Cognito UserGroups & JWT Validation in Custom Authorizer - Githubissues

amazon-archives / aws-serverless-auth-reference-app

Serverless reference app and backend API, showcasing authentication and authorization patterns using Amazon Cognito, Amazon API Gateway, AWS Lambda, and AWS IAM.

Other

752 stars 194 forks source link

Cognito UserGroups & JWT Validation in Custom Authorizer #7

Closed vlekakis closed 7 years ago

vlekakis commented 7 years ago

Replaced the custom attribute of the admin and replaced it with the creation of two Cognito User Groups.

Now the user pool has two user groups, adminGroup and clientGroup
The admin1 belongs to the adminGroup and the user1 to the cleintGroup
Kept only one cognito application client
Updated the sdk to 2.7.19 to include the User Group API

Added JWT validation to the custom lambda authorizer
- download the PEMs from the well known cognito location
- validate the JWT and returning an IAM policy or unauthorized
- solved some exception when the user provides and invalid JWT