amazon web services - Does Cognito User Pool Authorizer in Gateway API require all requests to be signed? -


the documentation using cognito user pool authorizer gateway api says should:

  1. call api methods configured user pool authorizer, supplying unexpired token in authorization header or header of choosing.

this echoed other texts on web.

however, when try using token, error message informs missing credentials, signature, signed headers params (and date header). token using correct passes test in authorizer's web gui.

my question has 2 parts:

  • does mean using cognito user pool authorizer requires me sign each request? there way configure accept valid token?

  • if want keep http calls amazon gateway simple , authorize them token (so can performed hand, python backend etc.), forced write custom authorizer using lambda? or there better option?

cognito user pool authorizer not require signature on request. have pass jwt version of openid connect identity token produced cognito in authorization header of each request.

result.getidtoken().getjwttoken()

this should answer both questions.

i think getting confused cognito identity service, exchanges valid identity public identity provider (facebook, amazon, user pools, etc) temporary aws credentials. can use aws credentials cognito identity service sign requests.

if using user pools, result of successful authentication oidc identity token , jwt access token. api gateway, when configured user pool authorizer, uses identity token authenticate request.


Comments

Post a Comment

Popular posts from this blog

Command prompt result in label. Python 2.7 -

i want put result(output) of shell command label. command works, label shows "0", however, in command prompt, result shown correctly, need showed in label. doing ubuntu. myg1 = button(root, text="rodyti informacija", command=lambda: gauti()) myg1.pack(side=bottom) def gauti(): imti = tekstas.get("1.0", "end-1c") info = subprocess.call("id '{imti}' ".format(imti=imti), shell=true) w = label(root, text= info) w.pack(side = bottom) subprocess.call() returns exit code of process created (in case 0 success). if want text output of process, should instead call subprocess.check_output() .
Read more

javascript - How do I use URL parameters to change link href on page? -

i change href value of link using url parameters. example: default <a id="dlink" href="link-1">link</a> but, when user goes https://url.com/?dlink=link-2 it swaps out link new link <a id="dlink" href="link-2">link</a> first need value url. if you're not using javascript framework can create function using jquery. please check get url parameter jquery or how query string values in js it. after that, element "a" id , set value there. $("#dlink").attr("href", hreffromparam);
Read more

amazon web services - AWS Route53 Trying To Get Site To Resolve To www -

so have domain nameservers pointed aws route 53. site hosted on ec2 instance , reachable resolves site.com, if input www.site.com. i'm curious how site resolve www.site.com. have under route53 domains hosted zone 2 additional record sets outside of ns , soa: a site.com ec2 elastic ip cname www.site.com ec2 public dns i can reach site using both site.com , www.site.com, resolve site.com. there way make if enter either, resolves www.site.com? at first, both should record set. a site.com ec2 elastic ip www.site.com ec2 elastic ip and need redirect setting in web server (nginx, apache, ..) following. (source: how redirect www non-www nginx on centos 7 ) redirect non-www www if want redirect users plain, non-www domain www domain, add server block: server { server_name example.com; return 301 $scheme://www.example.com$request_uri; } save , exit. configures nginx redirect requests "example.com" "www.example.com". not
Read more