Amazon Cognito enables you to quickly and easily add user sign-up, user sign-in, and access control to your web and mobile apps. After having used Cognito across several projects with different requirements, we’ve found it may not be the best answer in all situations.
One of the most common questions I get is “How do I build a multi-tenant application with AppSync and Cognito?”. Yan Cui explains his thoughts on it.
Have you ever implemented a user database and authentication layer yourself? There are many things to get right: Hashing and salting passwords, multi-factor authentication, brute force attacks, and many more. That’s why I recommend using a production-ready service instead of building authentication yourself. That’s what Amazon Cognito is all about.
This tutorial explains how to use Cognito just as a user database and delegate OAuth/OIDC-related tasks to Authlete so that your system can continue to use Cognito and at the same time support the latest OAuth/OIDC specifications such as Financial-grade API.
I'm going to express my dissatisfaction with AWS Cognito and Amplify Auth. If you intend to use these services in the future, or you're already using them, you can probably get something out of reading the article, potentially save yourself some hair pulling.
I am going to use AWS Cognito to manage user login and authentication. In this scenario, my app needs to communicate with Cognito directly to obtain an authentication token and after that, I will add this token to every request send to my backend.
Amazon Cognito Hosted UI provides you an OAuth 2.0 compliant authorization server. In this repository you can find a working example using Amazon Cognito User Pools Auth API Reference.
We take advantage of Amazon Cognito OAuth Domain Name to exchange tokens and access user information in our Amazon Cognito User Pool.
Working example on: https://github.com/oieduardorabelo/node-amazon-cognito-oauth
Missing guide on how to deploy and use new Custom Email and Custom SMS Lambda triggers. Send notifications with 3rd party email and text message service providers (Twilio, Sendgrid, Mailchimp, ...). Deployment instructions in CloudFormation and Terraform.
Full post at Send AWS Cognito emails with 3rd party ESPs.
This code snippet shows you how to use the Amplify Auth SDK for JavaScript to build a signup and login form, manage MFA, call APIs and access S3.
This code snippet shows you how to use the Amazon Cognito Identity SDK for JavaScript to build a signup and login form, manage MFA, call APIs and access S3.
