Exchange IdP tokens for Cognito tokens

0

I have a web application with existing login flows integrated with an external IdP for authentication. Now as part of the same UI, I'm introducing a new sub functionality that calls an API via API gateway. My requirement is to authorize this API call without re-authenticating the user and no changes to existing authentication flow. I have the following questions -

  1. Would you recommend using Cognito in this scenario or use the existing IdP integration and authorize the API via Lambda Authorizer?
  2. Could both work together - i.e continue using the existing IdP integration but leverage cognito only for the new functionality without re-authentication? If yes, can you please share some references or approach on how to configure this?
  3. Following point 2, is it possible to exchange the IdP tokens with Cognito tokens without re-authenticating the user? If yes, what the API/command to do so?
Shruthi
已提问 6 个月前70 查看次数
没有答案

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则