amazon-cognito

Trying to setup user pool authentication for API Gateway

老子叫甜甜 提交于 2019-12-01 12:57:11
I'm trying to setup security on an API using Cognito user pools. I'm getting back 401 Unauthorized. The API and User Pools are existing, and I've been using the user pool to log into an application. I'm now trying to secure the API calls. I created an authorizer on the API, Then I added the authorizer to one GET method in the API Then finally I tried to test the API in Postman. I'm using the AWS Signature authorization. Calling the method returns 401. The method functioned before with no security, and turning off the authorizer makes it work again (without security). Any ideas what step I'm

Why is Cognito rejecting my SAML assertion?

一个人想着一个人 提交于 2019-12-01 12:20:55
I'm doing a proof of concept for federating SAML into Cognito. I've setup Shibboleth v3, and once I finally got the log level set, I can see the SAML being sent back to Cognito, which just redirects to my configured page with ?error_description=Error+in+SAML+response+processing%3A+Invalid+SAML+metadata.+&error=server_error in the URL. The user pool in Cognito is set to require an email address, and I think I've got the attribute mapping set correctly, but it's not really easy to tell. Here's the SAML I'm seeing in the logs (minus a couple of URLs for anonymization's sake): <?xml version="1.0"

Cognito User Pool: How to refresh Access Token Android

我的未来我决定 提交于 2019-12-01 10:54:01
How do you refresh the access token using Cognito for Android? The documentation suggest the following ( https://docs.aws.amazon.com/cognito/latest/developerguide/using-amazon-cognito-user-identity-pools-android-sdk.html ): // Implement authentication handler AuthenticationHandler handler = new AuthenticationHandler { @Override public void onSuccess(CognitoUserSession userSession) { // Authentication was successful, the "userSession" will have the current valid tokens // Time to do awesome stuff } @Override public void getAuthenticationDetails(final AuthenticationContinuation continuation,

Trying to setup user pool authentication for API Gateway

*爱你&永不变心* 提交于 2019-12-01 10:45:00
问题 I'm trying to setup security on an API using Cognito user pools. I'm getting back 401 Unauthorized. The API and User Pools are existing, and I've been using the user pool to log into an application. I'm now trying to secure the API calls. I created an authorizer on the API, Then I added the authorizer to one GET method in the API Then finally I tried to test the API in Postman. I'm using the AWS Signature authorization. Calling the method returns 401. The method functioned before with no

Cognito Authentication working but errors show?

亡梦爱人 提交于 2019-12-01 08:45:34
Basically I'm using a developer authenticated identity to authenticate my users. Even though this error is showing: AWSiOSSDKv2 [Verbose] AWSURLResponseSerialization.m line:87 | -[AWSJSONResponseSerializer responseObjectForResponse:originalRequest:currentRequest:data:error:] | Response body: [{"__type":"InvalidParameterException","message":"Please provide a valid public provider"}] 2015-10-20 17:50:19.251 BusyTime[56549:7365231] AWSiOSSDKv2 [Error] AWSCredentialsProvider.m line:435 | __73-[AWSCognitoCredentialsProvider getCredentialsWithCognito:authenticated:]_block_invoke |

AWS S3 Transfer Manager ${cognito-identity.amazonaws.com:sub} Policy Variable Access Denied

柔情痞子 提交于 2019-12-01 06:57:07
问题 I am trying to download a file from AWS S3 to my iOS mobile app from a folder that is specific to the user, using Transfer Manager, like so: @IBAction func download() { let transferManager = AWSS3TransferManager.default()! let downloadingFileURL = URL(fileURLWithPath: NSTemporaryDirectory()).appendingPathComponent("disney1.jpg") let downloadRequest = AWSS3TransferManagerDownloadRequest()! downloadRequest.bucket = "sidestreamx" // user's UUID/disney1 downloadRequest.key = "631d121f-b294-4318

AWS IoT Android application over MQTT throws MqttException (0) - java.io.IOException: Already connected

让人想犯罪 __ 提交于 2019-12-01 06:56:24
I am trying to use 'Authenticate using Cognito-Identity with Cognito user pool' in my Android application. My Cognito user pool authentication works well, when I run that separately and I had seen a JWTToken as well. When I run the the 'PubSub' sample application with Unauthenticated role, it worked as expected. When I integrate these two features in one application, the application threw following error. W/System.err: MqttException (0) - java.io.IOException: Already connected W/System.err: at org.eclipse.paho.client.mqttv3.internal.ExceptionHelper.createMqttException(ExceptionHelper.java:38)

Fine-grained access control for AWS DynamoDB using AWS Cognito

a 夏天 提交于 2019-12-01 06:53:40
问题 I am developing a simple application (ios) where each user can send simple messages (each of them composed of a few data slots, all strings for the moment) to other users (their Facebook friends). People log in using their Facebook account through Cognito and I manage users accounts using a single table in DynamoDB where the primary key is the the Facebook id (the secondary key is a unique message id). When user A sends a message to user B, two almost identical rows are added to the table,

Cognito User Pool: How to refresh Access Token Android

血红的双手。 提交于 2019-12-01 06:47:37
问题 How do you refresh the access token using Cognito for Android? The documentation suggest the following (https://docs.aws.amazon.com/cognito/latest/developerguide/using-amazon-cognito-user-identity-pools-android-sdk.html): // Implement authentication handler AuthenticationHandler handler = new AuthenticationHandler { @Override public void onSuccess(CognitoUserSession userSession) { // Authentication was successful, the "userSession" will have the current valid tokens // Time to do awesome

Cognito Authentication working but errors show?

淺唱寂寞╮ 提交于 2019-12-01 06:40:52
问题 Basically I'm using a developer authenticated identity to authenticate my users. Even though this error is showing: AWSiOSSDKv2 [Verbose] AWSURLResponseSerialization.m line:87 | -[AWSJSONResponseSerializer responseObjectForResponse:originalRequest:currentRequest:data:error:] | Response body: [{"__type":"InvalidParameterException","message":"Please provide a valid public provider"}] 2015-10-20 17:50:19.251 BusyTime[56549:7365231] AWSiOSSDKv2 [Error] AWSCredentialsProvider.m line:435 | __73-