How to get the ID token in trigger functions of AWS Cognito?

Question

In the trigger functions of AWS Cognito, say `Post confirmation trigger` or `Post authentication trigger`, I would like to get the ID token, such that I could query some other services on behalf of the user.

Is that possible and if so, how?

It would be terrific if you could also provide a small example in Javascript and/or Python.

Answer

Hi,

Unfortunately the Post confirmation and Post authentication Lambda triggers don't include the ID Token, just the userAttributes, clientMetadata and the [common parameters](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html#cognito-user-pools-lambda-trigger-syntax-shared) that Cognito adds to all requests.
* [Post authentication Lambda trigger parameters](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html)
* [Post confirmation Lambda trigger parameters](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html#cognito-user-pools-lambda-trigger-syntax-post-confirmation)

How to get the ID token in trigger functions of AWS Cognito?

Relevant content