Modify an Identity Pool Cognito JWT

Question

I've joined a team working on an application that uses Cognito with Identity Pools and user state in Cognito Sync.  We need to add some authentication to our process and the natural place would be to sprinkle a little data into the Cognito-generated JWT.  I'd like to grab that data from, say, a lambda querying Aurora.  I see that User Pools have a pretoken generation lambda trigger.  Is there something similar I can do for identity pools?

Answer

Hi,

Can you share more details on how you get a token from cognito identity pool and how do you use it in your application? are you using [GetOpenIdTokenForDeveloperIdentity](https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetOpenIdTokenForDeveloperIdentity.html) API?

Answer

We're using the Javascript aws-sdk: new AWS.CognitoIdentityCredentials.  Currently, we only use the token to maintain login state, renew token, logout, etc.  Looking forward, we'd need a custom inspection for the new elements.

Modify an Identity Pool Cognito JWT

Relevant content