity server https://github.com/IdentityServer/IdentityServer3 or https://github.com/IdentityServer/IdentityServer4 And user will authenticate and get the access token from the identity server. We have some APIs developed in AWS api gateway. Just wondering what is the common practice to implement the authentication / authorization in the aws api gateway. We would prefer to use the existing access token from the identity server in the API

Authentication AWS Cognito SRP

最后都变了- 提交于 2019-12-11 06:56:56
问题 I am writing a console POC to demo AWS cognito authentication - App Pool not federated identity, as our API gateway authentication mechanism (not hosted in AWS). This is being written in C#. I have successfully created a user, confirmed them; but now I need to authenticate to retrieve a JWT that an I can pass around and validate downstream. The following code using (var client = new AmazonCognitoIdentityProviderClient()) { var initAuthRequest = new InitiateAuthRequest(); initAuthRequest

Delete and Retrieve AWS Cognito identity inside Cognito Federated Identity Pool

笑着哭i 提交于 2019-12-11 06:43:49
问题 I configured the identity pool with cognito user pool and Facebook as providers. Enable access to unauthenticated identities. Used javascript sdk to connect from browser. Got an identity (unauthenticated of course) back. Now, just for kicks, I deleted the identity from identity browser. After that I am getting 400 error with "ResourceNotFoundException". I am a newbie playing with AWS Cognito Identity Pool. I have a silly question which I could not find answer anywhere. When/Why do we delete

How to get validate Cognito Access Token in AWS Lambda to allow Gateway API call?

柔情痞子 提交于 2019-12-11 05:44:57
问题 What I am trying to do is to set up API Gateway to my Lambda function that saves some in DynamoDB (or other stuff that I want to be only for logged in users). But I do not understand how to validate AccessToken and how to get user from that. I found this post on AWS forum and I decided to try approach 1. Cognito User Pools + API Gateway + API Gateway Custom Authorizer + Cognito User Pools Access Token. So now I have logged in user : var authenticationData = { Username : 'username', // your

Amazon Cognito AuthFlow

二次信任 提交于 2019-12-11 04:45:19
问题 Somewhat of multiple question but, How does one perform authentication with Amazon Cognito User Pools, in .NET. I am initiating the Auth with the following: var response1 = client.InitiateAuth(new InitiateAuthRequest() { AuthFlow = AuthFlowType.USER_SRP_AUTH, AuthParameters = new Dictionary<string, string>() { {"USERNAME","User" }, {"SRP_A" , A } }, ClientId = "xxxxxxxxxxxxxxxxxxxxxxxxxxx" }); Their documentation is really, really bad, and I can't seem to find what to pass when I want to