amazon-cognito

Unable to verify secret hash for client in Amazon Cognito Userpools

天大地大妈咪最大 提交于 2019-11-28 15:56:24
I am stuck at "Amazon Cognito Identity user pools" process. I tried all possible codes for authenticating user in cognito userpools. But I always get error saying "Error: Unable to verify secret hash for client 4b*******fd". Here is code: AWS.config.region = 'us-east-1'; // Region AWS.config.credentials = new AWS.CognitoIdentityCredentials({ IdentityPoolId: 'us-east-1:b64bb629-ec73-4569-91eb-0d950f854f4f' }); AWSCognito.config.region = 'us-east-1'; AWSCognito.config.credentials = new AWS.CognitoIdentityCredentials({ IdentityPoolId: 'us-east-1:b6b629-er73-9969-91eb-0dfffff445d' }); AWSCognito

How to change User Status FORCE_CHANGE_PASSWORD?

霸气de小男生 提交于 2019-11-28 15:38:35
Using AWS Cognito, I want to create dummy users for testing purposes. I then use the AWS Console to create such user, but the user has its status set to FORCE_CHANGE_PASSWORD . With that value, this user cannot be authenticated. Is there a way to change this status? UPDATE Same behavior when creating user from CLI Ionut Trestian Sorry you are having difficulties. We do not have a one step process where you can just create users and authenticate them directly. We might change this in the future such as to allow administrators to set passwords that are directly usable by users. For now, when you

How to use Federation from a User Pool (not from an Identity Pool)!

天涯浪子 提交于 2019-11-28 11:05:42
问题 I'm trying to use Federation from a User Pool. Note, I am not talking about Federated Identity Pool a different concept. Is there a SignIn API for federated users or is just a hosted UI Does the app "have to" open a browser on a Sign In URL that looks like https://XXXXXX.au=th.XXXXX.amazoncognito.com/login?response_type=code&client_id=XXXXXXXXX&redirect_uri=XXXXXXX ? Can the end-user can stay inside the app, similar to how Google SignIn API on Android works (it pops up a small Google sign in

AWS cognito: sign in with usernam/password OR facebook

回眸只為那壹抹淺笑 提交于 2019-11-28 09:19:19
I want to integrate a pretty standard functionality: give option to user (mobile and web) to either login with email/password or with facebook (google) account with RBAC (different users may have different roles, like users, moderators, admins, creators, etc). Here is basically what I want from sign in: I went through a number of AWS tutorials and other materials. I got some grasp on how to implement it, but I still don't have a full picture. Hope someone can help me here. Here is my current understanding (please correct me where I'm wrong). 1) For the email/password signup/signin I use a User

AWS Lambda API gateway with Cognito - how to use IdentityId to access and update UserPool attributes?

*爱你&永不变心* 提交于 2019-11-28 03:49:51
OK I am now days into this and have made significant progress but am still completely stumped about the fundamentals. My application uses Cognito User Pools for creating and managing users - these are identified on S3 it seems by their IdentityId. Each of my users has their own S3 folder, and AWS automatically gives them a folder name that is equal to the user's IdentityId. I need to relate the IdentityId to the other Cognito user information but cannot work out how. The key thing I need is to be able to identify the username plus other cognito user attributes for a given IdentityId - and it's

User Pools for Amazon Cognito - CredentialsError: Missing credentials in config

拥有回忆 提交于 2019-11-28 00:12:16
问题 I am trying to create a Web App Authentication with help of this tutorial. Here is the code I have written - var app = {}; app.configureCognito = function(){ AWSCognito.config.region = 'us-east-1'; var poolData = { UserPoolId: 'userPoolId', ClientId: 'ClientId' }; var userPool = new AWSCognito.CognitoIdentityServiceProvider.CognitoUserPool(poolData); var userData = { UserName:'MyName', Pool: userPool }; var attributeList = []; var dataEmail = { Name: 'email', Value: 'mailme@mydomain.com' };

AWS Cognito iOS Developer Authenticated Identities

北城以北 提交于 2019-11-27 23:21:44
I am trying to use amazon cognito with developer authenticated identities. My API is successfully returning an id and token. However, when I use these tokens to upload content to S3 I receive the following error: Not authorized to perform sts:AssumeRoleWithWebIdentity Below is my code for setting up the credentials provider. ZGAWSIdentityProvider *identityProvider = [ZGAWSIdentityProvider new]; [identityProvider setIdentityPoolId:AWS_IDENTITY_POOL_ID]; AWSCognitoCredentialsProvider *credentialsProvider = [[AWSCognitoCredentialsProvider alloc] initWithRegionType:AWSRegionUSEast1

How to pass Cognito token to Amazon API Gateway?

孤街浪徒 提交于 2019-11-27 17:48:13
问题 I'm developing web app based on Amazon API Gateway. Now I created Facebook login and successfully logged into website. but when I call another API, everything gone. I think I should pass Cognito token when call API everytime. am I right? if yes, how to pass Cognito token to API? like header? or another way? Thanks, 回答1: You are using the "Basic Authflow" from cognito identity, which means you will need to get credentials for your users by calling STS's "AssumeRoleWithWebIdentity". Here is

How do I call an API Gateway with Cognito credentials in Python

China☆狼群 提交于 2019-11-27 16:54:54
问题 I've managed to setup an API Gateway secured with Cognito. The unauthenticated user role has an access policy that should grant it access to the gateway. I've also managed to use boto3 to retrieve an identity ID from the pool and obtain the associated open ID token, as well as the associated secret and access keys. How do I now make a call to the gateway using these credentials? Is there a way to use boto3 to handle signing a request to a particular method on the API? 回答1: Here is an example

AWS Cognito Swift credentials provider “logins is deprecated: Use AWSIdentityProviderManager”

安稳与你 提交于 2019-11-27 15:19:33
Im trying to allow users to sign up with my app using facebook and Amazon Cognito. I found previous documentation saying to use: let token = FBSDKAccessToken.currentAccessToken().tokenString var logins: NSDictionary = NSDictionary(dictionary: ["graph.facebook.com" : token]) credentialsProvider.logins = [AWSIdentityProviderFacebook: token] but I am getting the message that logins is deprecated and to use the protocol AWSIdentityProviderManager to provide logins to the credentials provider, which I don't know how to do. I tried to have my class implement AWSIdentityProviderManager and created a