Cognito Hosted UI, using code flow and refresh with an SDK?

Question

I have setup the hosted Cognito sign-in UI using the authorisation code flow (and a user pool) with a redirect to a simple html/JS/CSS website app. I have played successfully with using the auth code thats returned on redirect and making calls to get the access token and refresh etc, though rather crude JS code of mine. However I have been trying to figure out if I can use a Cogntio JS SDK that would help me implement some of these tasks without having to use my own JS code, specifically around refresh to check the user is signed in (currently on page refresh I have issues), sign-out, validation and also a secure way to save JWT tokens on browser side.

As part of my web application I am using API gateway and Lambda using JWT authoriser to provide backend logic/services. This works well.

Any help/advice would be appreciated.

As part of my web application I am using API gateway and Lambda using JWT authoriser to provide backend logic/services.  This works well.

Any help/advice would be appreciated.

Answer

Amplify Auth might help, you can configure so the auth information stored in the cookie. Amplify Auth handle some tasks for you, you see redirect link with response code, then somehow Amplify Auth exchange the code for auth information, and store it into cookie if you setup

1. Amplify and Cognito Hosted UI 
https://docs.amplify.aws/lib/auth/social/q/platform/js/

2. Amplify Auth Client Configuration
https://docs.amplify.aws/lib/client-configuration/configuring-amplify-categories/q/platform/js/#top-level-configuration

Answer

There's a community create library called [Amazon Cognito Identity SDK for JavaScript](https://www.npmjs.com/package/amazon-cognito-identity-js), did you tried using that?

Just be aware that store JWT directly in the browser is not secure, you will need yo use a cookie with a HttpOnly only flag.

I know your answer is concerning the Cognito Hosted UI, but you tried to see if your web application could leverage [AWS Amplify Auth](https://docs.amplify.aws/lib/auth/getting-started/)? It uses Cognito and has a lot of helpers built-in and if you are using a specific framework simple ways to customize your own UI.

Cognito Hosted UI, using code flow and refresh with an SDK?

相關內容