Revoke Cognito federated login Apple token

Question

Our application uses out-of-the-box "Cognito federated OAuth flow" to allow user to Sign In With Apple. Starting June 30, 2022, Apple requires app to have "account deletion' functionality and apps that support Sign in with Apple should use the Sign in with Apple REST API to revoke user tokens. .https://developer.apple.com/support/offering-account-deletion-in-your-app/.

Does Cognito revoke federated identity tokens? If so, how can i initiate revoke process?

Does Cognito revoke federated identity tokens?
If so, how can i initiate revoke process?

Answer

The way I read the Apple article is that apps in the Apple store need to provide user initiated deletion. You will need to write that function within your app using the using the DeleteIdentities API, https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DeleteIdentities.html.

Revoke Cognito federated login Apple token

Contenuto pertinente