Unable to get token using Cognito for client credentials flow

Question

I want to use Cognito for server to server authentication via client credentials. I created and configured a user pool and a client app. with client id and secrets. When I use postman to post to https://{myapp}.auth.us-west-2.amazoncognito.com/oauth2/token, I always get 405 error. I followed some examples online, but they don't seem to work.

Mikel Del Tio · Accepted Answer

Hi,

Both the `POST` method and `/oauth2/token` path seem correct. Could you check that you are sending the `Content-Type` header with `application/x-www-form-urlencoded` as value? According to [AWS documentation](https://docs.aws.amazon.com/cognito/latest/developerguide/token-endpoint.html#post-token), this header is mandatory and must contain the indicated value.

Tarit_G · Answer

You must make a `POST` request to the `/token` endpoint of your Cognito user pool. Please refer to the steps mentioned under "**Client credentials grant**" section [of this article](https://aws.amazon.com/blogs/mobile/understanding-amazon-cognito-user-pool-oauth-2-0-grants/#:~:text=party%20identity%20provider.-,Client%20credentials%20grant,-The%20client%20credentials).

Unable to get token using Cognito for client credentials flow

Add your answer

Relevant content