Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
3
votes
2 answers

How to force AWS Cognito: signUp() to execute synchronously (nodejs)

I am trying to set up a node application that uses the AWS cognito sdk to register/login/confirm/authenticate a user. I am currently unable to get the response from the signUp() method as the code seems to be running asynchronously. I have tried…
3
votes
2 answers

How to generate AWS CloudFormation using existing environments

I have existing AWS configuration Api getway RDS EBS EC2 Cognito S3 aws Lambda Now I want to create different environment like Dev, QA, UAT and Prod Is there any option available in AWS or Open source to generate cloud formation scripts with…
vaquar khan
  • 10,864
  • 5
  • 72
  • 96
3
votes
0 answers

Securing Cloudfront using Cognito IDToken

Hi my website is hosted though cloudfront by using s3. Is there a way to secure access to my cloudfront using id token from my cognito user pool?
James
  • 31
  • 1
3
votes
0 answers

AWS "CognitoUserSession" always returning true even if the tokens are expired

I have a lambda function which contains the following code; import { CognitoRefreshToken, CognitoAccessToken, CognitoIdToken, CognitoUserSession } from…
BKM
  • 6,949
  • 7
  • 30
  • 45
3
votes
4 answers

AWS API Gateway ignores auth policy returned from the Custom Authorizer Lambda Function

I'm trying to implement custom authorization on API Gateway, that would check user's permissions on each particular endpoint behind it, by reading them from the DynamoDB. I associated the authorizer with the method in question (screenshot…
3
votes
1 answer

AWS Cognito. How to decode JWT in Python

I want to authenticate users using Cognito Identity provider (Facebook) in Django application. When user signs-in, he is redirected to home page with access_token and id_token. These are JWT tokens. I need to decode them to get information about…
Mikey
  • 400
  • 4
  • 11
3
votes
1 answer

How to get metadata out of AWS Cognito JWT to use it for the MongoDB Stitch Metadata Fields?

I am using AWS Cognito as the custom authentication for my MongoDB Stitch app. I can successfully retrieve the JWT from AWS Cognito and login to MongoDB Stitch. I would like to store attributes in the JWT. I need help on how to get the JWT path to…
3
votes
2 answers

CognitoIdentityServiceProvider.signUP() doesn't accept user pool id?

In the aws-sdk cognito documentation there is a function listed called signUp() that quote "Registers the user in the specified user pool and creates a user name, password, and user attributes." However, there is no parameter for a user pool Id. How…
Carl
  • 457
  • 5
  • 23
3
votes
1 answer

Security token is invalid when calling API using AWS Amplify & Cognito

I'm trying to install AWS Amplify in an existing angular project. I'm using Cognito User Pool with Cognito Federated Identity. I'm able to login but when I tried to call my API I got the message {"message":"The security token included in the request…
3
votes
0 answers

InvalidLambdaResponseException - Unrecognizable lambda output when sign in without password with amplify

I am developing a custom auth flow in aws cognito with lambda triggers. I used the sample code given by aws for lambda triggers DefineAuthChallenge_Authentication, CreateAuthChallenge_Authentication and VerifyAuthChallenge_Authentication, It's even…
3
votes
2 answers

Authenticating application using Cognito and Devise

I am trying to implement AWS Cognito into my application for better all round authentication. The system is a Rails application that is currently using Warden/Devise as the method for handling user accounts (Login,Registration). My goal is to have a…
3
votes
0 answers

Is it possible to validate only password for AWS Cognito user with MFA enabled?

I have a scenario that requires extra password validation for mission critical parts of an application. i.e. when user performs very sensitive action ze should enter the password in order to confirm the action. I've tried ADMIN_NO_SRP_AUTH and it…
3
votes
2 answers

Can users be migrated from my mongodb database to aws cognito user pool?

For better security I would like to move all of my web application users to aws cognito. Is it possible to migrate the user data from mongodb to cognito in such a way that all my customers can login with their same old password ? Or is it mandated…
sp497
  • 2,363
  • 7
  • 25
  • 43
3
votes
3 answers

How to automatically refresh Cognito Token in a page

I use AWS Cognito service for authentication. In my Angular 7 app, I use Amplify Auth to guard my pages. If user navigates between different pages, Amplify will automatically handle the token refresh and they will not see token expirations. If…
user2777473
  • 3,736
  • 5
  • 26
  • 39
3
votes
2 answers

How to give access to certain user groups in cognito using Appsync

I recently got into AWS and I'm using appsync alongside a dynamo table with an idex for user id(from the cognito pool) to give only certain user access to certain data. Now I would like to further expand upon this and also give access to certain…
jibidijib
  • 407
  • 2
  • 6
  • 16