trouble getting userinfo from id_token in Cognito

Question

After performing an .....amazoncognito.com/login?.... via the hosted web UI, I am correctly redirected to the callback URL with a query param "id_token" that I can use to access my API Gateway endpoints via x-api-key.

I am wanting to use the ID token to get the Cognito user info associated with that token (for verifying in my API that the token will allow for access to data that should only be accessed by that user).

How can I get the Cognito User ID, email etc? the ....amazoncognito.com/ouath2/userinfo seems like what i need but don't know how to correctly use that endpoint with the ID_token I have.

Answer

Hi,

The ID Token is a JWT Token. The payload section of the JWT token should have the user info that you are looking for.

I'd recommend checking out the following documentation and knowledge center article:

1. [Using the ID token](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-id-token.html)
2. [How can I decode and verify the signature of an Amazon Cognito JSON Web Token?](https://aws.amazon.com/premiumsupport/knowledge-center/decode-verify-cognito-json-token/)

trouble getting userinfo from id_token in Cognito

Relevant content