Cognito with API gateway integration

Hi

we are getting a below URL after Cognito signing

https://o0gv1hfg9i.execute-api.us-east-1.amazonaws.com/test/myresource#id_token=xxxxx&access_token=yyyyy&expires_in=3600&token_type=Bearer

and output is {"message":"Unauthorized"}

please advise if this is correct

This is not correct. The token should be added to the Authorization header like this: Authorization: Bearer id_token (or maybe the access token)

Hi

Below is our Cognito URL which provides us sign in page

https://yyyyy.auth.us-east-1.amazoncognito.com/login?client_id=xxxx&response_type=token&scope=openid&redirect_uri=https%3A%2F%2Fo0gv1hfg9i.execute-api.us-east-1.amazonaws.com%2Ftest%2Fmyresource

the output of the above URL is below the URL

https://o0gv1hfg9i.execute-api.us-east-1.amazonaws.com/test/myresource#id_token=xxxxx&access_token=yyyyy&expires_in=3600&token_type=Bearer

we are not changing anything here

please advise

Thanks

HI

We are sending an identity token. below are the details

Cognito URL which provides us sign in page

https://yyyyy.auth.us-east-1.amazoncognito.com/login?client_id=xxxx&response_type=token&scope=openid&redirect_uri=https%3A%2F%2Fo0gv1hfg9i.execute-api.us-east-1.amazonaws.com%2Ftest%2Fmyresource

the output of the above URL is below the URL

https://o0gv1hfg9i.execute-api.us-east-1.amazonaws.com/test/myresource#id_token=xxxxx&access_token=yyyyy&expires_in=3600&token_type=Bearer

we have configured that in the API Gateway methods with Cognito User Pools-based authentication. below are details

MyAuthorizer Authorizer ID: m9a1oe Cognito User Pool MyFirstUserPool - TpeUcTTj1 (us-east-1) Token Source Authorizaton

Token Validation

please advise

Thanks

Once the user signs in to the Cognito login page, the front-end application needs to include the generated token either identity or access token in the header of the API call to API Gateway using the header Authorization, as Uri explained. Are you doing that?

We have a good hands-on workshop that gives you a good feel of how you can make Cognito work with API Gateway - https://auth.serverlessworkshops.io/setup.html