In this article we’ll setup an authentication server which will handle the basic authentication stuff that pretty much every web/mobile app out there needs to have. We’ll also be using AWS SES (Simple Email Service) to send OTPs to users.

This post explains how to perform Passwordless authentication using Cognito. The resources will be created using the CDK (TypeScript).

AWS Cognito is an identity management service that helps developers implement authentication in their apps in lesser time. With Cognito, developers don’t have to spend much time and effort to build authentication flows from scratch and worry about scalability, security, etc.

The common approach to integrate Cognito into a single-page app is to use Amplify library. However, using the entire Amplify library may be overkill if we only want to use it for implementing Cognito authentication features in our app.

In this article, we are going to add Cognito auth to an Angular app with a minimum number of dependencies. Even though this article specifically focuses on the Angular framework, you will be able to tweak the code in this article a bit and use it in any single page application.

This article shows how to lock down the unauthenticated access provided by the Cognito Identity Pool as described in the AWS Location Service developer guide.

This post can help you to integrate AWS Cognito in you SvelteKit app.

This article will explore how to block access to AWS S3 storage and allow only Cognito authenticated users to access their own directory.

The password reset function of AWS Cognito allows attackers to change the account password if a six-digit number (reset code) sent out by E-mail is correctly entered.

This article shows how it was done.

The issue was fixed by AWS on 2021-04-20.

While it is the most recommended approach for applications, some designs prefer having a layer of their API that would communicate with Cognito for authorization, as a matter of decoupling Cognito with the Client (so as to have flexibility or better control).

In this article, let's look at how we can design and build such an API that encapsulates all of User Identity Management functionalities such as Login, Signup, Password Reset, Update profile and so on, while internally communicating with Cognito for respective flows.

This post walks you through an example application that can fetch a person’s COVID-19 risk status from ASetu. It can act as reference of how to integrate your own visitor management system with ASetu using AWS services.

The Indian government announced the Open API Service from Aarogya Setu (ASetu) in August, 2020. It enables organizations and business entities to fetch the COVID-19 risk status of their employees or any other ASetu app users.

Which of the libraries to use when to integrate Cognito in JavaScript projects.

Full post at AWS Cognito: Amplify vs amazon-cognito-identity-js vs AWS SDK.