Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
3
votes
1 answer

Mobile Hub Cognito on iOS

I've been working on an iOS application that uses AWS Mobile Hub as a backend, and I can't seem to figure out how to implement a custom authentication UI for the User sign in feature. Better yet, I can't find any docs that at least give a hint at…
3
votes
1 answer

AWS Cognito TOKEN endpoint fails to convert authorization code to token

My app first uses the Cognito LOGIN endpoint to obtain an Authorization Code. It then uses the TOKEN endpoint to try and obtain tokens (id_token, access_token, refresh_token) but that fails with unauthorized_client. I do not understand why, the same…
mipnw
  • 2,135
  • 2
  • 20
  • 46
3
votes
2 answers

Finding user associated with a Cognito Identity

Is it possible to find which user (within a user pool) a given cognito identity belongs to. In the AWS Console? Programmatically ? In a Cognito Identity Pool, identities look like :. When those identities come from a Cognito User Pool,…
mipnw
  • 2,135
  • 2
  • 20
  • 46
3
votes
0 answers

Cognito User Pool custom attributes do not show up in the ID token if user pool is configured with a SAML identity provider

According to the documentation, the ID token (a JWT token) created by Cognito upon user authentication is also supposed to contain the custom attributes defined for the user's User Pool. It seems that when the User Pool is configured with a SAML…
sharpthor
  • 475
  • 1
  • 7
  • 13
3
votes
2 answers

How to get username from AWS Cognito - Swift

Q & A Style: See Answer Below How Can I get the username from a user logged in with Cognito? I've done this and my user is logged in, now what? AWSAuthUIViewController.presentViewController( with: self.navigationController!, configuration:…
froggomad
  • 1,747
  • 2
  • 17
  • 40
3
votes
1 answer

Lambda function on cognito login is not working for first time

I attached lambda function to my user pool. When i am creating the user pool first time using terraform, it is not working with error: "Lambda function: AccessDenied" If I remove the lambda function and reattach it, it is working fine. Any clue why…
Jayesh Dhandha
  • 1,983
  • 28
  • 50
3
votes
1 answer

OpenID authentication in AWS API gateway

I created an API with AWS API gateway that triggers a lambda function. Now I want to restrict access to this API. I own an OpenID connect identity provider. I want to require people to authenticate with my OpenID identity provider before accessing…
Gasp0de
  • 1,199
  • 2
  • 12
  • 30
3
votes
1 answer

User not creating in user pool when login with facebook in aws ? - android

i want to know how to create user entry in user pool when user login with facebook. I am able to integrate aws cognito up and the facebook log in just fine but user is not creating in user pool when login with facebook. identity Id is creating in…
3
votes
2 answers

AWS Cognito: cross region user pool replication (moving or sharing)

Just came to my attention that there are now more regions supporting Cognito. Is it possible to move a user pool from one region to another?
o-0
  • 1,713
  • 14
  • 29
3
votes
1 answer

Integrate Facebook login with AWS Cognito User Pool

I'm trying to integrate aws user pool in my project. I manage to do a normal login with email and password, but I need to add login in with Facebook. From what I read in documentation, for this I need to create an Indentity pool in Federated…
3
votes
1 answer

Is there a boto3 funciton to convert authorization_code into authorization_token

My project is python and using boto3 lib. I'm using aws cognito Authorization code grant flow with return_type=code instead of return_type=token (implicit flow). Once my user is authorized my redirect url is injected with the queryStringParameter…
knittledan
  • 754
  • 2
  • 9
  • 23
3
votes
0 answers

Unable to sts:AssumeRoleWithWebIdentity for a Cognito user

I have a simple use case to authenticate a user using AWS Cognito and the assume a role to be able to do something useful (read from S3 in my case). Apparently I am missing something very obvious. I am using pure web http client with cognito…
gusto2
  • 11,210
  • 2
  • 17
  • 36
3
votes
1 answer

Not able to send aws $context variable data in header - http proxy

I am using aws api gateway to send a http proxy to my server - if the user is authenticated, and need to send the user's username to my server for identification purpose. if I use the $context variable in body mapping…
Abdeali Chandanwala
  • 8,449
  • 6
  • 31
  • 45
3
votes
4 answers

Can one set email_verified to true in Cognito programmatically? How?

When I update the cognito users' email attribute via the updateAttribute or adminUpdateAttribute API, email_verified will be set to false. So I'd like to set email_verified to true programitically. My understanding is that it should use…
R.yama
  • 41
  • 1
  • 5
3
votes
3 answers

Appsync return 401 errors when connecting with cognito

So I've set up cognito and appsync and connected them both to my iOS client. Appsync works great from the console, but when i make any requests from iOS i get a 401 error without any error messages. I'm able to sign in and out of cognito fine. …