Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
35
votes
1 answer

AWS Cognito's SMS Multi Factor Authentication returns invalid code or auth state

I am trying to implement authentication built on Cognito using their Go SDK. I have been able to get basic username/password authentication to work, but when I add in 2-factor authentication using SMS I am getting stuck. Steps to reproduce : I…
Ben
  • 1,793
  • 2
  • 15
  • 22
35
votes
11 answers

AWS Cognito; unauthorized_client error when hitting /oauth2/token

Steps taken so far: Set up new user pool in cognito Generate an app client with no secret; let's call its id user_pool_client_id Under the user pool client settings for user_pool_client_id check the "Cognito User Pool" box, add https://localhost as…
35
votes
6 answers

AWS Cognito username/email login is case-sensitive

Setup I am using AWS Cognito to manage the user registration and user access for my web application. Specifically I am using the Cognito hosted UI. This means that Cognito presents a UI for my users to register, I do not have access to modify the…
F_SO_K
  • 13,640
  • 5
  • 54
  • 83
35
votes
6 answers

How to allow my user to reset their password on Cognito User Pools?

So in my app I obviously want to provide the means for users to reset their passwords. The issue I'm having though is that the new documentation for User Pools is pretty ambiguous on this topic. Here is what they tell you to do for a Forgot Password…
Mark Keane
  • 984
  • 2
  • 11
  • 26
34
votes
3 answers

How to generate access token for an AWS Cognito user?

I' using Cognito user pool for securing my API gateway . Now I would like to make requests to my API using postman but I need to pass in Authorization token as the API is secured. Is there any AWS CLI command or REST API to generate auth tokens(by…
geekprogrammer
  • 1,108
  • 1
  • 13
  • 39
34
votes
10 answers

AWS Api Gateway Authorizer + Cognito User Pool Not Working {"message": "Unauthorized"}

I am trying to use aws api gateway authorizer with cognito user pool. It is working fine when i test using aws api gateway console. But when i try enabling the authorization in the api it says "message": "Unauthorized". Please check below…
32
votes
1 answer

How do I reset a Cognito user's password that has expired?

We're using Cognito. All is well. I added a user using the AdminCreateUser API, and they received their temporary password. Unfortunately they waited over a month to login, and now when they try to login with their temporary password, Cognito…
Ryan Shillington
  • 23,006
  • 14
  • 93
  • 108
31
votes
2 answers

The difference between AWS Amplify and amazon-cognito-identity-js?

I'm reviewing this demo of how to integrate Cognito with Angular, and it amazon-cognito-identity-js for the authorization service. It seems that is what we should be using, but other tutorials install AWS Amplify as a whole: npm i…
Ole
  • 41,793
  • 59
  • 191
  • 359
30
votes
6 answers

AWS Cognito - How to force select account when signing in with Google

I'm currently using Cognito User Pools, federated with Google as an identity provider, to handle user sign in for my web app. At the moment, I have only implemented Sign-In with Google. This is currently being done through Cognito's Hosted UI. When…
30
votes
9 answers

Cognito own domain name required A Record

I am trying to assign an own domain name to a user pool for Cognito and facing an issue that it seems that an A Record is required. In my case i have registered wildcard on my internet domain and am trying to follow the steps as mentioned in…
Marco
  • 15,101
  • 33
  • 107
  • 174
30
votes
1 answer

How to Create a Client in Keycloak to use with AWS Cognito Identity Federation

I have a user base with identity and authentication managed by keycloak. I would like to allow these users to login and use AWS API Gateway services with Cognito using an OpenID Connect federation. The AWS documentation on using an OpenID Connect…
30
votes
5 answers

aws service difference between cognito user pool and federated identity

AWS provides cognito which provides the developer with sign-up and sign-in functionality including federations with OpenId compatible identity providers such as facebook, google etc. There are two types of categories in cognito developer console.…
jwchoi
  • 607
  • 7
  • 13
29
votes
8 answers

Cloudformation Cognito - how to setup App Client Settings, Domain, and Federated Identities via SAM template

I already have my cognito user pool cloudformation template working, and have it integrated to my api gateway. But somehow i still have to manually configure the app client settings, domain, and federated identities to have a working login portal…
Jeff
  • 760
  • 1
  • 12
  • 26
29
votes
1 answer

What's the difference between AWS SSO and AWS Cognito?

Let's say I have a few clients: corporation x, y, z. each of those corporation has their employees and their SSO (mostly SAML but can be also OpenId or anything else). I want to be able to integrate with their SSO so they can log in to my…
29
votes
4 answers

How to redirect after confirm amazon cognito using confirmation URL?

I want to redirect to a specific url after the user confirmation in amazon cognito. When a user sign up he will get confirmation mail with a verification link as…
Richardson. M
  • 852
  • 2
  • 17
  • 28