Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
44
votes
6 answers

AWS : Invalid identity pool configuration. Check assigned IAM roles for this pool

I have created one user pool & identity pool. I have used javascript sdk. I am able to signup, send confirmation code & confirm user successfully with javascript sdk. But when i try to sign in user with authenticate method & try to get credentials…
43
votes
3 answers

AWS Lambda API gateway with Cognito - how to use IdentityId to access and update UserPool attributes?

OK I am now days into this and have made significant progress but am still completely stumped about the fundamentals. My application uses Cognito User Pools for creating and managing users - these are identified on S3 it seems by their IdentityId.…
Duke Dougal
  • 24,359
  • 31
  • 91
  • 123
42
votes
6 answers

AWS Cognito: Add custom claim/attribute to JWT access token

My app creates a custom attribute "userType" for each new signed-up user. Now I would like this "userType" claim/attribute to be added to the JWT access token whenever the user signs in or the token gets refreshed. Is there an option to tell cognito…
Hiren Makwana
  • 1,976
  • 2
  • 13
  • 28
41
votes
8 answers

How do I integrate amazon cognito login in postman?

I was using Amazon Cognito user pool for login. When I access my web application, I get a redirect to https://.auth..amazoncognito.com/login?response_type=code&client_id=&redirect_uri= . Once logged in with the…
Shamseer PC
  • 787
  • 2
  • 9
  • 20
41
votes
6 answers

Is it possible to modify AWS Cognito user attributes in the Lambda triggers

Having a look at the AWS documentation, https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html#cognito-user-pools-lambda-trigger-syntax-pre-signup you have the following paramaters…
Altus
  • 1,315
  • 3
  • 11
  • 19
41
votes
4 answers

How to change password of AWS Cognito User?

I'm developing a web application which uses the AWS services backend side. I'm using AWS Cognito to manage the users but I have a problem. When I create a new user (with a temporary password) it is required that I change this password manually to…
claudioz
  • 1,121
  • 4
  • 14
  • 25
41
votes
4 answers

Can you export/migrate users out of AWS cognito, does it cause vendor lock-in?

This is a question about vendor lock in and AWS cognito. Can user data and encrypted/hashed passwords be exported out of cognito if we ever move off of AWS? Can/does cognito use standard hashing or configurable hashing of the user passwords or allow…
MonkeyBonkey
  • 46,433
  • 78
  • 254
  • 460
40
votes
5 answers

How AWS Cognito User Pool defends against bruteforce attacks

I am going to use AWS Cognito User Pool product as user directory for application and have several questions: Is Amazon throttle request to Cognito User Pool and if yes what is the rate limit of calls to get throttled? How Cognito defends against…
knok16
  • 581
  • 1
  • 5
  • 15
39
votes
3 answers

AWS Cognito User Pool without a password

I want to use a phone number as the username for my app and i want to be able to make it simple to sign up by just having to verify the phone number each time they want to login - no messy password remembering business. How to do this with AWS…
spar
  • 461
  • 1
  • 5
  • 11
38
votes
3 answers

Can I use AWS cognito to provide a open id connect endpoint?

I want to use AWS cognito as a OpenId connect provider.My AWS cognito IDP will intern call my another OpenId provider to authenticate the user. It will then create its new token and hand over to callers as its own. The OpenID provider used…
user93796
  • 18,749
  • 31
  • 94
  • 150
37
votes
4 answers

Custom attribute not passed into ID_TOKEN created by AWS Cognito

I am not able to get custom attribute in ID_TOKEN returned from AWS Cognito after successful user login. Steps I tried : 1.Created user pool 2.Created app client and checked the custom attribute(customattrib1,customattrib2) User Pool screen : Check…
37
votes
2 answers

AWS Cognito delete-custom-attributes?

There is add-custom-attributes command in cognito-idp but no delete-custom-attributes? How do I delete them?
Li Li
  • 841
  • 1
  • 7
  • 7
37
votes
4 answers

How to use AWS IoT to send/receive messages to/from Web Browser

We are trying to use Amazon Web Services Internet of Things (AWS IoT) to send messages from/to a Web Browser (e.g: . Given that the AWS IoT supports JavaScript we expect that this is possible ... We have searched at the AWS IoT Documentation but…
36
votes
4 answers

AWS API Gateway - using Access Token with Cognito User Pool authorizer?

I am configuring an app with various frontends (mobile and web apps) and a single API backend, powered by Lambda and accessed via AWS API Gateway. As I'm planning to use Cognito to authenticate and authorize users, I have set up a Cognito User Pool…
Harry
  • 4,660
  • 7
  • 37
  • 65
35
votes
7 answers

TOKEN endpoint returns invalid_client without client secret

I am having difficulty with the authorization code flow in Amazon Cognito. The workflow that I am trying to build is the following: A user authenticates with the built-in Cognito UI. Cognito redirects back with the authorization code. I send the…
Anton Baranenko
  • 564
  • 1
  • 4
  • 7