Custom domain for "cognito-idp.us-east-1.amazonaws.com"

0

I have a Cognito app client configured to use USER_PASSWORD_AUTH flow. By POSTing this request:

{ "AuthParameters": { "USERNAME": "{{Username}}", "PASSWORD": "{{Password}}" }, "AuthFlow": "USER_PASSWORD_AUTH", "ClientId": "{{AppClientId}}" }

to "cognito-idp.us-east-1.amazonaws.com", I am able to successfully authenticate and retrieve JWTs.

I would like to CNAME the URL to be something like "auth.mydomain.com", but when I do that, I get a client certificate validation error. Is there anyway to associate a valid certificate so I can CNAME the URL successfully?

3 Answers
2

Hi,

You will not be able to CNAME the cognito endpoint domain but you can create a proxy to this endpoint using API Gateway or CloudFront and you can assign a custom domain to your proxy endpoint. You may find this blog post helpful which demonstrates using CloudFront as a proxy to Cognito endpoint but you can also implement a simpler proxy using API Gateway.

EXPERT
answered 10 months ago
  • Thanks for this answer. Is there any alternative method to get the JWT ID Token from the Cognito username/password using a custom domain name? Or is a proxy the only solution here?

1

Hey there,

It sounds like you're looking to use a custom domain name in Cognito. Give this doc a look and come back to us if you have more questions.

profile picture
answered 10 months ago
  • Not trying to do this for the Hosted UI. Trying to use a simple request with username/password flow to get a JWT ID Token. This works using cognito-idp.us-east-1.amazonaws.com, not mydomain.auth.us-east-1.amazoncognito.com. If I am mistaken, please let me know how to do this without a user entering credentials into a website.

0

sorry i wasn't able to help, removing my answer

profile picture
Sri
answered 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions