Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
3
votes
1 answer

AWS Lambda event.requestContext.identity.cognitoIdentityId returning null

I am trying to get the Cognito username from within my lambda function. I have enabled my api gateway to use "Use Lambda Proxy integration". It is now returning the identity object but cognitoIdentityId is returning null?!? Is there something I am…
3
votes
1 answer

AWS Serverless Framework User Groups in .yml file?

Has anyone set up user groups in a cognito user pool in serverless framework? I understand that I can create both a user pool and a user group in the resources section of the .yml file, but the problem I'm facing is that the user group requires the…
3
votes
1 answer

Cannot sign out the user from AWS Cognito

I have set up an API Gateway authenticated using AWS Cognito. Once the user signs in, I use the following script to verify their credentials: const cognitoidentityserviceprovider = new AWS.CognitoIdentityServiceProvider(); const params = { …
Mehran
  • 15,593
  • 27
  • 122
  • 221
3
votes
1 answer

Writing Cognito user info to DynamoDB through a post-confirmation lambda function?

I'm having trouble implementing a post-confirmation lambda function in which I take the user submitted credentials from the sign-up process and write those to a 'Users' DynamoDB table. The specific entries that I'm trying to write to the table are…
3
votes
1 answer

Can aws-amplify support multiple concurrent logins that can be switched amongst?

There are many applications today, such as the G Suite family of applications, that enable rapid "identity switching" amongst federated identities that have been previously logged into. What it looks like in a G Suite application to quick switch…
Bill Boulden
  • 178
  • 9
3
votes
0 answers

SAM LOCAL - Cognito username in event missing - how to hook this up?

I am using SAM LOCAL and start-api to test my lambda functions using postman. I use Cognito for user authentication and pass the cognito token to the API Gateway. In production, it works fine. I need the username from Cognito (requestContext:…
sgiot
  • 31
  • 2
3
votes
1 answer

Can I send emails to users in Amazon Cognito?

As far as I understand, I cannot easily iterate through the users in Amazon Cognito. Is there a way that I can send all of my users an email on updates for my app (possibly through SES)? Or should I not use Cognito because it is not built for this…
Alan Liang
  • 358
  • 2
  • 15
3
votes
0 answers

Cognito - User not able to login when device time zone is EDT and current time is set to that in IST

I am using AWS cognito for login in my android app. The login fails in a weird scenario. I set time zone to EDT(GMT-4) and set the time to current IST. When I try to login I get an exception as "CognitoNotAuthorized Exception". Can someone please…
Maila
  • 31
  • 5
3
votes
0 answers

cognitoUser.forgotPassword not changing Cognito user status to RESET_REQUIRED

I am building the forget password process by using lambdas. The process I am following is, breaking this in two different lambdas. One for starting the forgot password process and the second one for confirming the new password. (This is because of…
3
votes
2 answers

Change AWS Cognitio "Enabled Identity Providers" via Python SDK

There is a setting I want to change via Python SDK reguarding AWS Cognito. I can change the setting in the AWS Web Console via "Cognito -> User Pools -> App Client Settings -> Cognito User Pool" (See image) Here is my code client =…
Sam Anthony
  • 1,669
  • 2
  • 22
  • 39
3
votes
1 answer

AWS cognito - Add acr_values parameter to authorize URL supplied by Cognito when calling OIDC provider

I have an OpenID Connect Identity provider set up in an AWS Cognito user pool. When trying this URL in a browser:…
Jonas
  • 31
  • 1
  • 2
3
votes
1 answer

Angular AWS Amplify authenticator extrra fields

I'm trying to use the AWS Amplify with Angular for authentication with Cognito, the problem that I'm facing is, when I call the component: It does not come with all the fields for Sign up, that I…
tubadc
  • 752
  • 1
  • 10
  • 25
3
votes
1 answer

API-Gateway Auth: AWS sigv4 vs Cognito User Pool JWT

When I use API-Gateway to define my endpoints, some of my endpoints are only accessible from a signin-ed user. (I am using Cognito User Pool to manage my users) I see different ways to achieve this goal SigV4, see Page 19; JWT token from Cognito…
chen
  • 4,302
  • 6
  • 41
  • 70
3
votes
1 answer

Is there a way to immediately revoke a Cognito Client Credentials Flow issued access token?

AWS Cognito has API methods GlobalSignout and AdminUserGlobalSignout that can be used to revoke the access and refresh tokens issued for a user in a user pool (but not the ID token). However, the access token issued using the client credentials flow…
Zach
  • 805
  • 1
  • 9
  • 16
3
votes
2 answers

"Forgot username" flow for AWS Cognito?

I'm using ASW Cognito for authenticating users. Cognito has a well-documented flow to handle users who have forgotten their passwords. How do I handle users who have forgotten their usernames? Is there a built-in flow that lets the user enter their…
Shouvik
  • 157
  • 10