Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
3
votes
1 answer

AWS AppSync DDoS protection. What are the alternatives?

I have not seen a definitive answer over the internet related to how AppSync can deflect DDoS attacks. I am a newbie with regards to this, so please have patience Our context: We will be using AppSync with AWS Cognito for authentication, and it will…
ImmoralWombat
  • 395
  • 2
  • 11
3
votes
5 answers

How to send a custom message for CustomMessage_AdminCreateUser trigger?

When sending a custom email message for CustomMessage_AdminCreateUser trigger, I successfully change the emailSubject attribute in the event received from Amazon Cognito, but can't seem to change the emailMessage attribute. The email sent from…
3
votes
1 answer

Cognito sign in verification email not getting username

I have set up cognito but the email verification page is not getting my username properly (printing placeholders). My cognito settings as follows and the verification email that I received is as follows: Do I have to use custom lambda triggers for…
Gene
  • 2,178
  • 3
  • 30
  • 50
3
votes
1 answer

Error: A JNI error has occurred, please check your installation and try again in Maven Project in Eclipse EE

I built this Java Project on GitHub by Creating a Maven Project in Eclipse IDE for Enterprise Java Developers Version: 2019-03 (4.11.0), Build id: 20190314-1200 and copying the pom.xml file and src folder into my project and updated the project with…
daniel
  • 1,446
  • 3
  • 29
  • 65
3
votes
1 answer

AWS Cognito IAM : InvalidSmsRoleTrustRelationshipException: Role does not have a trust relationship allowing Cognito to assume the role

I am trying to create a Cognito user Pool through a lambda function, using Go lang. The IAM Role, IAM policy and the Trust relationship policy is getting created successfully. But when I try to create the Cognito pool, I am getting an…
Dattatray
  • 1,745
  • 1
  • 21
  • 49
3
votes
0 answers

Server Side: how to refresh expired tokens?

I'm working on a nuxt.js application with amplify providing the backend, more specifically: Cognito for user/identity management and AppSync for the API. AppSync uses IAM as authorization on the client side and API KEY on the server side. When the…
Running Turtle
  • 12,360
  • 20
  • 55
  • 73
3
votes
2 answers

Why is Cognito rejecting my SAML assertion?

I'm doing a proof of concept for federating SAML into Cognito. I've setup Shibboleth v3, and once I finally got the log level set, I can see the SAML being sent back to Cognito, which just redirects to my configured page with…
Lee Crabtree
  • 1,196
  • 2
  • 12
  • 30
3
votes
3 answers

How to call an AppSync mutation with Cognito authentication using python?

Is it possible to calling an AppSync mutation with Cognito authentication using Python? How? I am trying to use boto3, but I don't found a way to execute graphql…
Andrey
  • 2,485
  • 3
  • 21
  • 26
3
votes
2 answers

Permissions for a AWS Lambda function to list users

I have an AWS Lambda function that needs to be able to run this code: var cognitoidentityserviceprovider = new AWS.CognitoIdentityServiceProvider(); cognitoidentityserviceprovider.listUsers(params, function(err, data) { if (err) console.log(err,…
Michel
  • 10,303
  • 17
  • 82
  • 179
3
votes
1 answer

In AWS Cognito set temporary password for existing user and set status to "Enabled / FORCE_CHANGE_PASSWORD"

Is there an admin api to set a temporary password for an existing user and set the account back to "Enabled / FORCE_CHANGE_PASSWORD"? We are in the early stages of changing authentication in an old winform app to use AWS Cognito. We are not allowed…
Scott Mcnitt
  • 33
  • 1
  • 1
  • 4
3
votes
0 answers

How to get accessToken from AWS Cognito when using Ionic's (cordova) Facebook Plugin?

I need to exchange facebook's accessToken with Cognito accessToken. I am getting the session Token but dont know how to get the access token. I need to use the Ionic' native facebook plugin to sign-in to AWS Conito user pool. I have setup the…
3
votes
2 answers

AWS Cognito sign up without password to get email confirmation link

I want to make a simple flow for registration app. User sign up with only email -> The verification/registration link is sent to the email -> People register (putting in their password) on that link I've googled anything but haven't found any way…
Terry Djony
  • 1,975
  • 4
  • 23
  • 41
3
votes
2 answers

Cannot test Cognito authenticated API Gateway call in Postman (its an ADMIN_NO_SRP_AUTH pool)

I've managed to successfull login to the API gateway I've made via my iOS device and Cognito. The problem is I'd like to use postman to test the API calls then implement them on the phone. Currently, Postman cannot authenticate (despite AWS saying…
3
votes
2 answers

Cognito forget password api do not given any response for verification code sent(success) or failure

I use amazon-cognito-identity-js for cognito pool data. Please look at my forgetPassword.js code: const response = await AwsForgetPassword(this.state.email) .then(response => { console.log(response); }) .catch(error => { …
3
votes
1 answer

Cognito custom-message triggered lambda returns InvalidLambdaResponseException

I've created a lambda and assigned it to cognito throw the UI as its custom-message lambda. Here is the code in typescript: export const handler = async (event) => { const trigger = event.triggerSource const customMessage =…