Exchange IdP tokens for Cognito tokens

0

I have a web application with existing login flows integrated with an external IdP for authentication. Now as part of the same UI, I'm introducing a new sub functionality that calls an API via API gateway. My requirement is to authorize this API call without re-authenticating the user and no changes to existing authentication flow. I have the following questions -

  1. Would you recommend using Cognito in this scenario or use the existing IdP integration and authorize the API via Lambda Authorizer?
  2. Could both work together - i.e continue using the existing IdP integration but leverage cognito only for the new functionality without re-authentication? If yes, can you please share some references or approach on how to configure this?
  3. Following point 2, is it possible to exchange the IdP tokens with Cognito tokens without re-authenticating the user? If yes, what the API/command to do so?
Shruthi
preguntada hace 6 meses70 visualizaciones
No hay respuestas

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas