Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
58
votes
3 answers

AWS Cognito Error: 'identityPoolId' failed to satisfy constraint

I am new Cognito. I am trying to implement AWS Cognito using Lambda. This is the tutorial I am following. AmazonCognitoIdentityClient client = new AmazonCognitoIdentityClient(); GetOpenIdTokenForDeveloperIdentityRequest…
suku
  • 10,507
  • 16
  • 75
  • 120
53
votes
15 answers

Amazon Cognito: How to stop getting "redirect_mismatch" error when redirecting from browser to Android app

I am trying to create a Android project where I authorize a user by having him log into Amazon Cognito in a browser, which should then redirect back to my app. Unfortunately, when the browser opens, instead of reaching the proper sign-in page, I…
JHowzer
  • 3,684
  • 4
  • 30
  • 36
52
votes
2 answers

What is a Cognito App Client Secret

At the documentations there's an App Client Secret, but I can't find anywhere its purpose. I see the javascript SDK doesn't use it, I also don't know why, probably because many javascript applications run on the users browser, not a place to expose…
Michel Feinstein
  • 13,416
  • 16
  • 91
  • 173
52
votes
7 answers

Where to find Identity Pool Id in Cognito

Where is Identity Pool in Cognito Console. In the docs mentioned: IdentityPoolId An identity pool ID in the format REGION:GUID. But I see only Pool Id and Pool ARN in the console. Which have different formats.
Alex Po
  • 1,837
  • 1
  • 24
  • 28
51
votes
3 answers

AWS cognito: What's the difference between Access and Identity tokens?

Just reading the docs, they seem very similar to me so I can't really discern why to use one over the other. Although identity token seems better since it has custom attributes on it from the user pool (eg: custom:blah and the default ones like name…
Zombies
  • 25,039
  • 43
  • 140
  • 225
51
votes
4 answers

Should I use AWS Cognito "username" or "sub" (uid) for storing in database?

I have an authenticated user in AWS Cognito service and want to store his unique identifier in the database. Should I store user's username (it's his phone number) or his "sub" (it's his uid)? All Amazon API functions like AdminGetUser are using…
lexa
  • 955
  • 2
  • 13
  • 18
50
votes
4 answers

How to use Amazon Cognito without Amplify

I'm just now diving into Cognito. The AWS setup has been fairly straight-forward, easy. We have a variety of apps, webapps, and services and we'd like those to make use of the Cognito service. I've experience setting up similar with Auth0, but…
Michael Prescott
  • 764
  • 1
  • 6
  • 14
50
votes
8 answers

AWS Cognito - User stuck in CONFIRMED and email_verified = false

How do I go about email verifying a user who is CONFIRMED yet email_verified is false? The scenario is roughly an agent signs up user on their behalf, and I confirm the user through the admin call adminConfirmSignUp. At that point, the user cannot…
user1432403
  • 1,533
  • 4
  • 16
  • 21
48
votes
4 answers

How do I use Amazon Cognito as user authentication for my website (NOT mobile app)

How can I use AWS-Cognito for user authentication in a web app (not IOS or Android app)? Amazon cognito just came out: http://aws.amazon.com/cognito/ http://aws.amazon.com/about-aws/whats-new/2014/07/10/introducing-amazon-cognito/ From the FAQ: Q:…
Nate
  • 2,940
  • 3
  • 22
  • 24
47
votes
5 answers

When I try to login using AWS Cognito I get an AccessDeniedException about my custom Lambda trigger

I am calling adminInitiateAuth and getting back a strange AccessDeniedException for my own lambdas. Here is the code I'm calling: var params = { AuthFlow: "ADMIN_NO_SRP_AUTH", ClientId: "@cognito_client_id@", …
Ryan Shillington
  • 23,006
  • 14
  • 93
  • 108
46
votes
2 answers

Does AWS Cognito remove the need for a 'users' table in my database?

With AWS Cognito doing its thing with authentication does this mean I no longer need a traditional 'users' table in my database? Currently the app I have inherited has the traditional 'users' table I reference with sql queries looking for…
user3067684
  • 936
  • 9
  • 18
46
votes
2 answers

AWS Cognito as Django authentication back-end for web site

My reading of Cognito is that it can be used in place of a local Django admin database to authenticate users of a website. However I am not finding any soup-to-nuts examples of a basic "Hello, World" app with a login screen that goes through…
46
votes
8 answers

What is the REST (or CLI) API for logging in to Amazon Cognito user pools

How do i make logins happen via Amazon Cognito REST APIs (for user pools) on platforms for which there is no official SDK? - Note that i am asking for user pools - not identity pools. Synopsis Amazon cognito provides 3 kinds of logins: federated…
Rakib
  • 12,376
  • 16
  • 77
  • 113
45
votes
1 answer

What does the `aws.cognito.signin.user.admin` scope mean in Amazon Cognito?

Amazon Cognito has a number of system-reserved scopes: openid email phone profile aws.cognito.signin.user.admin But doesn't document what they give access to. The first 3 are fairly self-explanatory. I would expect profile to mean the user…
GlennS
  • 5,251
  • 6
  • 28
  • 31
45
votes
8 answers

How do I access the group for a Cognito User account?

In AWS Cognito, you can add a user to a group (after first creating a group). A user may belong to one or more groups. With using the JavaScript SDK (https://github.com/aws/amazon-cognito-identity-js), is there a way to read the assigned Groups?…
user1322092
  • 4,020
  • 7
  • 35
  • 52