By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

integration of cognito with verified permissions

0

in verified permissions can we do authorization process using access token from cognito:groups users.i have done the matching with sub value but i need to do with cognito:groups for my requirement for multiple users.using id token i have done different matches but while using access token i have done only with the sub value.is there any methods to do the authorization process using access token for handling multiple users. the best practice of authorization process is with using access token so i need methods using with access token

Topics
Security, Identity, & ComplianceManagement & Governance
Tags
Amazon CognitoAmazon Verified Permissions
Language
English
jai
asked 6 months ago307 views
2 Answers
0

Hi jai,
Using Cognito groups with IsAuthorizedWithToken() call is not yet supported. You have a couple of alternatives:

  • Switching to use isAuthorized() and manually verifying / unpacking token and then constructing principal portion of entity slice yourself
  • Using scope from access token as a way to match mulitple users
Maxim
answered 6 months ago
  • jai
    6 months ago

    Hi maxim, i think each clientIds under we are creating the users, i have doubt to match the multiple users under a particular clientId giving some restrictions.How we can handle scope variable because all scope values are same for every users

  • jai
    5 months ago

    can we add custom claims or modify instead of cognito groups in access token

0

Unfortunately the isAuthzWithToken API does not currently support groups.

I would recommend using the plain vanilla IsAuthorized API instead. In this scenario, you would translate the token to a user entity and pass the entity to the IsAuthz API. You can find sample code for translating the entity and sending it to AVP here

AWS
pabhi_aws
answered 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content